last executing test programs: 5.17392908s ago: executing program 4 (id=8288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") lseek(0xffffffffffffffff, 0x100000001, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 4.990981987s ago: executing program 4 (id=8291): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3.917825722s ago: executing program 4 (id=8302): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 3.440961404s ago: executing program 2 (id=8307): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000800)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000000020000000b00040000000000"], 0x36f0516f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="3de07bd4ad374e4955531800000402000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x40}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c"], 0x64}}, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000007c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000440)={0x0, 0x3, 0x1, 0x0, 0x2c, "341ecc58c4dafec54e17be2aaedf8b13371dd3", 0x0, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r6, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvfrom(r2, &(0x7f0000000540)=""/46, 0x2e, 0x40002020, &(0x7f0000000580)=@generic={0x25, "9155beced92fb750251b76201780464a0c6bda24483cf4fd48842021c4ef30794610fef943f51abb8524381d4e153783b52be1982d2d14a2bfd1b0244c154939abe11475169a42674d3dd17592a1cda027e37ee2d0a7740db37f9ab0c329bb248689041bb8c0d9adcc19f89a4558eaf725f46f092679ba21d48c14fd0e82"}, 0x80) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140d0000060a090400000000000000000200000018000480140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a3200000000050007"], 0xd3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.043759899s ago: executing program 4 (id=8308): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x9153, 0x8, 0x2, 0x20}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") 2.742128466s ago: executing program 1 (id=8313): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xfffffffe}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184000000000000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x40, 0x700, 0xfffffffb, 0x5, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x64, 0x0, 0xe, 0x2f, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x2c, 0x55, 0x0, 0x9, [0x0, 0x1ff, 0x4, 0x80000000, 0x0, 0x60a, 0x2, 0x9, 0x5, 0x10]}, @noop, @timestamp_prespec={0x44, 0x4, 0x59, 0x3, 0x4}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000500)={@empty, 0x3d, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 2.655062904s ago: executing program 3 (id=8314): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='tcp_retransmit_synack\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x0, 'pimreg1\x00', {0x2}, 0xfffd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff7e, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x7, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018460000ffffffff000000000000000085000000030000001858000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000b02fc71c0081ba0000ab1eb42b731141a8000000000087c0cba8000000009500000000000000fe960300536a3075baabc6c54e00000023b0c4ff08000000852000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 2.574111201s ago: executing program 2 (id=8318): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2.426776794s ago: executing program 0 (id=8319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffe5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0x341}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x73}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") r8 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(r14, 0x5412, &(0x7f00000002c0)=0x7e) clock_gettime(0x0, 0x0) futimesat(r8, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)) 2.333234492s ago: executing program 0 (id=8320): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) unshare(0x62040200) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000040)="270502001c0014000600002f86ddb304e82f4b6da00dad6b", 0x18}], 0x1}, 0x24008800) 1.589983909s ago: executing program 3 (id=8321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgrp(0x0) tkill(r2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1.482938608s ago: executing program 3 (id=8322): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x60060200) mmap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x2000010, 0x1010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) chmod(&(0x7f0000000000)='./file0\x00', 0x23f) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r2, &(0x7f0000000380)=""/4091, 0xff3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000009c0)={'raw\x00', 0x6, "a6ff3aaa82e6"}, &(0x7f0000000a80)=0x2e) 1.385426137s ago: executing program 1 (id=8323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfdfa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.374968318s ago: executing program 2 (id=8324): socket$nl_route(0x10, 0x3, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) io_uring_setup(0x7082, &(0x7f0000000200)={0x0, 0x1ddf9, 0x80, 0x1, 0x33d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x40, 0x10, 0x4, 0x4, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x64, 0x0, 0xe5, 0x326938f67a4318bd, 0x0, @broadcast, @remote, {[@generic={0x1c, 0xb, "18feda20f1d71fe81c"}, @timestamp_prespec={0x44, 0xc, 0xe7, 0x3, 0xa, [{@loopback, 0xb0}]}, @noop, @lsrr={0x83, 0x2b, 0x89, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @private=0xa0100fd]}, @timestamp={0x44, 0x1c, 0x1d, 0x0, 0x1, [0xaf, 0xe70, 0xf9, 0x7, 0x4c, 0x3]}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x3, [{@rand_addr=0x64010102, 0x100}, {@broadcast, 0x80}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xb, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x80080a, &(0x7f0000000480)={[{@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xe3}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@usrjquota}]}, 0x1, 0x79b, &(0x7f0000001340)="$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") r8 = epoll_create1(0x80000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0xe000001a}) pread64(r9, &(0x7f00000002c0)=""/190, 0xbe, 0x200) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r10, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 1.303207964s ago: executing program 4 (id=8325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x25, 0x401}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x0, 0x0, 0xd, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x14, @val=@tcx={@void, @value=r1, @void, @void, r4}}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FIONCLEX(r2, 0x5450) recvfrom(r3, &(0x7f0000000400)=""/240, 0xf0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) socket(0x1f, 0x1, 0xd) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.277906796s ago: executing program 1 (id=8326): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x1, 0x2fe, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x7f, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14010000", @ANYRES16=r11, @ANYBLOB="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"], 0x114}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0, 0x8}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)={0x2, 'geneve0\x00', {0x401}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2da, &(0x7f00000007c0)="$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") 1.162456157s ago: executing program 3 (id=8327): openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) 1.140417399s ago: executing program 3 (id=8328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0, 0x0, 0x7fffdfff}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) lseek(r1, 0x3, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001740)=@newtfilter={0x2014, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xfff5, 0x10}, {0xffff, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_basic={{0xa}, {0x1fb8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xc}}, @TCA_BASIC_EMATCHES={0x1bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x10, 0x2, 0xf}, {0x2, 0x5, 0x2, "abf97cd634"}}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x2, 0x0, 0x0, {{0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "048ecf24bb3c956da232cd8dd8013498bd"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x4}, {0x8, 0x10001, 0x7, 0x68b056de}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x1ff}, {0xc4, 0x1, 0x1, "a2"}}}, @TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x100, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x28, 0x1}, {0x0, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="29237c7355caa1421e2d", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="7fd1854c4e5f11", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3990a8c0ff8eae"]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="2f11c3b4f1"]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2923aca1f409", @TCF_META_TYPE_VAR="690f274d47ff", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="cce195f92b8a2f7708cb"]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x56cc, 0x2, 0x9}, {0xf, 0x7, 0x2, "204bbcd462d787"}}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x4000, 0x4, 0x3a}, [@TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR="0f0fb3f400ca42e4", @TCF_META_TYPE_VAR="95e1f2c12647c644eb", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d9f07679", @TCF_META_TYPE_VAR="03c5f8", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="495894b83b8e", @TCF_META_TYPE_VAR="9f35978361e8ff59", @TCF_META_TYPE_VAR="b725033f832e5e4f48"]}, @TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_VAR="10", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f2765700951e9461", @TCF_META_TYPE_VAR="2a60583d5c37555fe8", @TCF_META_TYPE_VAR="ea2d0f1e827aac0b", @TCF_META_TYPE_VAR="763db624db5828c9", @TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x573}}]}, @TCA_BASIC_POLICE={0x428, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xc78, 0x6, 0x400, 0x8, 0x66, 0x9, 0xfffffffb, 0x4f86, 0x1, 0x9, 0xf, 0x5a63cecf, 0x7fffffff, 0x4, 0x2, 0x2ad7, 0x2, 0x7, 0x6, 0x8000, 0x3, 0x0, 0x3, 0x100, 0xb, 0x8, 0x1, 0x5000000, 0x84e, 0x1000, 0x10000, 0x4, 0x9, 0xc7, 0xc, 0x3, 0x80e2, 0x8, 0x101, 0x605c183e, 0x0, 0x8, 0x0, 0xfffffffc, 0x1ff, 0x100, 0x6, 0x7, 0x9, 0x1, 0x3, 0x9, 0x2, 0xfffffffe, 0x9, 0xb2a, 0x6, 0x7ff, 0x9, 0x10000, 0xe0000000, 0x2, 0x4, 0x3, 0x6, 0x6, 0x80000001, 0xfffffff9, 0x1, 0x6, 0xe, 0x2, 0x8, 0x6, 0xfffffc00, 0x7, 0x1, 0x5, 0x101, 0x9, 0x0, 0x6, 0x8, 0x10, 0x10001, 0x200, 0x5775, 0xffff, 0x8000, 0xfffffff7, 0x400, 0x7, 0xfffffff5, 0x1ff, 0x1, 0x0, 0x5, 0x2, 0x56, 0x1000, 0x5029, 0x2, 0xe1, 0x3, 0x5, 0x4, 0x9, 0x8, 0xffffffb3, 0x4, 0x5b29debb, 0x6c, 0x93e, 0xfffffffb, 0x5de8, 0x3, 0x1, 0xa, 0xdf9, 0x9, 0xf2, 0x5, 0x2, 0x41, 0x0, 0xdad, 0x2fc, 0x5, 0x0, 0x3a8, 0x1000, 0x5, 0xff, 0x1, 0x0, 0x5, 0x4, 0x100, 0x6, 0x43, 0x1, 0x64, 0x7, 0xc, 0x2a8, 0x7, 0x7, 0x8, 0xd4, 0x9, 0x4, 0xffff, 0x467, 0x9, 0x9, 0xfffffffc, 0xa8, 0xfffffff9, 0xffffffff, 0x385, 0xc, 0x5, 0x4, 0x353, 0x3c, 0x7d, 0xe, 0x200, 0x0, 0x3, 0x0, 0x2, 0x5, 0x8, 0x4, 0x7, 0x4, 0x0, 0x1, 0xe, 0x40, 0x2, 0x200, 0xff, 0x6, 0xad, 0x7fff, 0x101, 0x64, 0xffffe9b6, 0x400, 0x0, 0x3, 0x5, 0x1, 0xffffffff, 0x1, 0x200, 0x5, 0x40, 0x9, 0xf, 0x3, 0xef2e, 0x9, 0x2, 0x3, 0x2, 0x10000, 0x7, 0xfffffc00, 0xfe, 0x86, 0xab, 0x3, 0xc4aa, 0x100, 0x8, 0x10001, 0x6, 0x8, 0x7f, 0x1, 0xe, 0x3, 0xc, 0x80000001, 0x426, 0x2e, 0x10001, 0x9, 0xffff, 0x3, 0xd6, 0x0, 0x345, 0x7, 0xd41, 0x80000001, 0x2, 0xfffffff2, 0x7ff, 0x80000000, 0x7fffffff, 0x6, 0x9, 0x2, 0x129, 0x1, 0x2, 0x0, 0x7, 0x7, 0x2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_BASIC_POLICE={0x4b8, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x5, 0x40, 0x3, {0x3, 0x0, 0x3, 0x1, 0x4, 0x7fffffff}, {0x5, 0x2, 0xf3, 0x1, 0x2, 0x6}, 0x4, 0x92, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x0, 0x2, 0x7c1, {0x2, 0x2, 0x5, 0x9, 0x8509, 0x971b}, {0x7, 0x0, 0x7f, 0xb, 0x2, 0x7fff}, 0x101, 0x100, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80, 0x8, 0x2c266d5d, 0x5, 0x8, 0xfffffffd, 0x7ff, 0x0, 0x1, 0xa0d9, 0x7, 0xfffffffc, 0x7, 0x5, 0x9, 0x401, 0x7, 0x8, 0x5f, 0x7, 0x200, 0xaf7, 0x8001, 0x8, 0xfffffff7, 0x7d, 0x4, 0xb, 0xd5e, 0x400, 0x7, 0x0, 0x1ff, 0x5, 0x3ff, 0x80000000, 0x6, 0x8, 0x8001, 0x7, 0x0, 0x8, 0xff, 0x1, 0x40, 0xf6, 0x6, 0x1, 0x3, 0x4, 0x5, 0x2, 0x8, 0x2, 0x1000, 0x7ff, 0x1, 0x5, 0x8, 0x7fff, 0x1, 0x0, 0x6, 0x1ff, 0x8, 0x3, 0x8, 0x3, 0x5, 0xffffffff, 0x6, 0xd06b, 0x9, 0x5, 0xe48, 0x1000000, 0x399, 0xcd, 0x8, 0x2, 0xb8, 0x1ff, 0x9, 0x5, 0x9, 0xffffffff, 0x6, 0x9, 0x7, 0x1ff, 0x4, 0x3ff, 0x5, 0x1, 0xaec044, 0x8, 0x18, 0xd90, 0xec, 0x5, 0xc9, 0x7, 0x2, 0x3, 0x1c000, 0xfffffff9, 0x6fe, 0x8, 0x1, 0x8, 0x0, 0x6, 0x8000, 0x6, 0xff, 0x9, 0x6, 0x3, 0x4, 0x51, 0x2, 0xff, 0xfffffff4, 0x68000, 0x8, 0x9, 0x80000000, 0xe, 0x7, 0x5, 0x6, 0x7, 0xa0, 0x3, 0x9, 0xc, 0x5, 0x80, 0x1, 0x4, 0xd, 0x4, 0x3, 0x5, 0x10, 0xfff, 0x7, 0xf, 0x1, 0x6, 0x8001, 0x2333, 0xa861, 0x100, 0x3, 0x9, 0x0, 0x1, 0x80000001, 0x71c, 0x6, 0x2, 0x3, 0x6, 0x10, 0x1000000, 0x4, 0xffff, 0xa25, 0x3, 0x0, 0x8, 0x10, 0x2, 0x10, 0x8, 0x7, 0x1ff, 0x9, 0x4, 0x5, 0x9, 0x7fffffff, 0x65a1, 0x3b42, 0x1, 0x3, 0x3, 0x9, 0xffff, 0x1, 0x10000, 0x7, 0x3, 0x9, 0x5, 0x9, 0x4, 0x2, 0x5, 0xcbd7, 0x800, 0x0, 0x4, 0xfffffffa, 0x8, 0x2, 0x6, 0x9, 0x9, 0x0, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8000, 0xe9, 0x5, 0x200, 0x20f, 0x823, 0xfff, 0x6, 0x4, 0xd, 0x7fffffff, 0x4, 0x1, 0x2, 0x616, 0x1, 0x3, 0x6, 0x4, 0x7, 0x9, 0xb2, 0xff, 0x1, 0x726c, 0x7, 0x4, 0x6, 0x6, 0x7, 0x22, 0x0, 0x5, 0xffffffff, 0xbc59, 0x9, 0x0, 0x6, 0xc677]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}]}, @TCA_BASIC_ACT={0x244, 0x3, [@m_vlan={0xc4, 0x12, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x2349200a77fb2b77}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1f, 0x5, 0x8, 0x1}, 0x2}}]}, {0x69, 0x6, "e57b508f8d59f824a6c9b7d1375069a7634a1535f5daf523e14ba13012b1d9adabcc3c191d41612ee5647fe911dd620c0ab901e951f472707568cf7442a2fb1b144fbbbe75f06017485f23e6105dbeeb8f1b6fdb8f7675aa18086090b96142a815cabb1a93"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x5c, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x100}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x8, 0x7, 0x80000000}}}]}, {0xb, 0x6, "fbe35ad5ec0b5b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xd8, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x99, 0x6, "12a2b4ac26487157929246e65bb9b6522e6b1add34a7f6b3246d7850df4480b5de12960926250678fd951868e0e5aed1fb76452f0e1f521e32063d24a01bd4d17989c52971922c010d2fbd168a5c5d4de920e4f6a6dd938170a9e61ce1f5ac86af151a278b811b9ce415b476194c3118169c2126d38e10fe3312292003ba59b6ef36f762eb8248ffe9f1dfc7e817b5dcf14be3c14d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x1e, 0x6, "3f369eb2d9ed002dc45e062d846aba0f53491c75169e26cb542a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff3}}, @TCA_BASIC_ACT={0x12c4, 0x3, [@m_csum={0xe4, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x8, 0xffff, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x2, 0x2, 0xd}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xffffffffffffffff, 0x7, 0x7}, 0x4e}}]}, {0x63, 0x6, "9bf8d048a76e3e34f4f98c08dd804bd3d53029327111dfe64f36de7500848b426452a522680f77b2107dcbef7f0a99e65b5c6131e0c0e85dd6e9fd7a8640ecdc2b63869436b67c1202f523901d3213d44ffd017186c6679fedb4563ca06997"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x6c, 0x20, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xfffff0cb, 0x4, 0x8, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xb}}]}, {0x7, 0x6, "37b996"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x1030, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "d6208a4e2931f0b726d5b92026f90edbb7fa11e49a40b97e9fd73b7eab98d9e30cdcedb31dc2075f17bae7d0f6dfbfc16b45796f32cba4147b3c7128025fd34fb8102104976536cfa70525530f51a900f67bb325bd743f1cbe9b51988fcb348b81b0d9a06405b8193d7880f503640cb33d50b6f77d04a3bdc06e0c635aaf67e6527040431394296461bdbaaa185247bd11301aec41f819c5e745a4126219c67aaa015eb5c2ac63feebade702c93a962f0ae5c9380c4094178487cf68c933097b879269add3878d6f2994ec894f8e0864e00340363f11db49d82d8e46bd7b2f68a821c4e337cdf2a3a50f7535bac629eb2603a725aab710a7217a6019fd24014c1be0cd386f5bd2d752e19d95545eb1ee7dccd14e2001fd711806931d32471fef682267a23b206b99675f4bf59064ce4f725862dc4846348686b824fa7e18663d1dca1defcecdc3745d22abaf5df658605895906dd86d965f021816043a5f878875f6003f6822c7e43f26aac84aa048007b01bb7286c062194a1e396853d94d0a2dc391a2d3a9682a51f72588755da48a7770a2531762912bd5e783224905079ef9b199b2bf0c974b072b1a2a7226a4694cf3fcfe7c80e0b0a8b480aff33d4149332975cdae05a2fdf66377c4c05b3c5c46b407d70ce3bd83df30045663f5ecc1348879e5caab3dc9eae5f5bbada97f6dca0c440194731136cab4d262ebfcba7a9343ec725c3f96c84e0f790fef8c7b7231fa3a815b590b2af0d19c79aff561e8a813e7f08a42b90d7230c364174e8f6ad76d8b6a4bfa877b26211c35f5d02b23171ed7ee080110c1db7dd318d356ab7ee87936252244f418a2f3b43bd188902e81e2e4ba9fc825bd35bb383cfe483a3f8387db9a7f21a066bb7ba55661248354dc69b4d8358e2079d332ee3048129bb84fa733c36e78bde366c22027e749ac5c9b98753ab94d323830fb3a9373f306fd1aadd75727fe2955e658c3a9f6a7b2251926936103349a1e2928aa831300f07e99ea20f3d251c2626c02c7d27327428fcc87f71a6c36481f409adb1ca9abb2fef14f74badde470250f8ef758d47423296e29c107aef872fde4b1b69c9c822bc45f5c7bf9b2f1571b4f1e784243f80703049ba80d09e8c934bfdd5beb07b75941ece94a2701668c923b007681df47b6378b9b51c3383e9e2c8b9c57d7fc1fbb5126bf4482a619a9323b3c97d03cd4a2c75eb6b2a680f41c46fa4089089983770efb523104bc9c393ec3c9d96b841d38a262eb2917baebbb08c6077035ba2f73f5ad3e45fd1f6914a632f82d6c48af50b8826d96029032ec1b0612727d1d40aa04f22b064da84fad345146ff74f2fb7c7cf41aed3f7aeee3697b91210e493ea72d27d5981a22664ee53c6291fd5d600a1d422a8df49d3a7b135a918b3d3018b2b9ff6fda0f7cfd621d06c4bc2422b04aacaf8b0234c7742f775029b96a7f79dd701d6a273e888ea91ab26460aadaddcb5feed52929fe54ee4d7fc7e3389e7f544eb70c73b4f1c76ba865c334bee1f4788ec966ce14d23f2f777731bc242a5eb48144d09de5364a7568e15efe42d3b6994f941331a0c13de1f741b54c865cb846d4c198370dff8b1f0c1897b938fefb6c1f21e342bb4676aaab6e872df0b913881010ed5675114266e12ae23d6606e6528b14852d4efe302bf024051000c3f42d3932b993b947844a8e0fba4d4305ae6f2be7d6e6a516cd0ce2f08982febd2c3b0003d0b46d611b549ee420e78232cd938396dcaecda942df21182b92da10f9195ac576edfb6c5a1ee1d67ab87387dc744d5274a9945daf3692194057301828ae645a86e32932f1c916d014d3af12319ff796b1cc2b7322add2435ce873abca5c654a0ec9fb7ac0b75a50469a5660e00e21d5ae26dfeb39e6ac4340dfdd6a94f26ade3e20abf843643e066f8a90984e8822aa06d74cdda947591998fb9bc5ff7bf9ab100ce39219583116b9f88f7f64bb4b7069a641f5c8c0dfea7383c1ef573c58086b0a4421d308e6ace4080d38704b14ac61b18fb3af6ff27e81b93985c237794b5807d368a763662cbbd64dd565bb8cefe45f14ae63cb45ce98c3e7c67dbc6a7e18dba2424f0bcfacc9f5061cf5cf9dec2de76f581c231ba65556a1b2a6c340c2dbd9ce37bee8111a4597db8960b29cc75b787e2d597625f448f8d6b331e1677958c251e30ae387d919b5492c94a4a37e48c65d17155b45a7f2231deeb95ec6cc2fccef91c107e935d45a45d3b5e89e8fd7036636f5d411ecdc84ca6e12990e90b0bda3dd4d57ec70ff64028eb441a2f6e072e82028bbb468c0da090a75bfa68dd1445fdb86c3f9be7943d579915e69ced4390a388066d7f8f9f2960fd3b27257e31e9708617125a21e3264b568e606bfd780dd83514b80176809336cedf190e44946e7d9291850507cc48df01e11cc8d7cf9c9104a9fa41b784132051b3a7c2527f25ea0ce70e3dc88d1c1e2339cde4ec1d42218ecfb7957d9baae1aa405df8b42a2f8b2befe4dfde3bc5c870432d8c6ef2ad8ff62ae0c172a465acfb79ae4555b15bf0378e885e0418cfd85235dc83e5ffed81ff0edd4115b1772766795a87333b527796cb43f668e7455eb823df4a27bfd753170e31f14c8af6a3eec10ad157dd270c155d7ab8ca44f0ba7e360ec833a441a5314df702dc8307c2a3c189b29da0aa4daea3f8bc93c70ec3aa96d55575afcb88288590656a6ecee9fd5f6a87897d0b4cbefdbb71d935053761df588217ec309d0ee0eb56582fb9df8a8d3c444e0837820e79051efa1f9a181f40f9b96bc962491208331e94b18898c6c18bcdc99608be2687bb55e1407c097c067aae6cb68e72760ad5a575f49c0191e8ca5495805f6f521d3a85e5fe6f21f66b8b1413cd156a821b17cceb71c411ebf7e7d31cdc3927f62c9dac7ed771bc08b4389c9b46fc423cfbdb71da428537a418edbe1190240282ac0999e06623367450481d55aa30d439c875a95bc3026fcafc2ffd07b4934331a82fd65aca338cbf088d7098dfb00ca377bcbf3847b033d884bd945458c2725369cb889e2115c11cfe097e3ef3821ba352fe67dec595ea6986f398524498d7a8a718fdbb1ebc0a48874867f7cfe07aaa001c793a25dbf66102c8638df22a05628db7eb4ca848a51394ac9a5b6c8a3a1db9cf911caaa0417409a9d6cdb1c71ab541a41ab2c20911aebd6e69116a4990c493f74ae51aa16944a33be8d046271499985507989c3fe2900244b7cca35884840a1ea11679353df10f69dfb8724ab7fc17201f892440d602f8b0bf92a96d3dc1f07e55309207c37fa0868b1bb120f9293b3993fee660a86171fdc9cb63b1b2d24a4177358b57dd86d258fc4785355cc41e9853d5118b82b2e8789effa534897e1279928ab0773ef66d5dd331e4dff78b2bc5b0d7f8200269a518939431eab18130bad14a15488c4a67753cb9916b18e6e759575f24245e0e48d12b482997bfe5eaa86578a1b2aadb435890352edbf5d824b8e6ce3ad04a2c6fcafc07dfa75b436980846e546afc66ad573a3af5aa28ee067653582b6e5ad8496f2f869939ef9045b70e7981bc06610944f7e62ca7088e8015d07ffa421348ad2543d500d3360574eebd27426bca7fcc4682b00435670d992908c0b091447efac8c5992acb5cb03f35b4d101cd17978ec68a55ab6793c58d566f95bcab73d9ea4ee3319a33a6f40ee0af988af802912bd6935a1ad303c00cd02775a4bd4e3911f66cb95cffc777dbdb83d5a933778aaabb856b28cd3ab60bcee869fc7c8fe33ef9e92a2e370ce3569daff36d2fd42b47532a23b8446d5d8aca9b476d5bccdc8284cae6ea65a4d15c90a52a6193ef4a3e35d8dfeb7cd95805b0f33fac3e71b358c3f17ff52b7f6d84e3e12e7e6ea8deea041f44ca51fac50ee22ea5841587ea702b962dcd015d7bec7e5528fe05d7d1dbe1b1641f70d286b943721d358c048db9713cb7c6975108aaf94ff65be0b3161100b3460f1635b3bd603b557ff78f5f1c6691ff4a3e4310dd2a45b370f2055e28d19687603570ae5449e886ea236bc4f5f7d7e4af3c3c27ccc84b7a3715f01715d32f2968aedd3f5906794bd86d8804e5d3a346b2af571ddebde6a0aad2be5da2e1beef0404fbde97fb64a8167f36604b6a5e3ed8669f2b24510f8a61cfec2079ba15aa5b1750481cfa8c865415915629011e9dd57b16b79ef200269f4ad29f358ecc402c4739b379b065c6a5f456d7b2cd357e1474eafbd1a84bb3a6eb34df013bf5e65fecb69b3335bbe95e80d85de77d98512f7bd32b8fe03c33ee005fff5facd52798d5f834c533cd894d4c1410a2f739eb0bdf56bd3f1ebc23dfe06747e659a66b93cc6f75b181b78ad6a61d12e10d0882ed5a69af4431de8fc06c6e3cb656a197a9632c599730726121cbca5ebd58582fb14fc5c66562b37a42e0947509fdddf49ba7cabc3dad4835cc4a6e9d3c59b8300caeb4421e063dcbb792ed545b7893a77c19bce036e77ea731ef51b916788ad9aa50c52b145ccc76653e16c536c5b009a66c3c1c8183e6bc35d5a9c67f5cfbafddf21b6f28bc93078e56a6bd2cbc6b3960e93b2387c667a4d3ed73e495a248294ff3bf159efd861f0a1d7ef18348385e4b4f2ae6baba02482026de63d8fa56141d6cc00d38d339191922ac1fa111a150959cd95df61b27a98faaece2741a93bf9d3da754c57a6e3f1d2c8652568bc71557d5376c7e225e68525193b00bd7c99b970339f459a2b035f98f84f7270051d2d4e82f788162e752a54846de584c846e98f6ef08c7ec597076f9ada6307ecc779093d68f09d77ff906477e4de646a5a49becb075b58da3a4167f607f9defafb746426261b2595badb346f1f9cafd67dde5cf3a8a1a8c9aff99374d7a8aacffeb0f2aff29650cd3b6a9d0f31ccd0eaa5f35d293f8e4cd0e1dd225fcbfa99e86645ebb316465a1f86b75166b9c90d0031de8c80719e16e670277823b26d654814c3e3bd247010395ac9e408dba6be18710c4da7a5f37ca4474081c57481deea4b13b7da4dd07b5699d2eaa78c520cfaf86dbbc44785ff631c6e4624a2271406acff6c6f111053b4104237404492f8bf9db9a32d10904c9e5f5438730a4fc01be19884dae6d2a158c0eb6c1dd6c74cf51715ea803af58cda6c5630547967b3d741d44812bb44c956596bc9b0a509d6a59c846f75105adb60b5fd96d8f64979cb249610b5262076d187a5a2392418ca6728d11afe1a6a380d91c1a1173a8406c8501410218c1ba9cedbcbb6385fad2e2ccb13ad4e1548c287726973e560d0a9b033607009ec1a63cf2ca6830c3391951de930302fd5f6aa36db00e526ab70534777f2795a83df1600598f1d93b419f513e3b9cf356e693dd8a0adab505c4701beb2d7cf0f6fbd31e767a59a1e2c6a5099e82a346dcdd999acce7f3d567a5818c09006006dfcc3eb7ab05a46856efc4b969aab3b5dc901e9b5a4b21a275878167ea352ab5198bc31702162c11fb09af5225db86485ae730632ea53162e18e7e161fe71e27f609ca806736705ff7cbb11eed014aebe5f13eaad482c332fd60dc547fb1ad8e53df37fc1e6da17d2d9b4c6128494c9affbc14b7a30209df2ab951de894765311873198ae37e6450efdbf4d4db2df8300ae0be140d54b66909b6799f6a6d450153fb3c0c117d6e157c3c53b04f9f22b776445f49d11949c8b06128b90914d57574bfa8c65110f6f05c25b47d026d3e621fc2ca9c5faed03f53c5fe8f4c4d569c1cbbe3778423ebddc1c2c32a7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x140, 0x1d, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xb25, 0x2, 0x4, 0xc0}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x2, 0x6, 0x614722f5, 0xac}, 0xb}}]}, {0xcb, 0x6, "fbf07f6c77c1cecd63019e47e8768991df161f4d21229ad0a8ab086fb0829c1a0c669c3e74b9f78a34fd7ef78e07130c0505683abf76b0968e21fbf23e4477623aab9ffc0b99720d357a164960701a1475bfaeaed7a13d905f9b0aa85297db167c43b3cdc1a3d179b361ac4b72c183071d26b326aa8ac92397e536f5733da5fa8490b02563a26a8cb40771247f0a8d45a9e2b5231eadc6dd6607221aed2a008bbab9489638f7aee33be71003b3425e5ed4204a45916773cfcf3d17770a51221402ebbfbd3311e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2014}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) 1.066686495s ago: executing program 1 (id=8329): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5700ffff0000", 0x6, 0x0, 0x0, 0x2}]) 994.020682ms ago: executing program 1 (id=8330): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 992.593732ms ago: executing program 0 (id=8331): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='tcp_retransmit_synack\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x0, 'pimreg1\x00', {0x2}, 0xfffd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff7e, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x7, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018460000ffffffff000000000000000085000000030000001858000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000b02fc71c0081ba0000ab1eb42b731141a8000000000087c0cba8000000009500000000000000fe960300536a3075baabc6c54e00000023b0c4ff08000000852000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 498.734285ms ago: executing program 2 (id=8332): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgrp(0x0) tkill(r2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 458.007379ms ago: executing program 2 (id=8333): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xfffffffe}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184000000000000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x40, 0x700, 0xfffffffb, 0x5, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x64, 0x0, 0xe, 0x2f, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x2c, 0x55, 0x0, 0x9, [0x0, 0x1ff, 0x4, 0x80000000, 0x0, 0x60a, 0x2, 0x9, 0x5, 0x10]}, @noop, @timestamp_prespec={0x44, 0x4, 0x59, 0x3, 0x4}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000500)={@empty, 0x3d, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 442.25395ms ago: executing program 2 (id=8334): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0x1}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 381.635666ms ago: executing program 4 (id=8335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 294.271684ms ago: executing program 3 (id=8336): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x9153, 0x8, 0x2, 0x20}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$eJzs3U1oG1ceAPD/SLZjO951sizLJrCsIYcEljh2Nmx299I0PTSHHgLNoZRSYmI7NVE+iB1o3EBt6KGFFkrptZRQKPTce8m9t1Joe+u5kJaS0kJbojKjUSLLkr9iSbbn94OR3rwZ6b2/Rk/zZsbPE0BhjaUPpYhDEQ8vJhGjDctGorZwLF/vwY93LqVTEtXq8z8kkeR59fWT/Hl/PjMYEV+cjfhLeXW587cXr0xVqjWvR5xYuHrjxPztxeNzV6cuz1yeuTZ58r+nTk/8b/LU5LbEuT9/3hcR77zxyn9mv6wcT+JMXOh/bTqa4tguYzEWD/MQG/P7IuJ0mmjxuew2eyCEQivn38f+iPhbjEY5m6sZjbm3e1o5oKOq5YgqUFDJZtt/2kGopz9Z9PMBu1a9H1A/tt/YcfCFDvdKuuf+07UDoNXx99XOjcRgdmw0/CBpODKqnds4sA3lp2X8fufwB+kUK85D/PJo6/RtQzntLC1HxN9bxZ9kdTuQRZrGX1pRjyQiJiJiIK/fM09Qh6Qh3YnzMGvZavyliDiTP6f5Z7dY/ljTfLfjB6CYsn1vuiNfShOP939p36Pe/4kW/Z+RFvuurej1/q99/6++vx/MzpGXmvph6ed2vvVb9jdnfPvWuffald/Y/0untPx6X7Ab7i9HHG6K/8002Lz/k8aftNj+6SoXz2ysjGe/+v5cu2W9jr96N+Joy+Ofx73SNLXG9ckTs3OVmYnaY8syPvv8pY/bld/r+NPtP9wm/obtX2p+XfqZ3NhgGZ+ev3u13bKReHmd+EvfDSS1482B7PGj4VenFhZuTkYMJM/lq9SesvyTa9elvk79PdL4jx1p3f5XfP+XV77PUP0ncwNuvHDlQbtljds/SWr1WG/7N1xMfljdYB3aSeOfXn/7r2r/ad67Gyzj5xdv/aPdsrW+/0NPEhgAAAAAAAAUUCm7BpuUxh+lS6Xx8dp42b/GcKlyfX7hX7PXb12bjjiW/T1kf6l+pXu0Np+k85P538PW5082zf87Ig5GxPvloWx+/NL1ynSvgwcAAAAAAAAAAAAAAAAAAIAdYn8+/r9+n+qfyrXx/0BBdPIGc8DOpv1DcWXtf9UtnoAiaLf/n+9yPYDu0/+H4tL+obi0fygu7R+KS/uH4tL+obi0fwAAAADYkw7+8943SUQs/X8om1ID+TIjgmBv619vhYHu1APovnKvKwD0zKNL/zr7UDjr9v9Tv+b/HLDz1QF6IGmVmXUOqms3/nsrXulwAgAAAAAAAAAAAAA66OihhvH/wyvH/29obACwa21i2N9yJ+sBdN8TDNgx1gd2Of/6H4pry8f4g9tbD6B3Wo7/b9C2ud9b75WbLQkAAAAAAAAAAAAAaGckm5LSeD4WeCRKpfHxiD9FxIHoT2bnKjMTEfHniPi63L8vnZ/sdaUBAAAAAAAAAAAAAAAAAABgj5m/vXhlqlKZudmY+G1Vzt5O1O+C2oWynopNviqS7n8sQxHR843SsURfQ04SsZRu+R1RsZvzsTOqkSV6/MMEAAAAAAAAAAAAAAAAAAAF1DD2uLXDH3a5RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQfY/v/78ykazKaU4cab+oKdHrGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3emPAAAA//+y+jZu") 101.976671ms ago: executing program 1 (id=8337): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x60060200) mmap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x2000010, 0x1010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) chmod(&(0x7f0000000000)='./file0\x00', 0x23f) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r2, &(0x7f0000000380)=""/4091, 0xff3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000009c0)={'raw\x00', 0x6, "a6ff3aaa82e6"}, &(0x7f0000000a80)=0x2e) 101.412261ms ago: executing program 0 (id=8338): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x80, 0x0) 69.941603ms ago: executing program 0 (id=8339): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 0s ago: executing program 0 (id=8340): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x1, 0x2fe, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x7f, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14010000", @ANYRES16=r11, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bfdf25872e713c3328782dc62f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4be852830000130005000000000000000000000000000000000114000600fe88000000000000"], 0x114}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0, 0x8}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)={0x2, 'geneve0\x00', {0x401}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2da, &(0x7f00000007c0)="$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") kernel console output (not intermixed with test programs): ected capacity change from 0 to 1024 [ 560.285700][T27527] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 560.308226][T27527] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.7924: iget: bogus i_mode (1) [ 560.327374][T27527] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7924: couldn't read orphan inode 11 (err -117) [ 560.347155][T27532] loop1: detected capacity change from 0 to 512 [ 560.347873][T27527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.368812][T27532] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.377917][T27532] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 560.417976][T27532] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 560.432761][T27532] System zones: 0-2, 18-18, 34-35 [ 560.463080][T27532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 560.518239][T27532] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 560.539285][T27532] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 560.547766][T27532] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 560.645824][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.789947][T27520] syz.4.7924 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 560.804157][T27520] CPU: 0 UID: 0 PID: 27520 Comm: syz.4.7924 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 560.804191][T27520] Tainted: [W]=WARN [ 560.804199][T27520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.804283][T27520] Call Trace: [ 560.804292][T27520] [ 560.804302][T27520] __dump_stack+0x1d/0x30 [ 560.804333][T27520] dump_stack_lvl+0x95/0xd0 [ 560.804376][T27520] dump_stack+0x15/0x1b [ 560.804395][T27520] dump_header+0x81/0x240 [ 560.804451][T27520] oom_kill_process+0x295/0x350 [ 560.804478][T27520] out_of_memory+0x97b/0xb80 [ 560.804553][T27520] try_charge_memcg+0x610/0xa10 [ 560.804669][T27520] obj_cgroup_charge_pages+0xa6/0x150 [ 560.804700][T27520] __memcg_kmem_charge_page+0x9f/0x170 [ 560.804733][T27520] __alloc_frozen_pages_noprof+0x18f/0x360 [ 560.804767][T27520] alloc_pages_mpol+0xb3/0x260 [ 560.804841][T27520] alloc_pages_noprof+0x90/0x130 [ 560.804874][T27520] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 560.804909][T27520] __kvmalloc_node_noprof+0x492/0x6b0 [ 560.804938][T27520] ? ip_set_alloc+0x24/0x30 [ 560.805052][T27520] ? ip_set_alloc+0x24/0x30 [ 560.805083][T27520] ip_set_alloc+0x24/0x30 [ 560.805111][T27520] hash_netiface_create+0x282/0x740 [ 560.805141][T27520] ? __pfx_hash_netiface_create+0x10/0x10 [ 560.805183][T27520] ip_set_create+0x3cc/0x970 [ 560.805303][T27520] ? __nla_parse+0x40/0x60 [ 560.805331][T27520] nfnetlink_rcv_msg+0x4c6/0x590 [ 560.805458][T27520] netlink_rcv_skb+0x123/0x220 [ 560.805490][T27520] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 560.805527][T27520] nfnetlink_rcv+0x167/0x16c0 [ 560.805563][T27520] ? css_rstat_updated+0xbb/0x280 [ 560.805595][T27520] ? page_counter_charge+0x207/0x230 [ 560.805623][T27520] ? __rcu_read_unlock+0x4f/0x70 [ 560.805644][T27520] ? obj_cgroup_charge_pages+0xf7/0x150 [ 560.805716][T27520] ? __rcu_read_unlock+0x4f/0x70 [ 560.805735][T27520] ? __memcg_kmem_charge_page+0xd1/0x170 [ 560.805762][T27520] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 560.805888][T27520] ? mas_next_slot+0x69b/0x6f0 [ 560.805943][T27520] ? __rcu_read_unlock+0x4f/0x70 [ 560.805966][T27520] ? mt_find+0x21b/0x330 [ 560.806004][T27520] ? should_fail_ex+0x30/0x280 [ 560.806090][T27520] ? selinux_nlmsg_lookup+0x99/0x890 [ 560.806115][T27520] ? __rcu_read_unlock+0x34/0x70 [ 560.806135][T27520] ? __netlink_lookup+0x266/0x2a0 [ 560.806230][T27520] netlink_unicast+0x5c0/0x690 [ 560.806264][T27520] netlink_sendmsg+0x58b/0x6b0 [ 560.806304][T27520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.806372][T27520] __sock_sendmsg+0x145/0x180 [ 560.806424][T27520] ____sys_sendmsg+0x31e/0x4a0 [ 560.806460][T27520] ___sys_sendmsg+0x17b/0x1d0 [ 560.806497][T27520] __x64_sys_sendmsg+0xd4/0x160 [ 560.806574][T27520] x64_sys_call+0x17ba/0x3000 [ 560.806599][T27520] do_syscall_64+0xca/0x2b0 [ 560.806630][T27520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.806673][T27520] RIP: 0033:0x7efce3eaf749 [ 560.806694][T27520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.806719][T27520] RSP: 002b:00007efce2917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.806761][T27520] RAX: ffffffffffffffda RBX: 00007efce4105fa0 RCX: 00007efce3eaf749 [ 560.806774][T27520] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 560.806788][T27520] RBP: 00007efce3f33f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.806800][T27520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.806816][T27520] R13: 00007efce4106038 R14: 00007efce4105fa0 R15: 00007ffda3c87f48 [ 560.806906][T27520] [ 560.806916][T27520] memory: usage 307200kB, limit 307200kB, failcnt 6963 [ 561.164079][T27520] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 561.171999][T27520] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 561.179394][T27520] Memory cgroup stats for /syz4: [ 561.179515][T27520] cache 8192 [ 561.187732][T27520] rss 4096 [ 561.190744][T27520] shmem 0 [ 561.193710][T27520] mapped_file 4096 [ 561.197545][T27520] dirty 0 [ 561.200475][T27520] writeback 0 [ 561.203749][T27520] workingset_refault_anon 698 [ 561.208652][T27520] workingset_refault_file 6496 [ 561.213455][T27520] swap 737280 [ 561.216731][T27520] swapcached 4096 [ 561.220375][T27520] pgpgin 667121 [ 561.223823][T27520] pgpgout 667106 [ 561.227398][T27520] pgfault 816331 [ 561.230996][T27520] pgmajfault 487 [ 561.234606][T27520] inactive_anon 4096 [ 561.238551][T27520] active_anon 0 [ 561.241999][T27520] inactive_file 53248 [ 561.245975][T27520] active_file 0 [ 561.249493][T27520] unevictable 0 [ 561.252944][T27520] hierarchical_memory_limit 314572800 [ 561.258413][T27520] hierarchical_memsw_limit 9223372036854771712 [ 561.264576][T27520] total_cache 8192 [ 561.268315][T27520] total_rss 4096 [ 561.271863][T27520] total_shmem 0 [ 561.275418][T27520] total_mapped_file 4096 [ 561.279670][T27520] total_dirty 0 [ 561.283144][T27520] total_writeback 0 [ 561.286936][T27520] total_workingset_refault_anon 698 [ 561.292250][T27520] total_workingset_refault_file 6496 [ 561.297553][T27520] total_swap 737280 [ 561.301434][T27520] total_swapcached 4096 [ 561.305620][T27520] total_pgpgin 667121 [ 561.309609][T27520] total_pgpgout 667106 [ 561.313678][T27520] total_pgfault 816331 [ 561.317750][T27520] total_pgmajfault 487 [ 561.321874][T27520] total_inactive_anon 4096 [ 561.326273][T27520] total_active_anon 0 [ 561.330268][T27520] total_inactive_file 53248 [ 561.334758][T27520] total_active_file 0 [ 561.338744][T27520] total_unevictable 0 [ 561.342714][T27520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7924,pid=27519,uid=0 [ 561.357408][T27520] Memory cgroup out of memory: Killed process 27519 (syz.4.7924) total-vm:96148kB, anon-rss:1136kB, file-rss:22620kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 561.511885][T27550] lo speed is unknown, defaulting to 1000 [ 561.669671][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.722997][T27558] loop4: detected capacity change from 0 to 512 [ 561.734753][T27558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 561.746105][T27558] EXT4-fs (loop4): 1 truncate cleaned up [ 561.752630][T27558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.797334][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 561.803558][T24554] Bluetooth: hci0: command 0x1003 tx timeout [ 561.834024][T27563] loop3: detected capacity change from 0 to 512 [ 561.852222][T27563] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.861436][T27563] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 561.875921][T27549] syz.2.7933 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 561.890136][T27549] CPU: 0 UID: 0 PID: 27549 Comm: syz.2.7933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 561.890311][T27549] Tainted: [W]=WARN [ 561.890319][T27549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.890331][T27549] Call Trace: [ 561.890339][T27549] [ 561.890347][T27549] __dump_stack+0x1d/0x30 [ 561.890372][T27549] dump_stack_lvl+0x95/0xd0 [ 561.890404][T27549] dump_stack+0x15/0x1b [ 561.890438][T27549] dump_header+0x81/0x240 [ 561.890462][T27549] oom_kill_process+0x295/0x350 [ 561.890485][T27549] out_of_memory+0x97b/0xb80 [ 561.890509][T27549] try_charge_memcg+0x610/0xa10 [ 561.890569][T27549] obj_cgroup_charge_pages+0xa6/0x150 [ 561.890621][T27549] __memcg_kmem_charge_page+0x9f/0x170 [ 561.890658][T27549] __alloc_frozen_pages_noprof+0x18f/0x360 [ 561.890711][T27549] alloc_pages_mpol+0xb3/0x260 [ 561.890742][T27549] ? __get_vm_area_node+0x195/0x1d0 [ 561.890810][T27549] alloc_pages_noprof+0x90/0x130 [ 561.890882][T27549] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 561.890922][T27549] __kvmalloc_node_noprof+0x492/0x6b0 [ 561.891010][T27549] ? ip_set_alloc+0x24/0x30 [ 561.891037][T27549] ? ip_set_alloc+0x24/0x30 [ 561.891077][T27549] ? __slab_alloc+0x25/0x50 [ 561.891104][T27549] ip_set_alloc+0x24/0x30 [ 561.891129][T27549] hash_netiface_create+0x282/0x740 [ 561.891187][T27549] ? __pfx_hash_netiface_create+0x10/0x10 [ 561.891224][T27549] ip_set_create+0x3cc/0x970 [ 561.891268][T27549] ? __mutex_lock_slowpath+0xa/0x10 [ 561.891366][T27549] nfnetlink_rcv_msg+0x4c6/0x590 [ 561.891419][T27549] netlink_rcv_skb+0x123/0x220 [ 561.891485][T27549] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 561.891524][T27549] nfnetlink_rcv+0x167/0x16c0 [ 561.891593][T27549] ? kmem_cache_free+0xe3/0x3a0 [ 561.891619][T27549] ? __kfree_skb+0x109/0x150 [ 561.891651][T27549] ? nlmon_xmit+0x4f/0x60 [ 561.891674][T27549] ? consume_skb+0x49/0x150 [ 561.891727][T27549] ? nlmon_xmit+0x4f/0x60 [ 561.891752][T27549] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 561.891789][T27549] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 561.891820][T27549] ? __dev_queue_xmit+0x148/0x1ee0 [ 561.891890][T27549] ? ref_tracker_free+0x37d/0x3e0 [ 561.891924][T27549] ? __netlink_deliver_tap+0x4dc/0x500 [ 561.891961][T27549] netlink_unicast+0x5c0/0x690 [ 561.891995][T27549] netlink_sendmsg+0x58b/0x6b0 [ 561.892025][T27549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.892143][T27549] __sock_sendmsg+0x145/0x180 [ 561.892163][T27549] ____sys_sendmsg+0x31e/0x4a0 [ 561.892193][T27549] ___sys_sendmsg+0x17b/0x1d0 [ 561.892237][T27549] __x64_sys_sendmsg+0xd4/0x160 [ 561.892349][T27549] x64_sys_call+0x17ba/0x3000 [ 561.892373][T27549] do_syscall_64+0xca/0x2b0 [ 561.892403][T27549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.892502][T27549] RIP: 0033:0x7f78193ef749 [ 561.892523][T27549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.892542][T27549] RSP: 002b:00007f7817e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.892567][T27549] RAX: ffffffffffffffda RBX: 00007f7819645fa0 RCX: 00007f78193ef749 [ 561.892584][T27549] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 561.892659][T27549] RBP: 00007f7819473f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.892682][T27549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.892699][T27549] R13: 00007f7819646038 R14: 00007f7819645fa0 R15: 00007fff6b3602a8 [ 561.892722][T27549] [ 561.892732][T27549] memory: usage 307200kB, limit 307200kB, failcnt 2977 [ 562.059196][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 562.059248][ T29] audit: type=1326 audit(562.033:48232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.064122][T27549] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 562.064144][T27549] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 562.068781][ T29] audit: type=1326 audit(562.033:48233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.068812][ T29] audit: type=1326 audit(562.033:48234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.073173][T27549] Memory cgroup stats for /syz2 [ 562.077690][ T29] audit: type=1326 audit(562.033:48235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.082061][T27549] : [ 562.292661][T27549] cache 0 [ 562.307462][ T29] audit: type=1326 audit(562.033:48236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.307514][ T29] audit: type=1326 audit(562.033:48237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.307566][ T29] audit: type=1326 audit(562.033:48238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.330692][T27549] rss 0 [ 562.330704][T27549] shmem 0 [ 562.335542][ T29] audit: type=1326 audit(562.033:48239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.358577][T27549] mapped_file 0 [ 562.361060][ T29] audit: type=1326 audit(562.033:48240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.363923][T27549] dirty 0 [ 562.363934][T27549] writeback 0 [ 562.386941][ T29] audit: type=1326 audit(562.033:48241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.4.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 562.409882][T27549] workingset_refault_anon 529 [ 562.488693][T27563] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 562.490823][T27549] workingset_refault_file 3907 [ 562.494196][T27563] System zones: [ 562.517134][T27549] swap 348160 [ 562.517151][T27549] swapcached 0 [ 562.517159][T27549] pgpgin 734260 [ 562.517168][T27549] pgpgout 734257 [ 562.521952][T27563] 0-2 [ 562.529892][T27549] pgfault 910484 [ 562.534845][T27563] , 18-18 [ 562.538560][T27549] pgmajfault 355 [ 562.538573][T27549] inactive_anon 0 [ 562.538582][T27549] active_anon 0 [ 562.541846][T27563] , 34-35 [ 562.545211][T27549] inactive_file 0 [ 562.545222][T27549] active_file 12288 [ 562.548695][T27563] [ 562.552229][T27549] unevictable 0 [ 562.588604][T27549] hierarchical_memory_limit 314572800 [ 562.589242][T27563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 562.593978][T27549] hierarchical_memsw_limit 9223372036854771712 [ 562.594055][T27549] total_cache 0 [ 562.594066][T27549] total_rss 0 [ 562.594075][T27549] total_shmem 0 [ 562.622421][T27549] total_mapped_file 0 [ 562.626528][T27549] total_dirty 0 [ 562.630038][T27549] total_writeback 0 [ 562.633853][T27549] total_workingset_refault_anon 529 [ 562.639058][T27549] total_workingset_refault_file 3907 [ 562.644328][T27549] total_swap 348160 [ 562.648157][T27549] total_swapcached 0 [ 562.652036][T27549] total_pgpgin 734260 [ 562.655999][T27549] total_pgpgout 734257 [ 562.660106][T27549] total_pgfault 910484 [ 562.664160][T27549] total_pgmajfault 355 [ 562.668232][T27549] total_inactive_anon 0 [ 562.672382][T27549] total_active_anon 0 [ 562.676425][T27549] total_inactive_file 0 [ 562.680612][T27549] total_active_file 12288 [ 562.684944][T27549] total_unevictable 0 [ 562.688972][T27549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7933,pid=27548,uid=0 [ 562.703687][T27549] Memory cgroup out of memory: Killed process 27548 (syz.2.7933) total-vm:94100kB, anon-rss:1060kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 562.722665][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.733598][T27563] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 562.762058][T27563] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 562.780319][ T1086] Bluetooth: hci0: Frame reassembly failed (-84) [ 562.804553][T27563] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 562.842917][T27574] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.7940'. [ 562.889158][T27576] lo speed is unknown, defaulting to 1000 [ 562.955707][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.960417][T27576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7941'. [ 562.990617][T27581] loop3: detected capacity change from 0 to 512 [ 562.999712][T27581] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 563.008869][T27581] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 563.018017][T27581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 563.026135][T27581] System zones: 0-2, 18-18, 34-35 [ 563.032021][T27581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 563.045228][T27581] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 563.054810][T27581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 563.063084][T27581] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 563.124559][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.149777][T27586] ip6_vti0: Caught tx_queue_len zero misconfig [ 563.191630][T27590] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 563.355056][T27596] team0: Device ip6gre0 is of different type [ 563.442480][T27598] lo speed is unknown, defaulting to 1000 [ 563.520504][T12321] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 563.657855][T12321] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 563.708628][T27604] loop4: detected capacity change from 0 to 512 [ 563.746611][T27602] loop3: detected capacity change from 0 to 2048 [ 563.757721][T27604] EXT4-fs: test_dummy_encryption option not supported [ 563.788740][T27602] EXT4-fs (loop3): failed to initialize system zone (-117) [ 563.796136][T27602] EXT4-fs (loop3): mount failed [ 563.810376][T27602] loop3: detected capacity change from 0 to 512 [ 563.829629][T27602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.844707][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7951'. [ 563.847548][T27602] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 563.868140][T27602] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7950: Failed to acquire dquot type 1 [ 563.886325][T27602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7950'. [ 563.906585][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.952860][T27619] lo speed is unknown, defaulting to 1000 [ 564.017309][T27621] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 564.026515][T27621] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 564.035545][T27621] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 564.043743][T27621] System zones: 0-2, 18-18, 34-35 [ 564.049620][T27621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 564.073462][T27606] netlink: 'syz.0.7952': attribute type 13 has an invalid length. [ 564.086220][T27621] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 564.095637][T27621] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 564.118991][T27621] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 564.183943][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.195593][T27606] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 564.201986][T27606] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 564.210177][T27628] EXT4-fs: test_dummy_encryption option not supported [ 564.306213][T27630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7959'. [ 564.405978][T27636] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.7961'. [ 564.423306][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7958'. [ 564.432257][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7958'. [ 564.837299][T24554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 564.839581][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 564.955803][T27649] set_capacity_and_notify: 2 callbacks suppressed [ 564.955822][T27649] loop4: detected capacity change from 0 to 2048 [ 564.978558][T27649] EXT4-fs (loop4): failed to initialize system zone (-117) [ 564.986059][T27649] EXT4-fs (loop4): mount failed [ 565.005906][T27649] loop4: detected capacity change from 0 to 512 [ 565.015852][T27658] loop1: detected capacity change from 0 to 512 [ 565.022758][T27658] EXT4-fs: test_dummy_encryption option not supported [ 565.030403][T27649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.146646][T27661] lo speed is unknown, defaulting to 1000 [ 565.861251][T27666] lo speed is unknown, defaulting to 1000 [ 565.926926][T12321] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 565.950336][T27667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7969'. [ 565.959279][T27667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7969'. [ 565.984426][T12321] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 566.005454][T12661] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 566.019569][T27671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 566.042193][T12661] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 566.074450][T27649] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 566.178713][T27649] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7966: Failed to acquire dquot type 1 [ 566.250808][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.284013][T27676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7972'. [ 566.702505][ T9123] Bluetooth: hci0: Frame reassembly failed (-84) [ 567.203800][T27710] team0: Device ip6gre0 is of different type [ 567.247450][T27710] lo speed is unknown, defaulting to 1000 [ 567.869136][T27712] lo speed is unknown, defaulting to 1000 [ 567.949459][T12321] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 567.958363][T12321] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.184912][T27720] siw: device registration error -23 [ 568.764368][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 568.797312][T24554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 568.871722][T27731] loop4: detected capacity change from 0 to 512 [ 568.943033][T27731] EXT4-fs: test_dummy_encryption option not supported [ 569.052053][T27731] __nla_validate_parse: 6 callbacks suppressed [ 569.052149][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7992'. [ 569.067362][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7992'. [ 569.204544][ T29] kauditd_printk_skb: 763 callbacks suppressed [ 569.204563][ T29] audit: type=1326 audit(569.183:49001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce3ea65e7 code=0x7ffc0000 [ 569.276418][ T29] audit: type=1326 audit(569.223:49002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce3e4b829 code=0x7ffc0000 [ 569.299447][ T29] audit: type=1326 audit(569.223:49003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce3ea65e7 code=0x7ffc0000 [ 569.302856][T27745] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.7997'. [ 569.322734][ T29] audit: type=1326 audit(569.223:49004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce3e4b829 code=0x7ffc0000 [ 569.354820][ T29] audit: type=1326 audit(569.223:49005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 569.378091][ T29] audit: type=1326 audit(569.223:49006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 569.393872][T22106] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 569.401238][ T29] audit: type=1326 audit(569.233:49007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce3ea65e7 code=0x7ffc0000 [ 569.412040][T22106] CPU: 0 UID: 0 PID: 22106 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 569.412127][T22106] Tainted: [W]=WARN [ 569.412134][T22106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.412147][T22106] Call Trace: [ 569.412154][T22106] [ 569.412170][T22106] __dump_stack+0x1d/0x30 [ 569.412196][T22106] dump_stack_lvl+0x95/0xd0 [ 569.412218][T22106] dump_stack+0x15/0x1b [ 569.412305][T22106] dump_header+0x81/0x240 [ 569.412327][T22106] oom_kill_process+0x295/0x350 [ 569.412351][T22106] out_of_memory+0x97b/0xb80 [ 569.412447][T22106] try_charge_memcg+0x610/0xa10 [ 569.412487][T22106] charge_memcg+0x51/0xc0 [ 569.412579][T22106] __mem_cgroup_charge+0x28/0xb0 [ 569.412622][T22106] filemap_add_folio+0x111/0x360 [ 569.412671][T22106] __filemap_get_folio_mpol+0x326/0x650 [ 569.412739][T22106] filemap_fault+0x44d/0xb70 [ 569.412806][T22106] __do_fault+0xbc/0x200 [ 569.412837][T22106] handle_mm_fault+0xfab/0x2c60 [ 569.412875][T22106] do_user_addr_fault+0x630/0x1080 [ 569.412927][T22106] exc_page_fault+0x62/0xa0 [ 569.412954][T22106] asm_exc_page_fault+0x26/0x30 [ 569.412993][T22106] RIP: 0033:0x7f78192c5fd4 [ 569.413011][T22106] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 569.413029][T22106] RSP: 002b:00007fff6b360630 EFLAGS: 00010202 [ 569.413047][T22106] RAX: 0000001b32324000 RBX: 00000000000003fa RCX: 000000000008aea8 [ 569.413061][T22106] RDX: 000000000590825b RSI: 00007fff6b3606c0 RDI: 0000000000000001 [ 569.413075][T22106] RBP: 00007fff6b36066c R08: 00000000153a1247 R09: 7fffffffffffffff [ 569.413137][T22106] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 569.413150][T22106] R13: 00000000000927c0 R14: 000000000008aeed R15: 00007fff6b3606c0 [ 569.413176][T22106] [ 569.413184][T22106] memory: usage 307200kB, limit 307200kB, failcnt 3203 [ 569.434954][ T29] audit: type=1326 audit(569.233:49008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce3e4b829 code=0x7ffc0000 [ 569.446651][T22106] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 569.450438][ T29] audit: type=1326 audit(569.233:49009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 569.450464][ T29] audit: type=1326 audit(569.233:49010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.7997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce3eaf749 code=0x7ffc0000 [ 569.704384][T22106] kmem: usage 90432kB, limit 9007199254740988kB, failcnt 0 [ 569.711635][T22106] Memory cgroup stats for /syz2: [ 569.721236][T22106] cache 0 [ 569.729269][T22106] rss 28672 [ 569.732390][T22106] shmem 0 [ 569.735344][T22106] mapped_file 0 [ 569.738884][T22106] dirty 0 [ 569.741960][T22106] writeback 0 [ 569.745254][T22106] workingset_refault_anon 571 [ 569.750015][T22106] workingset_refault_file 4163 [ 569.754831][T22106] swap 143360 [ 569.758215][T22106] swapcached 65536 [ 569.761951][T22106] pgpgin 747366 [ 569.765420][T22106] pgpgout 747347 [ 569.768994][T22106] pgfault 922302 [ 569.772554][T22106] pgmajfault 378 [ 569.776110][T22106] inactive_anon 32768 [ 569.780122][T22106] active_anon 32768 [ 569.783966][T22106] inactive_file 12288 [ 569.787977][T22106] active_file 0 [ 569.791445][T22106] unevictable 0 [ 569.794906][T22106] hierarchical_memory_limit 314572800 [ 569.800343][T22106] hierarchical_memsw_limit 9223372036854771712 [ 569.806586][T22106] total_cache 0 [ 569.810081][T22106] total_rss 28672 [ 569.813727][T22106] total_shmem 0 [ 569.817243][T22106] total_mapped_file 0 [ 569.821240][T22106] total_dirty 0 [ 569.824796][T22106] total_writeback 0 [ 569.828643][T22106] total_workingset_refault_anon 571 [ 569.833846][T22106] total_workingset_refault_file 4163 [ 569.839155][T22106] total_swap 143360 [ 569.843032][T22106] total_swapcached 65536 [ 569.847299][T22106] total_pgpgin 747366 [ 569.851421][T22106] total_pgpgout 747347 [ 569.855511][T22106] total_pgfault 922302 [ 569.859564][T27750] loop3: detected capacity change from 0 to 512 [ 569.859659][T22106] total_pgmajfault 378 [ 569.870063][T22106] total_inactive_anon 32768 [ 569.874570][T22106] total_active_anon 32768 [ 569.878931][T22106] total_inactive_file 12288 [ 569.883458][T22106] total_active_file 0 [ 569.887456][T22106] total_unevictable 0 [ 569.891438][T22106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7993,pid=27730,uid=0 [ 569.906150][T22106] Memory cgroup out of memory: OOM victim 27730 (syz.2.7993) is already exiting. Skip killing the task [ 569.920015][T27750] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 569.929158][T27750] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 569.929483][T27751] loop1: detected capacity change from 0 to 512 [ 569.944177][T27751] EXT4-fs: Ignoring removed i_version option [ 569.951820][T27751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 569.958947][T27751] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.7998: EA inode hash validation failed [ 569.971982][T27751] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.7998: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 569.977385][T27750] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 569.995376][T27750] System zones: 0-2, 18-18, 34-35 [ 570.001370][T27750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.018405][T27750] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 570.027868][T27750] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 570.036898][T27751] EXT4-fs (loop1): Remounting filesystem read-only [ 570.043615][T27751] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.7998: ea_inode dec ref err=-117 [ 570.044409][T27750] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 570.071685][T27751] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 570.081026][T27751] EXT4-fs (loop1): 1 orphan inode deleted [ 570.087337][T27751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.113382][T14222] Bluetooth: hci0: Frame reassembly failed (-84) [ 570.122201][T27751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.136905][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.161489][T14254] Bluetooth: hci1: Frame reassembly failed (-84) [ 570.258376][T27770] loop1: detected capacity change from 0 to 512 [ 570.265061][T27770] EXT4-fs: test_dummy_encryption option not supported [ 570.456308][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8006'. [ 570.465425][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8006'. [ 571.051606][T27777] loop3: detected capacity change from 0 to 2048 [ 571.064586][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 571.073513][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 571.079761][T27777] EXT4-fs (loop3): failed to initialize system zone (-117) [ 571.097420][T27777] EXT4-fs (loop3): mount failed [ 571.165802][T27777] loop3: detected capacity change from 0 to 512 [ 571.179287][T27777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.196086][T27777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 571.211271][T27777] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8008: Failed to acquire dquot type 1 [ 571.226469][T27777] netlink: 'syz.3.8008': attribute type 20 has an invalid length. [ 571.234395][T27777] netlink: 'syz.3.8008': attribute type 43 has an invalid length. [ 571.259230][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.295527][T27796] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.8012'. [ 572.085408][T27805] lo speed is unknown, defaulting to 1000 [ 572.117293][T24554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 572.163225][T27809] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 572.197294][T26512] Bluetooth: hci1: command 0x1003 tx timeout [ 572.197424][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 572.237695][T27812] loop4: detected capacity change from 0 to 512 [ 572.254572][T14212] Bluetooth: hci0: Frame reassembly failed (-84) [ 572.261920][T27812] EXT4-fs: test_dummy_encryption option not supported [ 572.343055][T27816] loop3: detected capacity change from 0 to 2048 [ 572.369361][T27816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.461633][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8020'. [ 572.470642][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8020'. [ 572.682672][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.870553][T27835] loop3: detected capacity change from 0 to 512 [ 572.878080][T27835] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.887277][T27835] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 572.896402][T27835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 572.904607][T27835] System zones: 0-2, 18-18, 34-35 [ 572.910795][T27835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 572.924036][T27835] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 572.933573][T27835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 572.941742][T27835] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 573.006779][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.031858][T27845] loop3: detected capacity change from 0 to 512 [ 573.038547][T27845] EXT4-fs: test_dummy_encryption option not supported [ 573.048752][T27847] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 573.132916][T27850] ip6_vti0: Caught tx_queue_len zero misconfig [ 573.165281][T27853] loop4: detected capacity change from 0 to 512 [ 573.171987][T27853] EXT4-fs: test_dummy_encryption option not supported [ 573.942404][T27872] loop3: detected capacity change from 0 to 512 [ 573.950025][T27872] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 573.959458][T27872] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 573.973653][T27872] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 573.982722][T27872] System zones: 0-2, 18-18, 34-35 [ 573.988434][T27872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 574.008285][T27872] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 574.017827][T27872] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 574.026157][T27872] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 574.121620][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.194086][T27880] __nla_validate_parse: 5 callbacks suppressed [ 574.194132][T27880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8042'. [ 574.223062][T27880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27880 comm=syz.4.8042 [ 574.239380][T27880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8042'. [ 574.251259][T27880] loop4: detected capacity change from 0 to 256 [ 574.258563][T27880] FAT-fs (loop4): bogus number of directory entries (5) [ 574.265621][T27880] FAT-fs (loop4): Can't find a valid FAT filesystem [ 574.277260][T26512] Bluetooth: hci0: command 0x1003 tx timeout [ 574.283369][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 574.301857][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 574.301875][ T29] audit: type=1326 audit(574.283:49504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.334215][ T29] audit: type=1326 audit(574.293:49505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.335115][T27883] ip6_vti0: Caught tx_queue_len zero misconfig [ 574.357365][ T29] audit: type=1326 audit(574.293:49506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.386604][ T29] audit: type=1326 audit(574.313:49507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f184169b829 code=0x7ffc0000 [ 574.409533][ T29] audit: type=1326 audit(574.313:49508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.419627][T27877] netlink: 'syz.3.8041': attribute type 13 has an invalid length. [ 574.435264][ T29] audit: type=1326 audit(574.393:49509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.463484][ T29] audit: type=1326 audit(574.393:49510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.486839][ T29] audit: type=1326 audit(574.393:49511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.509997][ T29] audit: type=1326 audit(574.393:49512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.532999][ T29] audit: type=1326 audit(574.393:49513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27876 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 574.549666][T27888] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 574.562691][T27888] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 574.570418][T27886] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 574.643748][T27887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=27887 comm=syz.4.8045 [ 574.658975][T27892] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8047'. [ 574.707680][T27897] EXT4-fs: test_dummy_encryption option not supported [ 574.787886][T27902] netlink: 3272 bytes leftover after parsing attributes in process `syz.0.8048'. [ 574.915079][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8049'. [ 574.924054][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8049'. [ 575.375626][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 575.429184][T27911] team0: Device ip6gre0 is of different type [ 575.454750][T27911] lo speed is unknown, defaulting to 1000 [ 575.523169][ T3488] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 575.540424][ T3488] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.824034][T27928] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.8057'. [ 575.978154][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8058'. [ 575.987124][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8058'. [ 576.390769][T27935] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8059'. [ 576.528042][T27937] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 576.698899][T27945] lo speed is unknown, defaulting to 1000 [ 577.201702][T27955] set_capacity_and_notify: 1 callbacks suppressed [ 577.201723][T27955] loop4: detected capacity change from 0 to 128 [ 577.397298][T26512] Bluetooth: hci0: command 0x1003 tx timeout [ 577.397298][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.550349][T27960] lo speed is unknown, defaulting to 1000 [ 577.742205][T27960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.751004][T27960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.092946][T27965] lo speed is unknown, defaulting to 1000 [ 578.425298][T27974] netlink: 'syz.0.8073': attribute type 13 has an invalid length. [ 578.470601][T27974] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 578.477031][T27974] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 578.931413][T27979] lo speed is unknown, defaulting to 1000 [ 578.961710][ T3488] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 578.963540][T27982] loop4: detected capacity change from 0 to 512 [ 578.969622][ T3488] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 578.980928][T27982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 578.997007][T27982] EXT4-fs (loop4): 1 truncate cleaned up [ 579.003277][T27982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.308159][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 579.308178][ T29] audit: type=1326 audit(579.283:50079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.338247][ T29] audit: type=1326 audit(579.323:50080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.361694][ T29] audit: type=1326 audit(579.343:50081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.385070][ T29] audit: type=1326 audit(579.363:50082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.409662][ T29] audit: type=1326 audit(579.393:50083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.432873][ T29] audit: type=1326 audit(579.393:50084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.456373][ T29] audit: type=1326 audit(579.433:50085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.480679][ T29] audit: type=1326 audit(579.463:50086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.504081][ T29] audit: type=1326 audit(579.483:50087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.527531][ T29] audit: type=1326 audit(579.513:50088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27981 comm="syz.4.8076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efce3ee2005 code=0x7ffc0000 [ 579.748638][T28000] __nla_validate_parse: 3 callbacks suppressed [ 579.748658][T28000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8080'. [ 579.783468][T28000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28000 comm=syz.2.8080 [ 579.801741][T28000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8080'. [ 579.828279][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.852711][T28002] syzkaller0: Caught tx_queue_len zero misconfig [ 579.927467][T28007] loop4: detected capacity change from 0 to 2048 [ 579.940227][T28007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.970461][T28012] loop1: detected capacity change from 0 to 2048 [ 579.989434][T28012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.109634][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8085'. [ 580.118634][T28019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8085'. [ 580.148401][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.243700][T28025] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.8086'. [ 580.348176][T28028] lo speed is unknown, defaulting to 1000 [ 580.503278][T28028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.512155][T28028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.611538][T28032] SELinux: security_context_str_to_sid (|A7&A ^[Q:#?(}seft.)"8g(@ ϓzʭ,JzNbn뚴4 ҋzi [ 580.611538][T28032] 8J7M$1,U8ػF|PG۷5)Qr{oF< ^ NU ) failed with errno=-22 [ 580.763392][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.830566][T28035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8090'. [ 580.858920][T28035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28035 comm=syz.3.8090 [ 580.876191][T28035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8090'. [ 580.888906][T28035] loop3: detected capacity change from 0 to 256 [ 580.896382][T28035] FAT-fs (loop3): bogus number of directory entries (5) [ 580.903441][T28035] FAT-fs (loop3): Can't find a valid FAT filesystem [ 580.962230][T28043] loop3: detected capacity change from 0 to 512 [ 580.969293][T28043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 580.983557][T28043] EXT4-fs (loop3): 1 truncate cleaned up [ 580.983563][T28045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8093'. [ 580.984237][T28043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.017079][T28045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28045 comm=syz.0.8093 [ 581.037134][T28045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8093'. [ 581.088292][T28051] loop1: detected capacity change from 0 to 512 [ 581.095535][T28051] EXT4-fs: test_dummy_encryption option not supported [ 581.127342][T28037] netlink: 'syz.4.8089': attribute type 13 has an invalid length. [ 581.369877][T28063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8098'. [ 581.395937][T28063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28063 comm=syz.0.8098 [ 581.477942][T28065] ip6_vti0: Caught tx_queue_len zero misconfig [ 581.765434][T28071] lo speed is unknown, defaulting to 1000 [ 581.810739][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.073345][T28075] loop3: detected capacity change from 0 to 1024 [ 582.093888][T28075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.120091][T28075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.178364][T28072] loop4: detected capacity change from 0 to 1024 [ 582.207264][T28072] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 582.291783][T28072] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.8101: iget: bogus i_mode (1) [ 582.321079][T28072] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8101: couldn't read orphan inode 11 (err -117) [ 582.397878][T28088] SELinux: security_context_str_to_sid ('VҚ3倛_a2I2T7N Ԯ)WͨuIaudᛵzӒH oχ<(:1y5[ Պ~Wx߂(6Cgj7j1z ?+*zٚg [ 582.397878][T28088] oÊWr$X "| bLu\ [ 582.397878][T28088] iFiHEJJ软2,\R\)x) failed with errno=-22 [ 582.497864][T28072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.098926][ T12] kworker/u8:0 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 583.112671][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.112788][ T12] Tainted: [W]=WARN [ 583.112797][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.112813][ T12] Workqueue: loop4 loop_rootcg_workfn [ 583.112911][ T12] Call Trace: [ 583.112919][ T12] [ 583.112927][ T12] __dump_stack+0x1d/0x30 [ 583.112952][ T12] dump_stack_lvl+0x95/0xd0 [ 583.113038][ T12] dump_stack+0x15/0x1b [ 583.113062][ T12] dump_header+0x81/0x240 [ 583.113088][ T12] oom_kill_process+0x295/0x350 [ 583.113116][ T12] out_of_memory+0x97b/0xb80 [ 583.113186][ T12] try_charge_memcg+0x610/0xa10 [ 583.113223][ T12] charge_memcg+0x51/0xc0 [ 583.113263][ T12] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 583.113300][ T12] __read_swap_cache_async+0x17b/0x2d0 [ 583.113372][ T12] swap_cluster_readahead+0x362/0x3c0 [ 583.113411][ T12] shmem_swapin_folio+0x8b4/0x11e0 [ 583.113436][ T12] ? ext4_ext_try_to_merge_right+0x43b/0x490 [ 583.113473][ T12] ? percpu_counter_add_batch+0xb6/0x130 [ 583.113516][ T12] ? xas_load+0x413/0x430 [ 583.113553][ T12] ? filemap_get_entry+0x34b/0x390 [ 583.113580][ T12] shmem_get_folio_gfp+0x26c/0xd50 [ 583.113616][ T12] ? __rcu_read_unlock+0x34/0x70 [ 583.113688][ T12] shmem_file_read_iter+0x10d/0x540 [ 583.113724][ T12] ? unwind_next_frame+0xb37/0xca0 [ 583.113753][ T12] lo_rw_aio+0x673/0x720 [ 583.113782][ T12] loop_process_work+0x56d/0xaa0 [ 583.113869][ T12] ? trace_reschedule_exit+0xd/0xc0 [ 583.113903][ T12] ? _raw_spin_unlock+0x14/0x50 [ 583.113925][ T12] loop_rootcg_workfn+0x22/0x30 [ 583.114003][ T12] process_scheduled_works+0x4ce/0x9d0 [ 583.114033][ T12] worker_thread+0x582/0x770 [ 583.114060][ T12] kthread+0x489/0x510 [ 583.114113][ T12] ? __pfx_worker_thread+0x10/0x10 [ 583.114143][ T12] ? __pfx_kthread+0x10/0x10 [ 583.114227][ T12] ret_from_fork+0x149/0x290 [ 583.114251][ T12] ? __pfx_kthread+0x10/0x10 [ 583.114336][ T12] ret_from_fork_asm+0x1a/0x30 [ 583.114371][ T12] [ 583.114380][ T12] memory: usage 307200kB, limit 307200kB, failcnt 10081 [ 583.323960][ T12] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 583.331934][ T12] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 583.339297][ T12] Memory cgroup stats for /syz4: [ 583.349699][ T12] cache 16384 [ 583.358015][ T12] rss 4096 [ 583.361116][ T12] shmem 0 [ 583.364063][ T12] mapped_file 0 [ 583.367548][ T12] dirty 0 [ 583.368828][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.370533][ T12] writeback 0 [ 583.370543][ T12] workingset_refault_anon 845 [ 583.370551][ T12] workingset_refault_file 6501 [ 583.392333][ T12] swap 737280 [ 583.395626][ T12] swapcached 4096 [ 583.399284][ T12] pgpgin 684245 [ 583.402794][ T12] pgpgout 684228 [ 583.406372][ T12] pgfault 835229 [ 583.409984][ T12] pgmajfault 586 [ 583.413549][ T12] inactive_anon 0 [ 583.417236][ T12] active_anon 0 [ 583.420706][ T12] inactive_file 0 [ 583.424403][ T12] active_file 65536 [ 583.428229][ T12] unevictable 0 [ 583.431774][ T12] hierarchical_memory_limit 314572800 [ 583.437166][ T12] hierarchical_memsw_limit 9223372036854771712 [ 583.443381][ T12] total_cache 16384 [ 583.447288][ T12] total_rss 4096 [ 583.450849][ T12] total_shmem 0 [ 583.454343][ T12] total_mapped_file 0 [ 583.458366][ T12] total_dirty 0 [ 583.461838][ T12] total_writeback 0 [ 583.465706][ T12] total_workingset_refault_anon 845 [ 583.471011][ T12] total_workingset_refault_file 6501 [ 583.476288][ T12] total_swap 737280 [ 583.480098][ T12] total_swapcached 4096 [ 583.484236][ T12] total_pgpgin 684245 [ 583.488219][ T12] total_pgpgout 684228 [ 583.492275][ T12] total_pgfault 835229 [ 583.496430][ T12] total_pgmajfault 586 [ 583.500507][ T12] total_inactive_anon 0 [ 583.504647][ T12] total_active_anon 0 [ 583.508650][ T12] total_inactive_file 0 [ 583.512821][ T12] total_active_file 65536 [ 583.517248][ T12] total_unevictable 0 [ 583.521257][ T12] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8101,pid=28069,uid=0 [ 583.535982][ T12] Memory cgroup out of memory: Killed process 28069 (syz.4.8101) total-vm:96148kB, anon-rss:1136kB, file-rss:22632kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 583.739843][T28104] team0: Device ip6gre0 is of different type [ 583.763589][T28107] lo speed is unknown, defaulting to 1000 [ 583.822928][T28100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28100 comm=syz.3.8107 [ 583.865786][T28108] lo speed is unknown, defaulting to 1000 [ 583.970913][T28100] loop3: detected capacity change from 0 to 256 [ 583.989264][T27985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 584.015510][T28100] FAT-fs (loop3): bogus number of directory entries (5) [ 584.022605][T28100] FAT-fs (loop3): Can't find a valid FAT filesystem [ 584.023839][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.239072][T28124] lo speed is unknown, defaulting to 1000 [ 584.420337][T28124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.428902][T28124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.788362][T28129] __nla_validate_parse: 8 callbacks suppressed [ 584.788375][T28129] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8116'. [ 584.907739][T28141] lo speed is unknown, defaulting to 1000 [ 585.029895][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 585.029913][ T29] audit: type=1326 audit(585.013:51002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.043168][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8122'. [ 585.068021][T28149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8122'. [ 585.089547][ T29] audit: type=1326 audit(585.013:51003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.112749][ T29] audit: type=1326 audit(585.013:51004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.135738][ T29] audit: type=1326 audit(585.013:51005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.158794][ T29] audit: type=1326 audit(585.013:51006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.181730][ T29] audit: type=1326 audit(585.013:51007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.204779][ T29] audit: type=1326 audit(585.013:51008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.227859][ T29] audit: type=1326 audit(585.013:51009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.250923][ T29] audit: type=1326 audit(585.013:51010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.273935][ T29] audit: type=1326 audit(585.013:51011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.0.8122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 585.378100][T28152] SELinux: security_context_str_to_sid (WN.NI#xYN;;E/4JRyhW|My;LIq!V>ӧd%ti#@#qMUI*) failed with errno=-22 [ 585.643812][T28154] loop1: detected capacity change from 0 to 512 [ 585.661274][T28154] EXT4-fs: test_dummy_encryption option not supported [ 585.835851][T28157] loop3: detected capacity change from 0 to 512 [ 585.843072][T28157] EXT4-fs: test_dummy_encryption option not supported [ 585.987952][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8123'. [ 585.996845][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8123'. [ 586.902796][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8124'. [ 586.911729][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8124'. [ 587.219706][T28167] lo speed is unknown, defaulting to 1000 [ 587.230535][T28171] loop3: detected capacity change from 0 to 512 [ 587.237539][T28171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 587.253163][T28171] EXT4-fs (loop3): 1 truncate cleaned up [ 587.268374][T28171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.287123][T28175] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.8127'. [ 587.473277][T28183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8131'. [ 587.482757][T28183] siw: device registration error -23 [ 587.964060][T28200] lo speed is unknown, defaulting to 1000 [ 588.090155][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.140307][T28207] lo speed is unknown, defaulting to 1000 [ 588.242591][T28211] lo speed is unknown, defaulting to 1000 [ 588.271779][T12661] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 588.302363][T28214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8142'. [ 588.313257][T28214] siw: device registration error -23 [ 588.338557][T12661] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.065569][T28236] lo speed is unknown, defaulting to 1000 [ 589.572064][T28245] siw: device registration error -23 [ 589.851045][T28261] __nla_validate_parse: 5 callbacks suppressed [ 589.851062][T28261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8159'. [ 589.934071][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8158'. [ 589.943127][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8158'. [ 589.968433][T28261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28261 comm=syz.4.8159 [ 590.018688][T28261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8159'. [ 590.061888][T28261] loop4: detected capacity change from 0 to 256 [ 590.098231][T28264] lo speed is unknown, defaulting to 1000 [ 590.125217][T28261] FAT-fs (loop4): bogus number of directory entries (5) [ 590.132338][T28261] FAT-fs (loop4): Can't find a valid FAT filesystem [ 590.278437][T28274] SELinux: security_context_str_to_sid (FѤhox^lӽ+L`]:d.jTۀG1W!sic%exB8C̩:@L>"|m^<N*bw) failed with errno=-22 [ 590.297850][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8161'. [ 590.306779][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8161'. [ 590.350086][T28277] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.8162'. [ 590.442707][T28248] syz.3.8154 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 590.456987][T28248] CPU: 1 UID: 0 PID: 28248 Comm: syz.3.8154 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 590.457027][T28248] Tainted: [W]=WARN [ 590.457036][T28248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.457049][T28248] Call Trace: [ 590.457056][T28248] [ 590.457066][T28248] __dump_stack+0x1d/0x30 [ 590.457153][T28248] dump_stack_lvl+0x95/0xd0 [ 590.457177][T28248] dump_stack+0x15/0x1b [ 590.457201][T28248] dump_header+0x81/0x240 [ 590.457221][T28248] oom_kill_process+0x295/0x350 [ 590.457302][T28248] out_of_memory+0x97b/0xb80 [ 590.457330][T28248] try_charge_memcg+0x610/0xa10 [ 590.457430][T28248] obj_cgroup_charge_pages+0xa6/0x150 [ 590.457463][T28248] __memcg_kmem_charge_page+0x9f/0x170 [ 590.457499][T28248] __alloc_frozen_pages_noprof+0x18f/0x360 [ 590.457587][T28248] alloc_pages_mpol+0xb3/0x260 [ 590.457714][T28248] alloc_pages_noprof+0x90/0x130 [ 590.457756][T28248] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 590.457870][T28248] __kvmalloc_node_noprof+0x492/0x6b0 [ 590.457901][T28248] ? ip_set_alloc+0x24/0x30 [ 590.457936][T28248] ? ip_set_alloc+0x24/0x30 [ 590.458044][T28248] ip_set_alloc+0x24/0x30 [ 590.458070][T28248] hash_netiface_create+0x282/0x740 [ 590.458157][T28248] ? __pfx_hash_netiface_create+0x10/0x10 [ 590.458193][T28248] ip_set_create+0x3cc/0x970 [ 590.458228][T28248] ? _raw_spin_unlock+0x26/0x50 [ 590.458267][T28248] nfnetlink_rcv_msg+0x4c6/0x590 [ 590.458354][T28248] netlink_rcv_skb+0x123/0x220 [ 590.458449][T28248] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 590.458481][T28248] nfnetlink_rcv+0x167/0x16c0 [ 590.458503][T28248] ? kmem_cache_free+0xe3/0x3a0 [ 590.458526][T28248] ? __kfree_skb+0x109/0x150 [ 590.458635][T28248] ? nlmon_xmit+0x4f/0x60 [ 590.458658][T28248] ? consume_skb+0x49/0x150 [ 590.458742][T28248] ? nlmon_xmit+0x4f/0x60 [ 590.458789][T28248] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 590.458832][T28248] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 590.458859][T28248] ? __dev_queue_xmit+0x148/0x1ee0 [ 590.458900][T28248] ? ref_tracker_free+0x37d/0x3e0 [ 590.459006][T28248] ? __netlink_deliver_tap+0x4dc/0x500 [ 590.459048][T28248] netlink_unicast+0x5c0/0x690 [ 590.459084][T28248] netlink_sendmsg+0x58b/0x6b0 [ 590.459123][T28248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.459153][T28248] __sock_sendmsg+0x145/0x180 [ 590.459175][T28248] ____sys_sendmsg+0x31e/0x4a0 [ 590.459273][T28248] ___sys_sendmsg+0x17b/0x1d0 [ 590.459318][T28248] __x64_sys_sendmsg+0xd4/0x160 [ 590.459353][T28248] x64_sys_call+0x17ba/0x3000 [ 590.459429][T28248] do_syscall_64+0xca/0x2b0 [ 590.459510][T28248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.459536][T28248] RIP: 0033:0x7f18416ff749 [ 590.459554][T28248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.459636][T28248] RSP: 002b:00007f1840167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.459734][T28248] RAX: ffffffffffffffda RBX: 00007f1841955fa0 RCX: 00007f18416ff749 [ 590.459750][T28248] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 590.459766][T28248] RBP: 00007f1841783f91 R08: 0000000000000000 R09: 0000000000000000 [ 590.459780][T28248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.459793][T28248] R13: 00007f1841956038 R14: 00007f1841955fa0 R15: 00007ffc0129a458 [ 590.459814][T28248] [ 590.787323][T28248] memory: usage 307200kB, limit 307200kB, failcnt 2435 [ 590.794271][T28248] memory+swap: usage 307532kB, limit 9007199254740988kB, failcnt 0 [ 590.802419][T28248] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 590.809766][T28248] Memory cgroup stats for /syz3: [ 590.810370][T28248] cache 0 [ 590.818289][T28248] rss 0 [ 590.821063][T28248] shmem 0 [ 590.824014][T28248] mapped_file 0 [ 590.827583][T28248] dirty 0 [ 590.831084][T28248] writeback 0 [ 590.834721][T28248] workingset_refault_anon 267 [ 590.839460][T28248] workingset_refault_file 2027 [ 590.844320][T28248] swap 339968 [ 590.844342][T28280] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 590.847642][T28248] swapcached 0 [ 590.847653][T28248] pgpgin 698212 [ 590.862557][T28248] pgpgout 698207 [ 590.866127][T28248] pgfault 873570 [ 590.869730][T28248] pgmajfault 194 [ 590.873280][T28248] inactive_anon 0 [ 590.876896][T28248] active_anon 0 [ 590.880483][T28248] inactive_file 0 [ 590.884181][T28248] active_file 20480 [ 590.888019][T28248] unevictable 0 [ 590.891511][T28248] hierarchical_memory_limit 314572800 [ 590.896879][T28248] hierarchical_memsw_limit 9223372036854771712 [ 590.903085][T28248] total_cache 0 [ 590.906546][T28248] total_rss 0 [ 590.909889][T28248] total_shmem 0 [ 590.913354][T28248] total_mapped_file 0 [ 590.917363][T28248] total_dirty 0 [ 590.921090][T28248] total_writeback 0 [ 590.925365][T28248] total_workingset_refault_anon 267 [ 590.930790][T28248] total_workingset_refault_file 2027 [ 590.936086][T28248] total_swap 339968 [ 590.940059][T28248] total_swapcached 0 [ 590.944018][T28248] total_pgpgin 698212 [ 590.948021][T28248] total_pgpgout 698207 [ 590.952096][T28248] total_pgfault 873570 [ 590.956165][T28248] total_pgmajfault 194 [ 590.960237][T28248] total_inactive_anon 0 [ 590.964435][T28248] total_active_anon 0 [ 590.968419][T28248] total_inactive_file 0 [ 590.972588][T28248] total_active_file 20480 [ 590.976912][T28248] total_unevictable 0 [ 590.980977][T28248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8154,pid=28247,uid=0 [ 590.995788][T28248] Memory cgroup out of memory: Killed process 28247 (syz.3.8154) total-vm:96148kB, anon-rss:1136kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 591.081831][ T29] kauditd_printk_skb: 1601 callbacks suppressed [ 591.081909][ T29] audit: type=1326 audit(591.063:52613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78193e65e7 code=0x7ffc0000 [ 591.133106][ T29] audit: type=1326 audit(591.103:52614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f781938b829 code=0x7ffc0000 [ 591.156278][ T29] audit: type=1326 audit(591.103:52615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78193e65e7 code=0x7ffc0000 [ 591.179257][ T29] audit: type=1326 audit(591.103:52616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f781938b829 code=0x7ffc0000 [ 591.202433][ T29] audit: type=1326 audit(591.103:52617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 591.225621][ T29] audit: type=1326 audit(591.103:52618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 591.248647][ T29] audit: type=1326 audit(591.103:52619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78193e65e7 code=0x7ffc0000 [ 591.271826][ T29] audit: type=1326 audit(591.103:52620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f781938b829 code=0x7ffc0000 [ 591.294910][ T29] audit: type=1326 audit(591.103:52621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 591.317912][ T29] audit: type=1326 audit(591.103:52622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28286 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 591.342659][T28288] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.8166'. [ 591.399099][T28292] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8167'. [ 591.455965][T28294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8168'. [ 591.503536][T28294] siw: device registration error -23 [ 591.754128][T28304] loop3: detected capacity change from 0 to 2048 [ 591.763583][T28304] EXT4-fs (loop3): failed to initialize system zone (-117) [ 591.818733][T28304] EXT4-fs (loop3): mount failed [ 592.122252][T28313] loop1: detected capacity change from 0 to 2048 [ 592.140303][T28313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.247161][T28304] loop3: detected capacity change from 0 to 512 [ 592.263831][T28320] loop4: detected capacity change from 0 to 512 [ 592.270580][T28320] EXT4-fs: test_dummy_encryption option not supported [ 592.293703][T28304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.309820][T28304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 592.324801][T28304] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8172: Failed to acquire dquot type 1 [ 592.367314][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.912846][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.026850][T28329] syz.0.8178 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 593.041088][T28329] CPU: 0 UID: 0 PID: 28329 Comm: syz.0.8178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 593.041197][T28329] Tainted: [W]=WARN [ 593.041206][T28329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.041222][T28329] Call Trace: [ 593.041229][T28329] [ 593.041236][T28329] __dump_stack+0x1d/0x30 [ 593.041261][T28329] dump_stack_lvl+0x95/0xd0 [ 593.041289][T28329] dump_stack+0x15/0x1b [ 593.041315][T28329] dump_header+0x81/0x240 [ 593.041350][T28329] oom_kill_process+0x295/0x350 [ 593.041379][T28329] out_of_memory+0x97b/0xb80 [ 593.041402][T28329] try_charge_memcg+0x610/0xa10 [ 593.041439][T28329] obj_cgroup_charge_pages+0xa6/0x150 [ 593.041478][T28329] __memcg_kmem_charge_page+0x9f/0x170 [ 593.041582][T28329] __alloc_frozen_pages_noprof+0x18f/0x360 [ 593.041612][T28329] alloc_pages_mpol+0xb3/0x260 [ 593.041643][T28329] alloc_pages_noprof+0x90/0x130 [ 593.041679][T28329] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 593.041737][T28329] __kvmalloc_node_noprof+0x492/0x6b0 [ 593.041761][T28329] ? ip_set_alloc+0x24/0x30 [ 593.041821][T28329] ? ip_set_alloc+0x24/0x30 [ 593.041868][T28329] ip_set_alloc+0x24/0x30 [ 593.041902][T28329] hash_netiface_create+0x282/0x740 [ 593.041950][T28329] ? __pfx_hash_netiface_create+0x10/0x10 [ 593.042066][T28329] ip_set_create+0x3cc/0x970 [ 593.042111][T28329] ? __nla_parse+0x40/0x60 [ 593.042136][T28329] nfnetlink_rcv_msg+0x4c6/0x590 [ 593.042178][T28329] netlink_rcv_skb+0x123/0x220 [ 593.042286][T28329] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 593.042326][T28329] nfnetlink_rcv+0x167/0x16c0 [ 593.042374][T28329] ? kmem_cache_free+0xe3/0x3a0 [ 593.042454][T28329] ? __kfree_skb+0x109/0x150 [ 593.042483][T28329] ? nlmon_xmit+0x4f/0x60 [ 593.042574][T28329] ? consume_skb+0x49/0x150 [ 593.042603][T28329] ? nlmon_xmit+0x4f/0x60 [ 593.042627][T28329] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 593.042664][T28329] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 593.042756][T28329] ? __dev_queue_xmit+0x148/0x1ee0 [ 593.042863][T28329] ? ref_tracker_free+0x37d/0x3e0 [ 593.042941][T28329] ? __netlink_deliver_tap+0x4dc/0x500 [ 593.042973][T28329] netlink_unicast+0x5c0/0x690 [ 593.043080][T28329] netlink_sendmsg+0x58b/0x6b0 [ 593.043120][T28329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.043156][T28329] __sock_sendmsg+0x145/0x180 [ 593.043176][T28329] ____sys_sendmsg+0x31e/0x4a0 [ 593.043306][T28329] ___sys_sendmsg+0x17b/0x1d0 [ 593.043343][T28329] __x64_sys_sendmsg+0xd4/0x160 [ 593.043413][T28329] x64_sys_call+0x17ba/0x3000 [ 593.043445][T28329] do_syscall_64+0xca/0x2b0 [ 593.043482][T28329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.043525][T28329] RIP: 0033:0x7f30b423f749 [ 593.043546][T28329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.043569][T28329] RSP: 002b:00007f30b2ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.043593][T28329] RAX: ffffffffffffffda RBX: 00007f30b4495fa0 RCX: 00007f30b423f749 [ 593.043605][T28329] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 593.043637][T28329] RBP: 00007f30b42c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 593.043649][T28329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.043662][T28329] R13: 00007f30b4496038 R14: 00007f30b4495fa0 R15: 00007ffe31ba4438 [ 593.043680][T28329] [ 593.043687][T28329] memory: usage 307200kB, limit 307200kB, failcnt 1480 [ 593.378544][T28329] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0 [ 593.386425][T28329] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 593.393779][T28329] Memory cgroup stats for /syz0: [ 593.394039][T28329] cache 0 [ 593.402024][T28329] rss 0 [ 593.404808][T28329] shmem 0 [ 593.407798][T28329] mapped_file 0 [ 593.411254][T28329] dirty 0 [ 593.414238][T28329] writeback 0 [ 593.417566][T28329] workingset_refault_anon 402 [ 593.422321][T28329] workingset_refault_file 2344 [ 593.427105][T28329] swap 335872 [ 593.430483][T28329] swapcached 0 [ 593.433869][T28329] pgpgin 924908 [ 593.437364][T28329] pgpgout 924908 [ 593.440960][T28329] pgfault 938698 [ 593.444501][T28329] pgmajfault 251 [ 593.448081][T28329] inactive_anon 0 [ 593.451725][T28329] active_anon 0 [ 593.455167][T28329] inactive_file 0 [ 593.458834][T28329] active_file 0 [ 593.462588][T28329] unevictable 0 [ 593.466323][T28329] hierarchical_memory_limit 314572800 [ 593.471766][T28329] hierarchical_memsw_limit 9223372036854771712 [ 593.477937][T28329] total_cache 0 [ 593.481397][T28329] total_rss 0 [ 593.484670][T28329] total_shmem 0 [ 593.488155][T28329] total_mapped_file 0 [ 593.492141][T28329] total_dirty 0 [ 593.495668][T28329] total_writeback 0 [ 593.499573][T28329] total_workingset_refault_anon 402 [ 593.504806][T28329] total_workingset_refault_file 2344 [ 593.510102][T28329] total_swap 335872 [ 593.513954][T28329] total_swapcached 0 [ 593.517859][T28329] total_pgpgin 924908 [ 593.521830][T28329] total_pgpgout 924908 [ 593.525925][T28329] total_pgfault 938698 [ 593.529992][T28329] total_pgmajfault 251 [ 593.534048][T28329] total_inactive_anon 0 [ 593.538220][T28329] total_active_anon 0 [ 593.542204][T28329] total_inactive_file 0 [ 593.546355][T28329] total_active_file 0 [ 593.550344][T28329] total_unevictable 0 [ 593.554358][T28329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8178,pid=28328,uid=0 [ 593.569036][T28329] Memory cgroup out of memory: Killed process 28328 (syz.0.8178) total-vm:94100kB, anon-rss:1116kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 593.655237][T28339] loop1: detected capacity change from 0 to 512 [ 593.672600][T28339] EXT4-fs: Ignoring removed i_version option [ 593.681193][T28339] EXT4-fs (loop1): orphan cleanup on readonly fs [ 593.688470][T28339] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.8182: EA inode hash validation failed [ 593.701219][T28339] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.8182: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 593.716752][T28339] EXT4-fs (loop1): Remounting filesystem read-only [ 593.723331][T28339] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.8182: ea_inode dec ref err=-117 [ 593.726908][T28341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28341 comm=syz.4.8183 [ 593.736488][T28339] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 593.758403][T28339] EXT4-fs (loop1): 1 orphan inode deleted [ 593.764647][T28339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 593.777837][T28339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.803083][T28341] loop4: detected capacity change from 0 to 256 [ 593.810427][T28341] FAT-fs (loop4): bogus number of directory entries (5) [ 593.817447][T28341] FAT-fs (loop4): Can't find a valid FAT filesystem [ 593.936810][T28354] loop4: detected capacity change from 0 to 512 [ 593.989371][T28354] EXT4-fs: test_dummy_encryption option not supported [ 594.424391][T28367] loop1: detected capacity change from 0 to 1024 [ 594.512021][T28367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 594.743941][T28367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.859927][T28380] loop3: detected capacity change from 0 to 512 [ 594.878513][T28377] __nla_validate_parse: 12 callbacks suppressed [ 594.878582][T28377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8192'. [ 594.893832][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8192'. [ 594.903484][T28380] EXT4-fs: test_dummy_encryption option not supported [ 594.903698][T28381] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.8194'. [ 594.976995][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'. [ 595.091471][T28387] SELinux: security_context_str_to_sid (uۀ@H@VNfZxK}~r1U+) failed with errno=-22 [ 595.280006][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.301526][T28389] loop1: detected capacity change from 0 to 512 [ 595.308410][T28389] EXT4-fs: test_dummy_encryption option not supported [ 595.510667][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8197'. [ 595.519620][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8197'. [ 595.995748][T28396] lo speed is unknown, defaulting to 1000 [ 596.155338][T28396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.164204][T28396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.377050][T28400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8199'. [ 596.565118][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 596.565138][ T29] audit: type=1326 audit(596.543:52781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.595378][T28400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28400 comm=syz.1.8199 [ 596.610543][T28402] lo speed is unknown, defaulting to 1000 [ 596.628267][T28400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8199'. [ 596.630770][ T29] audit: type=1326 audit(596.543:52782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.660276][ T29] audit: type=1326 audit(596.563:52783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.683380][ T29] audit: type=1326 audit(596.563:52784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.707017][ T29] audit: type=1326 audit(596.563:52785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.729983][ T29] audit: type=1326 audit(596.563:52786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.753005][ T29] audit: type=1326 audit(596.563:52787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.776338][ T29] audit: type=1326 audit(596.563:52788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.776389][T28407] loop1: detected capacity change from 0 to 256 [ 596.799534][ T29] audit: type=1326 audit(596.563:52789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.799571][ T29] audit: type=1326 audit(596.563:52790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28401 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18416ff749 code=0x7ffc0000 [ 596.829233][T28407] FAT-fs (loop1): bogus number of directory entries (5) [ 596.858901][T28407] FAT-fs (loop1): Can't find a valid FAT filesystem [ 596.913901][T28411] loop4: detected capacity change from 0 to 2048 [ 596.942149][T28411] EXT4-fs (loop4): failed to initialize system zone (-117) [ 596.969816][T28409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=28409 comm=syz.3.8202 [ 597.007066][T28411] EXT4-fs (loop4): mount failed [ 597.076302][T28411] loop4: detected capacity change from 0 to 512 [ 597.090127][T28411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.122297][T28411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 597.137693][T28411] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.8203: Failed to acquire dquot type 1 [ 597.162573][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8204'. [ 597.171607][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8204'. [ 597.338731][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.425061][T28419] netlink: 'syz.1.8206': attribute type 13 has an invalid length. [ 597.672257][T28439] loop4: detected capacity change from 0 to 512 [ 597.689280][T28439] EXT4-fs: test_dummy_encryption option not supported [ 598.223547][T28447] siw: device registration error -23 [ 598.373870][T28450] lo speed is unknown, defaulting to 1000 [ 598.665776][T28457] syz.3.8215 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 598.680078][T28457] CPU: 0 UID: 0 PID: 28457 Comm: syz.3.8215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 598.680117][T28457] Tainted: [W]=WARN [ 598.680124][T28457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.680137][T28457] Call Trace: [ 598.680145][T28457] [ 598.680226][T28457] __dump_stack+0x1d/0x30 [ 598.680334][T28457] dump_stack_lvl+0x95/0xd0 [ 598.680406][T28457] dump_stack+0x15/0x1b [ 598.680471][T28457] dump_header+0x81/0x240 [ 598.680497][T28457] oom_kill_process+0x295/0x350 [ 598.680525][T28457] out_of_memory+0x97b/0xb80 [ 598.680552][T28457] try_charge_memcg+0x610/0xa10 [ 598.680608][T28457] obj_cgroup_charge_pages+0xa6/0x150 [ 598.680639][T28457] __memcg_kmem_charge_page+0x9f/0x170 [ 598.680666][T28457] __alloc_frozen_pages_noprof+0x18f/0x360 [ 598.680698][T28457] alloc_pages_mpol+0xb3/0x260 [ 598.680816][T28457] alloc_pages_noprof+0x90/0x130 [ 598.680843][T28457] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 598.680877][T28457] __kvmalloc_node_noprof+0x492/0x6b0 [ 598.680938][T28457] ? ip_set_alloc+0x24/0x30 [ 598.680972][T28457] ? ip_set_alloc+0x24/0x30 [ 598.681001][T28457] ip_set_alloc+0x24/0x30 [ 598.681026][T28457] hash_netiface_create+0x282/0x740 [ 598.681134][T28457] ? __pfx_hash_netiface_create+0x10/0x10 [ 598.681163][T28457] ip_set_create+0x3cc/0x970 [ 598.681277][T28457] ? __nla_parse+0x40/0x60 [ 598.681333][T28457] nfnetlink_rcv_msg+0x4c6/0x590 [ 598.681393][T28457] netlink_rcv_skb+0x123/0x220 [ 598.681428][T28457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 598.681466][T28457] nfnetlink_rcv+0x167/0x16c0 [ 598.681495][T28457] ? kmem_cache_free+0xe3/0x3a0 [ 598.681577][T28457] ? __kfree_skb+0x109/0x150 [ 598.681604][T28457] ? nlmon_xmit+0x4f/0x60 [ 598.681622][T28457] ? consume_skb+0x49/0x150 [ 598.681675][T28457] ? nlmon_xmit+0x4f/0x60 [ 598.681753][T28457] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 598.681790][T28457] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 598.681826][T28457] ? __dev_queue_xmit+0x148/0x1ee0 [ 598.681898][T28457] ? save_fpregs_to_fpstate+0x100/0x160 [ 598.681941][T28457] ? ref_tracker_free+0x37d/0x3e0 [ 598.682025][T28457] ? __netlink_deliver_tap+0x4dc/0x500 [ 598.682058][T28457] netlink_unicast+0x5c0/0x690 [ 598.682135][T28457] netlink_sendmsg+0x58b/0x6b0 [ 598.682166][T28457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.682196][T28457] __sock_sendmsg+0x145/0x180 [ 598.682216][T28457] ____sys_sendmsg+0x31e/0x4a0 [ 598.682262][T28457] ___sys_sendmsg+0x17b/0x1d0 [ 598.682449][T28457] __x64_sys_sendmsg+0xd4/0x160 [ 598.682530][T28457] x64_sys_call+0x17ba/0x3000 [ 598.682561][T28457] do_syscall_64+0xca/0x2b0 [ 598.682670][T28457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.682704][T28457] RIP: 0033:0x7f18416ff749 [ 598.682722][T28457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.682804][T28457] RSP: 002b:00007f1840167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.682902][T28457] RAX: ffffffffffffffda RBX: 00007f1841955fa0 RCX: 00007f18416ff749 [ 598.682917][T28457] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 598.682930][T28457] RBP: 00007f1841783f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.682942][T28457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.682955][T28457] R13: 00007f1841956038 R14: 00007f1841955fa0 R15: 00007ffc0129a458 [ 598.682975][T28457] [ 598.682983][T28457] memory: usage 301408kB, limit 307200kB, failcnt 2911 [ 598.972713][T28469] loop4: detected capacity change from 0 to 128 [ 598.973979][T28457] memory+swap: usage 33152kB, limit 9007199254740988kB, failcnt 0 [ 599.038065][T28457] kmem: usage 32900kB, limit 9007199254740988kB, failcnt 0 [ 599.045343][T28457] Memory cgroup stats for /syz3: [ 599.046118][T28457] cache 8192 [ 599.054548][T28457] rss 172032 [ 599.057798][T28457] shmem 0 [ 599.060752][T28457] mapped_file 4096 [ 599.064488][T28457] dirty 4096 [ 599.067837][T28457] writeback 0 [ 599.071201][T28457] workingset_refault_anon 357 [ 599.075910][T28457] workingset_refault_file 2411 [ 599.080697][T28457] swap 61440 [ 599.083906][T28457] swapcached 131072 [ 599.087738][T28457] pgpgin 699621 [ 599.091209][T28457] pgpgout 699569 [ 599.094766][T28457] pgfault 875490 [ 599.098364][T28457] pgmajfault 265 [ 599.101911][T28457] inactive_anon 49152 [ 599.105895][T28457] active_anon 126976 [ 599.109821][T28457] inactive_file 28672 [ 599.113811][T28457] active_file 0 [ 599.117296][T28457] unevictable 0 [ 599.120802][T28457] hierarchical_memory_limit 314572800 [ 599.126179][T28457] hierarchical_memsw_limit 9223372036854771712 [ 599.132447][T28457] total_cache 8192 [ 599.136221][T28457] total_rss 172032 [ 599.140029][T28457] total_shmem 0 [ 599.143497][T28457] total_mapped_file 4096 [ 599.147771][T28457] total_dirty 4096 [ 599.151494][T28457] total_writeback 0 [ 599.155343][T28457] total_workingset_refault_anon 357 [ 599.160564][T28457] total_workingset_refault_file 2411 [ 599.165843][T28457] total_swap 61440 [ 599.169718][T28457] total_swapcached 131072 [ 599.174226][T28457] total_pgpgin 699621 [ 599.178219][T28457] total_pgpgout 699569 [ 599.182339][T28457] total_pgfault 875490 [ 599.186431][T28457] total_pgmajfault 265 [ 599.190556][T28457] total_inactive_anon 49152 [ 599.195066][T28457] total_active_anon 126976 [ 599.199514][T28457] total_inactive_file 28672 [ 599.204090][T28457] total_active_file 0 [ 599.208087][T28457] total_unevictable 0 [ 599.212074][T28457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8215,pid=28456,uid=0 [ 599.226989][T28457] Memory cgroup out of memory: Killed process 28456 (syz.3.8215) total-vm:96148kB, anon-rss:1264kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 599.476217][T28473] lo speed is unknown, defaulting to 1000 [ 599.502311][ T3597] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 599.521992][ T3597] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 599.594842][T28464] lo speed is unknown, defaulting to 1000 [ 599.694265][T28483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28483 comm=syz.0.8222 [ 599.766215][T28485] siw: device registration error -23 [ 599.866978][T28488] loop4: detected capacity change from 0 to 512 [ 599.877922][T28488] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 599.887011][T28488] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 599.909528][T28488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 599.918023][T28488] System zones: 0-2, 18-18, 34-35 [ 599.924401][T28488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 599.946061][T28488] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 599.956173][T28488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 599.966046][T28488] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 600.037015][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.048712][T28494] loop1: detected capacity change from 0 to 128 [ 600.088844][T28498] lo speed is unknown, defaulting to 1000 [ 600.443056][T28511] loop3: detected capacity change from 0 to 1024 [ 600.450365][T28511] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 600.468325][T28511] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.8229: iget: bogus i_mode (1) [ 600.480146][T28511] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8229: couldn't read orphan inode 11 (err -117) [ 600.492996][T28511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.708008][T28500] syz.3.8229 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 600.722232][T28500] CPU: 1 UID: 0 PID: 28500 Comm: syz.3.8229 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 600.722299][T28500] Tainted: [W]=WARN [ 600.722308][T28500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.722324][T28500] Call Trace: [ 600.722333][T28500] [ 600.722344][T28500] __dump_stack+0x1d/0x30 [ 600.722377][T28500] dump_stack_lvl+0x95/0xd0 [ 600.722402][T28500] dump_stack+0x15/0x1b [ 600.722502][T28500] dump_header+0x81/0x240 [ 600.722523][T28500] oom_kill_process+0x295/0x350 [ 600.722574][T28500] out_of_memory+0x97b/0xb80 [ 600.722601][T28500] try_charge_memcg+0x610/0xa10 [ 600.722704][T28500] obj_cgroup_charge_pages+0xa6/0x150 [ 600.722732][T28500] __memcg_kmem_charge_page+0x9f/0x170 [ 600.722830][T28500] __alloc_frozen_pages_noprof+0x18f/0x360 [ 600.722866][T28500] alloc_pages_mpol+0xb3/0x260 [ 600.722902][T28500] alloc_pages_noprof+0x90/0x130 [ 600.722996][T28500] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 600.723116][T28500] __kvmalloc_node_noprof+0x492/0x6b0 [ 600.723194][T28500] ? ip_set_alloc+0x24/0x30 [ 600.723225][T28500] ? ip_set_alloc+0x24/0x30 [ 600.723275][T28500] ip_set_alloc+0x24/0x30 [ 600.723305][T28500] hash_netiface_create+0x282/0x740 [ 600.723416][T28500] ? __pfx_hash_netiface_create+0x10/0x10 [ 600.723451][T28500] ip_set_create+0x3cc/0x970 [ 600.723517][T28500] ? __nla_parse+0x40/0x60 [ 600.723550][T28500] nfnetlink_rcv_msg+0x4c6/0x590 [ 600.723641][T28500] netlink_rcv_skb+0x123/0x220 [ 600.723681][T28500] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 600.723713][T28500] nfnetlink_rcv+0x167/0x16c0 [ 600.723735][T28500] ? kmem_cache_free+0xe3/0x3a0 [ 600.723763][T28500] ? __kfree_skb+0x109/0x150 [ 600.723855][T28500] ? nlmon_xmit+0x4f/0x60 [ 600.723925][T28500] ? consume_skb+0x49/0x150 [ 600.723951][T28500] ? nlmon_xmit+0x4f/0x60 [ 600.723972][T28500] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 600.724004][T28500] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 600.724112][T28500] ? __dev_queue_xmit+0x148/0x1ee0 [ 600.724148][T28500] ? ref_tracker_free+0x37d/0x3e0 [ 600.724183][T28500] ? __netlink_deliver_tap+0x4dc/0x500 [ 600.724280][T28500] netlink_unicast+0x5c0/0x690 [ 600.724393][T28500] netlink_sendmsg+0x58b/0x6b0 [ 600.724429][T28500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.724534][T28500] __sock_sendmsg+0x145/0x180 [ 600.724594][T28500] ____sys_sendmsg+0x31e/0x4a0 [ 600.724633][T28500] ___sys_sendmsg+0x17b/0x1d0 [ 600.724745][T28500] __x64_sys_sendmsg+0xd4/0x160 [ 600.724799][T28500] x64_sys_call+0x17ba/0x3000 [ 600.724828][T28500] do_syscall_64+0xca/0x2b0 [ 600.724930][T28500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.724954][T28500] RIP: 0033:0x7f18416ff749 [ 600.724970][T28500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.724988][T28500] RSP: 002b:00007f1840167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.725009][T28500] RAX: ffffffffffffffda RBX: 00007f1841955fa0 RCX: 00007f18416ff749 [ 600.725094][T28500] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 600.725110][T28500] RBP: 00007f1841783f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.725127][T28500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.725142][T28500] R13: 00007f1841956038 R14: 00007f1841955fa0 R15: 00007ffc0129a458 [ 600.725162][T28500] [ 600.725169][T28500] memory: usage 307200kB, limit 307200kB, failcnt 5798 [ 601.060701][T28500] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 601.068642][T28500] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 601.076135][T28500] Memory cgroup stats for /syz3: [ 601.080703][T28500] cache 16384 [ 601.089057][T28500] rss 0 [ 601.091856][T28500] shmem 0 [ 601.094880][T28500] mapped_file 0 [ 601.098372][T28500] dirty 0 [ 601.101460][T28500] writeback 0 [ 601.104763][T28500] workingset_refault_anon 434 [ 601.109465][T28500] workingset_refault_file 2796 [ 601.114327][T28500] swap 733184 [ 601.117640][T28500] swapcached 4096 [ 601.121281][T28500] pgpgin 703256 [ 601.124746][T28500] pgpgout 703246 [ 601.128332][T28500] pgfault 879007 [ 601.131885][T28500] pgmajfault 328 [ 601.135455][T28500] inactive_anon 4096 [ 601.139440][T28500] active_anon 0 [ 601.143701][T28500] inactive_file 0 [ 601.147392][T28500] active_file 36864 [ 601.151199][T28500] unevictable 0 [ 601.154743][T28500] hierarchical_memory_limit 314572800 [ 601.160145][T28500] hierarchical_memsw_limit 9223372036854771712 [ 601.166301][T28500] total_cache 16384 [ 601.170146][T28500] total_rss 0 [ 601.173437][T28500] total_shmem 0 [ 601.176904][T28500] total_mapped_file 0 [ 601.180943][T28500] total_dirty 0 [ 601.184433][T28500] total_writeback 0 [ 601.188272][T28500] total_workingset_refault_anon 434 [ 601.193481][T28500] total_workingset_refault_file 2796 [ 601.198788][T28500] total_swap 733184 [ 601.202633][T28500] total_swapcached 4096 [ 601.206876][T28500] total_pgpgin 703256 [ 601.210971][T28500] total_pgpgout 703246 [ 601.215050][T28500] total_pgfault 879007 [ 601.219235][T28500] total_pgmajfault 328 [ 601.223311][T28500] total_inactive_anon 4096 [ 601.227760][T28500] total_active_anon 0 [ 601.231771][T28500] total_inactive_file 0 [ 601.235977][T28500] total_active_file 36864 [ 601.240388][T28500] total_unevictable 0 [ 601.244413][T28500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8229,pid=28499,uid=0 [ 601.259143][T28500] Memory cgroup out of memory: Killed process 28499 (syz.3.8229) total-vm:94100kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 601.376533][T28521] __nla_validate_parse: 11 callbacks suppressed [ 601.376554][T28521] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8235'. [ 601.417963][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.476898][T14268] Bluetooth: hci0: Frame reassembly failed (-84) [ 601.596309][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8236'. [ 601.605235][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8236'. [ 602.497866][T28533] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8239'. [ 602.669206][T28530] lo speed is unknown, defaulting to 1000 [ 602.719525][ T3597] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 602.727765][ T3597] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 602.835823][T28537] lo speed is unknown, defaulting to 1000 [ 602.857530][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 602.857549][ T29] audit: type=1326 audit(602.833:53261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 602.887066][ T29] audit: type=1326 audit(602.833:53262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 602.910185][ T29] audit: type=1326 audit(602.833:53263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 602.933246][ T29] audit: type=1326 audit(602.833:53264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 602.956228][ T29] audit: type=1326 audit(602.833:53265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 602.979332][ T29] audit: type=1326 audit(602.833:53266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 603.002332][ T29] audit: type=1326 audit(602.833:53267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 603.025447][ T29] audit: type=1326 audit(602.833:53268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 603.048535][ T29] audit: type=1326 audit(602.833:53269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 603.071623][ T29] audit: type=1326 audit(602.833:53270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28536 comm="syz.1.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7c96f749 code=0x7ffc0000 [ 603.115761][T28542] lo speed is unknown, defaulting to 1000 [ 603.154088][T25476] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 603.189098][T25476] hid-generic 0000:0000:0000.0020: hidraw1: HID v0.00 Device [syz1] on syz0 [ 603.241896][T28548] loop3: detected capacity change from 0 to 128 [ 603.305280][T28550] lo speed is unknown, defaulting to 1000 [ 603.446324][T28561] loop3: detected capacity change from 0 to 2048 [ 603.475535][T28561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.479387][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 603.679415][T28552] netlink: 'syz.1.8247': attribute type 13 has an invalid length. [ 603.740240][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8252'. [ 603.749179][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8252'. [ 604.090357][T28576] lo speed is unknown, defaulting to 1000 [ 604.265837][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.502041][T28587] team0: Port device ip6gre0 added [ 604.522715][T28587] lo speed is unknown, defaulting to 1000 [ 604.574463][ T3410] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 604.651047][ T3410] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 604.696099][T28591] ip6_vti0: Caught tx_queue_len zero misconfig [ 604.878422][T28597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8262'. [ 604.906651][T28597] siw: device registration error -23 [ 604.969430][T28601] lo speed is unknown, defaulting to 1000 [ 605.089390][T28609] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8268'. [ 605.505779][T28613] netlink: 'syz.3.8270': attribute type 13 has an invalid length. [ 605.543965][T28613] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 605.550444][T28613] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 605.733816][T28625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8274'. [ 605.775184][T28629] loop1: detected capacity change from 0 to 512 [ 605.781760][T28629] EXT4-fs: Ignoring removed i_version option [ 605.789300][T28629] EXT4-fs (loop1): orphan cleanup on readonly fs [ 605.796438][T28629] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.8276: EA inode hash validation failed [ 605.809598][T28629] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.8276: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 605.825037][T28629] EXT4-fs (loop1): Remounting filesystem read-only [ 605.831665][T28629] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.8276: ea_inode dec ref err=-117 [ 605.844743][T28629] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 605.853753][T28629] EXT4-fs (loop1): 1 orphan inode deleted [ 605.860039][T28629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 605.872621][T28629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.939578][T28632] lo speed is unknown, defaulting to 1000 [ 606.053320][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8279'. [ 606.126811][T28645] lo speed is unknown, defaulting to 1000 [ 606.160954][ T3410] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 606.171453][ T3410] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 606.482509][T28651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8285'. [ 606.492239][T28651] siw: device registration error -23 [ 606.858168][T28657] loop4: detected capacity change from 0 to 512 [ 606.864752][T28657] EXT4-fs: Ignoring removed i_version option [ 606.872302][T28657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 606.879421][T28657] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.8288: EA inode hash validation failed [ 606.894368][T28657] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.8288: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 606.910425][T28657] EXT4-fs (loop4): Remounting filesystem read-only [ 606.917072][T28657] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.8288: ea_inode dec ref err=-117 [ 606.930229][T28657] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 606.931552][T28660] lo speed is unknown, defaulting to 1000 [ 606.939608][T28657] EXT4-fs (loop4): 1 orphan inode deleted [ 606.951557][T28657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 606.964848][T28657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.048469][T28664] loop4: detected capacity change from 0 to 512 [ 607.055845][T28664] EXT4-fs: test_dummy_encryption option not supported [ 607.081089][T28669] loop3: detected capacity change from 0 to 512 [ 607.099621][T28662] loop1: detected capacity change from 0 to 2048 [ 607.117426][T28669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 607.129759][T28669] EXT4-fs (loop3): 1 truncate cleaned up [ 607.136068][T28669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.175046][T28662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.276843][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8291'. [ 607.285836][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8291'. [ 607.397946][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.440343][T28670] netlink: 'syz.0.8294': attribute type 13 has an invalid length. [ 607.515722][T28681] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 607.539665][T28675] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 607.546090][T28675] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 607.552842][T28564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 607.654803][T28684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8297'. [ 607.664609][T28684] siw: device registration error -23 [ 607.792026][T28692] lo speed is unknown, defaulting to 1000 [ 607.938616][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 607.947556][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 608.034135][ T29] kauditd_printk_skb: 1726 callbacks suppressed [ 608.034175][ T29] audit: type=1326 audit(607.933:54997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28668 comm="syz.0.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f30b4272005 code=0x7ffc0000 [ 608.064268][ T29] audit: type=1326 audit(608.043:54998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28668 comm="syz.0.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f30b4272005 code=0x7ffc0000 [ 608.164667][ T29] audit: type=1326 audit(608.143:54999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28668 comm="syz.0.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f30b4272005 code=0x7ffc0000 [ 608.264831][ T29] audit: type=1326 audit(608.243:55000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28668 comm="syz.0.8294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f30b423f749 code=0x7ffc0000 [ 608.341225][ T3410] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 608.351169][ T3410] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 608.352153][T28701] lo speed is unknown, defaulting to 1000 [ 608.367849][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.509477][T28712] loop1: detected capacity change from 0 to 512 [ 608.516399][T28712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 608.585570][T28712] EXT4-fs (loop1): 1 truncate cleaned up [ 608.612237][ T29] audit: type=1326 audit(608.583:55001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.635316][ T29] audit: type=1326 audit(608.583:55002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.658444][ T29] audit: type=1326 audit(608.583:55003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.681463][ T29] audit: type=1326 audit(608.583:55004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.704502][ T29] audit: type=1326 audit(608.583:55005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.727723][ T29] audit: type=1326 audit(608.583:55006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28713 comm="syz.2.8307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78193ef749 code=0x7ffc0000 [ 608.752169][T28717] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.8307'. [ 608.752840][T28712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.056854][T21275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.068729][T28722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8309'. [ 609.078366][T28722] siw: device registration error -23 [ 609.122387][T28725] lo speed is unknown, defaulting to 1000 [ 609.227243][T28729] loop3: detected capacity change from 0 to 512 [ 609.245087][T28729] /dev/loop3: Can't open blockdev [ 609.633513][T28746] loop4: detected capacity change from 0 to 1024 [ 609.651355][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8319'. [ 609.659876][T28746] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 609.664820][T28733] netlink: 'syz.3.8314': attribute type 13 has an invalid length. [ 609.694129][T28746] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.8308: iget: bogus i_mode (1) [ 609.832940][T28733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 609.839355][T28733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 609.850302][T28746] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8308: couldn't read orphan inode 11 (err -117) [ 609.866765][T28746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.956203][T28752] lo speed is unknown, defaulting to 1000 [ 609.989198][ T3410] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 609.997294][ T3410] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 609.998485][T28719] syz.4.8308 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 610.021134][T28719] CPU: 1 UID: 0 PID: 28719 Comm: syz.4.8308 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 610.021236][T28719] Tainted: [W]=WARN [ 610.021245][T28719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.021257][T28719] Call Trace: [ 610.021263][T28719] [ 610.021270][T28719] __dump_stack+0x1d/0x30 [ 610.021295][T28719] dump_stack_lvl+0x95/0xd0 [ 610.021383][T28719] dump_stack+0x15/0x1b [ 610.021447][T28719] dump_header+0x81/0x240 [ 610.021473][T28719] oom_kill_process+0x295/0x350 [ 610.021501][T28719] out_of_memory+0x97b/0xb80 [ 610.021529][T28719] try_charge_memcg+0x610/0xa10 [ 610.021636][T28719] obj_cgroup_charge_pages+0xa6/0x150 [ 610.021738][T28719] __memcg_kmem_charge_page+0x9f/0x170 [ 610.021773][T28719] __alloc_frozen_pages_noprof+0x18f/0x360 [ 610.021886][T28719] alloc_pages_mpol+0xb3/0x260 [ 610.021921][T28719] alloc_pages_noprof+0x90/0x130 [ 610.021948][T28719] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 610.022073][T28719] __kvmalloc_node_noprof+0x492/0x6b0 [ 610.022104][T28719] ? ip_set_alloc+0x24/0x30 [ 610.022130][T28719] ? ip_set_alloc+0x24/0x30 [ 610.022203][T28719] ip_set_alloc+0x24/0x30 [ 610.022236][T28719] hash_netiface_create+0x282/0x740 [ 610.022319][T28719] ? __pfx_hash_netiface_create+0x10/0x10 [ 610.022348][T28719] ip_set_create+0x3cc/0x970 [ 610.022390][T28719] ? __nla_parse+0x40/0x60 [ 610.022496][T28719] nfnetlink_rcv_msg+0x4c6/0x590 [ 610.022591][T28719] netlink_rcv_skb+0x123/0x220 [ 610.022637][T28719] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 610.022671][T28719] nfnetlink_rcv+0x167/0x16c0 [ 610.022723][T28719] ? css_rstat_updated+0xbb/0x280 [ 610.022834][T28719] ? page_counter_charge+0x207/0x230 [ 610.022892][T28719] ? __rcu_read_unlock+0x4f/0x70 [ 610.022912][T28719] ? obj_cgroup_charge_pages+0xf7/0x150 [ 610.022946][T28719] ? __rcu_read_unlock+0x4f/0x70 [ 610.023080][T28719] ? __memcg_kmem_charge_page+0xd1/0x170 [ 610.023136][T28719] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 610.023165][T28719] ? mas_next_slot+0x69b/0x6f0 [ 610.023196][T28719] ? __rcu_read_unlock+0x4f/0x70 [ 610.023232][T28719] ? mt_find+0x21b/0x330 [ 610.023253][T28719] ? should_fail_ex+0x30/0x280 [ 610.023299][T28719] ? selinux_nlmsg_lookup+0x99/0x890 [ 610.023385][T28719] ? __rcu_read_unlock+0x34/0x70 [ 610.023409][T28719] ? __netlink_lookup+0x266/0x2a0 [ 610.023440][T28719] netlink_unicast+0x5c0/0x690 [ 610.023530][T28719] netlink_sendmsg+0x58b/0x6b0 [ 610.023569][T28719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.023612][T28719] __sock_sendmsg+0x145/0x180 [ 610.023631][T28719] ____sys_sendmsg+0x31e/0x4a0 [ 610.023714][T28719] ___sys_sendmsg+0x17b/0x1d0 [ 610.023758][T28719] __x64_sys_sendmsg+0xd4/0x160 [ 610.023789][T28719] x64_sys_call+0x17ba/0x3000 [ 610.023820][T28719] do_syscall_64+0xca/0x2b0 [ 610.023962][T28719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.023989][T28719] RIP: 0033:0x7efce3eaf749 [ 610.024080][T28719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.024102][T28719] RSP: 002b:00007efce2917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.024172][T28719] RAX: ffffffffffffffda RBX: 00007efce4105fa0 RCX: 00007efce3eaf749 [ 610.024190][T28719] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 610.024205][T28719] RBP: 00007efce3f33f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.024221][T28719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.024301][T28719] R13: 00007efce4106038 R14: 00007efce4105fa0 R15: 00007ffda3c87f48 [ 610.024324][T28719] [ 610.024333][T28719] memory: usage 307200kB, limit 307200kB, failcnt 13202 [ 610.383723][T28719] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 610.391650][T28719] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 610.398963][T28719] Memory cgroup stats for /syz4: [ 610.404217][T28719] cache 16384 [ 610.412554][T28719] rss 0 [ 610.415328][T28719] shmem 0 [ 610.418318][T28719] mapped_file 0 [ 610.421784][T28719] dirty 0 [ 610.424754][T28719] writeback 0 [ 610.428169][T28719] workingset_refault_anon 995 [ 610.433233][T28719] workingset_refault_file 6758 [ 610.438201][T28719] swap 737280 [ 610.441490][T28719] swapcached 4096 [ 610.445131][T28719] pgpgin 705674 [ 610.446117][T28756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8321'. [ 610.448753][T28719] pgpgout 705655 [ 610.461194][T28719] pgfault 859624 [ 610.464792][T28719] pgmajfault 701 [ 610.468368][T28719] inactive_anon 0 [ 610.472015][T28719] active_anon 4096 [ 610.475752][T28719] inactive_file 0 [ 610.479431][T28719] active_file 73728 [ 610.483042][T28756] siw: device registration error -23 [ 610.483251][T28719] unevictable 0 [ 610.483262][T28719] hierarchical_memory_limit 314572800 [ 610.483272][T28719] hierarchical_memsw_limit 9223372036854771712 [ 610.503617][T28719] total_cache 16384 [ 610.507456][T28719] total_rss 0 [ 610.510814][T28719] total_shmem 0 [ 610.514353][T28719] total_mapped_file 0 [ 610.518366][T28719] total_dirty 0 [ 610.521889][T28719] total_writeback 0 [ 610.525713][T28719] total_workingset_refault_anon 995 [ 610.530945][T28719] total_workingset_refault_file 6758 [ 610.536256][T28719] total_swap 737280 [ 610.540415][T28719] total_swapcached 4096 [ 610.544758][T28719] total_pgpgin 705674 [ 610.548790][T28719] total_pgpgout 705655 [ 610.552875][T28719] total_pgfault 859624 [ 610.556978][T28719] total_pgmajfault 701 [ 610.561135][T28719] total_inactive_anon 0 [ 610.565309][T28719] total_active_anon 4096 [ 610.567080][T28758] lo speed is unknown, defaulting to 1000 [ 610.569644][T28719] total_inactive_file 0 [ 610.569656][T28719] total_active_file 73728 [ 610.569666][T28719] total_unevictable 0 [ 610.587889][T28719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8308,pid=28718,uid=0 [ 610.602841][T28719] Memory cgroup out of memory: Killed process 28718 (syz.4.8308) total-vm:94100kB, anon-rss:1264kB, file-rss:22316kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 610.720250][T22333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.734057][T28763] syzkaller0: Caught tx_queue_len zero misconfig [ 610.805668][T28765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28765 comm=syz.1.8326 [ 610.861292][T28769] loop1: detected capacity change from 0 to 256 [ 610.868586][T28769] FAT-fs (loop1): bogus number of directory entries (5) [ 610.875550][T28769] FAT-fs (loop1): Can't find a valid FAT filesystem [ 610.889363][T28773] loop3: detected capacity change from 0 to 512 [ 610.896301][T28773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 610.912498][T28773] EXT4-fs (loop3): 1 truncate cleaned up [ 610.919549][T28773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.299844][T28779] netlink: 'syz.0.8331': attribute type 13 has an invalid length. [ 611.336455][T28779] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 611.342829][T28779] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 611.535305][T28787] __nla_validate_parse: 3 callbacks suppressed [ 611.535318][T28787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8332'. [ 611.551612][T28787] siw: device registration error -23 [ 611.651608][ T1788] Bluetooth: hci0: Frame reassembly failed (-84) [ 611.729003][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.946747][T28798] lo speed is unknown, defaulting to 1000 [ 611.993364][T28805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8340'. [ 612.017263][T22528] ================================================================== [ 612.025382][T22528] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 612.035203][T22528] [ 612.037528][T22528] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 1: [ 612.045594][T22528] tick_do_update_jiffies64+0x113/0x1c0 [ 612.051151][T22528] tick_nohz_handler+0x8d/0x3d0 [ 612.056010][T22528] __hrtimer_run_queues+0x20f/0x5a0 [ 612.061213][T22528] hrtimer_interrupt+0x21a/0x460 [ 612.066154][T22528] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 612.072053][T22528] sysvec_apic_timer_interrupt+0x6f/0x80 [ 612.077696][T22528] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.083689][T22528] __tsan_read8+0x118/0x190 [ 612.088207][T22528] __get_user_pages+0x1c0/0x1ed0 [ 612.093166][T22528] __mm_populate+0x243/0x3a0 [ 612.097775][T22528] vm_mmap_pgoff+0x232/0x2e0 [ 612.102376][T22528] ksys_mmap_pgoff+0xc2/0x310 [ 612.107061][T22528] x64_sys_call+0x16bb/0x3000 [ 612.111744][T22528] do_syscall_64+0xca/0x2b0 [ 612.116257][T22528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.122157][T22528] [ 612.124483][T22528] read to 0xffffffff86809a00 of 8 bytes by task 22528 on cpu 0: [ 612.132123][T22528] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 612.138389][T22528] count_shadow_nodes+0x6a/0x230 [ 612.143339][T22528] do_shrink_slab+0x63/0x680 [ 612.147935][T22528] shrink_slab+0x4f5/0x840 [ 612.152354][T22528] shrink_node+0x6a9/0x2010 [ 612.156860][T22528] do_try_to_free_pages+0x3f6/0xcd0 [ 612.162068][T22528] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 612.167970][T22528] try_charge_memcg+0x383/0xa10 [ 612.172830][T22528] charge_memcg+0x51/0xc0 [ 612.177165][T22528] __mem_cgroup_charge+0x28/0xb0 [ 612.182120][T22528] filemap_add_folio+0x111/0x360 [ 612.187062][T22528] page_cache_ra_unbounded+0x205/0x450 [ 612.192521][T22528] page_cache_ra_order+0x145/0x220 [ 612.197632][T22528] do_sync_mmap_readahead+0x315/0x320 [ 612.203015][T22528] filemap_fault+0x336/0xb70 [ 612.207610][T22528] __do_fault+0xbc/0x200 [ 612.211877][T22528] handle_mm_fault+0xfab/0x2c60 [ 612.216748][T22528] do_user_addr_fault+0x630/0x1080 [ 612.221876][T22528] exc_page_fault+0x62/0xa0 [ 612.226465][T22528] asm_exc_page_fault+0x26/0x30 [ 612.231329][T22528] [ 612.233662][T22528] value changed: 0x00000001000079a5 -> 0x00000001000079a6 [ 612.240778][T22528] [ 612.243107][T22528] Reported by Kernel Concurrency Sanitizer on: [ 612.249265][T22528] CPU: 0 UID: 0 PID: 22528 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 612.260823][T22528] Tainted: [W]=WARN [ 612.264627][T22528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.274689][T22528] ================================================================== [ 612.350636][T28805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28805 comm=syz.0.8340 [ 612.365288][T28805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8340'. [ 612.375514][T28805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8340'. [ 612.389146][T28807] loop3: detected capacity change from 0 to 1024 [ 612.407742][T28807] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 612.419145][T28807] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.8336: iget: bogus i_mode (1) [ 612.432008][T28807] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8336: couldn't read orphan inode 11 (err -117) [ 612.444634][T28807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.648101][T22528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.717244][T26512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 613.717252][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 620.677294][ T3603] page_pool_release_retry() stalled pool shutdown: id 347, 1 inflight 60 sec