last executing test programs: 2.538224296s ago: executing program 1 (id=325): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 2.446580557s ago: executing program 1 (id=327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x258) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @link_local}, 0x10) write$binfmt_misc(r1, &(0x7f00000012c0)="baa540d608bc217f4339ed531a6fff1177e8fd278329817806875fb7e465a8b781c4e223838af4c07e28565c42c304edb567bb315876e154b17c784e98c2b2eb9a6782c9964268561c0cfebf45826734964b8122db377a4d0fc5d2e55a07bcf801556778a5a52bfa2af58457a17eb23f54871aa5a54b62e0d2ff8a2d58780bdf096af19e8cd0c80d12aa5f4415d74c8050af30a24b189d32e1ec237a4d64eaf7b8aba3d3883174c30821e22a95a2b15872ff569e33442cf0e1a8e69e22c5ec1393619094a3dfb1d881c9ec396475dbe8d782bfdf074fa06b980d262f113283fa7f0a36db48f42feb56a7637de9cedf7292d422898b6e6fe16b75c4a6430091aed70dde9acc0c7157f117cca238411f385a9d0bcfe92b6adef374cc4f060a149cb3cb00a2867d3f9e36d59c07581a60259499044890ee013584a1634ea572849114136c57503c24cbee0cce4695119ba66775decc855e29c4e2e3d74b8bce038baee16832ac50004052cbaba3a46c0cfad739c3c637f7f108bdfe591cdd75fa483d87d08897b561d6a85fa647556a6be8582a5853a15d22e72425476175e5721acbe5d2d691037482790ddae5415a5af7d60dae02d54509401ac2ffa8a10e1b3ef30cb616f9ad2fd4e47c76804548f7f9aceef5519d6974206f9a4d0809de3e8c45a8442fce5c763bd174ab5108fc865c2a81acfa03698f73ee338f3fbedf3292739673f13c160cad4e1aa66cebc539bd76e67662f461f47f5ca50259c072dc58c54bea7a558559a465b2632e157175b8642540eb178c82c1c8f35f1aaa3c662e23d72dd2b47d11db8c9ae1e596aeae916b1a1f4649cfb04bd2ce9853cacb07554ca74ce789a7de6dfdcf37f1ba8bdf7b73ab08ec5b2ec806c7b28290094d248dbeba5d46502cb76f30145b9cdfe263b0b0f8b929fe780a125320ae3e0a0755064fdbf3ee9509b43ff423e58de3dc1909664c07ad0d0b5184484bf334ecfe525c4d3d8553a8003f33369e1aa027534d6fc60db15c615b8d01d46ea9cef8512800639d8d8221657787cacfde63e0555e8e3c764a8f486c8e5728f4eff9b6f2f33f07ce55342b772c9794d15d24e26f37a491c934a6356907ee5534b9c832d7d9cc1e077b1a41a63a754848de66ce9b5ab3db842af1caf5f1f1b28be17561996bf5c29b0188e04678d9692b7048e989aef9024561b941245e7d50514125e5275d859e49b5eb53ba27a2639f70d095e90462f257773612f386d2e1ca1f3dfccf279346744e8e699bcdffdc64b9daaa6972b827c302ed3451613c119462010f637377c31d5009652343f81f21674450a5adbd7c2ea7794dbfce9622cb6e715be767c8eacf7eb4fd0e4ba34ff3ef98a0f8f92a961004bd4b9908fd328fbbf816229c8bf697964911c33236617ab6fe396439802bbcf02ee0444d9cad12305448527029740e4cdb93bcef076503da315311eaca4cb5d12a7a34b8475a9379fe32fdae2bb048e02e54653deb6accb4ff112ad086ba13581883b6c6a9109651e7450d289f5b1fb4f94d4031c2665edce971e7f596776f9504f270b9660cf86b2e281b1b228f75379ecf4ed1ac98f7bd2ceb1ee4d36c15aba94c4839834766f831437142c9aeddd2ccbb6c98eb8445f835af71878bb88760651bec5c95f23b7f63171097968f5496b76a462deed7f379f9b0bef5de92e36499d8156f16c6b875311058fbfa64c81631202b2ccb665abd29fc3b62db74f2bbdae3c6151255d183f8e5c486b8e4f35754e9020939128e2c9bda7ad24c84afc095c11cd685570fb8c0068f6b895b1faa8638948342bf939f1330625bd7757bbb5ae6e44137525937c630a66d3808d1097a2aba68eee57534a052806c753962a4428ae2661259149bad50392b342347967a7efb3d9178eef9313da39c6415a6aefc66dc985ab7555793dc6526fd64cca3c07c1f084e37691c4e9e60c0acecc41c6d07d73c27e151c0ef04c4eb03dae72fed5086bd82cc26cdc6cd9d241d4ed9cf9cc2ac5d4a7665ba59ce1a664a26b91040ac93c5c5c1638468ecc50999dbf10dd8dcc9c47d4018195f210d43932848ceb75400b8d3b537890a1b14bbed51dcff2925a6fd0e968598b9f823cfa94fc3812475b0c5f1770fab2e61587dad7ce7e08ca64b3f1bcd758f3cfe4df29669d4b926b80514f5a6be540966b44ce7b80398f845062ba60d2e04fbfa982a45a6f330b9683188902b41f1d8bf29d003490c8f541433b89b7ea16e4bc2ee0b620dcfacb605bc18c88c1013d4128aba56f0147676becc97eba4a8434184aecc1073628141b955e3fe5d9186aaa4c72f72b336f61df5346663e1b0684f4b4d8b70f4ccf370d245c2a7f39650d21ad54aa5163300b3a31730cd181e0d12d4f63d803c02d31cddf36ec4a8534f2c41c4b1ddb9bbbe02b165fad1bd2d92ac8308e8990f138fdd26ae765c75fd45047e05e1afa9d3f11bff8d83ff39ad69cc7b5dde69ca24a8ba95bd9281548eba472b7faf8730af299d11d146b82df673c23ef8ee0c02129f4bd2d33a160e476e40faf42c8579cd6e913c271bdbae1cf0646161aeb1b0ce34b92472d29100ca5701365d739f3861ce13807e44de62af3ad69d45e2b5f6a06179571d6cca29ab3c48c6953a9012cd646dd2db4170d745d019637d1315769b9bae0b420e577e43bc73a4df85428c2fbd6826fa8d36579457b65012ff3744bcb020d85d234cd91651bacfb7c3c4d3990e7d5339571cbc8f44a10b450a6eedadad7eaee1a8a8bc124f4bb5705b5226eafe39f9764d2519ffe62c9167c116aa5d7c3a22b9b3313bda7b300c44b4d45e2b8096b562d558ad36ed4ac96908bb97d8c042a2bd0f502506743669a07a2c4299c06a67f20708e70fe8896292cad64140f0d530d696081bb15e60884892cafe0feb7b1496517a2e27a78f4d3d8854cd4885c292f4fad11337260b791c4f008daff7596021816916998450240506c362ba8643c4466fbbed0ddd9b2f1af25e9cd72d07c496383a3fb9e73a95b82ba464cbf41d73e7d1e82e2b4e37cdb064cb190e94e1b536e81c85823fb70ccf252b35bce8269aae8ab978496d16e021154944d411c45490f8a2ed476213a8db1ad0947f4f14396c01e32ccf63562bc69bfa8363236c4b46cc4c510054d3f98280ceb5a82cb88fdc74abb7a0aa8bf3c0da744ca07b716f891c95e2a329c67e98b5a9a0519c53dc780ac9eefe08071f140f1fef978b6459d28b286e3319492ca621b62f16b69e5ed5b6b05b373b2a4d137083910043a13b2aa85435ad5ee26870e1a1dd8ded11298bf2c778732c26952eed3127bf64854f16f3347f7c03a16857861a24356a8c16f2a3d6f7d1e0afcfd48d36728b5797140bfe9db260", 0x95a) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=ANY=[], 0x45c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 2.358927637s ago: executing program 3 (id=328): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x3}, 0x10003, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) rt_sigpending(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000013000000080000000b"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000240)=r4}, 0x20) unshare(0x22020400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x9, 0x6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r10, 0xffffffffffffffff, 0x200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r7, 0xfce, 0x7fff, 0x1}) socket$igmp(0x2, 0x3, 0x2) 1.7832039s ago: executing program 0 (id=338): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x258) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) write$binfmt_misc(r1, &(0x7f00000012c0)="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", 0x95a) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) 1.742606831s ago: executing program 0 (id=339): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x4, &(0x7f0000001180)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2], 0x0, 0x7ff, 0x3a, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa0) utime(&(0x7f00000003c0)='./file1\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="41ad9c9ebe21", 0x0, 0x6, 0x30010, 0x1, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000400000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], &(0x7f00000010c0)='syzkaller\x00', 0xc4c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x5}, 0x18) r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x4, &(0x7f0000001180)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2], 0x0, 0x7ff, 0x3a, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa0) utime(&(0x7f00000003c0)='./file1\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="41ad9c9ebe21", 0x0, 0x6, 0x30010, 0x1, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000400000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], &(0x7f00000010c0)='syzkaller\x00', 0xc4c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x5}, 0x18) r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f00000001c0)=0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c089}, 0x20000001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r3, 0x0, 0x0) rmdir(&(0x7f00000018c0)='./file0\x00') sendmmsg$sock(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001980)="d113bffffe6bc772209af81b68aa9efa00616052cdc76c4bac23595354497763b0e5affff559fd8b7d2dfa58c4665562804d39a62ac51a1a1064829642352a715b59efcf30442cb97ca33d63f309643ff6964523ede2519cc5eb0fba4ec5e0ab09e2ad85c199c2179416748457705a5ec4ab7dbe0f825f6c9092c7666844847171f414c15e2acb64bf41d35cc4baeda85cfca47af0a10cdfa7b154b8dbf3726ac47f5a17e75c0bf698ba2fcc00", 0xad}, {&(0x7f0000001a40)="ea4d473e175789bd2798b190f7328d5db70d5329cd478dea6dcb7f07368accfb22d6f565b52fa3240d6d89b683a6f48fdda09a673b1d194479c5b41239b2c21225b1c2492a093c1fd3cfbc344eb34b73e358ada0fd175f7147f7b62f", 0x5c}, {&(0x7f0000001ac0)="e2c91d393e704ab228c52465174053468ca98db38e34600269b4f6c49ff29e328d8ef0", 0x23}, {&(0x7f0000001b00)="c37389d33039cff8169751472684d35ca6b114d0b293e488712365eb6e69a50a87b5d24495e30f8992f90eb8e79777f9e8fd47c57f54e6cb4a5e13bceedcb5c8c3e437023c1490eaa7caff00e69d58ee1d9080a8ecf431881574b4451bad9799a901ab6b3634a7a7c25a2d39907c57376629f21e857dab", 0x77}], 0x4, &(0x7f0000001bc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x90}}], 0x1, 0x4040) fcntl$lock(0xffffffffffffffff, 0x2, &(0x7f0000001d40)={0x1, 0x2, 0x2b3, 0x7}) mq_unlink(&(0x7f0000001d80)='\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001dc0)=[r3, r3, r2, r2, 0xffffffffffffffff, r3, r0], 0x7) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001e00)={0x0, 0x2}, &(0x7f0000001e40)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001e80)={r4, 0x6}, &(0x7f0000001ec0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x5, 0x25, &(0x7f0000001f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x1, 0x9, 0x5, 0x0, 0x8}, @ldst={0x1, 0x1, 0x6, 0x7, 0xb, 0x30, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000002080)='syzkaller\x00', 0x2, 0xc6, &(0x7f00000020c0)=""/198, 0x41100, 0x8, '\x00', r1, @fallback=0x27, r0, 0x8, &(0x7f00000021c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002200)={0x1, 0x0, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002280)=[{0x2, 0x2, 0x8}, {0x0, 0x4, 0x3, 0x2}], 0x10, 0x9}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000002480)={r5, 0x4, 0x5, [0x6, 0x8, 0x0, 0x2, 0x8]}, 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002580)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002500)="77487bf122a1327ae7d57fd39963067ab29a219715c2629ff8eaa364bf593368c082c8b365fb4dece50d09561464feb7e81d772a06899d1c40ac749680a5db446f70294fb2e3bd5faf0c6ec902dcdd478264e72a97281c22e5c92005c1d8128c54dbc93a86af6bd77496d96a3bc22bed643b5c5cd5881e8569ca093977ca5c", 0x7f}, 0x68) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000002740)={{}, 0x0, 0x12, @inherit={0x78, &(0x7f00000026c0)={0x0, 0x6, 0x2d2, 0x7, {0x1c, 0xc2, 0x20080000000000, 0x2, 0x5}, [0x1413815b, 0xfffffffffffffff9, 0x8d, 0x7fff, 0x7fffffff, 0x6]}}, @name="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"}) pwrite64(r2, &(0x7f0000003740)="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", 0x1000, 0x8000) 1.244878473s ago: executing program 3 (id=345): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) 1.231596873s ago: executing program 1 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r0, 0x0, 0x1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) msync(&(0x7f0000755000/0x1000)=nil, 0x1000, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) 1.101174534s ago: executing program 4 (id=347): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x160) 1.100336714s ago: executing program 0 (id=348): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0xf, 0x0, 0x0, 0x9050cdeecda640f1, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='tlb_flush\x00', r0, 0x0, 0x10000007fffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) 1.032601194s ago: executing program 4 (id=349): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYBLOB="84b1fe6c17494272321ec6fc9dc75a1a0cd9708373779c0ffed0b56412ea6ca920b0ac160a0289bd4edec9a8742267faf0fe1f687665fb97728b384b9a683904a3d1cd9a104844d31b21467807910cb8d98865c949aa26fffc2e771a791fa715f04761721a62fbbb959be28128374a63bd004bfc8ef5b6d0d1e674d933d8f4f6cca2bda441f5199aa6a419e4741ee7d35002acb8648f7e44aff6da1918bb422ea39e3594296d8a59c3c5560b04afe4899e707a96b90a", @ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x10000, 0x3, {{0x25, 0x4, 0x0, 0x3a, 0x94, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@generic={0x44, 0x12, "c28d621d3d45c593c468812c26158db9"}, @timestamp_prespec={0x44, 0xc, 0xa2, 0x3, 0x1, [{@empty, 0x4}]}, @cipso={0x86, 0x5f, 0x3, [{0x5, 0x5, "6ed18c"}, {0x2, 0xf, "87f91cf590c7a00555f5e56ae2"}, {0x5, 0xa, "b8a97f0acba3be7a"}, {0x6, 0xe, "502f69903d01e8b1a05ada21"}, {0x7, 0xc, "42e8c2daff391ad4057b"}, {0x1, 0xa, "e1acdc7569e4a913"}, {0x1, 0x2}, {0x2, 0x4, "78ee"}, {0x6, 0x11, "ed7afbdb62d2cf12cb298e99da1cff"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', r4, 0x2f, 0x9, 0x4, 0xfffffff9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x8000, 0x7, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) prctl$PR_SET_NAME(0xf, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080)) r13 = socket$unix(0x1, 0x2, 0x0) listen(r13, 0x0) 1.031902174s ago: executing program 1 (id=350): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 1.012037315s ago: executing program 2 (id=351): futimesat(0xffffffffffffffff, 0x0, 0x0) 1.005258695s ago: executing program 4 (id=352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) r3 = getpgrp(0x0) capget(&(0x7f0000000240)={0x20071026, r3}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x8d, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 968.223845ms ago: executing program 3 (id=353): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x6, [0xeb, 0xdf, 0x8000000000000001, 0x6, 0x8, 0x3]}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000400)="8e71e91a9810bac4b0867304bb14036545942d457ddb486df1ee021c51ccf31227c4ea9c5e528e06055050dfd6a9b2e7d760292dd310c99ccb8c97d12d1f1961005973a78a90bface229eeb9a21cfc11b00c14087544f580c6efbeec967e1edea482fbb197b2276621279f47f9fdf0516fd5abdf1d2e96f5d0aa733d11fa28fff8012ceed4bfe65d4977baa2262e3cae20ab6bec74c7647cf7d3d32fbf45a7b5bb68c38fd89e9b6e8c5c5f8b263475b6a4275dde402ff6cebb968a8e6e76d3c82927ab55a3cee7e53f2ba03c8e9033d0397ad0dd93fb12", &(0x7f0000000700)=""/204, 0x4}, 0x20) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x9, 0xfc, 0x0, 0x0, 0x2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e0800034000000004e30001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32000000001400000011"], 0xc0}}, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004885}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@usrjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d7, &(0x7f0000001200)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) 921.548515ms ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414aa030490781206183f2500010000670000008900007f000001e000000200186371ae9b1c03"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000002080)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$igmp(0x2, 0x3, 0x2) statx(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x400, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace_dev_match', 0x0, 0x40) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4e22, 0x3, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x84, 0x0, r7}, {0xfffffffffffffffe, 0x5, 0xda7c, 0x2, 0x764, 0x3, 0x9, 0x2}, {0x5, 0xffffffff, 0x5, 0xfffffffffffffff9}, 0xfffff145, 0x6e6bb8, 0x0, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in=@private=0xa010102, 0x3507, 0x2, 0x2, 0x7, 0xff00000, 0x7ff, 0x2}}, 0xe8) rename(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040)='./cgroup.net/devices.allow\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e6ffffffffffffff00000000000000"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000004c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@data_err_abort}, {@nogrpid}, {@init_itable}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 887.556235ms ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x3, 0xf3}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 833.662246ms ago: executing program 1 (id=356): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x258) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @link_local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=ANY=[], 0x45c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 665.242827ms ago: executing program 0 (id=357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x258) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) write$binfmt_misc(r1, &(0x7f00000012c0)="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", 0x95a) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) 664.446737ms ago: executing program 0 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000f5ffd9ae00"/22, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbee9, 0x1010, 0xffffffffffffffff, 0x2c3ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff020ddb79bfa100004e67fad106ffffffb702000008000000c50300000300000085000000060000009500000000000000ac7a0dcfd09709167241e1d8e43ca04f76f00fbdb513ca7c1290eb0c34c74126117e09be83976cba7a43934b00cdb079813c30bd7bad71d46b28e0f38d1e812e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r6, @ANYRES32=r4, @ANYBLOB="73c6a3ec593d7e95d0c312f674b994310e9e94751b9d33f76dc26920eaeb0fef1a5a0a56960f1d1b5d6aa565250c8640f31863f773e30ab4624905f8391b1b3229ab27f304af3457ca1b3eb610fcb7f15dee8e847c836fe1a4ad038cd5d0f4a170e12633e045f5a51dcd9caac2bb4368b01ab68234632b190613eb953b916eaca58f25c325451922141abc54323a561cfaa445063d8c98c3c240b8b73df6", @ANYRESOCT=r0, @ANYRESOCT=r7, @ANYRES8=0x0, @ANYRES16=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES16=r8, @ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) getrlimit(0xe, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r12) fsetxattr$security_selinux(r10, &(0x7f0000000280), &(0x7f0000000040)='system_u:object_r:ipmi_device_t:s0\x00', 0x23, 0x0) epoll_create1(0x80000) eventfd2(0xfffffff1, 0x80801) 605.609227ms ago: executing program 0 (id=359): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x0, 0xa0}, 0x90) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 139.23221ms ago: executing program 4 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 108.83093ms ago: executing program 4 (id=361): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x4, &(0x7f0000001180)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2], 0x0, 0x7ff, 0x3a, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa0) utime(&(0x7f00000003c0)='./file1\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="41ad9c9ebe21", 0x0, 0x6, 0x30010, 0x1, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000400000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], &(0x7f00000010c0)='syzkaller\x00', 0xc4c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x5}, 0x18) r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x8000, 0x1, 0x10000, 0x3, {{0x25, 0x4, 0x0, 0x3a, 0x94, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@generic={0x44, 0x12, "c28d621d3d45c593c468812c26158db9"}, @timestamp_prespec={0x44, 0xc, 0xa2, 0x3, 0x1, [{@empty, 0x4}]}, @cipso={0x86, 0x5f, 0x3, [{0x5, 0x5, "6ed18c"}, {0x2, 0xf, "87f91cf590c7a00555f5e56ae2"}, {0x5, 0xa, "b8a97f0acba3be7a"}, {0x6, 0xe, "502f69903d01e8b1a05ada21"}, {0x7, 0xc, "42e8c2daff391ad4057b"}, {0x1, 0xa, "e1acdc7569e4a913"}, {0x1, 0x2}, {0x2, 0x4, "78ee"}, {0x6, 0x11, "ed7afbdb62d2cf12cb298e99da1cff"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', r4, 0x2f, 0x9, 0x4, 0xfffffff9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x8000, 0x7, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) prctl$PR_SET_NAME(0xf, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080)) r13 = socket$unix(0x1, 0x2, 0x0) listen(r13, 0x0) 62.25203ms ago: executing program 3 (id=364): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff07}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000001600)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002740)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x4, [@const={0x4, 0x0, 0x0, 0xa, 0x5}, @struct={0xe, 0x5, 0x0, 0x4, 0x0, 0x3, [{0x5, 0x5, 0x7ff}, {0x6, 0x0, 0x1}, {0x1, 0x4, 0x7fffffff}, {0x10, 0x2, 0x1}, {0x3, 0x2, 0xc1d}]}, @fwd={0x10}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7}, {0x9, 0x3}, {0xb, 0x5}, {0x3, 0x5}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @float={0x7, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x101}}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000001740)=""/4096, 0xf4, 0x1000, 0x1, 0xd82}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0xfff, 0x3, 0x0, 0x7, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002dc0)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa}, {0xb}, {0x0, 0x6}}, [{0x8, 0xb, 0x700000}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x4}]}, 0x3c}}, 0x4042010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ac0)={{}, &(0x7f0000002a40), &(0x7f0000002a80)='%pK \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b00)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) 50.15101ms ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000000), &(0x7f0000000180)=r6}, 0x20) sendto$inet6(r0, &(0x7f0000000d00)="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"/406, 0x1ea, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x6}, 0x1c) 0s ago: executing program 2 (id=366): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1000000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): _socket permissive=1 [ 28.299971][ T29] audit: type=1400 audit(1762610660.144:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.320351][ T29] audit: type=1400 audit(1762610660.154:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.340663][ T29] audit: type=1400 audit(1762610660.164:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.349697][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.365459][ T29] audit: type=1400 audit(1762610660.164:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.397246][ T29] audit: type=1400 audit(1762610660.274:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.442653][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.661086][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.702359][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.745163][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.773447][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.780599][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.787833][ T3321] bridge_slave_0: entered allmulticast mode [ 29.794329][ T3321] bridge_slave_0: entered promiscuous mode [ 29.804726][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.811869][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.818970][ T3321] bridge_slave_1: entered allmulticast mode [ 29.825338][ T3321] bridge_slave_1: entered promiscuous mode [ 29.831790][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.875070][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.887169][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.912367][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.923683][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.930783][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.937990][ T3314] bridge_slave_0: entered allmulticast mode [ 29.944307][ T3314] bridge_slave_0: entered promiscuous mode [ 29.969376][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.976424][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.983675][ T3314] bridge_slave_1: entered allmulticast mode [ 29.990166][ T3314] bridge_slave_1: entered promiscuous mode [ 30.023449][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.030574][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.037723][ T3313] bridge_slave_0: entered allmulticast mode [ 30.044163][ T3313] bridge_slave_0: entered promiscuous mode [ 30.051361][ T3321] team0: Port device team_slave_0 added [ 30.057220][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.064303][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.071506][ T3313] bridge_slave_1: entered allmulticast mode [ 30.077887][ T3313] bridge_slave_1: entered promiscuous mode [ 30.096058][ T3321] team0: Port device team_slave_1 added [ 30.106830][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.113997][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.121204][ T3315] bridge_slave_0: entered allmulticast mode [ 30.127646][ T3315] bridge_slave_0: entered promiscuous mode [ 30.135215][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.144461][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.151546][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.158696][ T3315] bridge_slave_1: entered allmulticast mode [ 30.165045][ T3315] bridge_slave_1: entered promiscuous mode [ 30.184209][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.218629][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.228084][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.235028][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.260958][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.278121][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.292236][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.299391][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.306582][ T3319] bridge_slave_0: entered allmulticast mode [ 30.312984][ T3319] bridge_slave_0: entered promiscuous mode [ 30.320540][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.329637][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.336681][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.343858][ T3319] bridge_slave_1: entered allmulticast mode [ 30.350261][ T3319] bridge_slave_1: entered promiscuous mode [ 30.356553][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.363627][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.389529][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.401272][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.416582][ T3314] team0: Port device team_slave_0 added [ 30.444643][ T3314] team0: Port device team_slave_1 added [ 30.456159][ T3313] team0: Port device team_slave_0 added [ 30.462668][ T3313] team0: Port device team_slave_1 added [ 30.469618][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.479365][ T3315] team0: Port device team_slave_0 added [ 30.486181][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.515061][ T3315] team0: Port device team_slave_1 added [ 30.526296][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.533257][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.559305][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.589544][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.596495][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.622677][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.633707][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.640703][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.666683][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.678256][ T3319] team0: Port device team_slave_0 added [ 30.690822][ T3321] hsr_slave_0: entered promiscuous mode [ 30.696925][ T3321] hsr_slave_1: entered promiscuous mode [ 30.711399][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.718465][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.744427][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.758936][ T3319] team0: Port device team_slave_1 added [ 30.765068][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.772096][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.798060][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.809444][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.816390][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.842342][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.866818][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.873857][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.899758][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.911688][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.918663][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.944623][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.990145][ T3314] hsr_slave_0: entered promiscuous mode [ 30.996240][ T3314] hsr_slave_1: entered promiscuous mode [ 31.002291][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 31.008057][ T3314] Cannot create hsr debugfs directory [ 31.040168][ T3313] hsr_slave_0: entered promiscuous mode [ 31.046201][ T3313] hsr_slave_1: entered promiscuous mode [ 31.052139][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.057874][ T3313] Cannot create hsr debugfs directory [ 31.077653][ T3315] hsr_slave_0: entered promiscuous mode [ 31.083727][ T3315] hsr_slave_1: entered promiscuous mode [ 31.089595][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 31.096067][ T3315] Cannot create hsr debugfs directory [ 31.116422][ T3319] hsr_slave_0: entered promiscuous mode [ 31.122517][ T3319] hsr_slave_1: entered promiscuous mode [ 31.128352][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.134072][ T3319] Cannot create hsr debugfs directory [ 31.310357][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.319331][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.327784][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.339083][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.369896][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.385241][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.395214][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.404347][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.416104][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.427010][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.440622][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.451081][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.492813][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.503439][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.513031][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.523065][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.538512][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.571017][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.581686][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.591092][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.601020][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.621361][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.637538][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.651877][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.658963][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.668118][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.675177][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.695741][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.709079][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.716138][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.737788][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.744877][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.755316][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.769406][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.785780][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.801936][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.809023][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.821365][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.833746][ T571] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.840840][ T571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.853081][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.863588][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.894673][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.901782][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.910354][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.917449][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.940816][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.951292][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.967256][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.002510][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.025751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.032890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.056095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.063195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.109616][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.124089][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.139976][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.150703][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.205933][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.311571][ T3319] veth0_vlan: entered promiscuous mode [ 32.343652][ T3314] veth0_vlan: entered promiscuous mode [ 32.355831][ T3319] veth1_vlan: entered promiscuous mode [ 32.372670][ T3314] veth1_vlan: entered promiscuous mode [ 32.379881][ T3321] veth0_vlan: entered promiscuous mode [ 32.395682][ T3319] veth0_macvtap: entered promiscuous mode [ 32.410789][ T3315] veth0_vlan: entered promiscuous mode [ 32.422725][ T3319] veth1_macvtap: entered promiscuous mode [ 32.429587][ T3321] veth1_vlan: entered promiscuous mode [ 32.449914][ T3314] veth0_macvtap: entered promiscuous mode [ 32.467228][ T3313] veth0_vlan: entered promiscuous mode [ 32.473641][ T3314] veth1_macvtap: entered promiscuous mode [ 32.480502][ T3315] veth1_vlan: entered promiscuous mode [ 32.486898][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.496223][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.516017][ T571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.529347][ T3313] veth1_vlan: entered promiscuous mode [ 32.535976][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.544193][ T3321] veth0_macvtap: entered promiscuous mode [ 32.554312][ T571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.567548][ T3315] veth0_macvtap: entered promiscuous mode [ 32.576188][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.586134][ T3315] veth1_macvtap: entered promiscuous mode [ 32.593284][ T571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602479][ T571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.616123][ T571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629432][ T3321] veth1_macvtap: entered promiscuous mode [ 32.641460][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.653052][ T571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668291][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.677732][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.694229][ T571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707128][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.717477][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.728352][ T571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.747808][ T3313] veth0_macvtap: entered promiscuous mode [ 32.756790][ T571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.769353][ T3313] veth1_macvtap: entered promiscuous mode [ 32.778094][ T571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.787349][ T317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.813172][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.820781][ T317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839526][ T317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.854484][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.867884][ T317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.904062][ T317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.910112][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 32.910130][ T29] audit: type=1400 audit(1762610664.804:98): avc: denied { create } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.939259][ T317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.967708][ T317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.995936][ T317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.023074][ T317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.028186][ T29] audit: type=1400 audit(1762610664.834:99): avc: denied { write } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.042207][ T317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050861][ T29] audit: type=1400 audit(1762610664.834:100): avc: denied { connect } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.078818][ T29] audit: type=1400 audit(1762610664.834:101): avc: denied { name_connect } for pid=3486 comm="syz.3.6" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 33.100607][ T29] audit: type=1400 audit(1762610664.844:102): avc: denied { setopt } for pid=3486 comm="syz.3.6" laddr=172.20.20.170 lport=42313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.122652][ T29] audit: type=1400 audit(1762610664.844:103): avc: denied { create } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.141819][ T29] audit: type=1400 audit(1762610664.844:104): avc: denied { bind } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.160760][ T29] audit: type=1400 audit(1762610664.844:105): avc: denied { write } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.179822][ T29] audit: type=1400 audit(1762610664.844:106): avc: denied { open } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.198772][ T29] audit: type=1400 audit(1762610664.844:107): avc: denied { kernel } for pid=3486 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.300402][ T3505] loop2: detected capacity change from 0 to 512 [ 33.332394][ T3507] loop0: detected capacity change from 0 to 1024 [ 33.340222][ T3507] EXT4-fs: Ignoring removed orlov option [ 33.347985][ T3505] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3: inode #0: comm syz.2.3: iget: illegal inode # [ 33.365822][ T3505] EXT4-fs (loop2): get orphan inode failed [ 33.394216][ T3505] EXT4-fs (loop2): mount failed [ 33.401574][ C1] hrtimer: interrupt took 36508 ns [ 33.409980][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.452226][ T3518] loop3: detected capacity change from 0 to 512 [ 33.530736][ T3524] loop4: detected capacity change from 0 to 512 [ 33.546819][ T3524] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.10: inode #0: comm syz.4.10: iget: illegal inode # [ 33.580428][ T3527] loop1: detected capacity change from 0 to 512 [ 33.588547][ T3524] EXT4-fs (loop4): get orphan inode failed [ 33.602750][ T3524] EXT4-fs (loop4): mount failed [ 33.618352][ T3527] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 33.637674][ T3518] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.6: inode #0: comm syz.3.6: iget: illegal inode # [ 33.664906][ T3518] EXT4-fs (loop3): get orphan inode failed [ 33.671330][ T3518] EXT4-fs (loop3): mount failed [ 33.721024][ T3527] EXT4-fs (loop1): 1 truncate cleaned up [ 33.727426][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.744821][ T3527] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.872994][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.956565][ T3533] Bluetooth: hci0: sending frame failed (-49) [ 33.963187][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 34.096578][ T3487] syz.3.6 (3487) used greatest stack depth: 7096 bytes left [ 34.143469][ T3539] loop3: detected capacity change from 0 to 1024 [ 34.186321][ T3540] loop2: detected capacity change from 0 to 1024 [ 34.213924][ T3539] EXT4-fs: Ignoring removed orlov option [ 34.222734][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.235496][ T3540] ======================================================= [ 34.235496][ T3540] WARNING: The mand mount option has been deprecated and [ 34.235496][ T3540] and is ignored by this kernel. Remove the mand [ 34.235496][ T3540] option from the mount to silence this warning. [ 34.235496][ T3540] ======================================================= [ 34.303614][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.326512][ T3544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.348587][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.356006][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.363488][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.371103][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.378632][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.386016][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.393459][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.401041][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.408450][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.415827][ T3421] hid-generic 0006:0002:0008.0001: unknown main item tag 0x0 [ 34.456368][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.471411][ T3421] hid-generic 0006:0002:0008.0001: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 34.471482][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.518231][ T3396] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 34.533340][ T3549] fido_id[3549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.612424][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.642216][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.674036][ T3571] loop3: detected capacity change from 0 to 512 [ 34.695136][ T3572] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16'. [ 34.726151][ T3571] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 34.739573][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.755260][ T3571] EXT4-fs (loop3): 1 truncate cleaned up [ 34.771691][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.787624][ T3571] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 35.424310][ T3604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.433706][ T3602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 35.439482][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.450094][ T23] hid-generic 0006:0002:0008.0002: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 35.496239][ T3605] fido_id[3605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.498084][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.520794][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.598288][ T3395] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.667296][ T3621] loop3: detected capacity change from 0 to 512 [ 35.689847][ T3621] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.35: inode #0: comm syz.3.35: iget: illegal inode # [ 35.735438][ T3621] EXT4-fs (loop3): get orphan inode failed [ 35.760828][ T3621] EXT4-fs (loop3): mount failed [ 35.845662][ T3629] loop1: detected capacity change from 0 to 1024 [ 35.863274][ T3629] EXT4-fs: Ignoring removed orlov option [ 35.877602][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.890259][ T317] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.104349][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.288321][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.297473][ T3615] syz.3.35 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 36.311476][ T3615] CPU: 1 UID: 0 PID: 3615 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.311511][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.311528][ T3615] Call Trace: [ 36.311534][ T3615] [ 36.311609][ T3615] __dump_stack+0x1d/0x30 [ 36.311639][ T3615] dump_stack_lvl+0xe8/0x140 [ 36.311662][ T3615] dump_stack+0x15/0x1b [ 36.311688][ T3615] dump_header+0x81/0x220 [ 36.311714][ T3615] oom_kill_process+0x342/0x400 [ 36.311809][ T3615] out_of_memory+0x979/0xb80 [ 36.311869][ T3615] try_charge_memcg+0x610/0xa10 [ 36.311979][ T3615] obj_cgroup_charge_pages+0xa6/0x150 [ 36.312007][ T3615] __memcg_kmem_charge_page+0x9f/0x170 [ 36.312035][ T3615] __alloc_frozen_pages_noprof+0x188/0x360 [ 36.312140][ T3615] alloc_pages_mpol+0xb3/0x260 [ 36.312167][ T3615] ? alloc_pages_noprof+0x61/0x130 [ 36.312200][ T3615] alloc_pages_noprof+0x90/0x130 [ 36.312219][ T3615] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 36.312313][ T3615] __kvmalloc_node_noprof+0x483/0x670 [ 36.312356][ T3615] ? ip_set_alloc+0x24/0x30 [ 36.312442][ T3615] ? ip_set_alloc+0x24/0x30 [ 36.312495][ T3615] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 36.312538][ T3615] ip_set_alloc+0x24/0x30 [ 36.312607][ T3615] hash_netiface_create+0x282/0x740 [ 36.312652][ T3615] ? __pfx_hash_netiface_create+0x10/0x10 [ 36.312688][ T3615] ip_set_create+0x3cc/0x970 [ 36.312751][ T3615] ? __nla_parse+0x40/0x60 [ 36.312781][ T3615] nfnetlink_rcv_msg+0x4c6/0x590 [ 36.312835][ T3615] netlink_rcv_skb+0x123/0x220 [ 36.312939][ T3615] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 36.312984][ T3615] nfnetlink_rcv+0x167/0x16c0 [ 36.313053][ T3615] ? kmem_cache_free+0xe4/0x3d0 [ 36.313096][ T3615] ? __kfree_skb+0x109/0x150 [ 36.313126][ T3615] ? nlmon_xmit+0x4f/0x60 [ 36.313210][ T3615] ? consume_skb+0x49/0x150 [ 36.313247][ T3615] ? nlmon_xmit+0x4f/0x60 [ 36.313277][ T3615] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 36.313385][ T3615] ? __dev_queue_xmit+0x1200/0x2000 [ 36.313407][ T3615] ? __dev_queue_xmit+0x182/0x2000 [ 36.313460][ T3615] ? ref_tracker_free+0x37d/0x3e0 [ 36.313515][ T3615] ? __netlink_deliver_tap+0x4dc/0x500 [ 36.313577][ T3615] netlink_unicast+0x5c0/0x690 [ 36.313610][ T3615] netlink_sendmsg+0x58b/0x6b0 [ 36.313633][ T3615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.313728][ T3615] __sock_sendmsg+0x145/0x180 [ 36.313764][ T3615] ____sys_sendmsg+0x31e/0x4e0 [ 36.313815][ T3615] ___sys_sendmsg+0x17b/0x1d0 [ 36.313899][ T3615] __x64_sys_sendmsg+0xd4/0x160 [ 36.313924][ T3615] x64_sys_call+0x191e/0x3000 [ 36.314034][ T3615] do_syscall_64+0xd2/0x200 [ 36.314062][ T3615] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.314101][ T3615] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.314216][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.314240][ T3615] RIP: 0033:0x7fc0bcc8f6c9 [ 36.314260][ T3615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.314282][ T3615] RSP: 002b:00007fc0bb6ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.314307][ T3615] RAX: ffffffffffffffda RBX: 00007fc0bcee5fa0 RCX: 00007fc0bcc8f6c9 [ 36.314345][ T3615] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 36.314358][ T3615] RBP: 00007fc0bcd11f91 R08: 0000000000000000 R09: 0000000000000000 [ 36.314375][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.314391][ T3615] R13: 00007fc0bcee6038 R14: 00007fc0bcee5fa0 R15: 00007ffcc8541818 [ 36.314422][ T3615] [ 36.314431][ T3615] memory: usage 307200kB, limit 307200kB, failcnt 430 [ 36.373198][ T3641] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 36.378157][ T3615] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 36.562213][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.566566][ T3615] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 36.566585][ T3615] Memory cgroup stats for /syz3 [ 36.572860][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.578492][ T3615] : [ 36.708629][ T3615] cache 0 [ 36.714028][ T3615] rss 0 [ 36.716816][ T3615] shmem 0 [ 36.719924][ T3615] mapped_file 0 [ 36.723467][ T3615] dirty 0 [ 36.726414][ T3615] writeback 0 [ 36.729871][ T3615] workingset_refault_anon 121 [ 36.734545][ T3615] workingset_refault_file 894 [ 36.739271][ T3615] swap 176128 [ 36.742555][ T3615] swapcached 24576 [ 36.746264][ T3615] pgpgin 7603 [ 36.749614][ T3615] pgpgout 7596 [ 36.753015][ T3615] pgfault 6379 [ 36.756500][ T3615] pgmajfault 87 [ 36.760037][ T3615] inactive_anon 24576 [ 36.764066][ T3615] active_anon 0 [ 36.767520][ T3615] inactive_file 4096 [ 36.771546][ T3615] active_file 0 [ 36.775016][ T3615] unevictable 0 [ 36.778504][ T3615] hierarchical_memory_limit 314572800 [ 36.783883][ T3615] hierarchical_memsw_limit 9223372036854771712 [ 36.790075][ T3615] total_cache 0 [ 36.793556][ T3615] total_rss 0 [ 36.796842][ T3615] total_shmem 0 [ 36.798185][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 36.800354][ T3615] total_mapped_file 0 [ 36.809660][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.810288][ T3615] total_dirty 0 [ 36.819879][ T3615] total_writeback 0 [ 36.823727][ T3615] total_workingset_refault_anon 121 [ 36.828941][ T3615] total_workingset_refault_file 894 [ 36.834141][ T3615] total_swap 176128 [ 36.837973][ T3615] total_swapcached 24576 [ 36.842280][ T3615] total_pgpgin 7603 [ 36.846074][ T3615] total_pgpgout 7596 [ 36.850003][ T3615] total_pgfault 6379 [ 36.853918][ T3615] total_pgmajfault 87 [ 36.857892][ T3615] total_inactive_anon 24576 [ 36.862422][ T3615] total_active_anon 0 [ 36.866462][ T3615] total_inactive_file 4096 [ 36.870906][ T3615] total_active_file 0 [ 36.874892][ T3615] total_unevictable 0 [ 36.878955][ T3615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.35,pid=3614,uid=0 [ 36.893409][ T3615] Memory cgroup out of memory: Killed process 3614 (syz.3.35) total-vm:93960kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 36.958429][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.966317][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 37.037216][ T3651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.050862][ T1036] hid-generic 0006:0002:0008.0003: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 37.081094][ T3652] fido_id[3652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.099859][ T3654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.111904][ T1036] hid-generic 0006:0002:0008.0004: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 37.122426][ T3615] syz.3.35 (3615) used greatest stack depth: 6136 bytes left [ 37.147702][ T3655] fido_id[3655]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.222116][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.260709][ T3664] loop2: detected capacity change from 0 to 1024 [ 37.268973][ T3666] FAULT_INJECTION: forcing a failure. [ 37.268973][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.277510][ T3664] EXT4-fs: Ignoring removed orlov option [ 37.282585][ T3666] CPU: 1 UID: 0 PID: 3666 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.282693][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.282711][ T3666] Call Trace: [ 37.282719][ T3666] [ 37.282729][ T3666] __dump_stack+0x1d/0x30 [ 37.282762][ T3666] dump_stack_lvl+0xe8/0x140 [ 37.282853][ T3666] dump_stack+0x15/0x1b [ 37.282878][ T3666] should_fail_ex+0x265/0x280 [ 37.282906][ T3666] should_fail+0xb/0x20 [ 37.282928][ T3666] should_fail_usercopy+0x1a/0x20 [ 37.283010][ T3666] _copy_from_user+0x1c/0xb0 [ 37.283046][ T3666] ___sys_sendmsg+0xc1/0x1d0 [ 37.283091][ T3666] __x64_sys_sendmsg+0xd4/0x160 [ 37.283123][ T3666] x64_sys_call+0x191e/0x3000 [ 37.283181][ T3666] do_syscall_64+0xd2/0x200 [ 37.283210][ T3666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.283249][ T3666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.283298][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.283343][ T3666] RIP: 0033:0x7fe59b52f6c9 [ 37.283363][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.283388][ T3666] RSP: 002b:00007fe599f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.283414][ T3666] RAX: ffffffffffffffda RBX: 00007fe59b785fa0 RCX: 00007fe59b52f6c9 [ 37.283432][ T3666] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000004 [ 37.283449][ T3666] RBP: 00007fe599f97090 R08: 0000000000000000 R09: 0000000000000000 [ 37.283466][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.283552][ T3666] R13: 00007fe59b786038 R14: 00007fe59b785fa0 R15: 00007ffc18e33b88 [ 37.283584][ T3666] [ 37.462760][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.543177][ T3681] FAULT_INJECTION: forcing a failure. [ 37.543177][ T3681] name failslab, interval 1, probability 0, space 0, times 1 [ 37.555864][ T3681] CPU: 0 UID: 0 PID: 3681 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.555917][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.555947][ T3681] Call Trace: [ 37.555954][ T3681] [ 37.555963][ T3681] __dump_stack+0x1d/0x30 [ 37.555991][ T3681] dump_stack_lvl+0xe8/0x140 [ 37.556079][ T3681] dump_stack+0x15/0x1b [ 37.556097][ T3681] should_fail_ex+0x265/0x280 [ 37.556118][ T3681] should_failslab+0x8c/0xb0 [ 37.556166][ T3681] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 37.556254][ T3681] ? __alloc_skb+0x101/0x320 [ 37.556286][ T3681] __alloc_skb+0x101/0x320 [ 37.556318][ T3681] netlink_alloc_large_skb+0xbf/0xf0 [ 37.556429][ T3681] netlink_sendmsg+0x3cf/0x6b0 [ 37.556451][ T3681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.556511][ T3681] __sock_sendmsg+0x145/0x180 [ 37.556538][ T3681] ____sys_sendmsg+0x31e/0x4e0 [ 37.556578][ T3681] ___sys_sendmsg+0x17b/0x1d0 [ 37.556620][ T3681] __x64_sys_sendmsg+0xd4/0x160 [ 37.556721][ T3681] x64_sys_call+0x191e/0x3000 [ 37.556744][ T3681] do_syscall_64+0xd2/0x200 [ 37.556765][ T3681] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.556794][ T3681] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.556886][ T3681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.556908][ T3681] RIP: 0033:0x7fe59b52f6c9 [ 37.556923][ T3681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.556993][ T3681] RSP: 002b:00007fe599f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.557012][ T3681] RAX: ffffffffffffffda RBX: 00007fe59b785fa0 RCX: 00007fe59b52f6c9 [ 37.557025][ T3681] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 37.557037][ T3681] RBP: 00007fe599f97090 R08: 0000000000000000 R09: 0000000000000000 [ 37.557049][ T3681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.557061][ T3681] R13: 00007fe59b786038 R14: 00007fe59b785fa0 R15: 00007ffc18e33b88 [ 37.557081][ T3681] [ 37.761385][ T3682] loop4: detected capacity change from 0 to 512 [ 37.772361][ T3683] loop3: detected capacity change from 0 to 512 [ 37.796173][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.810720][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.812442][ T3683] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.824362][ T3682] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.864248][ T3690] IPv6: sit1: Disabled Multicast RS [ 37.923154][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 37.923169][ T29] audit: type=1400 audit(1762610669.814:431): avc: denied { ioctl } for pid=3671 comm="syz.4.53" path="/7/bus/cpuset.effective_mems" dev="loop4" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.965721][ T3692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.991821][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.017552][ T3695] 9pnet_fd: Insufficient options for proto=fd [ 38.052361][ T29] audit: type=1326 audit(1762610669.934:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.075282][ T29] audit: type=1326 audit(1762610669.934:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.101462][ T3692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.119806][ T1036] hid-generic 0006:0002:0008.0005: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 38.124406][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.149949][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.161366][ T3700] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.164216][ T3698] fido_id[3698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.169478][ T29] audit: type=1400 audit(1762610670.064:434): avc: denied { mounton } for pid=3699 comm="syz.4.63" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 38.218775][ T3692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.291360][ T3692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.321484][ T29] audit: type=1326 audit(1762610670.174:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.344876][ T29] audit: type=1326 audit(1762610670.174:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.368197][ T29] audit: type=1326 audit(1762610670.174:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.391683][ T29] audit: type=1326 audit(1762610670.174:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.398600][ T3710] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.62' sets config #1 [ 38.415481][ T29] audit: type=1326 audit(1762610670.174:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.425838][ T3711] FAULT_INJECTION: forcing a failure. [ 38.425838][ T3711] name failslab, interval 1, probability 0, space 0, times 0 [ 38.447411][ T29] audit: type=1326 audit(1762610670.174:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 38.450420][ T3712] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 38.460137][ T3711] CPU: 0 UID: 0 PID: 3711 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.460241][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.460331][ T3711] Call Trace: [ 38.460340][ T3711] [ 38.460351][ T3711] __dump_stack+0x1d/0x30 [ 38.460383][ T3711] dump_stack_lvl+0xe8/0x140 [ 38.460502][ T3711] dump_stack+0x15/0x1b [ 38.460528][ T3711] should_fail_ex+0x265/0x280 [ 38.460555][ T3711] should_failslab+0x8c/0xb0 [ 38.460597][ T3711] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 38.460735][ T3711] ? __alloc_skb+0x101/0x320 [ 38.460780][ T3711] __alloc_skb+0x101/0x320 [ 38.460823][ T3711] netlink_alloc_large_skb+0xbf/0xf0 [ 38.460912][ T3711] netlink_sendmsg+0x3cf/0x6b0 [ 38.460942][ T3711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.460971][ T3711] __sock_sendmsg+0x145/0x180 [ 38.461008][ T3711] sock_write_iter+0x1a7/0x1f0 [ 38.461096][ T3711] do_iter_readv_writev+0x4a1/0x540 [ 38.461149][ T3711] vfs_writev+0x2df/0x8b0 [ 38.461229][ T3711] do_writev+0xe7/0x210 [ 38.461328][ T3711] __x64_sys_writev+0x45/0x50 [ 38.461369][ T3711] x64_sys_call+0x1e9a/0x3000 [ 38.461401][ T3711] do_syscall_64+0xd2/0x200 [ 38.461471][ T3711] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.461514][ T3711] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.461564][ T3711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.461612][ T3711] RIP: 0033:0x7f64d4fcf6c9 [ 38.461679][ T3711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.461703][ T3711] RSP: 002b:00007f64d3a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 38.461742][ T3711] RAX: ffffffffffffffda RBX: 00007f64d5226090 RCX: 00007f64d4fcf6c9 [ 38.461760][ T3711] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 38.461776][ T3711] RBP: 00007f64d3a16090 R08: 0000000000000000 R09: 0000000000000000 [ 38.461793][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.461811][ T3711] R13: 00007f64d5226128 R14: 00007f64d5226090 R15: 00007fff28fe2438 [ 38.461839][ T3711] [ 38.830854][ T571] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.839561][ T3724] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.845060][ T3725] 9pnet_fd: Insufficient options for proto=fd [ 38.858949][ T3723] FAULT_INJECTION: forcing a failure. [ 38.858949][ T3723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.872027][ T3723] CPU: 0 UID: 0 PID: 3723 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.872053][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.872098][ T3723] Call Trace: [ 38.872105][ T3723] [ 38.872113][ T3723] __dump_stack+0x1d/0x30 [ 38.872139][ T3723] dump_stack_lvl+0xe8/0x140 [ 38.872164][ T3723] dump_stack+0x15/0x1b [ 38.872186][ T3723] should_fail_ex+0x265/0x280 [ 38.872225][ T3723] should_fail+0xb/0x20 [ 38.872244][ T3723] should_fail_usercopy+0x1a/0x20 [ 38.872292][ T3723] _copy_from_user+0x1c/0xb0 [ 38.872420][ T3723] ___sys_sendmsg+0xc1/0x1d0 [ 38.872466][ T3723] __x64_sys_sendmsg+0xd4/0x160 [ 38.872494][ T3723] x64_sys_call+0x191e/0x3000 [ 38.872519][ T3723] do_syscall_64+0xd2/0x200 [ 38.872537][ T3723] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.872588][ T3723] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.872629][ T3723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.872655][ T3723] RIP: 0033:0x7f64d4fcf6c9 [ 38.872673][ T3723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.872709][ T3723] RSP: 002b:00007f64d3a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.872730][ T3723] RAX: ffffffffffffffda RBX: 00007f64d5225fa0 RCX: 00007f64d4fcf6c9 [ 38.872743][ T3723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 38.872806][ T3723] RBP: 00007f64d3a37090 R08: 0000000000000000 R09: 0000000000000000 [ 38.872820][ T3723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.872835][ T3723] R13: 00007f64d5226038 R14: 00007f64d5225fa0 R15: 00007fff28fe2438 [ 38.872877][ T3723] [ 38.875154][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056165][ T3720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 39.056170][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.065077][ T3720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 39.073270][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.197285][ T3735] loop1: detected capacity change from 0 to 1764 [ 39.213771][ T3737] loop2: detected capacity change from 0 to 512 [ 39.243919][ T3732] loop0: detected capacity change from 0 to 1024 [ 39.259941][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.273499][ T3732] EXT4-fs: Ignoring removed orlov option [ 39.282674][ T3737] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.306416][ T3732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.378588][ T3744] loop3: detected capacity change from 0 to 512 [ 39.602334][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.611794][ T3744] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.72: inode #0: comm syz.3.72: iget: illegal inode # [ 39.624703][ T3744] EXT4-fs (loop3): get orphan inode failed [ 39.632290][ T3744] EXT4-fs (loop3): mount failed [ 39.632591][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.690697][ T3757] loop2: detected capacity change from 0 to 2048 [ 39.719264][ T3757] Alternate GPT is invalid, using primary GPT. [ 39.725714][ T3757] loop2: p1 p2 p3 [ 39.729478][ T3757] loop2: partition table partially beyond EOD, truncated [ 39.850411][ T3762] loop2: detected capacity change from 0 to 164 [ 39.863445][ T3762] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.874124][ T3762] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.883039][ T3762] rock: directory entry would overflow storage [ 39.889396][ T3762] rock: sig=0x4f50, size=4, remaining=3 [ 39.895109][ T3762] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.906934][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.909499][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 39.917453][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 39.972981][ T3770] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 40.000605][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.008037][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.016625][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.055038][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.062518][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.216088][ T3783] loop3: detected capacity change from 0 to 1764 [ 40.269906][ T3787] loop4: detected capacity change from 0 to 1024 [ 40.323662][ T3796] capability: warning: `syz.3.90' uses deprecated v2 capabilities in a way that may be insecure [ 40.333710][ T3787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.364426][ T3802] loop0: detected capacity change from 0 to 512 [ 40.371274][ T3787] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 40.412768][ T3796] loop3: detected capacity change from 0 to 2048 [ 40.453688][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.471156][ T3802] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.471946][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.481443][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 40.481478][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 40.534433][ T3796] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.582488][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.639945][ T3819] loop2: detected capacity change from 0 to 512 [ 40.648783][ T3824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.667276][ T3804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.90: bg 0: block 345: padding at end of block bitmap is not set [ 40.700614][ T3804] EXT4-fs (loop3): Remounting filesystem read-only [ 40.707301][ T52] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 40.728363][ T3819] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.95: inode #0: comm syz.2.95: iget: illegal inode # [ 40.743298][ T3819] EXT4-fs (loop2): get orphan inode failed [ 40.758765][ T3819] EXT4-fs (loop2): mount failed [ 40.820573][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.878010][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 40.890407][ T3832] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 40.945203][ T3839] loop0: detected capacity change from 0 to 1764 [ 40.953418][ T3841] loop3: detected capacity change from 0 to 256 [ 41.064084][ T3847] Zero length message leads to an empty skb [ 41.121042][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.145258][ T3850] FAULT_INJECTION: forcing a failure. [ 41.145258][ T3850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.158484][ T3850] CPU: 0 UID: 0 PID: 3850 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.158555][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.158644][ T3850] Call Trace: [ 41.158652][ T3850] [ 41.158661][ T3850] __dump_stack+0x1d/0x30 [ 41.158683][ T3850] dump_stack_lvl+0xe8/0x140 [ 41.158703][ T3850] dump_stack+0x15/0x1b [ 41.158720][ T3850] should_fail_ex+0x265/0x280 [ 41.158741][ T3850] should_fail+0xb/0x20 [ 41.158768][ T3850] should_fail_usercopy+0x1a/0x20 [ 41.158795][ T3850] _copy_from_user+0x1c/0xb0 [ 41.158826][ T3850] ___sys_sendmsg+0xc1/0x1d0 [ 41.158858][ T3850] __x64_sys_sendmsg+0xd4/0x160 [ 41.158937][ T3850] x64_sys_call+0x191e/0x3000 [ 41.158967][ T3850] do_syscall_64+0xd2/0x200 [ 41.158992][ T3850] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.159075][ T3850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.159104][ T3850] RIP: 0033:0x7f64d4fcf6c9 [ 41.159123][ T3850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.159145][ T3850] RSP: 002b:00007f64d3a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.159169][ T3850] RAX: ffffffffffffffda RBX: 00007f64d5225fa0 RCX: 00007f64d4fcf6c9 [ 41.159185][ T3850] RDX: 0000000020040811 RSI: 0000200000000240 RDI: 0000000000000004 [ 41.159327][ T3850] RBP: 00007f64d3a37090 R08: 0000000000000000 R09: 0000000000000000 [ 41.159343][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.159358][ T3850] R13: 00007f64d5226038 R14: 00007f64d5225fa0 R15: 00007fff28fe2438 [ 41.159381][ T3850] [ 41.493563][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.514409][ T3866] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 41.546187][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.553638][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.562287][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.569744][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.657618][ T3873] loop0: detected capacity change from 0 to 1764 [ 41.723149][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 41.739921][ T3877] hsr_slave_1 (unregistering): left promiscuous mode [ 41.747211][ T3879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.822729][ T3886] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 41.831196][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.838786][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.847128][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.854669][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.076614][ T3907] loop0: detected capacity change from 0 to 1764 [ 42.207897][ T3918] loop3: detected capacity change from 0 to 512 [ 42.218830][ T3918] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.123: inode #0: comm syz.3.123: iget: illegal inode # [ 42.231869][ T3918] EXT4-fs (loop3): get orphan inode failed [ 42.238166][ T3921] netlink: 140 bytes leftover after parsing attributes in process `syz.0.126'. [ 42.247840][ T3918] EXT4-fs (loop3): mount failed [ 42.686450][ T3903] syz.3.123 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 42.700571][ T3903] CPU: 1 UID: 0 PID: 3903 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.700606][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.700623][ T3903] Call Trace: [ 42.700633][ T3903] [ 42.700642][ T3903] __dump_stack+0x1d/0x30 [ 42.700710][ T3903] dump_stack_lvl+0xe8/0x140 [ 42.700754][ T3903] dump_stack+0x15/0x1b [ 42.700780][ T3903] dump_header+0x81/0x220 [ 42.700805][ T3903] oom_kill_process+0x342/0x400 [ 42.700902][ T3903] out_of_memory+0x979/0xb80 [ 42.700940][ T3903] try_charge_memcg+0x610/0xa10 [ 42.700987][ T3903] obj_cgroup_charge_pages+0xa6/0x150 [ 42.701017][ T3903] __memcg_kmem_charge_page+0x9f/0x170 [ 42.701079][ T3903] __alloc_frozen_pages_noprof+0x188/0x360 [ 42.701103][ T3903] alloc_pages_mpol+0xb3/0x260 [ 42.701125][ T3903] ? alloc_pages_noprof+0xf4/0x130 [ 42.701156][ T3903] alloc_pages_noprof+0x90/0x130 [ 42.701184][ T3903] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 42.701325][ T3903] __kvmalloc_node_noprof+0x483/0x670 [ 42.701371][ T3903] ? ip_set_alloc+0x24/0x30 [ 42.701455][ T3903] ? ip_set_alloc+0x24/0x30 [ 42.701503][ T3903] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 42.701560][ T3903] ip_set_alloc+0x24/0x30 [ 42.701595][ T3903] hash_netiface_create+0x282/0x740 [ 42.701631][ T3903] ? __pfx_hash_netiface_create+0x10/0x10 [ 42.701751][ T3903] ip_set_create+0x3cc/0x970 [ 42.701787][ T3903] ? __nla_parse+0x40/0x60 [ 42.701817][ T3903] nfnetlink_rcv_msg+0x4c6/0x590 [ 42.701908][ T3903] netlink_rcv_skb+0x123/0x220 [ 42.701951][ T3903] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 42.701995][ T3903] nfnetlink_rcv+0x167/0x16c0 [ 42.702067][ T3903] ? kmem_cache_free+0xe4/0x3d0 [ 42.702108][ T3903] ? __kfree_skb+0x109/0x150 [ 42.702143][ T3903] ? nlmon_xmit+0x4f/0x60 [ 42.702188][ T3903] ? consume_skb+0x49/0x150 [ 42.702324][ T3903] ? nlmon_xmit+0x4f/0x60 [ 42.702353][ T3903] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 42.702388][ T3903] ? __dev_queue_xmit+0x1200/0x2000 [ 42.702481][ T3903] ? __dev_queue_xmit+0x182/0x2000 [ 42.702531][ T3903] ? ref_tracker_free+0x37d/0x3e0 [ 42.702581][ T3903] ? __netlink_deliver_tap+0x4dc/0x500 [ 42.702629][ T3903] netlink_unicast+0x5c0/0x690 [ 42.702761][ T3903] netlink_sendmsg+0x58b/0x6b0 [ 42.702782][ T3903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.702877][ T3903] __sock_sendmsg+0x145/0x180 [ 42.702909][ T3903] ____sys_sendmsg+0x31e/0x4e0 [ 42.702960][ T3903] ___sys_sendmsg+0x17b/0x1d0 [ 42.703099][ T3903] __x64_sys_sendmsg+0xd4/0x160 [ 42.703121][ T3903] x64_sys_call+0x191e/0x3000 [ 42.703147][ T3903] do_syscall_64+0xd2/0x200 [ 42.703215][ T3903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.703246][ T3903] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.703296][ T3903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.703364][ T3903] RIP: 0033:0x7fc0bcc8f6c9 [ 42.703383][ T3903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.703405][ T3903] RSP: 002b:00007fc0bb6ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.703444][ T3903] RAX: ffffffffffffffda RBX: 00007fc0bcee5fa0 RCX: 00007fc0bcc8f6c9 [ 42.703456][ T3903] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 42.703507][ T3903] RBP: 00007fc0bcd11f91 R08: 0000000000000000 R09: 0000000000000000 [ 42.703541][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.703553][ T3903] R13: 00007fc0bcee6038 R14: 00007fc0bcee5fa0 R15: 00007ffcc8541818 [ 42.703571][ T3903] [ 42.703644][ T3903] memory: usage 307200kB, limit 307200kB, failcnt 680 [ 42.907077][ T3926] loop2: detected capacity change from 0 to 2048 [ 42.907222][ T3903] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 42.939632][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.941765][ T3903] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 42.946880][ T3926] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.951308][ T3903] Memory cgroup stats for /syz3: [ 42.954108][ T3903] cache 16384 [ 43.108646][ T3903] rss 4096 [ 43.111795][ T3903] shmem 0 [ 43.115005][ T3903] mapped_file 16384 [ 43.118899][ T3903] dirty 0 [ 43.121912][ T3903] writeback 0 [ 43.125215][ T3903] workingset_refault_anon 257 [ 43.129938][ T3903] workingset_refault_file 1507 [ 43.134719][ T3903] swap 196608 [ 43.138051][ T3903] swapcached 12288 [ 43.141778][ T3903] pgpgin 10422 [ 43.145161][ T3903] pgpgout 10414 [ 43.145780][ T3933] netlink: 332 bytes leftover after parsing attributes in process `syz.0.129'. [ 43.148668][ T3903] pgfault 9222 [ 43.148679][ T3903] pgmajfault 149 [ 43.148687][ T3903] inactive_anon 12288 [ 43.148696][ T3903] active_anon 0 [ 43.148704][ T3903] inactive_file 20480 [ 43.148714][ T3903] active_file 0 [ 43.167358][ T3930] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.128: bg 0: block 345: padding at end of block bitmap is not set [ 43.168594][ T3903] unevictable 0 [ 43.168605][ T3903] hierarchical_memory_limit 314572800 [ 43.168617][ T3903] hierarchical_memsw_limit 9223372036854771712 [ 43.174820][ T3930] EXT4-fs (loop2): Remounting filesystem read-only [ 43.176050][ T3903] total_cache 16384 [ 43.179582][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 43.193725][ T3903] total_rss 4096 [ 43.236530][ T3903] total_shmem 0 [ 43.240024][ T3903] total_mapped_file 16384 [ 43.244389][ T3903] total_dirty 0 [ 43.247851][ T3903] total_writeback 0 [ 43.251688][ T3903] total_workingset_refault_anon 257 [ 43.256915][ T3903] total_workingset_refault_file 1507 [ 43.262219][ T3903] total_swap 196608 [ 43.266098][ T3903] total_swapcached 12288 [ 43.270438][ T3903] total_pgpgin 10422 [ 43.274426][ T3903] total_pgpgout 10414 [ 43.278529][ T3903] total_pgfault 9222 [ 43.282452][ T3903] total_pgmajfault 149 [ 43.286573][ T3903] total_inactive_anon 12288 [ 43.291106][ T3903] total_active_anon 0 [ 43.295097][ T3903] total_inactive_file 20480 [ 43.299706][ T3903] total_active_file 0 [ 43.303691][ T3903] total_unevictable 0 [ 43.307666][ T3903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.123,pid=3902,uid=0 [ 43.322186][ T3903] Memory cgroup out of memory: Killed process 3902 (syz.3.123) total-vm:94092kB, anon-rss:1264kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 43.379567][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 43.379581][ T29] audit: type=1400 audit(1762610675.274:577): avc: denied { ioctl } for pid=3934 comm="syz.0.130" path="socket:[6473]" dev="sockfs" ino=6473 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.410610][ T3935] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 43.424052][ T3935] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 43.425231][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.431834][ T3935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 43.450037][ T29] audit: type=1400 audit(1762610675.324:578): avc: denied { create } for pid=3934 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.469360][ T29] audit: type=1400 audit(1762610675.324:579): avc: denied { setopt } for pid=3934 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.493265][ T3935] team0: Port device geneve1 added [ 43.518329][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.518388][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 43.573397][ T29] audit: type=1326 audit(1762610675.464:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.596759][ T29] audit: type=1326 audit(1762610675.464:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.622047][ T29] audit: type=1326 audit(1762610675.464:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.645443][ T29] audit: type=1326 audit(1762610675.464:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.680681][ T29] audit: type=1326 audit(1762610675.534:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.703965][ T29] audit: type=1326 audit(1762610675.544:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.727239][ T29] audit: type=1326 audit(1762610675.544:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 43.823587][ T3947] loop1: detected capacity change from 0 to 1764 [ 43.929933][ T3958] netlink: 332 bytes leftover after parsing attributes in process `syz.3.140'. [ 43.942721][ T3959] loop0: detected capacity change from 0 to 512 [ 43.991509][ T3959] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.134: inode #0: comm syz.0.134: iget: illegal inode # [ 44.011319][ T3961] loop3: detected capacity change from 0 to 2048 [ 44.020182][ T3959] EXT4-fs (loop0): get orphan inode failed [ 44.032174][ T3961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.047103][ T3959] EXT4-fs (loop0): mount failed [ 44.052903][ T3961] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.068708][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 44.102164][ T3966] hsr_slave_1 (unregistering): left promiscuous mode [ 44.102705][ T3971] loop1: detected capacity change from 0 to 512 [ 44.137488][ T3975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.141: bg 0: block 345: padding at end of block bitmap is not set [ 44.156488][ T3971] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.139: error while reading EA inode 32 err=-116 [ 44.169316][ T3971] EXT4-fs (loop1): Remounting filesystem read-only [ 44.176877][ T3975] EXT4-fs (loop3): Remounting filesystem read-only [ 44.207769][ T3978] loop4: detected capacity change from 0 to 512 [ 44.221749][ T317] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 44.228436][ T571] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 12288 pages, ino 15; err -30 [ 44.251914][ T3971] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 44.269683][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.305598][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.318115][ T3978] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.328598][ T3971] EXT4-fs (loop1): 1 orphan inode deleted [ 44.335011][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.411621][ T3971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.472233][ T3992] loop2: detected capacity change from 0 to 1764 [ 44.505377][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.631307][ T4006] loop2: detected capacity change from 0 to 512 [ 44.645378][ T4006] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.152: inode #0: comm syz.2.152: iget: illegal inode # [ 44.685324][ T4006] EXT4-fs (loop2): get orphan inode failed [ 44.732075][ T4017] loop4: detected capacity change from 0 to 512 [ 44.743666][ T4006] EXT4-fs (loop2): mount failed [ 44.750467][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.768617][ T4017] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.804120][ T4022] loop0: detected capacity change from 0 to 512 [ 44.810745][ T4022] EXT4-fs: Ignoring removed i_version option [ 44.816756][ T4022] EXT4-fs: Ignoring removed bh option [ 44.885587][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.910001][ T4022] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.955950][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.052116][ T4031] loop1: detected capacity change from 0 to 1764 [ 45.121004][ T4037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.183665][ T4042] __nla_validate_parse: 1 callbacks suppressed [ 45.183685][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 45.216250][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 45.236779][ T4042] hsr_slave_1 (unregistering): left promiscuous mode [ 45.267143][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.287278][ T4046] hsr_slave_1 (unregistering): left promiscuous mode [ 45.397719][ T2967] hid_parser_main: 685 callbacks suppressed [ 45.397737][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.411196][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.418678][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.426082][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.433523][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.441024][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.448581][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.455993][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.463460][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.470917][ T2967] hid-generic 0006:0002:0008.0006: unknown main item tag 0x0 [ 45.479340][ T4058] loop4: detected capacity change from 0 to 1024 [ 45.503638][ T4059] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 45.531571][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.544204][ T2967] hid-generic 0006:0002:0008.0006: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 45.564062][ T4063] netlink: 'syz.0.174': attribute type 13 has an invalid length. [ 45.605214][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.615431][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.631847][ T4067] fido_id[4067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.643250][ T4070] loop3: detected capacity change from 0 to 1764 [ 45.729709][ T2967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 45.773447][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 45.845793][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.863388][ T4082] hsr_slave_1 (unregistering): left promiscuous mode [ 45.922370][ T4087] pim6reg: entered allmulticast mode [ 46.000930][ T4087] pim6reg: left allmulticast mode [ 46.036424][ T4096] loop1: detected capacity change from 0 to 1764 [ 46.055066][ T4098] loop0: detected capacity change from 0 to 2048 [ 46.098963][ T3503] Alternate GPT is invalid, using primary GPT. [ 46.105244][ T3503] loop0: p1 p2 p3 [ 46.109015][ T3503] loop0: partition table partially beyond EOD, truncated [ 46.125421][ T4098] Alternate GPT is invalid, using primary GPT. [ 46.131794][ T4098] loop0: p1 p2 p3 [ 46.135584][ T4098] loop0: partition table partially beyond EOD, truncated [ 46.148691][ T2967] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 46.229221][ T4103] loop1: detected capacity change from 0 to 1024 [ 46.241696][ T4103] EXT4-fs: Ignoring removed orlov option [ 46.320023][ T4103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.399037][ C0] Illegal XDP return value 16128 on prog (id 130) dev bond_slave_1, expect packet loss! [ 46.420331][ T4108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 46.566613][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.907027][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 47.086793][ T4125] loop1: detected capacity change from 0 to 512 [ 47.130582][ T4125] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.191: inode #0: comm syz.1.191: iget: illegal inode # [ 47.145150][ T4134] loop0: detected capacity change from 0 to 1024 [ 47.152015][ T4134] EXT4-fs: Ignoring removed orlov option [ 47.175382][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.187622][ T4125] EXT4-fs (loop1): get orphan inode failed [ 47.194085][ T4125] EXT4-fs (loop1): mount failed [ 47.216411][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.390899][ T4144] loop0: detected capacity change from 0 to 512 [ 47.402835][ T4144] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.198: inode #0: comm syz.0.198: iget: illegal inode # [ 47.420577][ T4144] EXT4-fs (loop0): get orphan inode failed [ 47.426694][ T4144] EXT4-fs (loop0): mount failed [ 47.675710][ T4120] syz.1.191 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 47.690472][ T4120] CPU: 1 UID: 0 PID: 4120 Comm: syz.1.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.690549][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.690566][ T4120] Call Trace: [ 47.690574][ T4120] [ 47.690584][ T4120] __dump_stack+0x1d/0x30 [ 47.690608][ T4120] dump_stack_lvl+0xe8/0x140 [ 47.690629][ T4120] dump_stack+0x15/0x1b [ 47.690646][ T4120] dump_header+0x81/0x220 [ 47.690670][ T4120] oom_kill_process+0x342/0x400 [ 47.690736][ T4120] out_of_memory+0x979/0xb80 [ 47.690784][ T4120] try_charge_memcg+0x610/0xa10 [ 47.690826][ T4120] obj_cgroup_charge_pages+0xa6/0x150 [ 47.690852][ T4120] __memcg_kmem_charge_page+0x9f/0x170 [ 47.690895][ T4120] __alloc_frozen_pages_noprof+0x188/0x360 [ 47.690920][ T4120] alloc_pages_mpol+0xb3/0x260 [ 47.690941][ T4120] ? alloc_pages_noprof+0x61/0x130 [ 47.690964][ T4120] alloc_pages_noprof+0x90/0x130 [ 47.691083][ T4120] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 47.691147][ T4120] __kvmalloc_node_noprof+0x483/0x670 [ 47.691205][ T4120] ? ip_set_alloc+0x24/0x30 [ 47.691320][ T4120] ? ip_set_alloc+0x24/0x30 [ 47.691363][ T4120] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 47.691423][ T4120] ip_set_alloc+0x24/0x30 [ 47.691466][ T4120] hash_netiface_create+0x282/0x740 [ 47.691536][ T4120] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.691581][ T4120] ip_set_create+0x3cc/0x970 [ 47.691670][ T4120] nfnetlink_rcv_msg+0x4c6/0x590 [ 47.691789][ T4120] netlink_rcv_skb+0x123/0x220 [ 47.691823][ T4120] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.691883][ T4120] nfnetlink_rcv+0x167/0x16c0 [ 47.691919][ T4120] ? kmem_cache_free+0xe4/0x3d0 [ 47.691982][ T4120] ? __kfree_skb+0x109/0x150 [ 47.692023][ T4120] ? nlmon_xmit+0x4f/0x60 [ 47.692055][ T4120] ? consume_skb+0x49/0x150 [ 47.692157][ T4120] ? nlmon_xmit+0x4f/0x60 [ 47.692190][ T4120] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 47.692238][ T4120] ? __dev_queue_xmit+0x1200/0x2000 [ 47.692314][ T4120] ? __dev_queue_xmit+0x182/0x2000 [ 47.692448][ T4120] ? kmem_cache_free+0x286/0x3d0 [ 47.692489][ T4120] ? ref_tracker_free+0x37d/0x3e0 [ 47.692545][ T4120] ? __netlink_deliver_tap+0x4dc/0x500 [ 47.692597][ T4120] netlink_unicast+0x5c0/0x690 [ 47.692694][ T4120] netlink_sendmsg+0x58b/0x6b0 [ 47.692776][ T4120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.692800][ T4120] __sock_sendmsg+0x145/0x180 [ 47.692824][ T4120] ____sys_sendmsg+0x31e/0x4e0 [ 47.692945][ T4120] ___sys_sendmsg+0x17b/0x1d0 [ 47.693059][ T4120] __x64_sys_sendmsg+0xd4/0x160 [ 47.693091][ T4120] x64_sys_call+0x191e/0x3000 [ 47.693122][ T4120] do_syscall_64+0xd2/0x200 [ 47.693145][ T4120] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.693210][ T4120] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.693252][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.693274][ T4120] RIP: 0033:0x7fe59b52f6c9 [ 47.693297][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.693315][ T4120] RSP: 002b:00007fe599f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.693339][ T4120] RAX: ffffffffffffffda RBX: 00007fe59b785fa0 RCX: 00007fe59b52f6c9 [ 47.693427][ T4120] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 47.693444][ T4120] RBP: 00007fe59b5b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 47.693456][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.693468][ T4120] R13: 00007fe59b786038 R14: 00007fe59b785fa0 R15: 00007ffc18e33b88 [ 47.693491][ T4120] [ 47.693500][ T4120] memory: usage 307200kB, limit 307200kB, failcnt 206 [ 47.861012][ T4150] loop2: detected capacity change from 0 to 1024 [ 47.863266][ T4120] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 47.863288][ T4120] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 47.863304][ T4120] Memory cgroup stats for [ 47.870707][ T4150] EXT4-fs: Ignoring removed orlov option [ 47.872177][ T4120] /syz1: [ 48.077729][ T4120] cache 0 [ 48.083625][ T4120] rss 0 [ 48.086393][ T4120] shmem 0 [ 48.089359][ T4120] mapped_file 0 [ 48.092815][ T4120] dirty 0 [ 48.095759][ T4120] writeback 0 [ 48.099093][ T4120] workingset_refault_anon 56 [ 48.103695][ T4120] workingset_refault_file 380 [ 48.108413][ T4120] swap 376832 [ 48.111747][ T4120] swapcached 20480 [ 48.115504][ T4120] pgpgin 11787 [ 48.118937][ T4120] pgpgout 11782 [ 48.122411][ T4120] pgfault 13856 [ 48.125882][ T4120] pgmajfault 28 [ 48.129396][ T4120] inactive_anon 8192 [ 48.133313][ T4120] active_anon 12288 [ 48.137143][ T4120] inactive_file 0 [ 48.140807][ T4120] active_file 0 [ 48.144349][ T4120] unevictable 0 [ 48.147811][ T4120] hierarchical_memory_limit 314572800 [ 48.153238][ T4120] hierarchical_memsw_limit 9223372036854771712 [ 48.159509][ T4120] total_cache 0 [ 48.162979][ T4120] total_rss 0 [ 48.166287][ T4120] total_shmem 0 [ 48.169784][ T4120] total_mapped_file 0 [ 48.173879][ T4120] total_dirty 0 [ 48.177352][ T4120] total_writeback 0 [ 48.178793][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.181206][ T4120] total_workingset_refault_anon 56 [ 48.198901][ T4120] total_workingset_refault_file 380 [ 48.204160][ T4120] total_swap 376832 [ 48.208003][ T4120] total_swapcached 20480 [ 48.212263][ T4120] total_pgpgin 11787 [ 48.216206][ T4120] total_pgpgout 11782 [ 48.220323][ T4120] total_pgfault 13856 [ 48.224315][ T4120] total_pgmajfault 28 [ 48.228400][ T4120] total_inactive_anon 8192 [ 48.232832][ T4120] total_active_anon 12288 [ 48.237164][ T4120] total_inactive_file 0 [ 48.241424][ T4120] total_active_file 0 [ 48.245421][ T4120] total_unevictable 0 [ 48.249477][ T4120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.191,pid=4119,uid=0 [ 48.264101][ T4120] Memory cgroup out of memory: Killed process 4119 (syz.1.191) total-vm:93960kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 48.272539][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 48.452003][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 48.452020][ T29] audit: type=1326 audit(1762610680.344:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 48.481371][ T29] audit: type=1326 audit(1762610680.344:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 48.559779][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.570124][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.643585][ T29] audit: type=1400 audit(1762610680.534:775): avc: denied { create } for pid=4174 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.643649][ T4176] netlink: 332 bytes leftover after parsing attributes in process `syz.2.205'. [ 48.662999][ T29] audit: type=1400 audit(1762610680.534:776): avc: denied { setopt } for pid=4174 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.688266][ T4176] netlink: 'syz.2.205': attribute type 9 has an invalid length. [ 48.699036][ T4176] netlink: 160 bytes leftover after parsing attributes in process `syz.2.205'. [ 48.723550][ T4177] netlink: 'syz.2.205': attribute type 9 has an invalid length. [ 48.816202][ T4188] loop0: detected capacity change from 0 to 2048 [ 48.830839][ T4185] loop2: detected capacity change from 0 to 1024 [ 48.861534][ T4188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.862534][ T4185] EXT4-fs: Ignoring removed orlov option [ 48.885392][ T4194] loop1: detected capacity change from 0 to 1024 [ 48.897370][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.899890][ T4194] EXT4-fs: Ignoring removed orlov option [ 48.909870][ T4188] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.937159][ T4194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.957972][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 48.957972][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 48.985380][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.064047][ T4205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.079950][ T29] audit: type=1400 audit(1762610680.974:777): avc: denied { firmware_load } for pid=4193 comm="syz.1.212" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 49.125640][ T4207] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.210: bg 0: block 345: padding at end of block bitmap is not set [ 49.166381][ T4207] EXT4-fs (loop0): Remounting filesystem read-only [ 49.173263][ T52] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 49.284037][ T29] audit: type=1326 audit(1762610681.174:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 49.306892][ T29] audit: type=1326 audit(1762610681.174:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 49.329658][ T29] audit: type=1326 audit(1762610681.174:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 49.352479][ T29] audit: type=1326 audit(1762610681.174:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 49.375300][ T29] audit: type=1326 audit(1762610681.174:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e0e4f6c9 code=0x7ffc0000 [ 49.405501][ T4213] loop2: detected capacity change from 0 to 1024 [ 49.412794][ T4213] EXT4-fs: Ignoring removed orlov option [ 49.468734][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.483173][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.507217][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.541608][ T4220] loop1: detected capacity change from 0 to 2048 [ 49.591513][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.658771][ T4220] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.714595][ T4218] loop3: detected capacity change from 0 to 512 [ 49.731372][ T4218] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.216: inode #0: comm syz.3.216: iget: illegal inode # [ 49.759381][ T4218] EXT4-fs (loop3): get orphan inode failed [ 49.838993][ T4218] EXT4-fs (loop3): mount failed [ 49.860339][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.872650][ T4231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.217: bg 0: block 345: padding at end of block bitmap is not set [ 49.905869][ T4231] EXT4-fs (loop1): Remounting filesystem read-only [ 49.936797][ T317] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 49.993711][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.023317][ T4238] loop2: detected capacity change from 0 to 512 [ 50.049946][ T4238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.062848][ T4238] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.113588][ T4242] loop4: detected capacity change from 0 to 1024 [ 50.133576][ T4242] EXT4-fs: Ignoring removed orlov option [ 50.189697][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.226619][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.397781][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 50.408734][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.408768][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.408785][ T3319] Call Trace: [ 50.408792][ T3319] [ 50.408801][ T3319] __dump_stack+0x1d/0x30 [ 50.408830][ T3319] dump_stack_lvl+0xe8/0x140 [ 50.408857][ T3319] dump_stack+0x15/0x1b [ 50.408954][ T3319] dump_header+0x81/0x220 [ 50.408972][ T3319] oom_kill_process+0x342/0x400 [ 50.409022][ T3319] out_of_memory+0x979/0xb80 [ 50.409067][ T3319] try_charge_memcg+0x610/0xa10 [ 50.409116][ T3319] charge_memcg+0x51/0xc0 [ 50.409145][ T3319] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 50.409172][ T3319] __read_swap_cache_async+0x17b/0x2d0 [ 50.409196][ T3319] swap_cluster_readahead+0x262/0x3c0 [ 50.409309][ T3319] swapin_readahead+0xde/0x6f0 [ 50.409338][ T3319] ? css_rstat_updated+0xb7/0x240 [ 50.409364][ T3319] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 50.409409][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 50.409478][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 50.409514][ T3319] ? swap_cache_get_folio+0x277/0x280 [ 50.409615][ T3319] do_swap_page+0x2ae/0x2370 [ 50.409646][ T3319] ? _raw_spin_unlock+0x26/0x50 [ 50.409681][ T3319] ? finish_task_switch+0xad/0x2b0 [ 50.409762][ T3319] ? __pfx_default_wake_function+0x10/0x10 [ 50.409869][ T3319] handle_mm_fault+0x9a5/0x2be0 [ 50.409905][ T3319] ? vma_start_read+0x141/0x1f0 [ 50.409962][ T3319] do_user_addr_fault+0x630/0x1080 [ 50.409989][ T3319] ? fpregs_restore_userregs+0xe2/0x1d0 [ 50.410028][ T3319] ? switch_fpu_return+0xe/0x20 [ 50.410058][ T3319] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.410111][ T3319] exc_page_fault+0x62/0xa0 [ 50.410153][ T3319] asm_exc_page_fault+0x26/0x30 [ 50.410215][ T3319] RIP: 0033:0x7fc0bccc1f45 [ 50.410234][ T3319] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 50.410257][ T3319] RSP: 002b:00007ffcc8541b58 EFLAGS: 00010246 [ 50.410277][ T3319] RAX: 0000000000000000 RBX: 000000000000006d RCX: 00007fc0bccc1f43 [ 50.410295][ T3319] RDX: 00007ffcc8541b70 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.410310][ T3319] RBP: 00007ffcc8541bdc R08: 000000000cd9cd02 R09: 0000000000000000 [ 50.410322][ T3319] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 50.410333][ T3319] R13: 00000000000927c0 R14: 000000000000c2ec R15: 00007ffcc8541c30 [ 50.410381][ T3319] [ 50.410390][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 976 [ 50.661770][ T3319] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 50.669737][ T3319] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 50.677030][ T3319] Memory cgroup stats for /syz3: [ 50.680003][ T4261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 50.691529][ T4261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.699465][ T4261] vhci_hcd vhci_hcd.0: Device attached [ 50.701684][ T3319] cache 0 [ 50.706252][ T4263] __nla_validate_parse: 5 callbacks suppressed [ 50.706269][ T4263] netlink: 332 bytes leftover after parsing attributes in process `syz.0.227'. [ 50.707859][ T3319] rss 0 [ 50.707869][ T3319] shmem 0 [ 50.728915][ T3319] mapped_file 0 [ 50.732381][ T3319] dirty 0 [ 50.735387][ T3319] writeback 0 [ 50.738718][ T3319] workingset_refault_anon 317 [ 50.743396][ T3319] workingset_refault_file 2019 [ 50.748179][ T3319] swap 200704 [ 50.751478][ T3319] swapcached 0 [ 50.754865][ T3319] pgpgin 18538 [ 50.758277][ T3319] pgpgout 18537 [ 50.761739][ T3319] pgfault 17935 [ 50.765208][ T3319] pgmajfault 197 [ 50.768789][ T3319] inactive_anon 0 [ 50.772445][ T3319] active_anon 0 [ 50.775923][ T3319] inactive_file 0 [ 50.779600][ T3319] active_file 4096 [ 50.783326][ T3319] unevictable 0 [ 50.785617][ T4262] vhci_hcd: connection closed [ 50.786785][ T3319] hierarchical_memory_limit 314572800 [ 50.786799][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 50.786811][ T3319] total_cache 0 [ 50.786820][ T3319] total_rss 0 [ 50.786828][ T3319] total_shmem 0 [ 50.794074][ T52] vhci_hcd: stop threads [ 50.796939][ T3319] total_mapped_file 0 [ 50.796951][ T3319] total_dirty 0 [ 50.796960][ T3319] total_writeback 0 [ 50.803149][ T52] vhci_hcd: release socket [ 50.806585][ T3319] total_workingset_refault_anon 317 [ 50.806597][ T3319] total_workingset_refault_file 2019 [ 50.809899][ T52] vhci_hcd: disconnect device [ 50.813346][ T3319] total_swap 200704 [ 50.813357][ T3319] total_swapcached 0 [ 50.856158][ T3319] total_pgpgin 18538 [ 50.860169][ T3319] total_pgpgout 18537 [ 50.864162][ T3319] total_pgfault 17935 [ 50.868166][ T3319] total_pgmajfault 197 [ 50.872236][ T3319] total_inactive_anon 0 [ 50.876446][ T3319] total_active_anon 0 [ 50.880476][ T3319] total_inactive_file 0 [ 50.884651][ T3319] total_active_file 4096 [ 50.888926][ T3319] total_unevictable 0 [ 50.892935][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.216,pid=4214,uid=0 [ 50.907549][ T3319] Memory cgroup out of memory: Killed process 4214 (syz.3.216) total-vm:93960kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 50.938790][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.977375][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 50.986329][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 50.995297][ T4273] netlink: 'syz.0.231': attribute type 20 has an invalid length. [ 51.004641][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 51.015103][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.015194][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 51.025557][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.032748][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 51.050387][ T4273] netlink: 'syz.0.231': attribute type 20 has an invalid length. [ 51.094660][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.120113][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.189192][ T4285] loop2: detected capacity change from 0 to 512 [ 51.223080][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.251729][ T4285] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.323480][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 51.360347][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 51.440082][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.641607][ T4313] netlink: 332 bytes leftover after parsing attributes in process `syz.3.242'. [ 51.676607][ T23] hid_parser_main: 129 callbacks suppressed [ 51.676629][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.690093][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.697514][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.704951][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.712429][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.719892][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.727305][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.734725][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.742160][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.749624][ T23] hid-generic 0006:0002:0008.0007: unknown main item tag 0x0 [ 51.768309][ T23] hid-generic 0006:0002:0008.0007: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 51.808919][ T3306] udevd[3306]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 51.835387][ T3306] udevd[3306]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 51.885809][ T4325] loop3: detected capacity change from 0 to 1024 [ 51.892672][ T4325] EXT4-fs: Ignoring removed orlov option [ 51.912919][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.953003][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.016701][ T4339] loop4: detected capacity change from 0 to 512 [ 52.037658][ T4339] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.049030][ T4339] EXT4-fs (loop4): 1 truncate cleaned up [ 52.062716][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.077090][ T4339] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.110390][ T4349] loop3: detected capacity change from 0 to 512 [ 52.164606][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.193410][ T4351] netlink: 332 bytes leftover after parsing attributes in process `syz.1.253'. [ 52.217705][ T4349] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.233835][ T4355] bridge_slave_0: left allmulticast mode [ 52.239599][ T4355] bridge_slave_0: left promiscuous mode [ 52.245335][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.279407][ T4355] bridge_slave_1: left allmulticast mode [ 52.283679][ T2967] hid-generic 0006:0002:0008.0008: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 52.285167][ T4355] bridge_slave_1: left promiscuous mode [ 52.300441][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.341005][ T4355] bond0: (slave bond_slave_0): Releasing backup interface [ 52.345003][ T4361] fido_id[4361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.382043][ T4364] netlink: 'syz.1.255': attribute type 4 has an invalid length. [ 52.385900][ T4355] bond0: (slave bond_slave_1): Releasing backup interface [ 52.414517][ T4355] team0: Port device team_slave_0 removed [ 52.423722][ T4355] team0: Port device team_slave_1 removed [ 52.444264][ T4365] netlink: 'syz.1.255': attribute type 4 has an invalid length. [ 52.445447][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.455670][ T4355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.507001][ T4363] bond0: Caught tx_queue_len zero misconfig [ 52.542118][ T4373] loop2: detected capacity change from 0 to 1024 [ 52.558541][ T4373] EXT4-fs: Ignoring removed orlov option [ 52.571654][ T4373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.602086][ T4377] FAULT_INJECTION: forcing a failure. [ 52.602086][ T4377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.615311][ T4377] CPU: 0 UID: 0 PID: 4377 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.615350][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.615367][ T4377] Call Trace: [ 52.615374][ T4377] [ 52.615383][ T4377] __dump_stack+0x1d/0x30 [ 52.615415][ T4377] dump_stack_lvl+0xe8/0x140 [ 52.615444][ T4377] dump_stack+0x15/0x1b [ 52.615466][ T4377] should_fail_ex+0x265/0x280 [ 52.615505][ T4377] should_fail+0xb/0x20 [ 52.615528][ T4377] should_fail_usercopy+0x1a/0x20 [ 52.615570][ T4377] _copy_from_user+0x1c/0xb0 [ 52.615603][ T4377] ___sys_sendmsg+0xc1/0x1d0 [ 52.615647][ T4377] __x64_sys_sendmsg+0xd4/0x160 [ 52.615679][ T4377] x64_sys_call+0x191e/0x3000 [ 52.615765][ T4377] do_syscall_64+0xd2/0x200 [ 52.615789][ T4377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.615829][ T4377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.615937][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.616002][ T4377] RIP: 0033:0x7f64d4fcf6c9 [ 52.616022][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.616043][ T4377] RSP: 002b:00007f64d3a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.616068][ T4377] RAX: ffffffffffffffda RBX: 00007f64d5225fa0 RCX: 00007f64d4fcf6c9 [ 52.616085][ T4377] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 52.616101][ T4377] RBP: 00007f64d3a37090 R08: 0000000000000000 R09: 0000000000000000 [ 52.616127][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.616144][ T4377] R13: 00007f64d5226038 R14: 00007f64d5225fa0 R15: 00007fff28fe2438 [ 52.616169][ T4377] [ 52.790280][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.810106][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.817330][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.975387][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.987035][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.016882][ T4393] loop2: detected capacity change from 0 to 512 [ 53.033866][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.045455][ T4393] EXT4-fs: Ignoring removed oldalloc option [ 53.060621][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.094985][ T23] hid-generic 0006:0002:0008.0009: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 53.111357][ T4393] EXT4-fs: Mount option(s) incompatible with ext2 [ 53.187649][ T4405] loop0: detected capacity change from 0 to 1024 [ 53.213155][ T4405] EXT4-fs: Ignoring removed orlov option [ 53.223565][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.227267][ T4401] fido_id[4401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.319236][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.595672][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.783862][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 53.783877][ T29] audit: type=1326 audit(1762610685.674:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.822787][ T3421] hid-generic 0006:0002:0008.000A: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 53.837346][ T29] audit: type=1326 audit(1762610685.714:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.860687][ T29] audit: type=1326 audit(1762610685.714:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.884122][ T29] audit: type=1326 audit(1762610685.714:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.907375][ T29] audit: type=1326 audit(1762610685.714:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.930803][ T29] audit: type=1326 audit(1762610685.714:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.954219][ T29] audit: type=1326 audit(1762610685.714:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 53.977626][ T29] audit: type=1326 audit(1762610685.714:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 54.000959][ T29] audit: type=1326 audit(1762610685.714:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 54.024205][ T29] audit: type=1326 audit(1762610685.714:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59b52f6c9 code=0x7ffc0000 [ 54.060550][ T4425] loop1: detected capacity change from 0 to 8192 [ 54.108302][ T3306] loop1: p1 p2 p3 p4 [ 54.112463][ T3306] loop1: p1 size 196608 extends beyond EOD, truncated [ 54.123949][ T3306] loop1: p2 start 164919041 is beyond EOD, truncated [ 54.130710][ T3306] loop1: p3 size 66846464 extends beyond EOD, truncated [ 54.143970][ T3306] loop1: p4 size 37048832 extends beyond EOD, truncated [ 54.162600][ T4425] loop1: p1 p2 p3 p4 [ 54.178322][ T4425] loop1: p1 size 196608 extends beyond EOD, truncated [ 54.192527][ T4425] loop1: p2 start 164919041 is beyond EOD, truncated [ 54.199298][ T4425] loop1: p3 size 66846464 extends beyond EOD, truncated [ 54.224347][ T4425] loop1: p4 size 37048832 extends beyond EOD, truncated [ 54.246200][ T4442] veth0_macvtap: left promiscuous mode [ 54.349634][ T4450] loop2: detected capacity change from 0 to 512 [ 54.369589][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.370186][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.382882][ T4443] loop0: detected capacity change from 0 to 8192 [ 54.397070][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.441016][ T4462] loop4: detected capacity change from 0 to 1024 [ 54.443327][ T4459] loop1: detected capacity change from 0 to 512 [ 54.459619][ T4462] EXT4-fs: Ignoring removed orlov option [ 54.465440][ T4450] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 54.473627][ T3304] loop0: p1 p2 p3 p4 [ 54.476480][ T4450] EXT4-fs (loop2): 1 truncate cleaned up [ 54.478861][ T3304] loop0: p1 size 196608 extends beyond EOD, truncated [ 54.503791][ T4450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.550644][ T4462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.580432][ T4459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.593627][ T4459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.604383][ T3304] loop0: p2 start 164919041 is beyond EOD, truncated [ 54.611122][ T3304] loop0: p3 size 66846464 extends beyond EOD, truncated [ 54.621188][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.632267][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.643754][ T3304] loop0: p4 size 37048832 extends beyond EOD, truncated [ 54.654153][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.667233][ T4459] EXT4-fs (loop1): 1 truncate cleaned up [ 54.676188][ T4459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.711126][ T4443] loop0: p1 p2 p3 p4 [ 54.723411][ T3388] hid-generic 0006:0002:0008.000B: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 54.751076][ T4443] loop0: p1 size 196608 extends beyond EOD, truncated [ 54.762396][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.801880][ T4443] loop0: p2 start 164919041 is beyond EOD, truncated [ 54.802800][ T4477] fido_id[4477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.808636][ T4443] loop0: p3 size 66846464 extends beyond EOD, truncated [ 54.824187][ T4479] FAULT_INJECTION: forcing a failure. [ 54.824187][ T4479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.842243][ T4479] CPU: 0 UID: 0 PID: 4479 Comm: syz.1.292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.842271][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.842319][ T4479] Call Trace: [ 54.842327][ T4479] [ 54.842335][ T4479] __dump_stack+0x1d/0x30 [ 54.842364][ T4479] dump_stack_lvl+0xe8/0x140 [ 54.842386][ T4479] dump_stack+0x15/0x1b [ 54.842403][ T4479] should_fail_ex+0x265/0x280 [ 54.842422][ T4479] should_fail+0xb/0x20 [ 54.842442][ T4479] should_fail_usercopy+0x1a/0x20 [ 54.842480][ T4479] strncpy_from_user+0x25/0x230 [ 54.842513][ T4479] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 54.842581][ T4479] __se_sys_memfd_create+0x1ff/0x590 [ 54.842663][ T4479] __x64_sys_memfd_create+0x31/0x40 [ 54.842687][ T4479] x64_sys_call+0x2ac2/0x3000 [ 54.842715][ T4479] do_syscall_64+0xd2/0x200 [ 54.842809][ T4479] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.842846][ T4479] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.842926][ T4479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.842951][ T4479] RIP: 0033:0x7fe59b52f6c9 [ 54.842969][ T4479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.842992][ T4479] RSP: 002b:00007fe599f96e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 54.843063][ T4479] RAX: ffffffffffffffda RBX: 000000000000052f RCX: 00007fe59b52f6c9 [ 54.843077][ T4479] RDX: 00007fe599f96ef0 RSI: 0000000000000000 RDI: 00007fe59b5b2960 [ 54.843093][ T4479] RBP: 0000200000001600 R08: 00007fe599f96bb7 R09: 00007fe599f96e40 [ 54.843109][ T4479] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 54.843124][ T4479] R13: 00007fe599f96ef0 R14: 00007fe599f96eb0 R15: 0000200000000340 [ 54.843142][ T4479] [ 54.844308][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.908976][ T4443] loop0: p4 size 37048832 extends beyond EOD, truncated [ 55.077390][ T4450] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 55.131441][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 55.131919][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.213672][ T4501] geneve0: Caught tx_queue_len zero misconfig [ 55.352036][ T3388] hid-generic 0006:0002:0008.000C: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 55.396779][ T4519] fido_id[4519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.442837][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.697685][ T4547] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 55.743438][ T23] hid-generic 0006:0002:0008.000D: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 55.782422][ T4553] fido_id[4553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.847721][ T4562] FAULT_INJECTION: forcing a failure. [ 55.847721][ T4562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.860961][ T4562] CPU: 1 UID: 0 PID: 4562 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.860996][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.861010][ T4562] Call Trace: [ 55.861017][ T4562] [ 55.861026][ T4562] __dump_stack+0x1d/0x30 [ 55.861056][ T4562] dump_stack_lvl+0xe8/0x140 [ 55.861092][ T4562] dump_stack+0x15/0x1b [ 55.861138][ T4562] should_fail_ex+0x265/0x280 [ 55.861165][ T4562] should_fail+0xb/0x20 [ 55.861255][ T4562] should_fail_usercopy+0x1a/0x20 [ 55.861283][ T4562] _copy_to_user+0x20/0xa0 [ 55.861350][ T4562] simple_read_from_buffer+0xb5/0x130 [ 55.861377][ T4562] proc_fail_nth_read+0x10e/0x150 [ 55.861530][ T4562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.861572][ T4562] vfs_read+0x1a8/0x770 [ 55.861599][ T4562] ? __rcu_read_unlock+0x4f/0x70 [ 55.861626][ T4562] ? __fget_files+0x184/0x1c0 [ 55.861722][ T4562] ksys_read+0xda/0x1a0 [ 55.861755][ T4562] __x64_sys_read+0x40/0x50 [ 55.861789][ T4562] x64_sys_call+0x27c0/0x3000 [ 55.861830][ T4562] do_syscall_64+0xd2/0x200 [ 55.861858][ T4562] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.861973][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.861994][ T4562] RIP: 0033:0x7fa3e0e4e0dc [ 55.862009][ T4562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.862026][ T4562] RSP: 002b:00007fa3df8b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.862044][ T4562] RAX: ffffffffffffffda RBX: 00007fa3e10a5fa0 RCX: 00007fa3e0e4e0dc [ 55.862060][ T4562] RDX: 000000000000000f RSI: 00007fa3df8b70a0 RDI: 0000000000000005 [ 55.862097][ T4562] RBP: 00007fa3df8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.862114][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.862130][ T4562] R13: 00007fa3e10a6038 R14: 00007fa3e10a5fa0 R15: 00007ffdbe7c4958 [ 55.862204][ T4562] [ 56.121106][ T4569] loop0: detected capacity change from 0 to 512 [ 56.134126][ T4567] __nla_validate_parse: 18 callbacks suppressed [ 56.134144][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 56.151340][ T4569] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 56.199510][ T4569] EXT4-fs (loop0): 1 truncate cleaned up [ 56.250317][ T4569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.322110][ T4569] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.339758][ T4582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.361539][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 56.542922][ T3388] hid-generic 0006:0002:0008.000E: hidraw0: VIRTUAL HID v0.03 Device [syz0] on syz0 [ 56.573083][ T4595] fido_id[4595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.652123][ T4598] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 56.661041][ T4605] loop4: detected capacity change from 0 to 2048 [ 56.709607][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.731513][ T4605] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.332: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.756636][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 56.765632][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 56.765710][ T4605] EXT4-fs (loop4): Remounting filesystem read-only [ 56.774557][ T4613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.335'. [ 56.798971][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 56.841562][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 56.926141][ T4626] loop0: detected capacity change from 0 to 2048 [ 56.949474][ T4626] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.008663][ T4632] FAULT_INJECTION: forcing a failure. [ 57.008663][ T4632] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.022017][ T4632] CPU: 1 UID: 0 PID: 4632 Comm: syz.4.341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.022044][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.022071][ T4632] Call Trace: [ 57.022077][ T4632] [ 57.022083][ T4632] __dump_stack+0x1d/0x30 [ 57.022177][ T4632] dump_stack_lvl+0xe8/0x140 [ 57.022205][ T4632] dump_stack+0x15/0x1b [ 57.022229][ T4632] should_fail_ex+0x265/0x280 [ 57.022255][ T4632] should_fail_alloc_page+0xf2/0x100 [ 57.022292][ T4632] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.022318][ T4632] alloc_pages_mpol+0xb3/0x260 [ 57.022347][ T4632] alloc_pages_noprof+0x90/0x130 [ 57.022376][ T4632] __pud_alloc+0x47/0x470 [ 57.022484][ T4632] handle_mm_fault+0x1882/0x2be0 [ 57.022508][ T4632] ? __rcu_read_unlock+0x4f/0x70 [ 57.022539][ T4632] ? mt_find+0x208/0x320 [ 57.022576][ T4632] do_user_addr_fault+0x3fe/0x1080 [ 57.022660][ T4632] ? kstrtouint_from_user+0x9f/0xf0 [ 57.022729][ T4632] exc_page_fault+0x62/0xa0 [ 57.022762][ T4632] asm_exc_page_fault+0x26/0x30 [ 57.022779][ T4632] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 57.022820][ T4632] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 57.022905][ T4632] RSP: 0018:ffffc9000f7f7e48 EFLAGS: 00050212 [ 57.022918][ T4632] RAX: 00000000690f4e00 RBX: 0000000000000010 RCX: 0000000000000010 [ 57.022929][ T4632] RDX: 0000000000000000 RSI: ffffc9000f7f7e80 RDI: 00002000000002c0 [ 57.022940][ T4632] RBP: 0000000000000000 R08: 000000000000059b R09: 0000000000000000 [ 57.022951][ T4632] R10: 0001c9000f7f7e80 R11: 0001c9000f7f7e8f R12: 00002000000002d0 [ 57.022962][ T4632] R13: 00007ffffffff000 R14: 00002000000002c0 R15: ffffc9000f7f7e80 [ 57.023040][ T4632] _copy_to_user+0x7c/0xa0 [ 57.023064][ T4632] put_timespec64+0x63/0xb0 [ 57.023087][ T4632] __x64_sys_clock_gettime+0x13d/0x180 [ 57.023157][ T4632] x64_sys_call+0x2a75/0x3000 [ 57.023232][ T4632] do_syscall_64+0xd2/0x200 [ 57.023249][ T4632] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.023274][ T4632] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.023365][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.023386][ T4632] RIP: 0033:0x7fdfca12f6c9 [ 57.023440][ T4632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.023486][ T4632] RSP: 002b:00007fdfc8b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 57.023501][ T4632] RAX: ffffffffffffffda RBX: 00007fdfca385fa0 RCX: 00007fdfca12f6c9 [ 57.023518][ T4632] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 57.023587][ T4632] RBP: 00007fdfc8b97090 R08: 0000000000000000 R09: 0000000000000000 [ 57.023598][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.023608][ T4632] R13: 00007fdfca386038 R14: 00007fdfca385fa0 R15: 00007ffc5ab45bd8 [ 57.023650][ T4632] [ 57.319670][ T4633] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.339: bg 0: block 345: padding at end of block bitmap is not set [ 57.344574][ T4633] EXT4-fs (loop0): Remounting filesystem read-only [ 57.357972][ T12] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 57.393604][ T4638] loop2: detected capacity change from 0 to 2048 [ 57.435876][ T4638] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.439610][ T4644] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 57.467199][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 57.487035][ T4642] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.346' sets config #1 [ 57.503915][ T4644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.512168][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.528383][ T4644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.535797][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.548401][ T4651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.343: bg 0: block 345: padding at end of block bitmap is not set [ 57.565938][ T4651] EXT4-fs (loop2): Remounting filesystem read-only [ 57.573391][ T571] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 57.690245][ T4665] xt_connbytes: Forcing CT accounting to be enabled [ 57.698546][ T4665] Cannot find set identified by id 0 to match [ 57.787375][ T4672] loop2: detected capacity change from 0 to 1024 [ 57.824722][ T4672] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 57.854135][ T4679] loop3: detected capacity change from 0 to 1024 [ 57.878864][ T4679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.887349][ T4679] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 58.085856][ T4692] loop0: detected capacity change from 0 to 512 [ 58.098231][ T4692] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.359: inode #0: comm syz.0.359: iget: illegal inode # [ 58.122676][ T4692] EXT4-fs (loop0): get orphan inode failed [ 58.131042][ T4692] EXT4-fs (loop0): mount failed [ 58.621939][ T4699] loop4: detected capacity change from 0 to 2048 [ 58.641069][ T4705] loop3: detected capacity change from 0 to 1024 [ 58.659158][ T3004] ================================================================== [ 58.660578][ T4705] EXT4-fs: Ignoring removed orlov option [ 58.667286][ T3004] BUG: KCSAN: data-race in set_nlink / set_nlink [ 58.679241][ T3004] [ 58.681571][ T3004] read to 0xffff88810693f858 of 4 bytes by task 3503 on cpu 0: [ 58.689120][ T3004] set_nlink+0x29/0xb0 [ 58.693210][ T3004] kernfs_iop_permission+0x1e2/0x220 [ 58.698517][ T3004] inode_permission+0x1ca/0x310 [ 58.703391][ T3004] link_path_walk+0x162/0x900 [ 58.708088][ T3004] path_openat+0x1de/0x2170 [ 58.712598][ T3004] do_filp_open+0x109/0x230 [ 58.717126][ T3004] do_sys_openat2+0xa6/0x110 [ 58.721714][ T3004] __x64_sys_openat+0xf2/0x120 [ 58.726484][ T3004] x64_sys_call+0x2eab/0x3000 [ 58.731168][ T3004] do_syscall_64+0xd2/0x200 [ 58.735684][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.741582][ T3004] [ 58.743904][ T3004] write to 0xffff88810693f858 of 4 bytes by task 3004 on cpu 1: [ 58.751533][ T3004] set_nlink+0x99/0xb0 [ 58.755614][ T3004] kernfs_iop_permission+0x1e2/0x220 [ 58.760918][ T3004] inode_permission+0x1ca/0x310 [ 58.765783][ T3004] link_path_walk+0x162/0x900 [ 58.770481][ T3004] path_lookupat+0x63/0x2a0 [ 58.775004][ T3004] filename_lookup+0x147/0x340 [ 58.779787][ T3004] vfs_statx+0x9d/0x390 [ 58.783960][ T3004] vfs_fstatat+0x115/0x170 [ 58.788388][ T3004] __se_sys_newfstatat+0x55/0x260 [ 58.793431][ T3004] __x64_sys_newfstatat+0x55/0x70 [ 58.798476][ T3004] x64_sys_call+0x135a/0x3000 [ 58.803158][ T3004] do_syscall_64+0xd2/0x200 [ 58.807668][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.813569][ T3004] [ 58.815891][ T3004] value changed: 0x00000008 -> 0x00000009 [ 58.821614][ T3004] [ 58.823939][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 58.830085][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.839371][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.849430][ T3004] ================================================================== [ 58.859532][ T4690] syz.0.359 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 58.873620][ T4690] CPU: 1 UID: 0 PID: 4690 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.873650][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.873664][ T4690] Call Trace: [ 58.873672][ T4690] [ 58.873681][ T4690] __dump_stack+0x1d/0x30 [ 58.873776][ T4690] dump_stack_lvl+0xe8/0x140 [ 58.873800][ T4690] dump_stack+0x15/0x1b [ 58.873820][ T4690] dump_header+0x81/0x220 [ 58.873871][ T4690] oom_kill_process+0x342/0x400 [ 58.873923][ T4690] out_of_memory+0x979/0xb80 [ 58.873956][ T4690] try_charge_memcg+0x610/0xa10 [ 58.873999][ T4690] obj_cgroup_charge_pages+0xa6/0x150 [ 58.874088][ T4690] __memcg_kmem_charge_page+0x9f/0x170 [ 58.874114][ T4690] __alloc_frozen_pages_noprof+0x188/0x360 [ 58.874141][ T4690] alloc_pages_mpol+0xb3/0x260 [ 58.874168][ T4690] alloc_pages_noprof+0x90/0x130 [ 58.874193][ T4690] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 58.874257][ T4690] __kvmalloc_node_noprof+0x483/0x670 [ 58.874324][ T4690] ? ip_set_alloc+0x24/0x30 [ 58.874387][ T4690] ? ip_set_alloc+0x24/0x30 [ 58.874421][ T4690] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 58.874457][ T4690] ip_set_alloc+0x24/0x30 [ 58.874532][ T4690] hash_netiface_create+0x282/0x740 [ 58.874572][ T4690] ? __pfx_hash_netiface_create+0x10/0x10 [ 58.874667][ T4690] ip_set_create+0x3cc/0x970 [ 58.874696][ T4690] ? __nla_parse+0x40/0x60 [ 58.874767][ T4690] nfnetlink_rcv_msg+0x4c6/0x590 [ 58.874818][ T4690] netlink_rcv_skb+0x123/0x220 [ 58.874869][ T4690] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.874908][ T4690] nfnetlink_rcv+0x167/0x16c0 [ 58.874936][ T4690] ? kmem_cache_free+0xe4/0x3d0 [ 58.875020][ T4690] ? __kfree_skb+0x109/0x150 [ 58.875052][ T4690] ? nlmon_xmit+0x4f/0x60 [ 58.875078][ T4690] ? consume_skb+0x49/0x150 [ 58.875110][ T4690] ? nlmon_xmit+0x4f/0x60 [ 58.875182][ T4690] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 58.875222][ T4690] ? __dev_queue_xmit+0x1200/0x2000 [ 58.875251][ T4690] ? __dev_queue_xmit+0x182/0x2000 [ 58.875266][ T4690] ? kmem_cache_free+0x286/0x3d0 [ 58.875374][ T4690] ? ref_tracker_free+0x37d/0x3e0 [ 58.875426][ T4690] ? __netlink_deliver_tap+0x4dc/0x500 [ 58.875468][ T4690] netlink_unicast+0x5c0/0x690 [ 58.875543][ T4690] netlink_sendmsg+0x58b/0x6b0 [ 58.875632][ T4690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.875673][ T4690] __sock_sendmsg+0x145/0x180 [ 58.875703][ T4690] ____sys_sendmsg+0x31e/0x4e0 [ 58.875746][ T4690] ___sys_sendmsg+0x17b/0x1d0 [ 58.875784][ T4690] __x64_sys_sendmsg+0xd4/0x160 [ 58.875860][ T4690] x64_sys_call+0x191e/0x3000 [ 58.875887][ T4690] do_syscall_64+0xd2/0x200 [ 58.875977][ T4690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.876010][ T4690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.876049][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.876073][ T4690] RIP: 0033:0x7f64d4fcf6c9 [ 58.876129][ T4690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.876150][ T4690] RSP: 002b:00007f64d3a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.876171][ T4690] RAX: ffffffffffffffda RBX: 00007f64d5225fa0 RCX: 00007f64d4fcf6c9 [ 58.876185][ T4690] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 58.876199][ T4690] RBP: 00007f64d5051f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.876213][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.876299][ T4690] R13: 00007f64d5226038 R14: 00007f64d5225fa0 R15: 00007fff28fe2438 [ 58.876320][ T4690] [ 58.876327][ T4690] memory: usage 307200kB, limit 307200kB, failcnt 495 [ 58.906893][ T29] kauditd_printk_skb: 1131 callbacks suppressed [ 58.906910][ T29] audit: type=1326 audit(1762610690.804:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0bcc8df10 code=0x7ffc0000 [ 58.907525][ T4690] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 58.912546][ T29] audit: type=1326 audit(1762610690.814:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc0bcc8e417 code=0x7ffc0000 [ 58.916271][ T4690] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 58.916290][ T4690] Memory cgroup stats for [ 58.920884][ T29] audit: type=1326 audit(1762610690.824:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0bcc8df10 code=0x7ffc0000 [ 58.921020][ T29] audit: type=1326 audit(1762610690.824:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 58.922047][ T29] audit: type=1326 audit(1762610690.824:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 58.926287][ T4690] /syz0: [ 59.381704][ T29] audit: type=1326 audit(1762610690.824:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 59.393375][ T4690] cache 0 [ 59.408301][ T29] audit: type=1326 audit(1762610690.824:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 59.410399][ T4690] rss 0 [ 59.433185][ T29] audit: type=1326 audit(1762610690.824:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 59.435922][ T4690] shmem 0 [ 59.435931][ T4690] mapped_file 0 [ 59.435938][ T4690] dirty 0 [ 59.435943][ T4690] writeback 0 [ 59.459618][ T29] audit: type=1326 audit(1762610690.824:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 59.461676][ T4690] workingset_refault_anon 129 [ 59.465131][ T29] audit: type=1326 audit(1762610690.824:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bcc8f6c9 code=0x7ffc0000 [ 59.522042][ T4690] workingset_refault_file 1402 [ 59.526809][ T4690] swap 368640 [ 59.530170][ T4690] swapcached 12288 [ 59.533923][ T4690] pgpgin 22661 [ 59.537394][ T4690] pgpgout 22658 [ 59.540981][ T4690] pgfault 27045 [ 59.544449][ T4690] pgmajfault 110 [ 59.548029][ T4690] inactive_anon 4096 [ 59.551961][ T4690] active_anon 8192 [ 59.555690][ T4690] inactive_file 0 [ 59.559362][ T4690] active_file 0 [ 59.562829][ T4690] unevictable 0 [ 59.566309][ T4690] hierarchical_memory_limit 314572800 [ 59.571715][ T4690] hierarchical_memsw_limit 9223372036854771712 [ 59.577989][ T4690] total_cache 0 [ 59.581498][ T4690] total_rss 0 [ 59.584945][ T4690] total_shmem 0 [ 59.586343][ T4699] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.588490][ T4690] total_mapped_file 0 [ 59.588516][ T4690] total_dirty 0 [ 59.588525][ T4690] total_writeback 0 [ 59.588534][ T4690] total_workingset_refault_anon 129 [ 59.615412][ T4690] total_workingset_refault_file 1402 [ 59.620761][ T4690] total_swap 368640 [ 59.624580][ T4690] total_swapcached 12288 [ 59.628855][ T4690] total_pgpgin 22661 [ 59.632793][ T4690] total_pgpgout 22658 [ 59.636782][ T4690] total_pgfault 27045 [ 59.640839][ T4690] total_pgmajfault 110 [ 59.644983][ T4690] total_inactive_anon 4096 [ 59.649503][ T4690] total_active_anon 8192 [ 59.653833][ T4690] total_inactive_file 0 [ 59.658052][ T4690] total_active_file 0 [ 59.662046][ T4690] total_unevictable 0 [ 59.666037][ T4690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.359,pid=4689,uid=0 [ 59.680684][ T4690] Memory cgroup out of memory: Killed process 4689 (syz.0.359) total-vm:93960kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 59.733388][ T4714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.361: bg 0: block 345: padding at end of block bitmap is not set [ 59.750875][ T4714] EXT4-fs (loop4): Remounting filesystem read-only [ 59.758664][ T12] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 64.958186][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!