last executing test programs: 2.649089639s ago: executing program 1 (id=766): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES8=r4, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000840)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0, 0xffffff9e}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.764971766s ago: executing program 2 (id=775): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.689342234s ago: executing program 1 (id=777): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r0, r3, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 1.597299783s ago: executing program 1 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x22020400) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, 0x0, &(0x7f0000000080)=0x28) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001039f78706df563b9b7fe3a2f40f03d700390428bd7000eaffffff000003e4", @ANYRES32=r7, @ANYRESHEX=r8], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c0d5) 1.574924925s ago: executing program 2 (id=780): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.509182831s ago: executing program 2 (id=781): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0xbad1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x0, 0xea31, 0xfff}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/8, 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000100)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000400)=0x20020, 0x4) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x8, r7}, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x30) unshare(0x20000400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.508952821s ago: executing program 1 (id=782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1.455467346s ago: executing program 1 (id=784): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[@\x00S\xcc}\xe1gw\x85\xa0\x93\x9d\xee\x99w4\xd4\x8e(\xc4\xbf\xf8\\\x9a\x86\xc7k\xa7knq\x992\xbe\x96\xf3m-\xcf\xe6\"\x9e\x88\xa2\xfd\x87\xf5\xd1\xa3\x1e\xe0\xb9\xe8I\xa5O\x10\xc77\xf9r#\xb0\xed\x12i\x87*\x8e\xb4\xf1T8\x9a\x1e\x92\xe2\x88\x9amp=\xc6\xdc0\x9f(\x8b\x00\x94\t\x12|0\x1d1B\xee.\x01\x8f\x83x\\O\xbc=\xb3\x89\xc7\xdf4\x88\x97\x1a\x01.qG\x9c\xef\xafF\x8d\xc9\xb2\xf2@4\xc2\xa3>\xae\x05\xec\xd8v\x93@\xa2\xa3\xea\x12\x96\n\x90e\xf6\x01\xcbJE\xf8\xb1\x93d\x06LL\xc2]\xaf3\x85\xfa0+\xa8,\xf5\x1cH\x1e\x00\xc9\xa9') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r3) 1.386726003s ago: executing program 2 (id=786): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000000)={0xa, 0x4e23, 0x40000004, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0), 0x189182, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 1.351936687s ago: executing program 2 (id=787): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) r1 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0xfffffffffffffffe, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/24, 0x18}, 0x2}], 0x1, 0x2, 0x0) 1.273278765s ago: executing program 3 (id=789): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") 1.237443138s ago: executing program 3 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) (fail_nth: 3) 1.207312251s ago: executing program 3 (id=791): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.147685337s ago: executing program 3 (id=792): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000400)='./file0/file0\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x200}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000640)={[0xfffffffffbfffff5]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="e3b2192ebdc7a08b889b7efd2fb549e172f46c8b8e5fe0217cd9236ef8fee22e9fd06e4bcb7466782d80c53aa782b389161736dee3ee65e2ae7a03d2181fa89877a3db257a778fc37632f3385575376619bfdd7a8fdbbb260731b625604185bc4f1e9f692c68945a7917fb8f6e16795115722c25535c107b36c7285f9a2512c9a216359d7e8f48ba683ba0b86b73dfd07eb0fbd6354e69473d07e105c50ddab78079a7c46d28848654228e47de018260d5b76da7fb4f14abe6a5a089f529b830c88fd2dd4dae8e8dc9df916037433f3473640359b5e0b846744c48", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffcfd) r4 = syz_io_uring_setup(0x18b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x0, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = dup(r1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 893.196512ms ago: executing program 3 (id=796): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000004643"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) 678.539244ms ago: executing program 1 (id=801): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES8=r4, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000840)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0, 0xffffff9e}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 654.947616ms ago: executing program 0 (id=802): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 630.918938ms ago: executing program 4 (id=803): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rxrpc_recvmsg\x00', r0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1200) 563.712645ms ago: executing program 4 (id=804): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000) 503.44256ms ago: executing program 4 (id=805): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r0, r3, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 502.625191ms ago: executing program 0 (id=806): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 429.948518ms ago: executing program 2 (id=807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xff61}, 0x8) 428.551848ms ago: executing program 4 (id=808): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) 332.540087ms ago: executing program 0 (id=809): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000000)={0xa, 0x4e23, 0x40000004, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0), 0x189182, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 258.010385ms ago: executing program 0 (id=810): openat$tun(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==0||!') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000020400", @ANYRES32, @ANYBLOB="0000000000e95a71a200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r8, 0x1}, 0x20) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x0, 0x5, 0x401, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="240625bd7000fcdbdf240300000008000700", @ANYRES32=r1, @ANYBLOB="05000d002600000014000c00fc0000000000000000000000000000010800080003000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x40}, 0x18) 248.943246ms ago: executing program 4 (id=811): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40000000}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x3}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) 165.845044ms ago: executing program 3 (id=812): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[@\x00S\xcc}\xe1gw\x85\xa0\x93\x9d\xee\x99w4\xd4\x8e(\xc4\xbf\xf8\\\x9a\x86\xc7k\xa7knq\x992\xbe\x96\xf3m-\xcf\xe6\"\x9e\x88\xa2\xfd\x87\xf5\xd1\xa3\x1e\xe0\xb9\xe8I\xa5O\x10\xc77\xf9r#\xb0\xed\x12i\x87*\x8e\xb4\xf1T8\x9a\x1e\x92\xe2\x88\x9amp=\xc6\xdc0\x9f(\x8b\x00\x94\t\x12|0\x1d1B\xee.\x01\x8f\x83x\\O\xbc=\xb3\x89\xc7\xdf4\x88\x97\x1a\x01.qG\x9c\xef\xafF\x8d\xc9\xb2\xf2@4\xc2\xa3>\xae\x05\xec\xd8v\x93@\xa2\xa3\xea\x12\x96\n\x90e\xf6\x01\xcbJE\xf8\xb1\x93d\x06LL\xc2]\xaf3\x85\xfa0+\xa8,\xf5\x1cH\x1e\x00\xc9\xa9') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r3) 82.680222ms ago: executing program 0 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8, 0x8000, 0x0, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 81.997222ms ago: executing program 4 (id=814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = add_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x24000895) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa}}, {@commit={'commit', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@norecovery}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1a, 0x3, @l2={'ib', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000) syz_io_uring_setup(0x102a, &(0x7f0000000fc0)={0x0, 0x5888, 0x40, 0x2, 0x22c}, &(0x7f0000001040), &(0x7f0000001080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x10, 0x40004000, 0x24000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xffffffffffffff54}, 0x18) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x190, 0x24, 0x400, 0x1, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xfffe}, {0x0, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x160, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x80000000}, @TCA_GRED_PARMS={0x38, 0x1, {0xffffff53, 0x2, 0x7, 0xe, 0x1, 0x6, 0x6f8, 0x6, 0x5, 0x3, 0x13, 0x1e, 0x1d, 0x59, 0x965, 0xffffffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0x3, 0x0, 0x5}}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xc}, [@map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x36}, @jmp={0x5, 0x0, 0x7, 0xa, 0x1, 0xfffffffffffffffc, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0xa2, &(0x7f0000000b80)=""/162, 0x1e00, 0x10, '\x00', r9, 0x0, r6, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r6, r6], 0x0, 0x10, 0xc}, 0x94) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000002c0)={0x72, "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"}) unshare(0x0) kernel console output (not intermixed with test programs): 78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.044756][ T4378] Call Trace: [ 62.044761][ T4378] [ 62.044769][ T4378] __dump_stack+0x1d/0x30 [ 62.044833][ T4378] dump_stack_lvl+0xe8/0x140 [ 62.044859][ T4378] dump_stack+0x15/0x1b [ 62.044928][ T4378] dump_header+0x81/0x220 [ 62.044961][ T4378] oom_kill_process+0x342/0x400 [ 62.044999][ T4378] out_of_memory+0x979/0xb80 [ 62.045032][ T4378] try_charge_memcg+0x610/0xa10 [ 62.045064][ T4378] obj_cgroup_charge_pages+0xa6/0x150 [ 62.045109][ T4378] __memcg_kmem_charge_page+0x9f/0x170 [ 62.045172][ T4378] __alloc_frozen_pages_noprof+0x188/0x360 [ 62.045218][ T4378] alloc_pages_mpol+0xb3/0x260 [ 62.045323][ T4378] ? alloc_pages_noprof+0x61/0x130 [ 62.045348][ T4378] alloc_pages_noprof+0x90/0x130 [ 62.045372][ T4378] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 62.045440][ T4378] __kvmalloc_node_noprof+0x483/0x670 [ 62.045473][ T4378] ? ip_set_alloc+0x24/0x30 [ 62.045500][ T4378] ? ip_set_alloc+0x24/0x30 [ 62.045586][ T4378] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 62.045660][ T4378] ip_set_alloc+0x24/0x30 [ 62.045714][ T4378] hash_netiface_create+0x282/0x740 [ 62.045748][ T4378] ? __pfx_hash_netiface_create+0x10/0x10 [ 62.045835][ T4378] ip_set_create+0x3cc/0x970 [ 62.045884][ T4378] ? __nla_parse+0x40/0x60 [ 62.045968][ T4378] nfnetlink_rcv_msg+0x4c6/0x590 [ 62.046018][ T4378] netlink_rcv_skb+0x123/0x220 [ 62.046048][ T4378] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.046081][ T4378] nfnetlink_rcv+0x167/0x16c0 [ 62.046105][ T4378] ? kmem_cache_free+0xe4/0x3d0 [ 62.046172][ T4378] ? __kfree_skb+0x109/0x150 [ 62.046200][ T4378] ? nlmon_xmit+0x4f/0x60 [ 62.046224][ T4378] ? consume_skb+0x49/0x150 [ 62.046250][ T4378] ? nlmon_xmit+0x4f/0x60 [ 62.046355][ T4378] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 62.046468][ T4378] ? __dev_queue_xmit+0x1200/0x2000 [ 62.046619][ T4378] ? __dev_queue_xmit+0x182/0x2000 [ 62.046661][ T4378] ? ref_tracker_free+0x37d/0x3e0 [ 62.046770][ T4378] ? __netlink_deliver_tap+0x4dc/0x500 [ 62.046812][ T4378] netlink_unicast+0x5c0/0x690 [ 62.046858][ T4378] netlink_sendmsg+0x58b/0x6b0 [ 62.046907][ T4378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.046989][ T4378] __sock_sendmsg+0x145/0x180 [ 62.047014][ T4378] ____sys_sendmsg+0x31e/0x4e0 [ 62.047056][ T4378] ___sys_sendmsg+0x17b/0x1d0 [ 62.047142][ T4378] __x64_sys_sendmsg+0xd4/0x160 [ 62.047185][ T4378] x64_sys_call+0x191e/0x3000 [ 62.047213][ T4378] do_syscall_64+0xd2/0x200 [ 62.047243][ T4378] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.047305][ T4378] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.047412][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.047513][ T4378] RIP: 0033:0x7fd98da6eec9 [ 62.047528][ T4378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.047547][ T4378] RSP: 002b:00007fd98c4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.047569][ T4378] RAX: ffffffffffffffda RBX: 00007fd98dcc5fa0 RCX: 00007fd98da6eec9 [ 62.047629][ T4378] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 62.047645][ T4378] RBP: 00007fd98daf1f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.047658][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.047672][ T4378] R13: 00007fd98dcc6038 R14: 00007fd98dcc5fa0 R15: 00007ffc4e9b9688 [ 62.047695][ T4378] [ 62.047702][ T4378] memory: usage 307200kB, limit 307200kB, failcnt 2513 [ 62.374159][ T3847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.380923][ T4378] memory+swap: usage 308096kB, limit 9007199254740988kB, failcnt 0 [ 62.388937][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 62.418755][ T4378] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 62.426060][ T4378] Memory cgroup stats for /syz2: [ 62.426794][ T4378] cache 0 [ 62.434736][ T4378] rss 0 [ 62.437528][ T4378] shmem 0 [ 62.440456][ T4378] mapped_file 0 [ 62.443907][ T4378] dirty 0 [ 62.446920][ T4378] writeback 0 [ 62.450250][ T4378] workingset_refault_anon 162 [ 62.454973][ T4378] workingset_refault_file 1344 [ 62.459913][ T4378] swap 917504 [ 62.463214][ T4378] swapcached 4096 [ 62.466878][ T4378] pgpgin 19976 [ 62.470255][ T4378] pgpgout 19973 [ 62.473712][ T4378] pgfault 19955 [ 62.477195][ T4378] pgmajfault 129 [ 62.480756][ T4378] inactive_anon 0 [ 62.484444][ T4378] active_anon 4096 [ 62.488172][ T4378] inactive_file 0 [ 62.491797][ T4378] active_file 8192 [ 62.495537][ T4378] unevictable 0 [ 62.499033][ T4378] hierarchical_memory_limit 314572800 [ 62.504420][ T4378] hierarchical_memsw_limit 9223372036854771712 [ 62.510581][ T4378] total_cache 0 [ 62.514053][ T4378] total_rss 0 [ 62.517400][ T4378] total_shmem 0 [ 62.520939][ T4378] total_mapped_file 0 [ 62.524966][ T4378] total_dirty 0 [ 62.528433][ T4378] total_writeback 0 [ 62.532254][ T4378] total_workingset_refault_anon 162 [ 62.537524][ T4378] total_workingset_refault_file 1344 [ 62.542857][ T4378] total_swap 917504 [ 62.546690][ T4378] total_swapcached 4096 [ 62.550859][ T4378] total_pgpgin 19976 [ 62.554867][ T4378] total_pgpgout 19973 [ 62.558882][ T4378] total_pgfault 19955 [ 62.562990][ T4378] total_pgmajfault 129 [ 62.567108][ T4378] total_inactive_anon 0 [ 62.571406][ T4378] total_active_anon 4096 [ 62.575706][ T4378] total_inactive_file 0 [ 62.579891][ T4378] total_active_file 8192 [ 62.584172][ T4378] total_unevictable 0 [ 62.588175][ T4378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.234,pid=4375,uid=0 [ 62.602746][ T4378] Memory cgroup out of memory: Killed process 4375 (syz.2.234) total-vm:100372kB, anon-rss:1136kB, file-rss:26868kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 62.821411][ T4456] Cannot find add_set index 0 as target [ 62.907008][ T4468] loop2: detected capacity change from 0 to 128 [ 62.917300][ T4468] vfat: Unknown parameter 'GPL' [ 62.950620][ T4466] loop4: detected capacity change from 0 to 512 [ 62.958446][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 62.983422][ T4466] EXT4-fs: Ignoring removed bh option [ 62.999414][ T4468] loop2: detected capacity change from 0 to 512 [ 63.016643][ T4466] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.035671][ T4468] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.257: couldn't read orphan inode 26 (err -116) [ 63.049158][ T4468] EXT4-fs (loop2): Remounting filesystem read-only [ 63.056409][ T4468] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.076084][ T4482] loop3: detected capacity change from 0 to 512 [ 63.093949][ T4482] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 63.107725][ T4482] EXT4-fs (loop3): invalid journal inode [ 63.113496][ T4482] EXT4-fs (loop3): can't get journal size [ 63.127558][ T4486] netlink: 'syz.2.264': attribute type 13 has an invalid length. [ 63.135546][ T4482] EXT4-fs (loop3): 1 truncate cleaned up [ 63.166445][ T4485] loop4: detected capacity change from 0 to 512 [ 63.179551][ T4485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.191322][ T4485] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 63.207919][ T4485] EXT4-fs (loop4): 1 truncate cleaned up [ 63.211299][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.220811][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.263605][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.274636][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.383666][ T3452] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.392685][ T3452] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.436764][ T3452] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.445773][ T3452] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.458189][ T3452] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.467358][ T3452] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.482054][ T3452] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.491000][ T3452] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.643093][ T4514] random: crng reseeded on system resumption [ 63.757709][ T4522] loop0: detected capacity change from 0 to 512 [ 63.764458][ T4522] EXT4-fs: Ignoring removed bh option [ 63.787427][ T4522] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.895984][ T4531] loop1: detected capacity change from 0 to 512 [ 63.929265][ T4531] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.938517][ T4531] EXT4-fs (loop1): invalid journal inode [ 63.951388][ T4531] EXT4-fs (loop1): can't get journal size [ 63.957969][ T4531] EXT4-fs (loop1): 1 truncate cleaned up [ 63.962127][ T4533] loop0: detected capacity change from 0 to 2048 [ 64.012440][ T3304] loop0: p2 p3 p7 [ 64.030589][ T4533] loop0: p2 p3 p7 [ 64.060586][ T3001] loop0: p2 p3 p7 [ 64.085713][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 64.104885][ T4533] loop0: detected capacity change from 0 to 512 [ 64.114422][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 64.132766][ T4533] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.142392][ T4533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.155708][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 64.165912][ T4533] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.184247][ T4533] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 64.191600][ T4533] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.278: bg 0: block 40: padding at end of block bitmap is not set [ 64.226618][ T4533] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 64.242253][ T4539] loop3: detected capacity change from 0 to 1024 [ 64.252559][ T4533] EXT4-fs (loop0): 1 truncate cleaned up [ 64.264867][ T4539] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.316152][ T4539] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.271: iget: bogus i_mode (1) [ 64.323644][ T4533] tipc: Failed to obtain node identity [ 64.333025][ T4533] tipc: Enabling of bearer rejected, failed to enable media [ 64.343771][ T4539] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.271: couldn't read orphan inode 11 (err -117) [ 64.721638][ T4512] syz.3.271 (4512) used greatest stack depth: 6328 bytes left [ 64.744731][ T4552] FAULT_INJECTION: forcing a failure. [ 64.744731][ T4552] name failslab, interval 1, probability 0, space 0, times 0 [ 64.757623][ T4552] CPU: 1 UID: 0 PID: 4552 Comm: syz.4.285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.757664][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.757681][ T4552] Call Trace: [ 64.757689][ T4552] [ 64.757698][ T4552] __dump_stack+0x1d/0x30 [ 64.757770][ T4552] dump_stack_lvl+0xe8/0x140 [ 64.757790][ T4552] dump_stack+0x15/0x1b [ 64.757810][ T4552] should_fail_ex+0x265/0x280 [ 64.757926][ T4552] should_failslab+0x8c/0xb0 [ 64.757962][ T4552] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 64.758053][ T4552] ? __alloc_skb+0x101/0x320 [ 64.758138][ T4552] __alloc_skb+0x101/0x320 [ 64.758167][ T4552] ? audit_log_start+0x342/0x720 [ 64.758260][ T4552] audit_log_start+0x3a0/0x720 [ 64.758284][ T4552] ? kstrtouint+0x76/0xc0 [ 64.758333][ T4552] audit_seccomp+0x48/0x100 [ 64.758366][ T4552] ? __seccomp_filter+0x82d/0x1250 [ 64.758400][ T4552] __seccomp_filter+0x83e/0x1250 [ 64.758480][ T4552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.758544][ T4552] ? vfs_write+0x7e8/0x960 [ 64.758574][ T4552] ? kmem_cache_free+0xe4/0x3d0 [ 64.758617][ T4552] __secure_computing+0x82/0x150 [ 64.758694][ T4552] syscall_trace_enter+0xcf/0x1e0 [ 64.758729][ T4552] do_syscall_64+0xac/0x200 [ 64.758755][ T4552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.758830][ T4552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.758853][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.758880][ T4552] RIP: 0033:0x7f28c2b6eec9 [ 64.758899][ T4552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.758945][ T4552] RSP: 002b:00007f28c15cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 64.758970][ T4552] RAX: ffffffffffffffda RBX: 00007f28c2dc5fa0 RCX: 00007f28c2b6eec9 [ 64.758985][ T4552] RDX: 0000000000002000 RSI: 0000200000000480 RDI: 0000000000000000 [ 64.759033][ T4552] RBP: 00007f28c15cf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.759047][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.759062][ T4552] R13: 00007f28c2dc6038 R14: 00007f28c2dc5fa0 R15: 00007ffcb3918398 [ 64.759087][ T4552] [ 65.022521][ T4559] __nla_validate_parse: 7 callbacks suppressed [ 65.022541][ T4559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 65.047198][ T4560] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 65.060847][ T4560] Cannot find add_set index 0 as target [ 65.072771][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 65.084653][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 65.084680][ T29] audit: type=1400 audit(1760611876.024:2223): avc: denied { bind } for pid=4563 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.113954][ T4562] loop4: detected capacity change from 0 to 512 [ 65.122195][ T29] audit: type=1400 audit(1760611876.024:2224): avc: denied { name_bind } for pid=4563 comm="syz.1.289" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.144019][ T29] audit: type=1400 audit(1760611876.024:2225): avc: denied { node_bind } for pid=4563 comm="syz.1.289" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 65.165717][ T29] audit: type=1400 audit(1760611876.024:2226): avc: denied { write } for pid=4563 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.166229][ T4562] EXT4-fs: Ignoring removed bh option [ 65.185054][ T29] audit: type=1400 audit(1760611876.024:2227): avc: denied { name_connect } for pid=4563 comm="syz.1.289" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.207740][ T29] audit: type=1326 audit(1760611876.124:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 65.235906][ T29] audit: type=1326 audit(1760611876.124:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 65.259395][ T29] audit: type=1326 audit(1760611876.134:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 65.282858][ T29] audit: type=1326 audit(1760611876.134:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 65.306271][ T29] audit: type=1326 audit(1760611876.134:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 65.319524][ T4569] loop2: detected capacity change from 0 to 2048 [ 65.356724][ T4562] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.386011][ T3001] loop2: p2 p3 p7 [ 65.404368][ T3001] loop2: p2 p3 p7 [ 65.436962][ T4569] loop2: p2 p3 p7 [ 65.444954][ T4578] netlink: 76 bytes leftover after parsing attributes in process `syz.3.294'. [ 65.475447][ T4569] loop2: detected capacity change from 0 to 512 [ 65.519680][ T4569] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.545448][ T4569] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.553314][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 65.563298][ T4569] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.584977][ T4585] netlink: 'syz.3.296': attribute type 13 has an invalid length. [ 65.585066][ T4569] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 65.600024][ T4569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.292: bg 0: block 40: padding at end of block bitmap is not set [ 65.634646][ T4569] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 65.644148][ T4569] EXT4-fs (loop2): 1 truncate cleaned up [ 65.650632][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 65.652603][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 65.701473][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.704679][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 65.723742][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 65.874252][ T4569] tipc: Failed to obtain node identity [ 65.879910][ T4569] tipc: Enabling of bearer rejected, failed to enable media [ 65.902639][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.912424][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.921600][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.938861][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.950688][ T4596] loop0: detected capacity change from 0 to 1024 [ 65.984852][ T4596] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 66.027679][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.610925][ T4613] loop2: detected capacity change from 0 to 128 [ 66.862713][ T4609] loop4: detected capacity change from 0 to 1024 [ 66.884770][ T4609] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.948165][ T4609] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.295: iget: bogus i_mode (1) [ 67.033085][ T4629] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 67.074416][ T4609] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.295: couldn't read orphan inode 11 (err -117) [ 67.106818][ T4622] infiniband syz!: set down [ 67.111387][ T4622] infiniband syz!: added team_slave_0 [ 67.124602][ T4622] RDS/IB: syz!: added [ 67.633384][ T4641] loop2: detected capacity change from 0 to 2048 [ 68.004647][ T4641] loop2: p2 p3 p7 [ 68.040659][ T3001] loop2: p2 p3 p7 [ 68.088109][ T4644] loop2: detected capacity change from 0 to 512 [ 68.120016][ T4644] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.134403][ T4644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.145691][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 68.210075][ T4644] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.226289][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 68.278763][ T4644] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 68.294672][ T4644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.311: bg 0: block 40: padding at end of block bitmap is not set [ 68.315994][ T4657] loop1: detected capacity change from 0 to 2048 [ 68.323423][ T4644] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.351582][ T4644] EXT4-fs (loop2): 1 truncate cleaned up [ 68.389987][ T3304] loop1: p2 p3 p7 [ 68.409133][ T4657] loop1: p2 p3 p7 [ 68.423211][ T4641] tipc: Failed to obtain node identity [ 68.428755][ T4641] tipc: Enabling of bearer rejected, failed to enable media [ 68.440396][ T4672] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 68.472235][ T4672] Cannot find add_set index 0 as target [ 68.479942][ T3001] loop1: p2 p3 p7 [ 68.499499][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 68.503523][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 68.512193][ T4668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.321'. [ 68.541905][ T4657] loop1: detected capacity change from 0 to 512 [ 68.566881][ T4668] loop3: detected capacity change from 0 to 512 [ 68.573588][ T4657] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.584179][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 68.584384][ T4657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.597616][ T4668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.623671][ T4668] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 68.672364][ T4668] EXT4-fs (loop3): 1 truncate cleaned up [ 68.682386][ T4657] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.720236][ T4682] syzkaller0: entered promiscuous mode [ 68.725784][ T4682] syzkaller0: entered allmulticast mode [ 68.731577][ T4657] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 68.743484][ T4657] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.317: bg 0: block 40: padding at end of block bitmap is not set [ 68.787761][ T4657] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.797136][ T4686] netlink: 76 bytes leftover after parsing attributes in process `syz.3.327'. [ 68.797341][ T4657] EXT4-fs (loop1): 1 truncate cleaned up [ 68.860805][ T4657] tipc: Failed to obtain node identity [ 68.866802][ T4657] tipc: Enabling of bearer rejected, failed to enable media [ 68.957605][ T4700] tipc: Started in network mode [ 68.962609][ T4700] tipc: Node identity 9a1dc58d6f2e, cluster identity 4711 [ 68.969858][ T4700] tipc: Enabled bearer , priority 0 [ 69.002653][ T4705] loop2: detected capacity change from 0 to 1024 [ 69.021909][ T4705] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 69.032614][ T4706] tipc: Disabling bearer [ 69.079460][ T4710] netlink: 'syz.2.337': attribute type 20 has an invalid length. [ 69.087298][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 69.262236][ T4720] syzkaller0: entered promiscuous mode [ 69.267889][ T4720] syzkaller0: entered allmulticast mode [ 69.410559][ T4727] process 'syz.4.343' launched './file0' with NULL argv: empty string added [ 69.458881][ T4727] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.556502][ T4744] loop3: detected capacity change from 0 to 128 [ 69.563523][ T4744] vfat: Unknown parameter 'GPL' [ 69.584183][ T4744] loop3: detected capacity change from 0 to 512 [ 69.621457][ T4744] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.349: couldn't read orphan inode 26 (err -116) [ 69.676952][ T4744] EXT4-fs (loop3): Remounting filesystem read-only [ 69.683993][ T4744] EXT4-fs mount: 68 callbacks suppressed [ 69.684011][ T4744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.722231][ T4750] loop0: detected capacity change from 0 to 1024 [ 69.784340][ T4744] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.795973][ T4744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.805614][ T4750] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.886753][ T4750] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.330: iget: bogus i_mode (1) [ 69.914238][ T4750] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.330: couldn't read orphan inode 11 (err -117) [ 70.019237][ T4759] FAULT_INJECTION: forcing a failure. [ 70.019237][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 70.019514][ T4750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.031910][ T4759] CPU: 1 UID: 0 PID: 4759 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.031943][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.032018][ T4759] Call Trace: [ 70.032025][ T4759] [ 70.032033][ T4759] __dump_stack+0x1d/0x30 [ 70.032060][ T4759] dump_stack_lvl+0xe8/0x140 [ 70.032101][ T4759] dump_stack+0x15/0x1b [ 70.032126][ T4759] should_fail_ex+0x265/0x280 [ 70.032179][ T4759] should_failslab+0x8c/0xb0 [ 70.032244][ T4759] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 70.032293][ T4759] ? __d_alloc+0x3d/0x340 [ 70.032336][ T4759] __d_alloc+0x3d/0x340 [ 70.032379][ T4759] d_alloc_parallel+0x58/0xc70 [ 70.032470][ T4759] ? __rcu_read_unlock+0x4f/0x70 [ 70.032506][ T4759] ? __d_lookup+0x316/0x340 [ 70.032549][ T4759] ? default_pointer+0xf2/0x5e0 [ 70.032580][ T4759] __lookup_slow+0x8c/0x250 [ 70.032663][ T4759] lookup_noperm+0xc9/0x180 [ 70.032775][ T4759] simple_start_creating+0x97/0x120 [ 70.032812][ T4759] debugfs_start_creating+0xe9/0x160 [ 70.032860][ T4759] __debugfs_create_file+0x6b/0x330 [ 70.032965][ T4759] debugfs_create_file_full+0x3f/0x60 [ 70.033008][ T4759] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 70.033067][ T4759] ref_tracker_dir_debugfs+0x100/0x1e0 [ 70.033143][ T4759] alloc_netdev_mqs+0x1a7/0xa50 [ 70.033230][ T4759] rtnl_create_link+0x239/0x710 [ 70.033272][ T4759] rtnl_newlink_create+0x14c/0x620 [ 70.033303][ T4759] ? security_capable+0x83/0x90 [ 70.033448][ T4759] ? netlink_ns_capable+0x86/0xa0 [ 70.033486][ T4759] rtnl_newlink+0xf29/0x12d0 [ 70.033583][ T4759] ? xas_load+0x413/0x430 [ 70.033613][ T4759] ? __rcu_read_unlock+0x4f/0x70 [ 70.033646][ T4759] ? xa_load+0xb1/0xe0 [ 70.033678][ T4759] ? __rcu_read_unlock+0x4f/0x70 [ 70.033731][ T4759] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.033830][ T4759] ? cred_has_capability+0x210/0x280 [ 70.033875][ T4759] ? selinux_capable+0x31/0x40 [ 70.033919][ T4759] ? security_capable+0x83/0x90 [ 70.033962][ T4759] ? ns_capable+0x7d/0xb0 [ 70.033993][ T4759] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.034046][ T4759] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 70.034109][ T4759] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.034207][ T4759] netlink_rcv_skb+0x123/0x220 [ 70.034237][ T4759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.034346][ T4759] rtnetlink_rcv+0x1c/0x30 [ 70.034391][ T4759] netlink_unicast+0x5c0/0x690 [ 70.034438][ T4759] netlink_sendmsg+0x58b/0x6b0 [ 70.034483][ T4759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.034526][ T4759] __sock_sendmsg+0x145/0x180 [ 70.034623][ T4759] ____sys_sendmsg+0x31e/0x4e0 [ 70.034668][ T4759] ___sys_sendmsg+0x17b/0x1d0 [ 70.034727][ T4759] __x64_sys_sendmsg+0xd4/0x160 [ 70.034842][ T4759] x64_sys_call+0x191e/0x3000 [ 70.034904][ T4759] do_syscall_64+0xd2/0x200 [ 70.034938][ T4759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.034976][ T4759] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.035006][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.035054][ T4759] RIP: 0033:0x7f7760d0eec9 [ 70.035074][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.035177][ T4759] RSP: 002b:00007f775f76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.035203][ T4759] RAX: ffffffffffffffda RBX: 00007f7760f65fa0 RCX: 00007f7760d0eec9 [ 70.035221][ T4759] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 70.035238][ T4759] RBP: 00007f775f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.035296][ T4759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.035313][ T4759] R13: 00007f7760f66038 R14: 00007f7760f65fa0 R15: 00007ffef3f1e2d8 [ 70.035339][ T4759] [ 70.215939][ T4761] FAULT_INJECTION: forcing a failure. [ 70.215939][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.420598][ T4761] CPU: 1 UID: 0 PID: 4761 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.420634][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.420647][ T4761] Call Trace: [ 70.420654][ T4761] [ 70.420661][ T4761] __dump_stack+0x1d/0x30 [ 70.420686][ T4761] dump_stack_lvl+0xe8/0x140 [ 70.420711][ T4761] dump_stack+0x15/0x1b [ 70.420798][ T4761] should_fail_ex+0x265/0x280 [ 70.420871][ T4761] should_fail+0xb/0x20 [ 70.420905][ T4761] should_fail_usercopy+0x1a/0x20 [ 70.420930][ T4761] _copy_from_iter+0xd2/0xe80 [ 70.420953][ T4761] ? __build_skb_around+0x1ab/0x200 [ 70.421006][ T4761] ? __alloc_skb+0x223/0x320 [ 70.421180][ T4761] netlink_sendmsg+0x471/0x6b0 [ 70.421221][ T4761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.421258][ T4761] __sock_sendmsg+0x145/0x180 [ 70.421283][ T4761] ____sys_sendmsg+0x31e/0x4e0 [ 70.421347][ T4761] ___sys_sendmsg+0x17b/0x1d0 [ 70.421395][ T4761] __x64_sys_sendmsg+0xd4/0x160 [ 70.421441][ T4761] x64_sys_call+0x191e/0x3000 [ 70.421469][ T4761] do_syscall_64+0xd2/0x200 [ 70.421498][ T4761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.421536][ T4761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.421564][ T4761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.421594][ T4761] RIP: 0033:0x7f7760d0eec9 [ 70.421613][ T4761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.421636][ T4761] RSP: 002b:00007f775f76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.421695][ T4761] RAX: ffffffffffffffda RBX: 00007f7760f65fa0 RCX: 00007f7760d0eec9 [ 70.421711][ T4761] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 70.421727][ T4761] RBP: 00007f775f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.421740][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.421754][ T4761] R13: 00007f7760f66038 R14: 00007f7760f65fa0 R15: 00007ffef3f1e2d8 [ 70.421775][ T4761] [ 70.427922][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 70.427941][ T29] audit: type=1400 audit(1760611881.364:2583): avc: denied { read } for pid=4762 comm="syz.2.355" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.652502][ T29] audit: type=1400 audit(1760611881.364:2584): avc: denied { open } for pid=4762 comm="syz.2.355" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.734002][ T4697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.811054][ T4770] netlink: 'syz.3.357': attribute type 13 has an invalid length. [ 70.855512][ T4741] loop1: detected capacity change from 0 to 512 [ 70.864223][ T29] audit: type=1326 audit(1760611881.554:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 70.887642][ T29] audit: type=1326 audit(1760611881.554:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 70.910896][ T29] audit: type=1326 audit(1760611881.554:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 70.934249][ T29] audit: type=1326 audit(1760611881.554:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 70.957507][ T29] audit: type=1326 audit(1760611881.554:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 70.980993][ T29] audit: type=1326 audit(1760611881.554:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 71.004340][ T29] audit: type=1326 audit(1760611881.554:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 71.027772][ T29] audit: type=1326 audit(1760611881.554:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98da6eec9 code=0x7ffc0000 [ 71.051433][ T4770] __nla_validate_parse: 2 callbacks suppressed [ 71.051449][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 71.052257][ T4742] loop4: detected capacity change from 0 to 512 [ 71.074548][ T4741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.139919][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 71.161322][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.256033][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 71.326057][ T4785] loop0: detected capacity change from 0 to 4096 [ 71.332783][ T4785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.342613][ T4785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.425417][ T4792] netlink: 388 bytes leftover after parsing attributes in process `syz.0.362'. [ 71.466231][ T4794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4794 comm=syz.2.366 [ 71.521518][ T4794] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 71.573012][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.592128][ T4794] bond1: (slave veth3): Enslaving as an active interface with an up link [ 71.613471][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 71.637376][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.648421][ T4794] bond1 (unregistering): (slave veth3): Releasing backup interface [ 71.668621][ T4794] bond1 (unregistering): Released all slaves [ 71.708009][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.724032][ T4801] loop0: detected capacity change from 0 to 128 [ 71.750772][ T4801] vfat: Unknown parameter 'GPL' [ 71.774605][ T2947] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.800499][ T4801] loop0: detected capacity change from 0 to 512 [ 71.834477][ T4801] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.368: couldn't read orphan inode 26 (err -116) [ 71.854143][ T4801] EXT4-fs (loop0): Remounting filesystem read-only [ 71.863013][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.882109][ T4801] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.893060][ T4801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.130193][ T4829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 72.153079][ T4829] loop0: detected capacity change from 0 to 512 [ 72.162255][ T4831] loop1: detected capacity change from 0 to 1024 [ 72.171493][ T4829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.200070][ T4829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 72.223564][ T4831] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 72.231707][ T4829] EXT4-fs (loop0): 1 truncate cleaned up [ 72.237965][ T4829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.300877][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.398429][ T4849] loop1: detected capacity change from 0 to 1024 [ 72.452957][ T4849] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 72.462928][ T4851] syz.0.381 uses obsolete (PF_INET,SOCK_PACKET) [ 72.554626][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 72.617363][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 72.658989][ T4862] loop2: detected capacity change from 0 to 1024 [ 72.681648][ T4862] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.701628][ T4862] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.372: iget: bogus i_mode (1) [ 72.713763][ T4862] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.372: couldn't read orphan inode 11 (err -117) [ 72.737946][ T4864] loop0: detected capacity change from 0 to 512 [ 72.756669][ T4864] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.765836][ T4864] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 72.781357][ T4871] loop3: detected capacity change from 0 to 512 [ 72.811189][ T4871] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.820126][ T4862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.844358][ T4871] EXT4-fs (loop3): invalid journal inode [ 72.853240][ T4871] EXT4-fs (loop3): can't get journal size [ 72.863958][ T4871] EXT4-fs (loop3): 1 truncate cleaned up [ 72.870588][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.900005][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.932042][ T4819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.971008][ T4875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 72.986889][ T4875] loop3: detected capacity change from 0 to 512 [ 72.994660][ T4875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.010423][ T4875] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 73.025525][ T4875] EXT4-fs (loop3): 1 truncate cleaned up [ 73.032131][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.074960][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.539140][ T4890] loop0: detected capacity change from 0 to 1024 [ 73.555367][ T4890] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 73.775464][ T4900] loop1: detected capacity change from 0 to 32768 [ 73.814125][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 73.814677][ T3304] loop1: p1 p2 p3 < p5 p6 > [ 73.820218][ T3847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.833335][ T3304] loop1: p2 size 16775168 extends beyond EOD, truncated [ 73.842227][ T3304] loop1: p5 start 4294970168 is beyond EOD, truncated [ 73.853027][ T4900] loop1: p1 p2 p3 < p5 p6 > [ 73.858812][ T4900] loop1: p2 size 16775168 extends beyond EOD, truncated [ 73.867158][ T4900] loop1: p5 start 4294970168 is beyond EOD, truncated [ 74.004795][ T4921] netlink: 'syz.3.407': attribute type 13 has an invalid length. [ 74.032210][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 74.211607][ T4941] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 74.228940][ T4941] Cannot find add_set index 0 as target [ 74.330394][ T4958] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 74.388147][ T4958] Cannot find add_set index 0 as target [ 74.531683][ T4973] loop3: detected capacity change from 0 to 128 [ 74.541348][ T4973] vfat: Unknown parameter 'GPL' [ 74.621667][ T4973] loop3: detected capacity change from 0 to 512 [ 74.658307][ T4989] loop2: detected capacity change from 0 to 512 [ 74.674216][ T4989] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.689534][ T4989] EXT4-fs (loop2): invalid journal inode [ 74.698221][ T4973] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.426: couldn't read orphan inode 26 (err -116) [ 74.698831][ T4989] EXT4-fs (loop2): can't get journal size [ 74.716758][ T4973] EXT4-fs (loop3): Remounting filesystem read-only [ 74.723979][ T4989] EXT4-fs (loop2): 1 truncate cleaned up [ 74.730070][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.742602][ T4973] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.742925][ T4989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.753479][ T4973] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.832148][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.171958][ T4969] loop0: detected capacity change from 0 to 512 [ 75.197547][ T4969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.403846][ T3452] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.439716][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.483492][ T5037] syzkaller0: entered promiscuous mode [ 75.489096][ T5037] syzkaller0: entered allmulticast mode [ 75.645328][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 75.645346][ T29] audit: type=1400 audit(1760611886.584:3247): avc: denied { create } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.671421][ T29] audit: type=1400 audit(1760611886.604:3248): avc: denied { bind } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.690655][ T29] audit: type=1400 audit(1760611886.604:3249): avc: denied { write } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.710008][ T29] audit: type=1400 audit(1760611886.604:3250): avc: denied { create } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.729362][ T29] audit: type=1400 audit(1760611886.604:3251): avc: denied { setopt } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.755571][ T29] audit: type=1400 audit(1760611886.684:3252): avc: denied { bind } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.774993][ T29] audit: type=1400 audit(1760611886.684:3253): avc: denied { getopt } for pid=5038 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.830692][ T29] audit: type=1400 audit(1760611886.764:3254): avc: denied { write } for pid=5049 comm="syz.1.452" name="rt_acct" dev="proc" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.858735][ T29] audit: type=1404 audit(1760611886.794:3255): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 75.899361][ T29] audit: type=1400 audit(1760611886.794:3256): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.966920][ T5067] syzkaller0: entered promiscuous mode [ 75.972512][ T5067] syzkaller0: entered allmulticast mode [ 76.135869][ T5076] __nla_validate_parse: 8 callbacks suppressed [ 76.135884][ T5076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.460'. [ 76.150969][ T5076] netlink: 43 bytes leftover after parsing attributes in process `syz.2.460'. [ 76.160128][ T5076] netlink: 'syz.2.460': attribute type 5 has an invalid length. [ 76.167840][ T5076] netlink: 43 bytes leftover after parsing attributes in process `syz.2.460'. [ 76.267338][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 76.374264][ T5087] netlink: 76 bytes leftover after parsing attributes in process `syz.2.462'. [ 76.451924][ T5061] loop4: detected capacity change from 0 to 512 [ 76.463361][ T5061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.512461][ T5097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 76.524716][ T5097] loop2: detected capacity change from 0 to 512 [ 76.541272][ T5097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.553939][ T5097] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 76.569052][ T5097] EXT4-fs (loop2): 1 truncate cleaned up [ 76.576277][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.615642][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.680169][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.705748][ T5106] loop4: detected capacity change from 0 to 512 [ 76.713785][ T5106] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 76.722630][ T5106] EXT4-fs (loop4): invalid journal inode [ 76.728490][ T5106] EXT4-fs (loop4): can't get journal size [ 76.735302][ T5106] EXT4-fs (loop4): 1 truncate cleaned up [ 76.741423][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.766938][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.818842][ T5110] loop4: detected capacity change from 0 to 128 [ 76.825932][ T5110] vfat: Unknown parameter 'GPL' [ 76.849594][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 76.872858][ T5110] loop4: detected capacity change from 0 to 512 [ 76.885903][ T5110] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.470: couldn't read orphan inode 26 (err -116) [ 76.897902][ T5110] EXT4-fs (loop4): Remounting filesystem read-only [ 76.905117][ T5110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.917704][ T5110] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.928797][ T5110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.990715][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 77.075626][ T5128] netlink: 76 bytes leftover after parsing attributes in process `syz.4.475'. [ 77.271899][ T5139] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 77.285821][ T5139] Cannot find add_set index 0 as target [ 77.414138][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 77.420333][ T3847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.685082][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 77.773981][ T5136] loop4: detected capacity change from 0 to 512 [ 77.781144][ T5152] loop1: detected capacity change from 0 to 128 [ 77.794669][ T5152] vfat: Unknown parameter 'GPL' [ 77.814825][ T5136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.885929][ T5152] loop1: detected capacity change from 0 to 512 [ 77.925503][ T5152] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.484: couldn't read orphan inode 26 (err -116) [ 77.970039][ T5152] EXT4-fs (loop1): Remounting filesystem read-only [ 77.978046][ T5163] loop0: detected capacity change from 0 to 1024 [ 77.987703][ T5152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.026386][ T5163] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.074224][ T5152] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.096651][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.101669][ T5152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.115548][ T5163] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.481: iget: bogus i_mode (1) [ 78.163011][ T5163] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.481: couldn't read orphan inode 11 (err -117) [ 78.189475][ T5163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.320279][ T5177] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 78.350941][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5179 comm=syz.1.491 [ 78.391232][ T5144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.461624][ T5183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5183 comm=syz.1.492 [ 78.657587][ T5194] syz!: rxe_newlink: already configured on team_slave_0 [ 78.708778][ T5177] Cannot find add_set index 0 as target [ 78.840010][ T5209] loop0: detected capacity change from 0 to 512 [ 78.855326][ T5209] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.885366][ T5209] EXT4-fs (loop0): invalid journal inode [ 78.891137][ T5209] EXT4-fs (loop0): can't get journal size [ 78.926467][ T2947] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.954799][ T5209] EXT4-fs (loop0): 1 truncate cleaned up [ 78.972541][ T5213] loop2: detected capacity change from 0 to 512 [ 78.979351][ T5209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.024842][ T5213] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.503: iget: bad i_size value: 38620345925642 [ 79.078618][ T5213] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.503: couldn't read orphan inode 15 (err -117) [ 79.175765][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.185284][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.212755][ T5213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.503: bg 0: block 5: invalid block bitmap [ 79.244527][ T5213] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 79.256867][ T5213] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.256867][ T5213] [ 79.266562][ T5213] EXT4-fs (loop2): Total free blocks count 0 [ 79.272550][ T5213] EXT4-fs (loop2): Free/Dirty block details [ 79.278490][ T5213] EXT4-fs (loop2): free_blocks=0 [ 79.283447][ T5213] EXT4-fs (loop2): dirty_blocks=2 [ 79.288518][ T5213] EXT4-fs (loop2): Block reservation details [ 79.294535][ T5213] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 79.329391][ T5219] loop1: detected capacity change from 0 to 1024 [ 79.356484][ T5224] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 79.371880][ T5217] loop4: detected capacity change from 0 to 32768 [ 79.390312][ T5219] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.420002][ T5219] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.498: iget: bogus i_mode (1) [ 79.434983][ T3506] loop4: p1 p2 p3 < p5 p6 > [ 79.445548][ T3506] loop4: p2 size 16775168 extends beyond EOD, truncated [ 79.457398][ T5219] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.498: couldn't read orphan inode 11 (err -117) [ 79.461554][ T3506] loop4: p5 start 4294970168 is beyond EOD, truncated [ 79.482603][ T5219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.500394][ T5217] loop4: p1 p2 p3 < p5 p6 > [ 79.505813][ T5217] loop4: p2 size 16775168 extends beyond EOD, truncated [ 79.521212][ T5217] loop4: p5 start 4294970168 is beyond EOD, truncated [ 79.616468][ T5228] loop3: detected capacity change from 0 to 1024 [ 79.644754][ T5208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.676776][ T5228] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.718758][ T5228] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.497: iget: bogus i_mode (1) [ 79.739517][ T5228] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.497: couldn't read orphan inode 11 (err -117) [ 79.849358][ T5228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.973352][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.983435][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 80.067746][ T5241] loop4: detected capacity change from 0 to 512 [ 80.075128][ T5241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.104861][ T5241] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 80.126186][ T5241] EXT4-fs (loop4): 1 truncate cleaned up [ 80.132812][ T5241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.146238][ T5197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.179130][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.290993][ T5196] syz.3.497 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 80.305113][ T5196] CPU: 0 UID: 0 PID: 5196 Comm: syz.3.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.305218][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.305234][ T5196] Call Trace: [ 80.305241][ T5196] [ 80.305249][ T5196] __dump_stack+0x1d/0x30 [ 80.305271][ T5196] dump_stack_lvl+0xe8/0x140 [ 80.305291][ T5196] dump_stack+0x15/0x1b [ 80.305328][ T5196] dump_header+0x81/0x220 [ 80.305373][ T5196] oom_kill_process+0x342/0x400 [ 80.305409][ T5196] out_of_memory+0x979/0xb80 [ 80.305452][ T5196] try_charge_memcg+0x610/0xa10 [ 80.305551][ T5196] obj_cgroup_charge_pages+0xa6/0x150 [ 80.305590][ T5196] __memcg_kmem_charge_page+0x9f/0x170 [ 80.305632][ T5196] __alloc_frozen_pages_noprof+0x188/0x360 [ 80.305691][ T5196] alloc_pages_mpol+0xb3/0x260 [ 80.305713][ T5196] ? alloc_pages_noprof+0x61/0x130 [ 80.305734][ T5196] alloc_pages_noprof+0x90/0x130 [ 80.305827][ T5196] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 80.305958][ T5196] __kvmalloc_node_noprof+0x483/0x670 [ 80.305993][ T5196] ? ip_set_alloc+0x24/0x30 [ 80.306089][ T5196] ? ip_set_alloc+0x24/0x30 [ 80.306123][ T5196] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 80.306167][ T5196] ip_set_alloc+0x24/0x30 [ 80.306202][ T5196] hash_netiface_create+0x282/0x740 [ 80.306274][ T5196] ? __pfx_hash_netiface_create+0x10/0x10 [ 80.306322][ T5196] ip_set_create+0x3cc/0x970 [ 80.306444][ T5196] nfnetlink_rcv_msg+0x4c6/0x590 [ 80.306508][ T5196] netlink_rcv_skb+0x123/0x220 [ 80.306544][ T5196] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.306586][ T5196] nfnetlink_rcv+0x167/0x16c0 [ 80.306737][ T5196] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 80.306783][ T5196] ? probe_sched_wakeup+0x85/0xa0 [ 80.306820][ T5196] ? ttwu_do_activate+0x1d0/0x210 [ 80.306952][ T5196] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 80.306992][ T5196] ? try_to_wake_up+0x3e7/0x630 [ 80.307019][ T5196] ? __list_del_entry_valid_or_report+0x65/0x130 [ 80.307100][ T5196] ? kmem_cache_free+0xe4/0x3d0 [ 80.307142][ T5196] ? audit_log_end+0x23d/0x250 [ 80.307199][ T5196] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 80.307291][ T5196] ? common_lsm_audit+0x1ca/0x230 [ 80.307329][ T5196] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 80.307419][ T5196] ? should_fail_ex+0x30/0x280 [ 80.307527][ T5196] ? selinux_nlmsg_lookup+0x99/0x890 [ 80.307568][ T5196] ? __rcu_read_unlock+0x34/0x70 [ 80.307594][ T5196] ? __netlink_lookup+0x266/0x2a0 [ 80.307628][ T5196] netlink_unicast+0x5c0/0x690 [ 80.307727][ T5196] netlink_sendmsg+0x58b/0x6b0 [ 80.307911][ T5196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.307952][ T5196] __sock_sendmsg+0x145/0x180 [ 80.307973][ T5196] ____sys_sendmsg+0x31e/0x4e0 [ 80.308096][ T5196] ___sys_sendmsg+0x17b/0x1d0 [ 80.308146][ T5196] __x64_sys_sendmsg+0xd4/0x160 [ 80.308195][ T5196] x64_sys_call+0x191e/0x3000 [ 80.308242][ T5196] do_syscall_64+0xd2/0x200 [ 80.308273][ T5196] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.308346][ T5196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.308371][ T5196] RIP: 0033:0x7f7760d0eec9 [ 80.308387][ T5196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.308405][ T5196] RSP: 002b:00007f775f76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.308428][ T5196] RAX: ffffffffffffffda RBX: 00007f7760f65fa0 RCX: 00007f7760d0eec9 [ 80.308511][ T5196] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 80.308528][ T5196] RBP: 00007f7760d91f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.308546][ T5196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.308561][ T5196] R13: 00007f7760f66038 R14: 00007f7760f65fa0 R15: 00007ffef3f1e2d8 [ 80.308582][ T5196] [ 80.308646][ T5196] memory: usage 307200kB, limit 307200kB, failcnt 5922 [ 80.681147][ T5196] memory+swap: usage 308608kB, limit 9007199254740988kB, failcnt 0 [ 80.689080][ T5196] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 80.696448][ T5196] Memory cgroup stats for /syz3: [ 80.696694][ T5196] cache 0 [ 80.704576][ T5196] rss 0 [ 80.707431][ T5196] shmem 0 [ 80.710358][ T5196] mapped_file 0 [ 80.713844][ T5196] dirty 0 [ 80.716812][ T5196] writeback 0 [ 80.720099][ T5196] workingset_refault_anon 462 [ 80.724803][ T5196] workingset_refault_file 3514 [ 80.729643][ T5196] swap 1441792 [ 80.733006][ T5196] swapcached 0 [ 80.736399][ T5196] pgpgin 40613 [ 80.739804][ T5196] pgpgout 40610 [ 80.743250][ T5196] pgfault 43024 [ 80.746745][ T5196] pgmajfault 384 [ 80.750291][ T5196] inactive_anon 0 [ 80.753960][ T5196] active_anon 0 [ 80.757481][ T5196] inactive_file 0 [ 80.761148][ T5196] active_file 12288 [ 80.765053][ T5196] unevictable 0 [ 80.768527][ T5196] hierarchical_memory_limit 314572800 [ 80.773900][ T5196] hierarchical_memsw_limit 9223372036854771712 [ 80.780086][ T5196] total_cache 0 [ 80.783545][ T5196] total_rss 0 [ 80.786853][ T5196] total_shmem 0 [ 80.790323][ T5196] total_mapped_file 0 [ 80.794361][ T5196] total_dirty 0 [ 80.797828][ T5196] total_writeback 0 [ 80.801650][ T5196] total_workingset_refault_anon 462 [ 80.806874][ T5196] total_workingset_refault_file 3514 [ 80.812195][ T5196] total_swap 1441792 [ 80.816127][ T5196] total_swapcached 0 [ 80.820087][ T5196] total_pgpgin 40613 [ 80.824004][ T5196] total_pgpgout 40610 [ 80.828017][ T5196] total_pgfault 43024 [ 80.832004][ T5196] total_pgmajfault 384 [ 80.836094][ T5196] total_inactive_anon 0 [ 80.840265][ T5196] total_active_anon 0 [ 80.844278][ T5196] total_inactive_file 0 [ 80.848441][ T5196] total_active_file 12288 [ 80.852758][ T5196] total_unevictable 0 [ 80.856784][ T5196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.497,pid=5195,uid=0 [ 80.871375][ T5196] Memory cgroup out of memory: Killed process 5195 (syz.3.497) total-vm:100372kB, anon-rss:1136kB, file-rss:26836kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 80.889016][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 80.889028][ T29] audit: type=1404 audit(1760611891.824:3724): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 80.934169][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 80.942922][ T3847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.957785][ T29] audit: type=1400 audit(1760611891.874:3725): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.982010][ T29] audit: type=1400 audit(1760611891.874:3726): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.006115][ T29] audit: type=1400 audit(1760611891.874:3727): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.032449][ T29] audit: type=1400 audit(1760611891.894:3728): avc: denied { create } for pid=5253 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.052111][ T29] audit: type=1400 audit(1760611891.944:3729): avc: denied { setopt } for pid=5253 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.071726][ T29] audit: type=1400 audit(1760611891.944:3730): avc: denied { bind } for pid=5253 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.091241][ T29] audit: type=1400 audit(1760611891.944:3731): avc: denied { write } for pid=5253 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.150660][ T29] audit: type=1400 audit(1760611892.054:3732): avc: denied { name_bind } for pid=5255 comm="syz.4.515" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 81.172428][ T29] audit: type=1400 audit(1760611892.074:3733): avc: denied { create } for pid=5257 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.191824][ T5224] Cannot find add_set index 0 as target [ 81.224386][ T5196] syz.3.497 (5196) used greatest stack depth: 6264 bytes left [ 81.379236][ T5266] __nla_validate_parse: 7 callbacks suppressed [ 81.379251][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 81.403766][ T5266] loop4: detected capacity change from 0 to 512 [ 81.412082][ T5266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.441354][ T5266] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 81.474760][ T5266] EXT4-fs (loop4): 1 truncate cleaned up [ 81.481134][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.498950][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.563490][ T5291] loop0: detected capacity change from 0 to 2048 [ 81.574634][ T5286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.582622][ T5286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.628134][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.668686][ T3304] loop0: p2 p3 p7 [ 81.708712][ T5291] loop0: p2 p3 p7 [ 81.780834][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.804516][ T5291] loop0: detected capacity change from 0 to 512 [ 81.814453][ T5291] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.822696][ T5291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.839684][ T5291] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.854979][ T5291] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 81.864155][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.874281][ T5291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.529: bg 0: block 40: padding at end of block bitmap is not set [ 81.935946][ T5291] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.964446][ T5291] EXT4-fs (loop0): 1 truncate cleaned up [ 81.971115][ T5291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.984598][ T5291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.033484][ T5291] tipc: Failed to obtain node identity [ 82.039160][ T5291] tipc: Enabling of bearer rejected, failed to enable media [ 82.235581][ T5314] loop1: detected capacity change from 0 to 1024 [ 82.262532][ T5316] loop3: detected capacity change from 0 to 1024 [ 82.281229][ T5314] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.292670][ T5316] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 82.367115][ T5314] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.533: iget: bogus i_mode (1) [ 82.415025][ T5314] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.533: couldn't read orphan inode 11 (err -117) [ 82.425982][ T5324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.540'. [ 82.444860][ T5314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.564272][ T5326] loop2: detected capacity change from 0 to 1024 [ 82.595729][ T5327] macvlan2: entered promiscuous mode [ 82.601083][ T5327] bridge0: entered promiscuous mode [ 82.607696][ T5332] FAULT_INJECTION: forcing a failure. [ 82.607696][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 82.620442][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.4.542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.620468][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.620480][ T5332] Call Trace: [ 82.620487][ T5332] [ 82.620508][ T5332] __dump_stack+0x1d/0x30 [ 82.620533][ T5332] dump_stack_lvl+0xe8/0x140 [ 82.620557][ T5332] dump_stack+0x15/0x1b [ 82.620577][ T5332] should_fail_ex+0x265/0x280 [ 82.620618][ T5332] should_failslab+0x8c/0xb0 [ 82.620665][ T5332] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 82.620702][ T5332] ? __alloc_skb+0x101/0x320 [ 82.620837][ T5332] __alloc_skb+0x101/0x320 [ 82.620922][ T5332] ? audit_log_start+0x342/0x720 [ 82.620950][ T5332] audit_log_start+0x3a0/0x720 [ 82.620987][ T5332] ? kstrtouint+0x76/0xc0 [ 82.621047][ T5332] audit_seccomp+0x48/0x100 [ 82.621140][ T5332] ? __seccomp_filter+0x82d/0x1250 [ 82.621200][ T5332] __seccomp_filter+0x83e/0x1250 [ 82.621233][ T5332] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.621318][ T5332] ? vfs_write+0x7e8/0x960 [ 82.621349][ T5332] ? __rcu_read_unlock+0x4f/0x70 [ 82.621445][ T5332] ? __fget_files+0x184/0x1c0 [ 82.621540][ T5332] __secure_computing+0x82/0x150 [ 82.621655][ T5332] syscall_trace_enter+0xcf/0x1e0 [ 82.621711][ T5332] do_syscall_64+0xac/0x200 [ 82.621736][ T5332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.621765][ T5332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.621896][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.621925][ T5332] RIP: 0033:0x7f28c2b6eec9 [ 82.621994][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.622014][ T5332] RSP: 002b:00007f28c15cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 82.622096][ T5332] RAX: ffffffffffffffda RBX: 00007f28c2dc5fa0 RCX: 00007f28c2b6eec9 [ 82.622113][ T5332] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 82.622131][ T5332] RBP: 00007f28c15cf090 R08: 0000000000000000 R09: 0000000000000000 [ 82.622145][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.622205][ T5332] R13: 00007f28c2dc6038 R14: 00007f28c2dc5fa0 R15: 00007ffcb3918398 [ 82.622233][ T5332] [ 82.624850][ T5301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.637088][ T5326] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.776597][ T5327] bridge0: port 2(macvlan2) entered blocking state [ 82.869877][ T5327] bridge0: port 2(macvlan2) entered disabled state [ 82.943718][ T5326] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.532: iget: bogus i_mode (1) [ 82.955128][ T5336] loop0: detected capacity change from 0 to 1024 [ 82.966115][ T5336] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.982587][ T5327] macvlan2: entered allmulticast mode [ 82.984692][ T5336] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.538: iget: bogus i_mode (1) [ 82.988155][ T5327] bridge0: entered allmulticast mode [ 82.999391][ T5326] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.532: couldn't read orphan inode 11 (err -117) [ 83.017572][ T5327] macvlan2: left allmulticast mode [ 83.022724][ T5327] bridge0: left allmulticast mode [ 83.028480][ T5336] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.538: couldn't read orphan inode 11 (err -117) [ 83.043694][ T5335] loop4: detected capacity change from 0 to 512 [ 83.050847][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.064140][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.076910][ T5327] bridge0: left promiscuous mode [ 83.082204][ T5335] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.139400][ T5328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.144356][ T5335] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 83.234853][ T5335] EXT4-fs (loop4): 1 truncate cleaned up [ 83.240984][ T5335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.311702][ T5341] loop3: detected capacity change from 0 to 512 [ 83.319328][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.329370][ T5341] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.360922][ T5341] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 83.394423][ T5341] EXT4-fs (loop3): 1 truncate cleaned up [ 83.404677][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.471290][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.589238][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 83.600200][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.600294][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.600308][ T3322] Call Trace: [ 83.600314][ T3322] [ 83.600322][ T3322] __dump_stack+0x1d/0x30 [ 83.600349][ T3322] dump_stack_lvl+0xe8/0x140 [ 83.600376][ T3322] dump_stack+0x15/0x1b [ 83.600399][ T3322] dump_header+0x81/0x220 [ 83.600470][ T3322] oom_kill_process+0x342/0x400 [ 83.600511][ T3322] out_of_memory+0x979/0xb80 [ 83.600619][ T3322] try_charge_memcg+0x610/0xa10 [ 83.600732][ T3322] charge_memcg+0x51/0xc0 [ 83.600754][ T3322] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 83.600789][ T3322] __read_swap_cache_async+0x17b/0x2d0 [ 83.600841][ T3322] swap_cluster_readahead+0x362/0x3c0 [ 83.600928][ T3322] swapin_readahead+0xde/0x6f0 [ 83.600952][ T3322] ? __rcu_read_unlock+0x4f/0x70 [ 83.600977][ T3322] ? swap_cache_get_folio+0x277/0x280 [ 83.601028][ T3322] do_swap_page+0x2ae/0x2370 [ 83.601063][ T3322] ? strncpy_from_user+0x1eb/0x230 [ 83.601100][ T3322] ? css_rstat_updated+0xb7/0x240 [ 83.601210][ T3322] ? __pfx_default_wake_function+0x10/0x10 [ 83.601246][ T3322] handle_mm_fault+0x9a5/0x2be0 [ 83.601280][ T3322] ? vma_start_read+0x141/0x1f0 [ 83.601320][ T3322] do_user_addr_fault+0x630/0x1080 [ 83.601355][ T3322] exc_page_fault+0x62/0xa0 [ 83.601400][ T3322] asm_exc_page_fault+0x26/0x30 [ 83.601428][ T3322] RIP: 0033:0x7fd98d945db7 [ 83.601447][ T3322] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24 [ 83.601478][ T3322] RSP: 002b:00007ffc4e9b9a10 EFLAGS: 00010202 [ 83.601497][ T3322] RAX: 0000001b33924000 RBX: 0000000000000108 RCX: 0000000000014438 [ 83.601510][ T3322] RDX: 000000000780a356 RSI: 00007ffc4e9b9aa0 RDI: 000000000000001b [ 83.601589][ T3322] RBP: 00007ffc4e9b9a4c R08: 000000001c9ea716 R09: 7fffffffffffffff [ 83.601605][ T3322] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 83.601622][ T3322] R13: 00000000000927c0 R14: 000000000001455e R15: 00007ffc4e9b9aa0 [ 83.601647][ T3322] [ 83.601654][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 5852 [ 83.685310][ T5353] netlink: 'syz.3.549': attribute type 13 has an invalid length. [ 83.685864][ T3322] memory+swap: usage 308760kB, limit 9007199254740988kB, failcnt 0 [ 83.724363][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 83.726559][ T3322] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 83.852751][ T3322] Memory cgroup stats for /syz2: [ 83.853955][ T3322] cache 4096 [ 83.862196][ T3322] rss 0 [ 83.865076][ T3322] shmem 0 [ 83.868035][ T3322] mapped_file 0 [ 83.871591][ T3322] dirty 0 [ 83.874626][ T3322] writeback 0 [ 83.878019][ T3322] workingset_refault_anon 322 [ 83.882708][ T3322] workingset_refault_file 2624 [ 83.887576][ T3322] swap 1597440 [ 83.890954][ T3322] swapcached 0 [ 83.894376][ T3322] pgpgin 38174 [ 83.897839][ T3322] pgpgout 38169 [ 83.901378][ T3322] pgfault 39869 [ 83.904886][ T3322] pgmajfault 259 [ 83.908508][ T3322] inactive_anon 0 [ 83.912240][ T3322] active_anon 0 [ 83.915891][ T3322] inactive_file 0 [ 83.919554][ T3322] active_file 20480 [ 83.923376][ T3322] unevictable 0 [ 83.926965][ T3322] hierarchical_memory_limit 314572800 [ 83.932376][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 83.938625][ T3322] total_cache 4096 [ 83.942354][ T3322] total_rss 0 [ 83.945696][ T3322] total_shmem 0 [ 83.949156][ T3322] total_mapped_file 0 [ 83.953195][ T3322] total_dirty 0 [ 83.956718][ T3322] total_writeback 0 [ 83.960529][ T3322] total_workingset_refault_anon 322 [ 83.965772][ T3322] total_workingset_refault_file 2624 [ 83.971064][ T3322] total_swap 1597440 [ 83.975050][ T3322] total_swapcached 0 [ 83.978943][ T3322] total_pgpgin 38174 [ 83.982897][ T3322] total_pgpgout 38169 [ 83.986933][ T3322] total_pgfault 39869 [ 83.990997][ T3322] total_pgmajfault 259 [ 83.995102][ T3322] total_inactive_anon 0 [ 83.999292][ T3322] total_active_anon 0 [ 84.003270][ T3322] total_inactive_file 0 [ 84.007478][ T3322] total_active_file 20480 [ 84.011837][ T3322] total_unevictable 0 [ 84.015860][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.532,pid=5294,uid=0 [ 84.030461][ T3322] Memory cgroup out of memory: Killed process 5294 (syz.2.532) total-vm:100372kB, anon-rss:1136kB, file-rss:26736kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 84.158814][ T5368] loop3: detected capacity change from 0 to 1024 [ 84.195114][ T5368] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 84.263559][ T5373] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 84.304198][ T5373] Cannot find add_set index 0 as target [ 84.312538][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.423436][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 84.446007][ T5387] loop2: detected capacity change from 0 to 2048 [ 84.465242][ T5378] team1: entered promiscuous mode [ 84.470383][ T5378] team1: entered allmulticast mode [ 84.520418][ T3304] loop2: p2 p3 p7 [ 84.528504][ T5384] netlink: 76 bytes leftover after parsing attributes in process `syz.0.562'. [ 84.546322][ T5387] loop2: p2 p3 p7 [ 84.565031][ T5393] loop4: detected capacity change from 0 to 128 [ 84.575487][ T5393] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.583434][ T5393] FAT-fs (loop4): Filesystem has been set read-only [ 84.604155][ T5393] syz.4.560: attempt to access beyond end of device [ 84.604155][ T5393] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 84.620953][ T5393] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.628996][ T5393] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.638820][ T5392] loop1: detected capacity change from 0 to 512 [ 84.642748][ T5393] syz.4.560: attempt to access beyond end of device [ 84.642748][ T5393] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.658386][ T5393] syz.4.560: attempt to access beyond end of device [ 84.658386][ T5393] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.672150][ T5393] syz.4.560: attempt to access beyond end of device [ 84.672150][ T5393] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.686146][ T5392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.698557][ T5392] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 84.713611][ T5393] syz.4.560: attempt to access beyond end of device [ 84.713611][ T5393] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 84.715486][ T5387] loop2: detected capacity change from 0 to 512 [ 84.726809][ T5393] Buffer I/O error on dev loop4, logical block 2065, async page read [ 84.726842][ T5393] syz.4.560: attempt to access beyond end of device [ 84.726842][ T5393] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 84.754297][ T5392] EXT4-fs (loop1): 1 truncate cleaned up [ 84.754441][ T5393] Buffer I/O error on dev loop4, logical block 2066, async page read [ 84.769623][ T5393] syz.4.560: attempt to access beyond end of device [ 84.769623][ T5393] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 84.782796][ T5393] Buffer I/O error on dev loop4, logical block 2067, async page read [ 84.790919][ T5393] syz.4.560: attempt to access beyond end of device [ 84.790919][ T5393] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 84.803247][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.804100][ T5393] Buffer I/O error on dev loop4, logical block 2068, async page read [ 84.826177][ T5387] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.829419][ T5393] syz.4.560: attempt to access beyond end of device [ 84.829419][ T5393] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 84.843580][ T5387] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.847424][ T5393] Buffer I/O error on dev loop4, logical block 2069, async page read [ 84.847454][ T5393] syz.4.560: attempt to access beyond end of device [ 84.847454][ T5393] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 84.867037][ T5387] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.875005][ T5393] Buffer I/O error on dev loop4, logical block 2070, async page read [ 84.932418][ T5387] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.933297][ T5393] Buffer I/O error on dev loop4, logical block 2071, async page read [ 84.951820][ T5387] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.563: bg 0: block 40: padding at end of block bitmap is not set [ 84.960767][ T5393] Buffer I/O error on dev loop4, logical block 2072, async page read [ 84.975780][ T5400] Buffer I/O error on dev loop4, logical block 2065, async page read [ 84.988924][ T5400] Buffer I/O error on dev loop4, logical block 2066, async page read [ 84.997695][ T5387] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 85.007690][ T5387] EXT4-fs (loop2): 1 truncate cleaned up [ 85.060278][ T5411] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 85.104977][ T5387] tipc: Failed to obtain node identity [ 85.110481][ T5387] tipc: Enabling of bearer rejected, failed to enable media [ 85.303338][ T5429] netlink: 'syz.2.576': attribute type 13 has an invalid length. [ 85.311182][ T5429] netlink: 'syz.2.576': attribute type 27 has an invalid length. [ 85.420839][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 85.498540][ T5445] loop4: detected capacity change from 0 to 4096 [ 85.522516][ T5445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.693966][ T5452] loop1: detected capacity change from 0 to 1024 [ 85.726810][ T5452] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.805230][ T5452] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.574: iget: bogus i_mode (1) [ 85.821720][ T5438] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.839608][ T5468] loop4: detected capacity change from 0 to 512 [ 85.870405][ T5468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.931143][ T5452] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.574: couldn't read orphan inode 11 (err -117) [ 85.959214][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 85.959233][ T29] audit: type=1400 audit(1760611896.894:4511): avc: denied { create } for pid=5469 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.994758][ T5425] syz.3.572 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 86.004420][ T5468] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 86.005508][ T5425] CPU: 0 UID: 0 PID: 5425 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.005489][ T5468] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.005538][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.005552][ T5425] Call Trace: [ 86.005559][ T5425] [ 86.005566][ T5425] __dump_stack+0x1d/0x30 [ 86.005587][ T5425] dump_stack_lvl+0xe8/0x140 [ 86.005611][ T5425] dump_stack+0x15/0x1b [ 86.005659][ T5425] dump_header+0x81/0x220 [ 86.005710][ T5425] oom_kill_process+0x342/0x400 [ 86.005756][ T5425] out_of_memory+0x979/0xb80 [ 86.005852][ T5425] try_charge_memcg+0x610/0xa10 [ 86.005958][ T5425] obj_cgroup_charge_pages+0xa6/0x150 [ 86.006011][ T5425] obj_cgroup_charge_account+0x73/0x1a0 [ 86.006064][ T5425] __memcg_slab_post_alloc_hook+0x398/0x580 [ 86.006198][ T5425] kmem_cache_alloc_lru_noprof+0x2c1/0x490 [ 86.006248][ T5425] ? xas_nomem+0xd1/0x130 [ 86.006369][ T5425] xas_nomem+0xd1/0x130 [ 86.006409][ T5425] shmem_add_to_page_cache+0x438/0x530 [ 86.006466][ T5425] shmem_get_folio_gfp+0x4e8/0xd60 [ 86.006573][ T5425] shmem_fault+0xf6/0x250 [ 86.006625][ T5425] __do_fault+0xbc/0x200 [ 86.006696][ T5425] handle_mm_fault+0xf78/0x2be0 [ 86.006789][ T5425] ? __rcu_read_lock+0x37/0x50 [ 86.006826][ T5425] ? __pte_offset_map_lock+0x1d4/0x230 [ 86.007003][ T5425] __get_user_pages+0x102a/0x1ed0 [ 86.007117][ T5425] __mm_populate+0x243/0x3a0 [ 86.007196][ T5425] vm_mmap_pgoff+0x232/0x2e0 [ 86.007243][ T5425] ksys_mmap_pgoff+0xc2/0x310 [ 86.007314][ T5425] ? __x64_sys_mmap+0x49/0x70 [ 86.007350][ T5425] x64_sys_call+0x14a3/0x3000 [ 86.007445][ T5425] do_syscall_64+0xd2/0x200 [ 86.007480][ T5425] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.007574][ T5425] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.007615][ T5425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.007648][ T5425] RIP: 0033:0x7f7760d0eec9 [ 86.007669][ T5425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.007697][ T5425] RSP: 002b:00007f775f72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.007753][ T5425] RAX: ffffffffffffffda RBX: 00007f7760f66180 RCX: 00007f7760d0eec9 [ 86.007772][ T5425] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 86.007790][ T5425] RBP: 00007f7760d91f91 R08: ffffffffffffffff R09: 0000000028f43000 [ 86.007809][ T5425] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 86.007827][ T5425] R13: 00007f7760f66218 R14: 00007f7760f66180 R15: 00007ffef3f1e2d8 [ 86.007876][ T5425] [ 86.007885][ T5425] memory: usage 307200kB, limit 307200kB, failcnt 6260 [ 86.036157][ T29] audit: type=1400 audit(1760611896.934:4512): avc: denied { write } for pid=5469 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.042056][ T5425] memory+swap: usage 308228kB, limit 9007199254740988kB, failcnt 0 [ 86.070107][ T5478] loop2: detected capacity change from 0 to 512 [ 86.070842][ T5425] kmem: usage 306748kB, limit 9007199254740988kB, failcnt 0 [ 86.088838][ T5478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.091358][ T5425] Memory cgroup stats for /syz3: [ 86.121487][ T5478] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 86.137232][ T5468] EXT4-fs (loop4): 1 truncate cleaned up [ 86.140584][ T5478] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.229261][ T5425] cache 4096 [ 86.360222][ T5425] rss 4096 [ 86.363276][ T5425] shmem 0 [ 86.366307][ T5425] mapped_file 4096 [ 86.370052][ T5425] dirty 0 [ 86.371897][ T5478] EXT4-fs (loop2): 1 truncate cleaned up [ 86.373016][ T5425] writeback 4096 [ 86.373028][ T5425] workingset_refault_anon 488 [ 86.373038][ T5425] workingset_refault_file 3880 [ 86.373048][ T5425] swap 1024000 [ 86.373057][ T5425] swapcached 12288 [ 86.373066][ T5425] pgpgin 42985 [ 86.373085][ T5425] pgpgout 42977 [ 86.373094][ T5425] pgfault 45899 [ 86.373103][ T5425] pgmajfault 412 [ 86.373118][ T5425] inactive_anon 0 [ 86.373128][ T5425] active_anon 8192 [ 86.373161][ T5425] inactive_file 0 [ 86.424122][ T5425] active_file 16384 [ 86.427938][ T5425] unevictable 0 [ 86.431401][ T5425] hierarchical_memory_limit 314572800 [ 86.436882][ T5425] hierarchical_memsw_limit 9223372036854771712 [ 86.443086][ T5425] total_cache 4096 [ 86.446864][ T5425] total_rss 4096 [ 86.450422][ T5425] total_shmem 0 [ 86.453924][ T5425] total_mapped_file 4096 [ 86.458226][ T5425] total_dirty 0 [ 86.461699][ T5425] total_writeback 4096 [ 86.465806][ T5425] total_workingset_refault_anon 488 [ 86.471092][ T5425] total_workingset_refault_file 3880 [ 86.476594][ T5425] total_swap 1024000 [ 86.480506][ T5425] total_swapcached 12288 [ 86.484785][ T5425] total_pgpgin 42985 [ 86.488729][ T5425] total_pgpgout 42977 [ 86.492716][ T5425] total_pgfault 45899 [ 86.496734][ T5425] total_pgmajfault 412 [ 86.500804][ T5425] total_inactive_anon 0 [ 86.505001][ T5425] total_active_anon 8192 [ 86.509257][ T5425] total_inactive_file 0 [ 86.513433][ T5425] total_active_file 16384 [ 86.517819][ T5425] total_unevictable 0 [ 86.521819][ T5425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.572,pid=5414,uid=0 [ 86.536428][ T5425] Memory cgroup out of memory: Killed process 5414 (syz.3.572) total-vm:98324kB, anon-rss:1136kB, file-rss:26404kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 86.595472][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 86.606643][ T29] audit: type=1400 audit(1760611897.544:4513): avc: denied { name_bind } for pid=5482 comm="syz.4.592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.622166][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 86.644787][ T29] audit: type=1400 audit(1760611897.554:4514): avc: denied { setopt } for pid=5480 comm="syz.2.593" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.692909][ T5485] loop4: detected capacity change from 0 to 1024 [ 86.718543][ T5485] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 86.789261][ T5492] loop2: detected capacity change from 0 to 512 [ 86.825960][ T5492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.842347][ T29] audit: type=1326 audit(1760611897.774:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65135eec9 code=0x7ffc0000 [ 86.865896][ T29] audit: type=1326 audit(1760611897.774:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65135eec9 code=0x7ffc0000 [ 86.906326][ T29] audit: type=1400 audit(1760611897.804:4517): avc: denied { write } for pid=5499 comm="syz.3.601" name="rt_acct" dev="proc" ino=4026532771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.929226][ T29] audit: type=1326 audit(1760611897.824:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65135eec9 code=0x7ffc0000 [ 86.952735][ T29] audit: type=1326 audit(1760611897.824:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65135eec9 code=0x7ffc0000 [ 86.976200][ T29] audit: type=1326 audit(1760611897.824:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65135eec9 code=0x7ffc0000 [ 87.035207][ T5492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.050765][ T5492] EXT4-fs (loop2): 1 truncate cleaned up [ 87.101392][ T5509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5509 comm=syz.0.603 [ 87.128880][ T5509] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 87.206952][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 87.217263][ T5509] bond2 (unregistering): Released all slaves [ 87.356338][ T5529] loop0: detected capacity change from 0 to 2048 [ 87.378751][ T5531] loop1: detected capacity change from 0 to 1024 [ 87.394720][ T5531] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 87.423571][ T3304] loop0: p2 p3 p7 [ 87.482054][ T5529] loop0: p2 p3 p7 [ 87.512999][ T5543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.613'. [ 87.513652][ T5542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5542 comm=syz.1.612 [ 87.558857][ T5542] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 87.570872][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 87.583428][ T5529] loop0: detected capacity change from 0 to 512 [ 87.599280][ T5529] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.614288][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 87.624357][ T5529] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.631667][ T5529] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.646731][ T5529] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 87.653708][ T5529] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.608: bg 0: block 40: padding at end of block bitmap is not set [ 87.668932][ T5529] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 87.678337][ T5529] EXT4-fs (loop0): 1 truncate cleaned up [ 87.691873][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 87.729913][ T5548] bond2 (unregistering): Released all slaves [ 87.754571][ T5529] tipc: Failed to obtain node identity [ 87.760193][ T5529] tipc: Enabling of bearer rejected, failed to enable media [ 87.830869][ T5556] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 87.883524][ T5556] Cannot find add_set index 0 as target [ 87.898693][ T5563] syz!: rxe_newlink: already configured on team_slave_0 [ 87.936906][ T5568] FAULT_INJECTION: forcing a failure. [ 87.936906][ T5568] name failslab, interval 1, probability 0, space 0, times 0 [ 87.949615][ T5568] CPU: 1 UID: 0 PID: 5568 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.949755][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.949768][ T5568] Call Trace: [ 87.949774][ T5568] [ 87.949781][ T5568] __dump_stack+0x1d/0x30 [ 87.949800][ T5568] dump_stack_lvl+0xe8/0x140 [ 87.949817][ T5568] dump_stack+0x15/0x1b [ 87.949831][ T5568] should_fail_ex+0x265/0x280 [ 87.949935][ T5568] should_failslab+0x8c/0xb0 [ 87.949959][ T5568] kmem_cache_alloc_noprof+0x50/0x480 [ 87.949983][ T5568] ? security_inode_alloc+0x37/0x100 [ 87.950053][ T5568] security_inode_alloc+0x37/0x100 [ 87.950126][ T5568] inode_init_always_gfp+0x4b7/0x500 [ 87.950177][ T5568] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 87.950195][ T5568] alloc_inode+0x58/0x170 [ 87.950214][ T5568] new_inode+0x1d/0xe0 [ 87.950237][ T5568] shmem_get_inode+0x244/0x750 [ 87.950257][ T5568] __shmem_file_setup+0x113/0x210 [ 87.950287][ T5568] shmem_file_setup+0x3b/0x50 [ 87.950354][ T5568] __se_sys_memfd_create+0x2c3/0x590 [ 87.950375][ T5568] __x64_sys_memfd_create+0x31/0x40 [ 87.950394][ T5568] x64_sys_call+0x2ac2/0x3000 [ 87.950413][ T5568] do_syscall_64+0xd2/0x200 [ 87.950434][ T5568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.950488][ T5568] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.950507][ T5568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.950526][ T5568] RIP: 0033:0x7f28c2b6eec9 [ 87.950539][ T5568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.950556][ T5568] RSP: 002b:00007f28c15cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 87.950572][ T5568] RAX: ffffffffffffffda RBX: 000000000000061b RCX: 00007f28c2b6eec9 [ 87.950618][ T5568] RDX: 00007f28c15ceef0 RSI: 0000000000000000 RDI: 00007f28c2bf2960 [ 87.950630][ T5568] RBP: 0000200000000800 R08: 00007f28c15cebb7 R09: 00007f28c15cee40 [ 87.950645][ T5568] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 87.950662][ T5568] R13: 00007f28c15ceef0 R14: 00007f28c15ceeb0 R15: 0000200000000240 [ 87.950689][ T5568] [ 88.205189][ T5570] loop4: detected capacity change from 0 to 1024 [ 88.225433][ T5574] loop1: detected capacity change from 0 to 512 [ 88.236492][ T5570] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 88.246835][ T5574] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.263362][ T5574] EXT4-fs (loop1): shut down requested (0) [ 88.272806][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 88.316784][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 88.326059][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 88.358644][ T5584] macvlan2: entered promiscuous mode [ 88.364054][ T5584] bridge0: entered promiscuous mode [ 88.369958][ T5584] bridge0: port 2(macvlan2) entered blocking state [ 88.376535][ T5584] bridge0: port 2(macvlan2) entered disabled state [ 88.388481][ T5584] macvlan2: entered allmulticast mode [ 88.393965][ T5584] bridge0: entered allmulticast mode [ 88.402611][ T5584] macvlan2: left allmulticast mode [ 88.407874][ T5584] bridge0: left allmulticast mode [ 88.413589][ T5584] bridge0: left promiscuous mode [ 88.536276][ T5599] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.647922][ T5611] loop2: detected capacity change from 0 to 512 [ 88.662320][ T5614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5614 comm=syz.1.640 [ 88.675520][ T5612] loop3: detected capacity change from 0 to 1024 [ 88.684901][ T5614] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 88.699508][ T5611] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.702666][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 88.721164][ T5614] bond2 (unregistering): Released all slaves [ 88.725241][ T5612] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 88.732539][ T5611] netlink: 312 bytes leftover after parsing attributes in process `syz.2.639'. [ 89.046933][ T5636] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 89.416274][ T5642] loop1: detected capacity change from 0 to 1024 [ 89.444568][ T5642] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.533772][ T5642] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.643: iget: bogus i_mode (1) [ 89.557519][ T5651] loop2: detected capacity change from 0 to 512 [ 89.575354][ T5642] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.643: couldn't read orphan inode 11 (err -117) [ 89.617402][ T5651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.669078][ T5651] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 89.734462][ T5651] EXT4-fs (loop2): 1 truncate cleaned up [ 89.882794][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 89.929935][ T5659] loop3: detected capacity change from 0 to 1024 [ 89.934995][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 89.991073][ T5659] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.045863][ T5659] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.645: iget: bogus i_mode (1) [ 90.059067][ T5659] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.645: couldn't read orphan inode 11 (err -117) [ 90.110669][ T5662] netlink: 'syz.4.653': attribute type 13 has an invalid length. [ 90.120267][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 90.158056][ T5665] loop2: detected capacity change from 0 to 512 [ 90.210819][ T5665] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.224707][ T5671] sch_fq: defrate 4294967295 ignored. [ 90.227260][ T5665] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.238060][ T5665] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.654: corrupted inode contents [ 90.273924][ T5674] loop4: detected capacity change from 0 to 512 [ 90.290605][ T5665] EXT4-fs (loop2): Remounting filesystem read-only [ 90.298189][ T5674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.308697][ T5665] EXT4-fs (loop2): 1 truncate cleaned up [ 90.315206][ T1811] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.325783][ T1811] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.345135][ T5674] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 90.370074][ T5674] EXT4-fs (loop4): 1 truncate cleaned up [ 90.375898][ T1811] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.529200][ T5683] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.536906][ T5685] loop4: detected capacity change from 0 to 512 [ 90.546973][ T5685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.560735][ T5685] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 90.576631][ T5685] EXT4-fs (loop4): 1 truncate cleaned up [ 90.790915][ T5699] macvlan2: entered promiscuous mode [ 90.796303][ T5699] bridge0: entered promiscuous mode [ 90.814510][ T5699] bridge0: port 3(macvlan2) entered blocking state [ 90.821219][ T5699] bridge0: port 3(macvlan2) entered disabled state [ 90.828051][ T5699] macvlan2: entered allmulticast mode [ 90.833466][ T5699] bridge0: entered allmulticast mode [ 90.842318][ T5699] macvlan2: left allmulticast mode [ 90.847523][ T5699] bridge0: left allmulticast mode [ 90.854560][ T5699] bridge0: left promiscuous mode [ 90.931755][ T5636] Cannot find add_set index 0 as target [ 90.987238][ T5711] loop2: detected capacity change from 0 to 512 [ 90.996125][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 90.996141][ T29] audit: type=1400 audit(1760611901.934:4894): avc: denied { create } for pid=5706 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.023909][ T29] audit: type=1400 audit(1760611901.954:4895): avc: denied { write } for pid=5706 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.064250][ T5711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.096391][ T29] audit: type=1400 audit(1760611901.974:4896): avc: denied { tracepoint } for pid=5707 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.116289][ T29] audit: type=1326 audit(1760611901.984:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.139729][ T29] audit: type=1326 audit(1760611901.984:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.163214][ T29] audit: type=1326 audit(1760611901.984:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.186683][ T29] audit: type=1326 audit(1760611901.984:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.210112][ T29] audit: type=1326 audit(1760611901.984:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.211656][ T5711] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 91.233580][ T29] audit: type=1326 audit(1760611901.984:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.248606][ T5711] EXT4-fs (loop2): 1 truncate cleaned up [ 91.271188][ T29] audit: type=1326 audit(1760611901.984:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c2b6eec9 code=0x7ffc0000 [ 91.374867][ T5723] loop1: detected capacity change from 0 to 512 [ 91.407801][ T5727] loop2: detected capacity change from 0 to 2048 [ 91.488912][ T5727] loop2: p2 p3 p7 [ 91.555736][ T5727] tipc: Failed to obtain node identity [ 91.561309][ T5727] tipc: Enabling of bearer rejected, failed to enable media [ 91.588858][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.600044][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 91.609929][ T5740] loop1: detected capacity change from 0 to 512 [ 91.625496][ T5740] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.682: iget: bad i_size value: 38620345925642 [ 91.644638][ T5740] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.682: couldn't read orphan inode 15 (err -117) [ 91.668670][ T5743] loop2: detected capacity change from 0 to 2048 [ 91.679092][ T5740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.682: bg 0: block 5: invalid block bitmap [ 91.699410][ T5740] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 91.711742][ T5740] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.711742][ T5740] [ 91.721438][ T5740] EXT4-fs (loop1): Total free blocks count 0 [ 91.724177][ T5745] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 91.727463][ T5740] EXT4-fs (loop1): Free/Dirty block details [ 91.727478][ T5740] EXT4-fs (loop1): free_blocks=0 [ 91.727490][ T5740] EXT4-fs (loop1): dirty_blocks=2 [ 91.752427][ T5740] EXT4-fs (loop1): Block reservation details [ 91.758481][ T5740] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 91.770506][ T5745] Cannot find add_set index 0 as target [ 91.779363][ T3304] loop2: p2 p3 p7 [ 91.795622][ T5743] loop2: p2 p3 p7 [ 91.824926][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 91.837870][ T5743] loop2: detected capacity change from 0 to 512 [ 91.847317][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 91.851807][ T5743] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 91.865328][ T5743] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.871894][ T5743] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.886786][ T5743] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 91.893826][ T5743] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.683: bg 0: block 40: padding at end of block bitmap is not set [ 91.908675][ T5743] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 91.918157][ T5743] EXT4-fs (loop2): 1 truncate cleaned up [ 91.933686][ T5743] tipc: Failed to obtain node identity [ 91.939302][ T5743] tipc: Enabling of bearer rejected, failed to enable media [ 92.113755][ T5761] __nla_validate_parse: 3 callbacks suppressed [ 92.113773][ T5761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 92.129041][ T5761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 92.178947][ T5767] loop3: detected capacity change from 0 to 2048 [ 92.249529][ T3304] loop3: p2 p3 p7 [ 92.286579][ T5767] loop3: p2 p3 p7 [ 92.326996][ T5767] loop3: detected capacity change from 0 to 512 [ 92.370204][ T5767] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 92.405682][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 92.422463][ T5777] loop2: detected capacity change from 0 to 512 [ 92.434524][ T5767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.443787][ T5778] macsec1: entered promiscuous mode [ 92.449094][ T5778] bridge0: entered promiscuous mode [ 92.453711][ T5767] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.454909][ T5778] bridge0: port 3(macsec1) entered blocking state [ 92.475550][ T5778] bridge0: port 3(macsec1) entered disabled state [ 92.482230][ T5778] macsec1: entered allmulticast mode [ 92.486387][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 92.487669][ T5778] bridge0: entered allmulticast mode [ 92.498440][ T5777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.514946][ T5777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 92.515905][ T5778] macsec1: left allmulticast mode [ 92.534381][ T5767] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 92.534407][ T5778] bridge0: left allmulticast mode [ 92.548491][ T5778] bridge0: left promiscuous mode [ 92.556370][ T5777] EXT4-fs (loop2): 1 truncate cleaned up [ 92.562340][ T5767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.693: bg 0: block 40: padding at end of block bitmap is not set [ 92.591281][ T5767] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 92.600558][ T5767] EXT4-fs (loop3): 1 truncate cleaned up [ 92.624506][ T5767] tipc: Enabled bearer , priority 26 [ 92.716487][ T5787] loop3: detected capacity change from 0 to 4096 [ 92.763899][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5790 comm=syz.4.702 [ 92.776960][ T5790] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 92.802741][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 92.820327][ T5795] netlink: 'syz.3.704': attribute type 13 has an invalid length. [ 92.829215][ T5790] bond2 (unregistering): Released all slaves [ 93.230485][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 93.249190][ T5813] netem: incorrect gi model size [ 93.254177][ T5813] netem: change failed [ 93.348092][ T5819] loop2: detected capacity change from 0 to 512 [ 93.355011][ T5819] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.366355][ T5819] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 93.381185][ T5819] EXT4-fs (loop2): 1 truncate cleaned up [ 93.493217][ T5826] netlink: 'syz.2.715': attribute type 13 has an invalid length. [ 93.556609][ T5831] loop2: detected capacity change from 0 to 512 [ 93.563567][ T5831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.575358][ T5831] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 93.590210][ T5831] EXT4-fs (loop2): 1 truncate cleaned up [ 93.654174][ T3847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.660316][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 93.764216][ T3369] tipc: Node number set to 4113810829 [ 93.867400][ T5844] dvmrp0: entered allmulticast mode [ 93.881176][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 93.898597][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 93.900849][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 93.917728][ T5844] tipc: Disabling bearer [ 94.284622][ T5859] netlink: 'syz.1.726': attribute type 13 has an invalid length. [ 94.399694][ T5864] loop0: detected capacity change from 0 to 1024 [ 94.413231][ T5864] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.429815][ T5864] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.725: iget: bogus i_mode (1) [ 94.441337][ T5864] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.725: couldn't read orphan inode 11 (err -117) [ 94.518307][ T5851] loop3: detected capacity change from 0 to 1024 [ 94.574719][ T5851] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.629045][ T5851] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.724: iget: bogus i_mode (1) [ 94.698148][ T5851] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.724: couldn't read orphan inode 11 (err -117) [ 94.826766][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 94.849572][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 95.064245][ T5889] loop4: detected capacity change from 0 to 512 [ 95.071499][ T5889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.084891][ T5889] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 95.099702][ T5889] EXT4-fs (loop4): 1 truncate cleaned up [ 95.425190][ T5909] loop1: detected capacity change from 0 to 512 [ 95.432323][ T5909] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.443924][ T5909] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 95.458907][ T5909] EXT4-fs (loop1): 1 truncate cleaned up [ 95.497886][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 95.532951][ T5914] netem: incorrect gi model size [ 95.537991][ T5914] netem: change failed [ 95.612455][ T5922] loop4: detected capacity change from 0 to 512 [ 95.624959][ T5926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5926 comm=syz.2.751 [ 95.640462][ T5926] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 95.658775][ T5926] veth4: entered promiscuous mode [ 95.664772][ T5922] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.677314][ T5926] bond1 (unregistering): Released all slaves [ 95.690668][ T5922] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.749: Failed to acquire dquot type 1 [ 95.702688][ T5922] EXT4-fs (loop4): 1 truncate cleaned up [ 95.802601][ T5940] loop4: detected capacity change from 0 to 2048 [ 95.883828][ T5940] loop4: p2 p3 p7 [ 95.945899][ T5940] tipc: Failed to obtain node identity [ 95.951454][ T5940] tipc: Enabling of bearer rejected, failed to enable media [ 96.028638][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.028941][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 96.042090][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.051807][ T5947] bridge_slave_0: entered promiscuous mode [ 96.060006][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 96.110750][ T5956] Driver unsupported XDP return value 0 on prog (id 593) dev N/A, expect packet loss! [ 96.144786][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 96.144805][ T29] audit: type=1326 audit(1760611907.074:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.174359][ T29] audit: type=1326 audit(1760611907.074:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.197922][ T29] audit: type=1326 audit(1760611907.074:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.221327][ T29] audit: type=1326 audit(1760611907.074:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.225730][ T5966] macvlan2: entered promiscuous mode [ 96.244906][ T29] audit: type=1326 audit(1760611907.074:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.244946][ T29] audit: type=1326 audit(1760611907.074:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.250266][ T5966] bridge0: entered promiscuous mode [ 96.273597][ T29] audit: type=1326 audit(1760611907.084:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.325325][ T29] audit: type=1326 audit(1760611907.084:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.349602][ T29] audit: type=1326 audit(1760611907.084:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.372912][ T29] audit: type=1326 audit(1760611907.084:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7760d0eec9 code=0x7ffc0000 [ 96.403185][ T5966] bridge0: port 1(macvlan2) entered blocking state [ 96.409923][ T5966] bridge0: port 1(macvlan2) entered disabled state [ 96.417994][ T5966] macvlan2: entered allmulticast mode [ 96.423418][ T5966] bridge0: entered allmulticast mode [ 96.429354][ T5966] macvlan2: left allmulticast mode [ 96.434637][ T5966] bridge0: left allmulticast mode [ 96.440240][ T5966] bridge0: left promiscuous mode [ 96.457131][ T5961] macvlan0: entered promiscuous mode [ 96.462465][ T5961] bridge0: entered promiscuous mode [ 96.468142][ T5961] bridge0: port 2(macvlan0) entered blocking state [ 96.474770][ T5961] bridge0: port 2(macvlan0) entered disabled state [ 96.481528][ T5961] macvlan0: entered allmulticast mode [ 96.486978][ T5961] bridge0: entered allmulticast mode [ 96.493038][ T5961] macvlan0: left allmulticast mode [ 96.498234][ T5961] bridge0: left allmulticast mode [ 96.505009][ T5961] bridge0: left promiscuous mode [ 96.525421][ T5973] loop1: detected capacity change from 0 to 512 [ 96.532589][ T5973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.544994][ T5973] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 96.564450][ T5973] EXT4-fs (loop1): 1 truncate cleaned up [ 97.117945][ T5986] loop1: detected capacity change from 0 to 1024 [ 97.157836][ T5986] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.184403][ T5986] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.766: iget: bogus i_mode (1) [ 97.236932][ T5986] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.766: couldn't read orphan inode 11 (err -117) [ 97.287758][ T6002] loop4: detected capacity change from 0 to 1024 [ 97.296192][ T6002] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.308397][ T6002] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.773: iget: bogus i_mode (1) [ 97.335101][ T6002] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.773: couldn't read orphan inode 11 (err -117) [ 97.936254][ T6041] loop3: detected capacity change from 0 to 512 [ 97.946734][ T6041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.966610][ T6041] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 97.982165][ T6041] EXT4-fs (loop3): 1 truncate cleaned up [ 98.110037][ T6048] __nla_validate_parse: 7 callbacks suppressed [ 98.110053][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 98.187554][ T6051] macvlan0: entered promiscuous mode [ 98.193065][ T6051] bridge0: entered promiscuous mode [ 98.199071][ T6051] bridge0: port 2(macvlan0) entered blocking state [ 98.205766][ T6051] bridge0: port 2(macvlan0) entered disabled state [ 98.212579][ T6051] macvlan0: entered allmulticast mode [ 98.218146][ T6051] bridge0: entered allmulticast mode [ 98.224243][ T6051] macvlan0: left allmulticast mode [ 98.229411][ T6051] bridge0: left allmulticast mode [ 98.235103][ T6051] bridge0: left promiscuous mode [ 98.284804][ T6057] dvmrp0: entered allmulticast mode [ 98.294054][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 98.482960][ T6066] loop4: detected capacity change from 0 to 512 [ 98.495351][ T6066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.510042][ T6066] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 98.525554][ T6066] EXT4-fs (loop4): 1 truncate cleaned up [ 98.752542][ T6082] loop0: detected capacity change from 0 to 512 [ 98.775207][ T6082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.796414][ T6082] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 98.833871][ T6082] EXT4-fs (loop0): 1 truncate cleaned up [ 99.014602][ T6097] netlink: 'syz.0.810': attribute type 13 has an invalid length. [ 99.170887][ T6107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6107 comm=syz.4.814 [ 99.199944][ T6107] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 99.256873][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 99.265830][ T6110] loop1: detected capacity change from 0 to 1024 [ 99.286685][ T6107] veth2: entered promiscuous mode [ 99.293145][ T6112] loop0: detected capacity change from 0 to 2048 [ 99.299644][ T6071] ================================================================== [ 99.307776][ T6071] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 99.309627][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 99.317627][ T6071] [ 99.317634][ T6071] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 99.317652][ T6071] tick_do_update_jiffies64+0x113/0x1c0 [ 99.317693][ T6071] tick_nohz_handler+0x7f/0x2d0 [ 99.317721][ T6071] __hrtimer_run_queues+0x20f/0x5a0 [ 99.352438][ T6071] hrtimer_interrupt+0x21a/0x460 [ 99.357383][ T6071] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 99.363288][ T6071] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.368938][ T6071] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.374925][ T6071] console_flush_all+0x51b/0x6a0 [ 99.379873][ T6071] console_unlock+0xa1/0x2e0 [ 99.384466][ T6071] vprintk_emit+0x3b5/0x580 [ 99.388971][ T6071] vprintk_default+0x26/0x30 [ 99.393580][ T6071] vprintk+0x1d/0x30 [ 99.397483][ T6071] _printk+0x79/0xa0 [ 99.401385][ T6071] set_capacity_and_notify+0x14c/0x1f0 [ 99.406846][ T6071] loop_set_size+0x2e/0x70 [ 99.411274][ T6071] loop_configure+0x828/0x9c0 [ 99.415972][ T6071] lo_ioctl+0x1e1/0x12b0 [ 99.420222][ T6071] blkdev_ioctl+0x356/0x440 [ 99.424725][ T6071] __se_sys_ioctl+0xce/0x140 [ 99.429313][ T6071] __x64_sys_ioctl+0x43/0x50 [ 99.433921][ T6071] x64_sys_call+0x1816/0x3000 [ 99.438615][ T6071] do_syscall_64+0xd2/0x200 [ 99.443121][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.449022][ T6071] [ 99.451363][ T6071] read to 0xffffffff868099c0 of 8 bytes by task 6071 on cpu 1: [ 99.458909][ T6071] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 99.465188][ T6071] count_shadow_nodes+0x6a/0x230 [ 99.470128][ T6071] do_shrink_slab+0x63/0x680 [ 99.474735][ T6071] shrink_slab+0x448/0x760 [ 99.479166][ T6071] shrink_node+0x6c3/0x2120 [ 99.483765][ T6071] do_try_to_free_pages+0x3f6/0xcd0 [ 99.488969][ T6071] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 99.494862][ T6071] try_charge_memcg+0x383/0xa10 [ 99.499711][ T6071] obj_cgroup_charge_pages+0xa6/0x150 [ 99.505096][ T6071] __memcg_kmem_charge_page+0x9f/0x170 [ 99.510579][ T6071] __alloc_frozen_pages_noprof+0x188/0x360 [ 99.516407][ T6071] alloc_pages_mpol+0xb3/0x260 [ 99.521165][ T6071] alloc_pages_noprof+0x90/0x130 [ 99.526118][ T6071] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 99.531963][ T6071] __kvmalloc_node_noprof+0x483/0x670 [ 99.537345][ T6071] ip_set_alloc+0x24/0x30 [ 99.541685][ T6071] hash_netiface_create+0x282/0x740 [ 99.546887][ T6071] ip_set_create+0x3cc/0x970 [ 99.551481][ T6071] nfnetlink_rcv_msg+0x4c6/0x590 [ 99.556422][ T6071] netlink_rcv_skb+0x123/0x220 [ 99.561194][ T6071] nfnetlink_rcv+0x167/0x16c0 [ 99.565867][ T6071] netlink_unicast+0x5c0/0x690 [ 99.570645][ T6071] netlink_sendmsg+0x58b/0x6b0 [ 99.575424][ T6071] __sock_sendmsg+0x145/0x180 [ 99.580100][ T6071] ____sys_sendmsg+0x31e/0x4e0 [ 99.584870][ T6071] ___sys_sendmsg+0x17b/0x1d0 [ 99.589552][ T6071] __x64_sys_sendmsg+0xd4/0x160 [ 99.594423][ T6071] x64_sys_call+0x191e/0x3000 [ 99.599109][ T6071] do_syscall_64+0xd2/0x200 [ 99.603620][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.609517][ T6071] [ 99.611848][ T6071] value changed: 0x00000000ffffb15b -> 0x00000000ffffb15c [ 99.618962][ T6071] [ 99.621297][ T6071] Reported by Kernel Concurrency Sanitizer on: [ 99.627436][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.637089][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.647158][ T6071] ================================================================== [ 99.677229][ T6113] bond2 (unregistering): Released all slaves [ 99.687429][ T6110] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.693216][ T3506] loop0: p2 p3 p7 [ 99.726366][ T6110] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.801: iget: bogus i_mode (1) [ 99.745732][ T6112] loop0: p2 p3 p7 [ 99.750201][ T6110] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.801: couldn't read orphan inode 11 (err -117) [ 99.763578][ T6110] EXT4-fs mount: 70 callbacks suppressed [ 99.763595][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.823592][ T6112] tipc: Failed to obtain node identity [ 99.829200][ T6112] tipc: Enabling of bearer rejected, failed to enable media [ 99.853081][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.893939][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.921023][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.999746][ T6076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.