last executing test programs: 4.671126756s ago: executing program 1 (id=447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.430991837s ago: executing program 1 (id=457): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="2b68756765746c6220437c59f4d384e5a874bbd9"], 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000001400)={&(0x7f0000006000)={[{&(0x7f0000000340)="8b31380d654d22f886f8d925c6fa016c33be5ada561ed84412fcf130e627b9f62e7c24c7cb3dd75dd712149294cc22750859c9cd589949fa69c66a4b4920818cd07135dbb948098f9329dc40fb98", 0x4e, 0x3}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000001240)="06edbd4696022a0a51ba860debf965d60dc3d36bea58ac84be423e2171661898424b81752599a350c21487226d728ff2fcac5c0639c2b65cb499ba70ee137bbe8ca9cefe0da5cfaeba27fe016d580ed55d6270528c4f713414b8e8571c7ae8dcf7622650cb8926f67e6df29c73d972566a0050ec5832fb4361b1c0673efc552ac03cb604843c0da7a0a860b1a3ea837ad33f54d1391b42e2409fc5044cfda1c9b903cac0158898bf29281f88fcc5913d06e328821afc2c881978f286a638", 0xbe, 0x3}, {&(0x7f0000000200)="179e35a20f1186e35a1bc71a4727985e148ee990ee22", 0x16}, {&(0x7f0000001300)="9365360b81a2e3028fa711ff23cbb8ab4c32e4aead7007416165dfdef71083fa7008722f6adc55e3895e07a8f27e121d19d8d9b535d2af7bfb1290ba9fc28606c8502e129ce566b93a9165b01803e16e9ee0fb284426210edbd1", 0x5a, 0x3}, {&(0x7f0000001380)="35642c1f8a20b35a60898a9d96dd828bdddc2b639c707c4dabc1f872c2a40e3566115b1a6de10bda90a12798d543be2418a78fd6dae8211856836dfbd99a035e6444423f8b0f79aca371e44f8e9c9e9dc20fa98846c6cf05b7e76b", 0x5b, 0x400}, {&(0x7f0000003380)="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", 0x1000, 0x3}, {&(0x7f0000000280)="fc663a420e21c729f99a43b2677aa20d7900c15e6acb786acf3c4c7e8d7254937e2c3b", 0x23, 0x2}]}, 0x8}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x5}, {}, {0x0, 0xe}, {0x0, 0x470a, 0x0, 0x8000000, 0xa}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0xfffffffd, 0xfffffe00}, {0x0, 0xffffffff}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3, 0x4000000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffdffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x9, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x800}, {0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x2, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x3}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffa}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x4, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x80, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x9a, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.983255005s ago: executing program 1 (id=471): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x298}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000b00)={{0x2, 0x3, 0x9, 0x3, 0xffffffff}, 0x0, 0x800, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0xffffffffaa71010d, 0x2, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r5}, 0xc) 2.875385015s ago: executing program 3 (id=473): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.03399474s ago: executing program 4 (id=477): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2e41e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x4, 0x10000, 0x9, 0x1, 0x8, 0x2020003, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1b000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a010100000000000000000a0000050900010073797a31000000000c0010400000000000000002140000001100010000000000000000000700000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x963, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2d, 0xfffffffffffffffb, 0xfffffffe}, 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x6}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.991489753s ago: executing program 1 (id=478): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x298}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000b00)={{0x2, 0x3, 0x9, 0x3, 0xffffffff}, 0x0, 0x800, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0xffffffffaa71010d, 0x2, 0xffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r5}, 0xc) 1.906521111s ago: executing program 4 (id=479): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x3, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 1.901034522s ago: executing program 0 (id=480): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.874466324s ago: executing program 4 (id=481): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="2b68756765746c6220437c59f4d384e5a874bbd9"], 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000001400)={&(0x7f0000006000)={[{&(0x7f0000000340)="8b31380d654d22f886f8d925c6fa016c33be5ada561ed84412fcf130e627b9f62e7c24c7cb3dd75dd712149294cc22750859c9cd589949fa69c66a4b4920818cd07135dbb948098f9329dc40fb98", 0x4e, 0x3}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000001240)="06edbd4696022a0a51ba860debf965d60dc3d36bea58ac84be423e2171661898424b81752599a350c21487226d728ff2fcac5c0639c2b65cb499ba70ee137bbe8ca9cefe0da5cfaeba27fe016d580ed55d6270528c4f713414b8e8571c7ae8dcf7622650cb8926f67e6df29c73d972566a0050ec5832fb4361b1c0673efc552ac03cb604843c0da7a0a860b1a3ea837ad33f54d1391b42e2409fc5044cfda1c9b903cac0158898bf29281f88fcc5913d06e328821afc2c881978f286a638", 0xbe, 0x3}, {&(0x7f0000000200)="179e35a20f1186e35a1bc71a4727985e148ee990ee22", 0x16}, {&(0x7f0000001300)="9365360b81a2e3028fa711ff23cbb8ab4c32e4aead7007416165dfdef71083fa7008722f6adc55e3895e07a8f27e121d19d8d9b535d2af7bfb1290ba9fc28606c8502e129ce566b93a9165b01803e16e9ee0fb284426210edbd1", 0x5a, 0x3}, {&(0x7f0000001380)="35642c1f8a20b35a60898a9d96dd828bdddc2b639c707c4dabc1f872c2a40e3566115b1a6de10bda90a12798d543be2418a78fd6dae8211856836dfbd99a035e6444423f8b0f79aca371e44f8e9c9e9dc20fa98846c6cf05b7e76b", 0x5b, 0x400}, {&(0x7f0000003380)="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", 0x1000, 0x3}, {&(0x7f0000000280)="fc663a420e21c729f99a43b2677aa20d7900c15e6acb786acf3c4c7e8d7254937e2c3b", 0x23, 0x2}]}, 0x8}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x5}, {}, {0x0, 0xe}, {0x0, 0x470a, 0x0, 0x8000000, 0xa}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0xfffffffd, 0xfffffe00}, {0x0, 0xffffffff}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3, 0x4000000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffdffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x9, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x800}, {0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x2, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x3}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffa}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x4, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x80, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x9a, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.727531517s ago: executing program 3 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000040)={{r1}, 0x4, &(0x7f0000000000)=[0x5, 0x3, 0x2, 0x4], 0x2, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x110, r0, 0x94545000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000120000180000000000000018120080", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 1.711307718s ago: executing program 0 (id=484): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000280)=0x9, 0x4) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 1.552370813s ago: executing program 0 (id=485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_ext_remove_space\x00', r1, 0x0, 0x4804}, 0x4d) r2 = fsopen(&(0x7f0000000400)='proc\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000201040000003aeb000002000018110000", @ANYRES32, @ANYBLOB="0000001a3757d4f726f549500000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x40001, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kyber_adjust\x00', r5, 0x0, 0xfffffffffffffdff}, 0x18) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xd) r7 = fsmount(r2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x3c, 0x0, 0xfffffffffffffd7b, &(0x7f0000000500)=""/156, 0xce}, 0x41) r9 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8609702833ba8a62ecd2e4cde74667d754bef8b94423f2910a27e3ea3a45362fd42a479d6e6c5c11ce8866d949c3a14753de36d161690b8248a5e5b55b0c343243959fa85a2ceed58591e0d512a870be2d1304e3120345a8f9dc533683cad12b73a1e9785dd246227405f12d2216e7809ce915f9a8c5b962d095fad374a72a4aca3f2b6584717658a522b74c2de7ce72ebc85e9862963f442a37aba392716c961df788394b2527807fdb1a663657a5ddd337dfd1b325cff0f8a2a41b3e6c50bc4240394a4bbd0d024e72f24192bc6216f3", @ANYRES16=r6], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000200b86382ab8068af000000000000000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r10}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000000)={0xc0000008}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket(0x1e, 0x1, 0x0) connect$tipc(r12, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r12, &(0x7f0000000340), 0x2000011a) splice(r12, 0x0, r11, 0x0, 0x4ff9c, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 1.197633754s ago: executing program 1 (id=486): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 831.065076ms ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e756d337", 0x4}, {0x0}], 0x10000000000000ce, 0x8, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001edff7f0000000000000000181200001624008bd46c60a011b5441574b8498544a6057dbcfbbf1071c0572395df5399d7a50fb0b447019d96710ae88939762a8b2f804f1a63d8f9be30590a82db0ef2ad955da7111f1779971509bdca0fa90023801973a48279c1ab3d2c9ab3cfeaa81e8f11f9af4c033e6d1afd976ccb570d2de0c62275988a3d0d4f77661c1500"/159, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 757.594473ms ago: executing program 0 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_ext_remove_space\x00', r1, 0x0, 0x4804}, 0x4d) r2 = fsopen(&(0x7f0000000400)='proc\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000201040000003aeb000002000018110000", @ANYRES32, @ANYBLOB="0000001a3757d4f726f549500000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x40001, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kyber_adjust\x00', r5, 0x0, 0xfffffffffffffdff}, 0x18) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xd) r7 = fsmount(r2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x3c, 0x0, 0xfffffffffffffd7b, &(0x7f0000000500)=""/156, 0xce}, 0x41) r9 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8609702833ba8a62ecd2e4cde74667d754bef8b94423f2910a27e3ea3a45362fd42a479d6e6c5c11ce8866d949c3a14753de36d161690b8248a5e5b55b0c343243959fa85a2ceed58591e0d512a870be2d1304e3120345a8f9dc533683cad12b73a1e9785dd246227405f12d2216e7809ce915f9a8c5b962d095fad374a72a4aca3f2b6584717658a522b74c2de7ce72ebc85e9862963f442a37aba392716c961df788394b2527807fdb1a663657a5ddd337dfd1b325cff0f8a2a41b3e6c50bc4240394a4bbd0d024e72f24192bc6216f3fc1c4948909832", @ANYRES16=r6], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000200b86382ab8068af000000000000000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r10}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000000)={0xc0000008}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket(0x1e, 0x1, 0x0) connect$tipc(r12, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r12, &(0x7f0000000340), 0x2000011a) splice(r12, 0x0, r11, 0x0, 0x4ff9c, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 730.610985ms ago: executing program 3 (id=492): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000280)=0x9, 0x4) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 695.026329ms ago: executing program 1 (id=493): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r3, r4) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 637.396794ms ago: executing program 2 (id=494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 616.108245ms ago: executing program 3 (id=495): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="850000005346000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r6, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x81, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x20007, 0x9}) r7 = socket(0x10, 0x803, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r7, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="07000000270000000802cbb2133cb707111e00005823a297acd2a74959028af1d61ab467efc908c239fecaf1e77f253a13cce0774864d782965723153d5d8bf207f5887be89815c35e41ab6848e753a41732fce97e54c142d5", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000041000000000000000000000000fc5d997019ceed03d46829bbb53576009c6f10aa9a7e9cdce21019b28f85323877472e5d84ae91422c3734ef08f83674ad262cc1901a8dc40601e7f72f481692d65aa42ec37563760c33d555b7e314763512b431285b5888f01dd889d6d709a3b8c8c36e7e2d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESOCT=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000401, r6, &(0x7f0000000240)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000090000000000000000fd5d217948a910fe7220539d596d1753c32860d6119a3f21b0189a528cbf56815dd0c4d2492ded8282b1112ba3badcf53c0c010e442a5dbd185b558f7001bbd4edfb04b084709f42978e36e81a8d9a2d14022d511bc5d4daf9652ac13fef730dc16e359f42d51b6e0ef1635762bca215688f3b6f5bbb7fba80c4956d17e35728bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x2000000000000034, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES32=r10, @ANYRES32=r9], &(0x7f0000000380)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000440)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r12, 0x40047211, &(0x7f0000000300)=0x4) r13 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x13, 0xffffffffffffffff, 0x28f45000) process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa01faff, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0x0, 0xffef}, {0xfff3, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) 537.278102ms ago: executing program 3 (id=496): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="e756d337", 0x4}, {0x0}], 0x10000000000000ce, 0x8, 0x1) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 492.651976ms ago: executing program 4 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000000c0)=0x1) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 453.91649ms ago: executing program 3 (id=498): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x40000000000000}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x54adc8a2fff47367) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x40084) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) pause() 448.86057ms ago: executing program 2 (id=499): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xe17}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32, @ANYBLOB="00004000000000000000000056e18147f4098903", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r6}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10005) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="100228bd7000ffdbdf2502000000140002006970365f76746930000000000000000014000200776732000000000000000000000000000900010073791d17fbfebe4958c70cea241296dd42aee62325b15d775455294b775fc7ead0b00de6bc771a40c64c9397d4e3bddea71360a4fef255945d29680ad8e3e21f7cec48b2fe22fca84e0ebe7f637bdf712413c64b7a3250c14240bdab643a5dbf13937caef2aecd95e6f14c29e88a38749f88f4d9dd"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x82) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00'}, 0x18) signalfd4(r7, &(0x7f0000000180)={[0x6]}, 0x8, 0x800) 360.896868ms ago: executing program 4 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e756d337", 0x4}, {0x0}], 0x10000000000000ce, 0x8, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001edff7f0000000000000000181200001624008bd46c60a011b5441574b8498544a6057dbcfbbf1071c0572395df5399d7a50fb0b447019d96710ae88939762a8b2f804f1a63d8f9be30590a82db0ef2ad955da7111f1779971509bdca0fa90023801973a48279c1ab3d2c9ab3cfeaa81e8f11f9af4c033e6d1afd976ccb570d2de0c62275988a3d0d4f77661c1500"/159, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 210.451381ms ago: executing program 4 (id=501): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r3, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r5 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x93, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 144.047837ms ago: executing program 2 (id=502): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2e41e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x4, 0x10000, 0x9, 0x1, 0x8, 0x2020003, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1b000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a010100000000000000000a0000050900010073797a31000000000c0010400000000000000002140000001100010000000000000000000700000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x963, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2d, 0xfffffffffffffffb, 0xfffffffe}, 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x6}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 101.942691ms ago: executing program 0 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000040)={{r1}, 0x4, &(0x7f0000000000)=[0x5, 0x3, 0x2, 0x4], 0x2, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x110, r0, 0x94545000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000120000180000000000000018120080", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 56.868845ms ago: executing program 2 (id=504): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x3, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 33.309547ms ago: executing program 2 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x60, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x82}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x8, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=506): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="850000005346000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r6, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x81, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x20007, 0x9}) r7 = socket(0x10, 0x803, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r7, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="07000000270000000802cbb2133cb707111e00005823a297acd2a74959028af1d61ab467efc908c239fecaf1e77f253a13cce0774864d782965723153d5d8bf207f5887be89815c35e41ab6848e753a41732fce97e54c142d5", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000041000000000000000000000000fc5d997019ceed03d46829bbb53576009c6f10aa9a7e9cdce21019b28f85323877472e5d84ae91422c3734ef08f83674ad262cc1901a8dc40601e7f72f481692d65aa42ec37563760c33d555b7e314763512b431285b5888f01dd889d6d709a3b8c8c36e7e2d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESOCT=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000401, r6, &(0x7f0000000240)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000090000000000000000fd5d217948a910fe7220539d596d1753c32860d6119a3f21b0189a528cbf56815dd0c4d2492ded8282b1112ba3badcf53c0c010e442a5dbd185b558f7001bbd4edfb04b084709f42978e36e81a8d9a2d14022d511bc5d4daf9652ac13fef730dc16e359f42d51b6e0ef1635762bca215688f3b6f5bbb7fba80c4956d17e35728bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x2000000000000034, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES32=r10, @ANYRES32=r9], &(0x7f0000000380)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000440)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r12, 0x40047211, &(0x7f0000000300)=0x4) r13 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x13, 0xffffffffffffffff, 0x28f45000) process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa01faff, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0x0, 0xffef}, {0xfff3, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) kernel console output (not intermixed with test programs): -0000-000000000000 r/w without journal. Quota mode: none. [ 47.948538][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 47.981261][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.991861][ T3954] loop2: detected capacity change from 0 to 1024 [ 48.003104][ T3954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.041229][ T3954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.136138][ T3965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 48.177772][ T3961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.230002][ T3950] serio: Serial port ttyS3 [ 48.264565][ T3956] loop1: detected capacity change from 0 to 1024 [ 48.271680][ T3956] EXT4-fs: Ignoring removed orlov option [ 48.280071][ T3956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.394226][ T3974] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.455915][ T3974] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.499498][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.537493][ T3974] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.657155][ T3974] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.874354][ T2853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.923041][ T2853] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.003728][ T2853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.037304][ T3984] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 49.105409][ T2853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.141740][ T3984] SELinux: failed to load policy [ 49.157217][ T3970] serio: Serial port ttyS3 [ 49.164062][ T3986] loop3: detected capacity change from 0 to 1024 [ 49.181319][ T3986] EXT4-fs: Ignoring removed orlov option [ 49.203818][ T3986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.325118][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.396328][ T3991] loop1: detected capacity change from 0 to 512 [ 49.411535][ T3992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 49.418309][ T3992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 49.426545][ T3992] vhci_hcd vhci_hcd.0: Device attached [ 49.478937][ T3994] vhci_hcd: connection closed [ 49.479199][ T2461] vhci_hcd vhci_hcd.3: stop threads [ 49.489249][ T2461] vhci_hcd vhci_hcd.3: release socket [ 49.494724][ T2461] vhci_hcd vhci_hcd.3: disconnect device [ 49.501211][ T3991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.533480][ T3991] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.577689][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.750990][ T4014] FAULT_INJECTION: forcing a failure. [ 49.750990][ T4014] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.764656][ T4014] CPU: 1 UID: 0 PID: 4014 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.764681][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.764773][ T4014] Call Trace: [ 49.764780][ T4014] [ 49.764786][ T4014] __dump_stack+0x1d/0x30 [ 49.764824][ T4014] dump_stack_lvl+0x95/0xd0 [ 49.764847][ T4014] dump_stack+0x15/0x1b [ 49.764871][ T4014] should_fail_ex+0x265/0x280 [ 49.764898][ T4014] should_fail_alloc_page+0xf2/0x100 [ 49.764925][ T4014] __alloc_frozen_pages_noprof+0x109/0x360 [ 49.765128][ T4014] alloc_pages_mpol+0xb3/0x260 [ 49.765225][ T4014] vma_alloc_folio_noprof+0x1aa/0x300 [ 49.765252][ T4014] handle_mm_fault+0xef5/0x2c60 [ 49.765307][ T4014] do_user_addr_fault+0x630/0x1080 [ 49.765344][ T4014] exc_page_fault+0x62/0xa0 [ 49.765368][ T4014] asm_exc_page_fault+0x26/0x30 [ 49.765388][ T4014] RIP: 0033:0x7f0899bf0616 [ 49.765402][ T4014] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 6c 4e 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 49.765418][ T4014] RSP: 002b:00007f0898742f70 EFLAGS: 00010202 [ 49.765434][ T4014] RAX: 0000000000000000 RBX: 00007f0899f76180 RCX: 0000000000000000 [ 49.765446][ T4014] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f0899da5479 [ 49.765521][ T4014] RBP: 00007f0898745090 R08: 00007f0899bde2f0 R09: 0000000000000000 [ 49.765532][ T4014] R10: 0000000000000002 R11: 0000200000000000 R12: 0000000000000002 [ 49.765543][ T4014] R13: 0000000000000036 R14: 0000200000000000 R15: 00007ffd6cf148d8 [ 49.765560][ T4014] [ 49.765571][ T4014] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 49.937300][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.946378][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.413227][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.445701][ T4018] loop1: detected capacity change from 0 to 1024 [ 50.452552][ T4018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.468576][ T4022] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.483088][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.495408][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.553942][ T4020] SELinux: failed to load policy [ 50.561456][ T4022] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.655447][ T4022] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.715422][ T4022] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.781598][ T2101] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.794104][ T2101] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819656][ T2101] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.833198][ T4036] xt_policy: output policy not valid in PREROUTING and INPUT [ 50.859998][ T4039] loop3: detected capacity change from 0 to 1024 [ 50.870576][ T2101] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.895539][ T4039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.916006][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.971640][ T4025] serio: Serial port ttyS3 [ 51.008811][ T4043] lo speed is unknown, defaulting to 1000 [ 51.039427][ T4043] siw: device registration error -23 [ 51.176796][ T4046] serio: Serial port ttyS3 [ 51.283452][ T4018] syz.1.148 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 51.297540][ T4018] CPU: 0 UID: 0 PID: 4018 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.297605][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.297617][ T4018] Call Trace: [ 51.297623][ T4018] [ 51.297630][ T4018] __dump_stack+0x1d/0x30 [ 51.297654][ T4018] dump_stack_lvl+0x95/0xd0 [ 51.297675][ T4018] dump_stack+0x15/0x1b [ 51.297704][ T4018] dump_header+0x81/0x240 [ 51.297730][ T4018] oom_kill_process+0x295/0x350 [ 51.297768][ T4018] out_of_memory+0x97b/0xb80 [ 51.297842][ T4018] try_charge_memcg+0x610/0xa10 [ 51.297891][ T4018] obj_cgroup_charge_pages+0xa6/0x150 [ 51.297936][ T4018] __memcg_kmem_charge_page+0x9f/0x170 [ 51.297978][ T4018] __alloc_frozen_pages_noprof+0x18f/0x360 [ 51.298007][ T4018] alloc_pages_mpol+0xb3/0x260 [ 51.298035][ T4018] alloc_pages_noprof+0x90/0x130 [ 51.298082][ T4018] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 51.298125][ T4018] __kvmalloc_node_noprof+0x492/0x6b0 [ 51.298155][ T4018] ? ip_set_alloc+0x24/0x30 [ 51.298213][ T4018] ? ip_set_alloc+0x24/0x30 [ 51.298245][ T4018] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 51.298272][ T4018] ip_set_alloc+0x24/0x30 [ 51.298298][ T4018] hash_netiface_create+0x282/0x740 [ 51.298445][ T4018] ? __pfx_hash_netiface_create+0x10/0x10 [ 51.298484][ T4018] ip_set_create+0x3cc/0x970 [ 51.298605][ T4018] ? __nla_parse+0x40/0x60 [ 51.298709][ T4018] nfnetlink_rcv_msg+0x4c6/0x590 [ 51.298774][ T4018] netlink_rcv_skb+0x123/0x220 [ 51.298879][ T4018] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 51.298916][ T4018] nfnetlink_rcv+0x167/0x16c0 [ 51.299005][ T4018] ? kmem_cache_free+0xe3/0x3a0 [ 51.299032][ T4018] ? __kfree_skb+0x109/0x150 [ 51.299055][ T4018] ? nlmon_xmit+0x4f/0x60 [ 51.299115][ T4018] ? consume_skb+0x49/0x150 [ 51.299140][ T4018] ? nlmon_xmit+0x4f/0x60 [ 51.299158][ T4018] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 51.299215][ T4018] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 51.299247][ T4018] ? __dev_queue_xmit+0x148/0x1ee0 [ 51.299282][ T4018] ? ref_tracker_free+0x37d/0x3e0 [ 51.299332][ T4018] ? __netlink_deliver_tap+0x4dc/0x500 [ 51.299466][ T4018] netlink_unicast+0x5c0/0x690 [ 51.299506][ T4018] netlink_sendmsg+0x58b/0x6b0 [ 51.299545][ T4018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.299577][ T4018] __sock_sendmsg+0x145/0x180 [ 51.299601][ T4018] ____sys_sendmsg+0x31e/0x4a0 [ 51.299722][ T4018] ___sys_sendmsg+0x17b/0x1d0 [ 51.299798][ T4018] __x64_sys_sendmsg+0xd4/0x160 [ 51.299862][ T4018] x64_sys_call+0x17ba/0x3000 [ 51.299908][ T4018] do_syscall_64+0xca/0x2b0 [ 51.299948][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.299969][ T4018] RIP: 0033:0x7f0c4387f749 [ 51.299985][ T4018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.300022][ T4018] RSP: 002b:00007f0c422df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.300043][ T4018] RAX: ffffffffffffffda RBX: 00007f0c43ad5fa0 RCX: 00007f0c4387f749 [ 51.300056][ T4018] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 51.300069][ T4018] RBP: 00007f0c43903f91 R08: 0000000000000000 R09: 0000000000000000 [ 51.300081][ T4018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.300093][ T4018] R13: 00007f0c43ad6038 R14: 00007f0c43ad5fa0 R15: 00007fff3a9280a8 [ 51.300110][ T4018] [ 51.300117][ T4018] memory: usage 307200kB, limit 307200kB, failcnt 4934 [ 51.639152][ T4018] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 51.647456][ T4018] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 51.654928][ T4018] Memory cgroup stats for /syz1: [ 51.655131][ T4018] cache 20480 [ 51.663482][ T4018] rss 0 [ 51.666505][ T4018] shmem 0 [ 51.669855][ T4018] mapped_file 0 [ 51.673412][ T4018] dirty 0 [ 51.676367][ T4018] writeback 0 [ 51.679653][ T4018] workingset_refault_anon 4832 [ 51.684483][ T4018] workingset_refault_file 1815 [ 51.689333][ T4018] swap 729088 [ 51.692617][ T4018] swapcached 0 [ 51.696074][ T4018] pgpgin 28744 [ 51.699453][ T4018] pgpgout 28739 [ 51.703107][ T4018] pgfault 36736 [ 51.706649][ T4018] pgmajfault 752 [ 51.710272][ T4018] inactive_anon 0 [ 51.714191][ T4018] active_anon 0 [ 51.717676][ T4018] inactive_file 12288 [ 51.721854][ T4018] active_file 8192 [ 51.725751][ T4018] unevictable 0 [ 51.729225][ T4018] hierarchical_memory_limit 314572800 [ 51.734802][ T4018] hierarchical_memsw_limit 9223372036854771712 [ 51.741142][ T4018] total_cache 20480 [ 51.745083][ T4018] total_rss 0 [ 51.748388][ T4018] total_shmem 0 [ 51.751873][ T4018] total_mapped_file 0 [ 51.755902][ T4018] total_dirty 0 [ 51.759386][ T4018] total_writeback 0 [ 51.763235][ T4018] total_workingset_refault_anon 4832 [ 51.768580][ T4018] total_workingset_refault_file 1815 [ 51.769550][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 51.769563][ T29] audit: type=1326 audit(1767453133.220:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.774039][ T4018] total_swap 729088 [ 51.780801][ T29] audit: type=1326 audit(1767453133.220:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.803946][ T4018] total_swapcached 0 [ 51.803962][ T4018] total_pgpgin 28744 [ 51.803972][ T4018] total_pgpgout 28739 [ 51.803981][ T4018] total_pgfault 36736 [ 51.847110][ T4018] total_pgmajfault 752 [ 51.848324][ T29] audit: type=1326 audit(1767453133.280:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.851280][ T4018] total_inactive_anon 0 [ 51.851293][ T4018] total_active_anon 0 [ 51.851302][ T4018] total_inactive_file 12288 [ 51.875094][ T29] audit: type=1326 audit(1767453133.280:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.879213][ T4018] total_active_file 8192 [ 51.883317][ T29] audit: type=1326 audit(1767453133.280:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.887809][ T4018] total_unevictable 0 [ 51.887820][ T4018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 51.911963][ T29] audit: type=1326 audit(1767453133.280:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.916360][ T4018] ,cpuset=/ [ 51.939810][ T29] audit: type=1326 audit(1767453133.280:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.943941][ T4018] ,mems_allowed=0 [ 51.950787][ T29] audit: type=1326 audit(1767453133.280:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 51.974144][ T4018] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.148,pid=4017,uid=0 [ 51.974214][ T4018] Memory cgroup out of memory: Killed process 4017 (syz.1.148) total-vm:94100kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 51.977309][ T29] audit: type=1326 audit(1767453133.280:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 52.076981][ T29] audit: type=1326 audit(1767453133.280:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 52.094638][ T4033] Cannot find add_set index 0 as target [ 52.169057][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.289843][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.351908][ T4054] syz.1.158 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.363236][ T4054] CPU: 1 UID: 0 PID: 4054 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.363337][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.363428][ T4054] Call Trace: [ 52.363434][ T4054] [ 52.363442][ T4054] __dump_stack+0x1d/0x30 [ 52.363470][ T4054] dump_stack_lvl+0x95/0xd0 [ 52.363512][ T4054] dump_stack+0x15/0x1b [ 52.363535][ T4054] dump_header+0x81/0x240 [ 52.363560][ T4054] oom_kill_process+0x295/0x350 [ 52.363672][ T4054] out_of_memory+0x97b/0xb80 [ 52.363713][ T4054] try_charge_memcg+0x610/0xa10 [ 52.363756][ T4054] charge_memcg+0x51/0xc0 [ 52.363782][ T4054] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.363847][ T4054] __read_swap_cache_async+0x17b/0x2d0 [ 52.363875][ T4054] swap_cluster_readahead+0x262/0x3c0 [ 52.363949][ T4054] swapin_readahead+0xde/0x820 [ 52.363976][ T4054] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 52.363999][ T4054] ? __rcu_read_unlock+0x34/0x70 [ 52.364092][ T4054] ? __rcu_read_unlock+0x4f/0x70 [ 52.364133][ T4054] ? swap_cache_get_folio+0x277/0x280 [ 52.364285][ T4054] do_swap_page+0x2b4/0x21e0 [ 52.364315][ T4054] ? __pfx_default_wake_function+0x10/0x10 [ 52.364381][ T4054] handle_mm_fault+0x9d8/0x2c60 [ 52.364480][ T4054] do_user_addr_fault+0x630/0x1080 [ 52.364508][ T4054] exc_page_fault+0x62/0xa0 [ 52.364588][ T4054] asm_exc_page_fault+0x26/0x30 [ 52.364611][ T4054] RIP: 0033:0x7f0c4373d71f [ 52.364671][ T4054] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 52.364730][ T4054] RSP: 002b:00007fff3a9280d8 EFLAGS: 00010202 [ 52.364747][ T4054] RAX: 0000000081354708 RBX: 00007f0c44605720 RCX: 0000000000000006 [ 52.364760][ T4054] RDX: 0000000000000708 RSI: ffffffff81354708 RDI: 0000000000000001 [ 52.364773][ T4054] RBP: ffffffff81354708 R08: 00007f0c43ac0000 R09: 00007f0c43ac2000 [ 52.364787][ T4054] R10: 000000008135470c R11: 0000000000000001 R12: 0000000000000001 [ 52.364801][ T4054] R13: 0000000000000000 R14: ffffffff81354273 R15: 0000000000000006 [ 52.364870][ T4054] ? do_user_addr_fault+0x73/0x1080 [ 52.364896][ T4054] ? do_user_addr_fault+0x508/0x1080 [ 52.364928][ T4054] ? do_user_addr_fault+0x508/0x1080 [ 52.364997][ T4054] [ 52.589934][ T4054] memory: usage 307200kB, limit 307200kB, failcnt 5155 [ 52.596862][ T4054] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 52.604936][ T4054] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 52.612494][ T4054] Memory cgroup stats for /syz1: [ 52.613382][ T4054] cache 0 [ 52.621466][ T4054] rss 4096 [ 52.624684][ T4054] shmem 0 [ 52.627765][ T4054] mapped_file 0 [ 52.631217][ T4054] dirty 0 [ 52.634280][ T4054] writeback 77824 [ 52.638040][ T4054] workingset_refault_anon 4897 [ 52.642819][ T4054] workingset_refault_file 1815 [ 52.647621][ T4054] swap 106496 [ 52.650917][ T4054] swapcached 86016 [ 52.654779][ T4054] pgpgin 28845 [ 52.658165][ T4054] pgpgout 28824 [ 52.661708][ T4054] pgfault 36904 [ 52.665244][ T4054] pgmajfault 790 [ 52.668950][ T4054] inactive_anon 86016 [ 52.672926][ T4054] active_anon 0 [ 52.676467][ T4054] inactive_file 0 [ 52.680103][ T4054] active_file 0 [ 52.683619][ T4054] unevictable 0 [ 52.687171][ T4054] hierarchical_memory_limit 314572800 [ 52.692537][ T4054] hierarchical_memsw_limit 9223372036854771712 [ 52.698742][ T4054] total_cache 0 [ 52.702222][ T4054] total_rss 4096 [ 52.705817][ T4054] total_shmem 0 [ 52.709390][ T4054] total_mapped_file 0 [ 52.713459][ T4054] total_dirty 0 [ 52.717046][ T4054] total_writeback 77824 [ 52.721291][ T4054] total_workingset_refault_anon 4897 [ 52.726627][ T4054] total_workingset_refault_file 1815 [ 52.731917][ T4054] total_swap 106496 [ 52.735775][ T4054] total_swapcached 86016 [ 52.740142][ T4054] total_pgpgin 28845 [ 52.744147][ T4054] total_pgpgout 28824 [ 52.748126][ T4054] total_pgfault 36904 [ 52.752206][ T4054] total_pgmajfault 790 [ 52.756468][ T4054] total_inactive_anon 86016 [ 52.760984][ T4054] total_active_anon 0 [ 52.765110][ T4054] total_inactive_file 0 [ 52.769271][ T4054] total_active_file 0 [ 52.773289][ T4054] total_unevictable 0 [ 52.777276][ T4054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.158,pid=4054,uid=0 [ 52.792044][ T4054] Memory cgroup out of memory: Killed process 4054 (syz.1.158) total-vm:93836kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 52.835882][ T4065] __nla_validate_parse: 8 callbacks suppressed [ 52.835974][ T4065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'. [ 52.980938][ T4076] loop3: detected capacity change from 0 to 1024 [ 53.001609][ T4076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.052979][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.139482][ T4084] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.229127][ T4084] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.307986][ T4084] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.385845][ T4092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.403876][ T4084] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.421833][ T4093] loop1: detected capacity change from 0 to 128 [ 53.450900][ T4093] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.543061][ T2325] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.573529][ T2325] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.581821][ T4093] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.581837][ T2325] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.613318][ T2325] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.622226][ T4089] serio: Serial port ttyS3 [ 53.753782][ T4098] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 53.763480][ T4098] SELinux: failed to load policy [ 53.948867][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.172882][ T4110] SELinux: failed to load policy [ 54.235548][ T123] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.332508][ T4119] loop4: detected capacity change from 0 to 1024 [ 54.340399][ T4119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.365248][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.494034][ T4120] lo speed is unknown, defaulting to 1000 [ 54.530491][ T4129] siw: device registration error -23 [ 54.541948][ T4127] lo speed is unknown, defaulting to 1000 [ 54.627366][ T4132] bond1 (unregistering): Released all slaves [ 54.679848][ T4135] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.703382][ T4135] SELinux: failed to load policy [ 54.798608][ T4139] xt_policy: output policy not valid in PREROUTING and INPUT [ 54.850747][ T4126] serio: Serial port ttyS3 [ 55.119130][ T4118] syz.4.183 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 55.130118][ T4118] CPU: 1 UID: 0 PID: 4118 Comm: syz.4.183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.130149][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.130162][ T4118] Call Trace: [ 55.130169][ T4118] [ 55.130177][ T4118] __dump_stack+0x1d/0x30 [ 55.130201][ T4118] dump_stack_lvl+0x95/0xd0 [ 55.130301][ T4118] dump_stack+0x15/0x1b [ 55.130319][ T4118] dump_header+0x81/0x240 [ 55.130339][ T4118] oom_kill_process+0x295/0x350 [ 55.130367][ T4118] out_of_memory+0x97b/0xb80 [ 55.130395][ T4118] try_charge_memcg+0x610/0xa10 [ 55.130437][ T4118] charge_memcg+0x51/0xc0 [ 55.130464][ T4118] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 55.130536][ T4118] __read_swap_cache_async+0x17b/0x2d0 [ 55.130572][ T4118] swap_cluster_readahead+0x262/0x3c0 [ 55.130604][ T4118] swapin_readahead+0xde/0x820 [ 55.130731][ T4118] ? bpf_snprintf_btf+0x58/0x150 [ 55.130832][ T4118] ? __rcu_read_unlock+0x4f/0x70 [ 55.130853][ T4118] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 55.130879][ T4118] ? __rcu_read_unlock+0x4f/0x70 [ 55.130899][ T4118] ? __rcu_read_unlock+0x4f/0x70 [ 55.130964][ T4118] ? swap_cache_get_folio+0x277/0x280 [ 55.130997][ T4118] do_swap_page+0x2b4/0x21e0 [ 55.131051][ T4118] ? _raw_spin_unlock+0x26/0x50 [ 55.131073][ T4118] ? __schedule+0x85f/0xcd0 [ 55.131094][ T4118] ? __pfx_default_wake_function+0x10/0x10 [ 55.131144][ T4118] handle_mm_fault+0x9d8/0x2c60 [ 55.131186][ T4118] do_user_addr_fault+0x630/0x1080 [ 55.131243][ T4118] exc_page_fault+0x62/0xa0 [ 55.131267][ T4118] asm_exc_page_fault+0x26/0x30 [ 55.131337][ T4118] RIP: 0033:0x7f70829a59ec [ 55.131395][ T4118] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 55.131412][ T4118] RSP: 002b:00007fff6dfe7550 EFLAGS: 00010206 [ 55.131428][ T4118] RAX: 0000000000000000 RBX: 00007f7082d25fa0 RCX: 0000000000000000 [ 55.131440][ T4118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557ef51808 [ 55.131531][ T4118] RBP: 00007f7082d27da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 55.131549][ T4118] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000d75f [ 55.131561][ T4118] R13: 00007f7082d26090 R14: ffffffffffffffff R15: 00007fff6dfe7660 [ 55.131578][ T4118] [ 55.131584][ T4118] memory: usage 307200kB, limit 307200kB, failcnt 2453 [ 55.199763][ T4142] loop3: detected capacity change from 0 to 1024 [ 55.200306][ T4118] memory+swap: usage 307892kB, limit 9007199254740988kB, failcnt 0 [ 55.206657][ T4142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.211150][ T4118] kmem: usage 306636kB, limit 9007199254740988kB, failcnt 0 [ 55.211167][ T4118] Memory cgroup stats for /syz4: [ 55.245935][ T4142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.248623][ T4118] cache 32768 [ 55.417565][ T4118] rss 0 [ 55.420332][ T4118] shmem 0 [ 55.423305][ T4118] mapped_file 0 [ 55.427121][ T4118] dirty 0 [ 55.430076][ T4118] writeback 4096 [ 55.433694][ T4118] workingset_refault_anon 1615 [ 55.438560][ T4118] workingset_refault_file 769 [ 55.443361][ T4118] swap 708608 [ 55.446840][ T4118] swapcached 20480 [ 55.450601][ T4118] pgpgin 36472 [ 55.454117][ T4118] pgpgout 36331 [ 55.457626][ T4118] pgfault 47017 [ 55.461088][ T4118] pgmajfault 254 [ 55.464666][ T4118] inactive_anon 544768 [ 55.468889][ T4118] active_anon 0 [ 55.472350][ T4118] inactive_file 20480 [ 55.476432][ T4118] active_file 12288 [ 55.480294][ T4118] unevictable 0 [ 55.483796][ T4118] hierarchical_memory_limit 314572800 [ 55.485307][ T4147] serio: Serial port ttyS3 [ 55.489315][ T4118] hierarchical_memsw_limit 9223372036854771712 [ 55.489331][ T4118] total_cache 32768 [ 55.489340][ T4118] total_rss 0 [ 55.489349][ T4118] total_shmem 0 [ 55.511026][ T4118] total_mapped_file 0 [ 55.515154][ T4118] total_dirty 0 [ 55.518626][ T4118] total_writeback 4096 [ 55.522730][ T4118] total_workingset_refault_anon 1615 [ 55.528113][ T4118] total_workingset_refault_file 769 [ 55.533328][ T4118] total_swap 708608 [ 55.537383][ T4118] total_swapcached 20480 [ 55.541802][ T4118] total_pgpgin 36472 [ 55.545741][ T4118] total_pgpgout 36331 [ 55.549714][ T4118] total_pgfault 47017 [ 55.553776][ T4118] total_pgmajfault 254 [ 55.557995][ T4118] total_inactive_anon 544768 [ 55.562574][ T4118] total_active_anon 0 [ 55.566561][ T4118] total_inactive_file 20480 [ 55.571139][ T4118] total_active_file 12288 [ 55.575545][ T4118] total_unevictable 0 [ 55.579631][ T4118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.183,pid=4118,uid=0 [ 55.594375][ T4118] Memory cgroup out of memory: Killed process 4118 (syz.4.183) total-vm:94100kB, anon-rss:1112kB, file-rss:22500kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 55.598624][ T4138] Cannot find add_set index 0 as target [ 55.684440][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.817443][ T4156] loop1: detected capacity change from 0 to 1024 [ 55.854386][ T4156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.883025][ T4154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.931726][ T4156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.990306][ T4154] loop4: detected capacity change from 0 to 128 [ 56.001598][ T4154] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.014497][ T4154] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.075015][ T4165] sch_fq: defrate 0 ignored. [ 56.310769][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.387539][ T4156] serio: Serial port ttyS3 [ 56.563919][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.627776][ T4178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.660630][ T4180] $Hÿ: renamed from bond0 (while UP) [ 56.669257][ T4180] $Hÿ: entered promiscuous mode [ 56.674520][ T4180] bond_slave_0: entered promiscuous mode [ 56.680381][ T4180] bond_slave_1: entered promiscuous mode [ 56.692347][ T4178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.706339][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.727976][ T4178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.751532][ T4183] Cannot find add_set index 0 as target [ 56.756732][ T4185] loop1: detected capacity change from 0 to 128 [ 56.767947][ T4183] xt_policy: output policy not valid in PREROUTING and INPUT [ 56.794058][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 56.794074][ T29] audit: type=1400 audit(1767453138.240:2018): avc: denied { wake_alarm } for pid=4184 comm="syz.1.202" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.828528][ T29] audit: type=1326 audit(1767453138.270:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.852346][ T29] audit: type=1326 audit(1767453138.270:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.875867][ T29] audit: type=1326 audit(1767453138.270:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.877308][ T4178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.899275][ T29] audit: type=1326 audit(1767453138.270:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.899302][ T29] audit: type=1326 audit(1767453138.270:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.956021][ T29] audit: type=1326 audit(1767453138.270:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 56.979491][ T29] audit: type=1326 audit(1767453138.270:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 57.005302][ T29] audit: type=1326 audit(1767453138.270:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 57.028708][ T29] audit: type=1326 audit(1767453138.270:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4387f749 code=0x7ffc0000 [ 57.077300][ T4189] SELinux: failed to load policy [ 57.120664][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.132627][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.148321][ T1628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.161172][ T1628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.314446][ T4197] tipc: Started in network mode [ 57.319509][ T4197] tipc: Node identity 46c8e17e16bc, cluster identity 4711 [ 57.326911][ T4197] tipc: Enabled bearer , priority 0 [ 57.356509][ T4196] tipc: Resetting bearer [ 57.418549][ T4196] tipc: Disabling bearer [ 57.607150][ T4200] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.617265][ T4200] SELinux: failed to load policy [ 57.751224][ T4210] tipc: Enabling of bearer rejected, failed to enable media [ 57.926763][ T4220] SELinux: failed to load policy [ 58.014725][ T4228] $Hÿ: renamed from bond0 (while UP) [ 58.021749][ T4228] $Hÿ: entered promiscuous mode [ 58.271753][ T4239] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.282727][ T4239] SELinux: failed to load policy [ 58.316423][ T4243] loop1: detected capacity change from 0 to 128 [ 58.471842][ T4247] tipc: Enabling of bearer rejected, failed to enable media [ 58.860007][ T4263] bridge_slave_0: left allmulticast mode [ 58.865834][ T4263] bridge_slave_0: left promiscuous mode [ 58.871635][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.880983][ T4263] bridge_slave_1: left allmulticast mode [ 58.886778][ T4263] bridge_slave_1: left promiscuous mode [ 58.892643][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.902895][ T4263] bond0: (slave bond_slave_0): Releasing backup interface [ 58.911634][ T4266] loop2: detected capacity change from 0 to 128 [ 58.918528][ T4263] bond0: (slave bond_slave_1): Releasing backup interface [ 58.922790][ T4266] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.942429][ T4263] team0: Port device team_slave_0 removed [ 58.948742][ T4266] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.959894][ T4263] team0: Port device team_slave_1 removed [ 58.962298][ T4266] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.967519][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.981100][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.990657][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.998227][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.007748][ T4263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.023917][ T3425] lo speed is unknown, defaulting to 1000 [ 59.088952][ T4275] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.089070][ T4275] SELinux: failed to load policy [ 59.116534][ T4277] loop0: detected capacity change from 0 to 1024 [ 59.116955][ T4277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.138717][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.225746][ T2325] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.291677][ T4286] xt_policy: output policy not valid in PREROUTING and INPUT [ 59.303804][ T4288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.236'. [ 59.618720][ T4294] lo speed is unknown, defaulting to 1000 [ 59.706692][ T4295] bond0 (unregistering): Released all slaves [ 59.840646][ T4285] serio: Serial port ttyS3 [ 60.069984][ T4277] syz.0.233 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 60.084116][ T4277] CPU: 1 UID: 0 PID: 4277 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.084150][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.084164][ T4277] Call Trace: [ 60.084170][ T4277] [ 60.084247][ T4277] __dump_stack+0x1d/0x30 [ 60.084274][ T4277] dump_stack_lvl+0x95/0xd0 [ 60.084299][ T4277] dump_stack+0x15/0x1b [ 60.084320][ T4277] dump_header+0x81/0x240 [ 60.084345][ T4277] oom_kill_process+0x295/0x350 [ 60.084409][ T4277] out_of_memory+0x97b/0xb80 [ 60.084435][ T4277] try_charge_memcg+0x610/0xa10 [ 60.084543][ T4277] obj_cgroup_charge_pages+0xa6/0x150 [ 60.084592][ T4277] __memcg_kmem_charge_page+0x9f/0x170 [ 60.084631][ T4277] __alloc_frozen_pages_noprof+0x18f/0x360 [ 60.084665][ T4277] alloc_pages_mpol+0xb3/0x260 [ 60.084708][ T4277] alloc_pages_noprof+0x90/0x130 [ 60.084734][ T4277] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 60.084812][ T4277] __kvmalloc_node_noprof+0x492/0x6b0 [ 60.084836][ T4277] ? ip_set_alloc+0x24/0x30 [ 60.084862][ T4277] ? ip_set_alloc+0x24/0x30 [ 60.084952][ T4277] ip_set_alloc+0x24/0x30 [ 60.085085][ T4277] hash_netiface_create+0x282/0x740 [ 60.085175][ T4277] ? __pfx_hash_netiface_create+0x10/0x10 [ 60.085346][ T4277] ip_set_create+0x3cc/0x970 [ 60.085401][ T4277] ? __nla_parse+0x40/0x60 [ 60.085434][ T4277] nfnetlink_rcv_msg+0x4c6/0x590 [ 60.085483][ T4277] netlink_rcv_skb+0x123/0x220 [ 60.085544][ T4277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 60.085573][ T4277] nfnetlink_rcv+0x167/0x16c0 [ 60.085595][ T4277] ? kmem_cache_free+0xe3/0x3a0 [ 60.085638][ T4277] ? __kfree_skb+0x109/0x150 [ 60.085668][ T4277] ? nlmon_xmit+0x4f/0x60 [ 60.085687][ T4277] ? consume_skb+0x49/0x150 [ 60.085708][ T4277] ? nlmon_xmit+0x4f/0x60 [ 60.085755][ T4277] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 60.085791][ T4277] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 60.085875][ T4277] ? __dev_queue_xmit+0x148/0x1ee0 [ 60.085899][ T4277] ? save_fpregs_to_fpstate+0x100/0x160 [ 60.085925][ T4277] ? ref_tracker_free+0x37d/0x3e0 [ 60.085958][ T4277] ? __netlink_deliver_tap+0x4dc/0x500 [ 60.086030][ T4277] netlink_unicast+0x5c0/0x690 [ 60.086063][ T4277] netlink_sendmsg+0x58b/0x6b0 [ 60.086093][ T4277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.086162][ T4277] __sock_sendmsg+0x145/0x180 [ 60.086185][ T4277] ____sys_sendmsg+0x31e/0x4a0 [ 60.086230][ T4277] ___sys_sendmsg+0x17b/0x1d0 [ 60.086334][ T4277] __x64_sys_sendmsg+0xd4/0x160 [ 60.086363][ T4277] x64_sys_call+0x17ba/0x3000 [ 60.086392][ T4277] do_syscall_64+0xca/0x2b0 [ 60.086476][ T4277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.086528][ T4277] RIP: 0033:0x7f0899d1f749 [ 60.086544][ T4277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.086561][ T4277] RSP: 002b:00007f0898787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.086630][ T4277] RAX: ffffffffffffffda RBX: 00007f0899f75fa0 RCX: 00007f0899d1f749 [ 60.086646][ T4277] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 60.086735][ T4277] RBP: 00007f0899da3f91 R08: 0000000000000000 R09: 0000000000000000 [ 60.086749][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.086763][ T4277] R13: 00007f0899f76038 R14: 00007f0899f75fa0 R15: 00007ffd6cf148d8 [ 60.086785][ T4277] [ 60.086793][ T4277] memory: usage 307200kB, limit 307200kB, failcnt 3093 [ 60.279358][ T4304] SELinux: failed to load policy [ 60.280615][ T4277] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 60.437248][ T4277] kmem: usage 306660kB, limit 9007199254740988kB, failcnt 0 [ 60.444812][ T4277] Memory cgroup stats for /syz0: [ 60.446763][ T4277] cache 16384 [ 60.455151][ T4277] rss 0 [ 60.457921][ T4277] shmem 0 [ 60.460880][ T4277] mapped_file 0 [ 60.464568][ T4277] dirty 0 [ 60.467513][ T4277] writeback 0 [ 60.470795][ T4277] workingset_refault_anon 1680 [ 60.475767][ T4277] workingset_refault_file 2562 [ 60.480614][ T4277] swap 712704 [ 60.484066][ T4277] swapcached 12288 [ 60.487873][ T4277] pgpgin 23756 [ 60.491281][ T4277] pgpgout 23621 [ 60.494792][ T4277] pgfault 56186 [ 60.498283][ T4277] pgmajfault 295 [ 60.501835][ T4277] inactive_anon 536576 [ 60.505961][ T4277] active_anon 0 [ 60.509439][ T4277] inactive_file 8192 [ 60.513457][ T4277] active_file 8192 [ 60.517198][ T4277] unevictable 0 [ 60.520889][ T4277] hierarchical_memory_limit 314572800 [ 60.526452][ T4277] hierarchical_memsw_limit 9223372036854771712 [ 60.532591][ T4277] total_cache 16384 [ 60.536706][ T4277] total_rss 0 [ 60.540285][ T4277] total_shmem 0 [ 60.543913][ T4277] total_mapped_file 0 [ 60.547907][ T4277] total_dirty 0 [ 60.551619][ T4277] total_writeback 0 [ 60.555567][ T4277] total_workingset_refault_anon 1680 [ 60.560860][ T4277] total_workingset_refault_file 2562 [ 60.566593][ T4277] total_swap 712704 [ 60.570576][ T4277] total_swapcached 12288 [ 60.574866][ T4277] total_pgpgin 23756 [ 60.579032][ T4277] total_pgpgout 23621 [ 60.583045][ T4277] total_pgfault 56186 [ 60.587228][ T4277] total_pgmajfault 295 [ 60.591450][ T4277] total_inactive_anon 536576 [ 60.596097][ T4277] total_active_anon 0 [ 60.600103][ T4277] total_inactive_file 8192 [ 60.604568][ T4277] total_active_file 8192 [ 60.608856][ T4277] total_unevictable 0 [ 60.612899][ T4277] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.233,pid=4276,uid=0 [ 60.627601][ T4277] Memory cgroup out of memory: Killed process 4276 (syz.0.233) total-vm:94100kB, anon-rss:1140kB, file-rss:22500kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 60.644989][ T4282] Cannot find add_set index 0 as target [ 60.691010][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.731118][ T4312] loop1: detected capacity change from 0 to 1024 [ 60.770354][ T4310] SELinux: failed to load policy [ 60.779255][ T4316] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.789556][ T4312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.813998][ T4316] SELinux: failed to load policy [ 60.830037][ T4312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.943728][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.247'. [ 60.986854][ T4334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.249'. [ 61.183039][ T4341] lo speed is unknown, defaulting to 1000 [ 61.236513][ T4346] sch_fq: defrate 0 ignored. [ 61.251030][ T4347] loop0: detected capacity change from 0 to 1024 [ 61.258109][ T4347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.282462][ T4349] bond0 (unregistering): Released all slaves [ 61.569055][ T4355] serio: Serial port ttyS3 [ 61.731836][ T4312] syz.1.244 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 61.746042][ T4312] CPU: 0 UID: 0 PID: 4312 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.746076][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.746161][ T4312] Call Trace: [ 61.746169][ T4312] [ 61.746178][ T4312] __dump_stack+0x1d/0x30 [ 61.746218][ T4312] dump_stack_lvl+0x95/0xd0 [ 61.746316][ T4312] dump_stack+0x15/0x1b [ 61.746340][ T4312] dump_header+0x81/0x240 [ 61.746366][ T4312] oom_kill_process+0x295/0x350 [ 61.746389][ T4312] out_of_memory+0x97b/0xb80 [ 61.746415][ T4312] try_charge_memcg+0x610/0xa10 [ 61.746522][ T4312] obj_cgroup_charge_pages+0xa6/0x150 [ 61.746575][ T4312] __memcg_kmem_charge_page+0x9f/0x170 [ 61.746609][ T4312] __alloc_frozen_pages_noprof+0x18f/0x360 [ 61.746655][ T4312] alloc_pages_mpol+0xb3/0x260 [ 61.746685][ T4312] alloc_pages_noprof+0x90/0x130 [ 61.746733][ T4312] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 61.746774][ T4312] __kvmalloc_node_noprof+0x492/0x6b0 [ 61.746800][ T4312] ? ip_set_alloc+0x24/0x30 [ 61.746838][ T4312] ? ip_set_alloc+0x24/0x30 [ 61.746943][ T4312] ip_set_alloc+0x24/0x30 [ 61.746968][ T4312] hash_netiface_create+0x282/0x740 [ 61.747142][ T4312] ? __pfx_hash_netiface_create+0x10/0x10 [ 61.747191][ T4312] ip_set_create+0x3cc/0x970 [ 61.747243][ T4312] ? __nla_parse+0x40/0x60 [ 61.747291][ T4312] nfnetlink_rcv_msg+0x4c6/0x590 [ 61.747407][ T4312] netlink_rcv_skb+0x123/0x220 [ 61.747488][ T4312] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 61.747526][ T4312] nfnetlink_rcv+0x167/0x16c0 [ 61.747551][ T4312] ? kmem_cache_free+0xe3/0x3a0 [ 61.747599][ T4312] ? __kfree_skb+0x109/0x150 [ 61.747627][ T4312] ? nlmon_xmit+0x4f/0x60 [ 61.747650][ T4312] ? consume_skb+0x49/0x150 [ 61.747676][ T4312] ? nlmon_xmit+0x4f/0x60 [ 61.747724][ T4312] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 61.747760][ T4312] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 61.747788][ T4312] ? __dev_queue_xmit+0x148/0x1ee0 [ 61.747814][ T4312] ? ref_tracker_free+0x37d/0x3e0 [ 61.747906][ T4312] ? __netlink_deliver_tap+0x4dc/0x500 [ 61.747935][ T4312] netlink_unicast+0x5c0/0x690 [ 61.747975][ T4312] netlink_sendmsg+0x58b/0x6b0 [ 61.748012][ T4312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.748123][ T4312] __sock_sendmsg+0x145/0x180 [ 61.748202][ T4312] ____sys_sendmsg+0x31e/0x4a0 [ 61.748243][ T4312] ___sys_sendmsg+0x17b/0x1d0 [ 61.748335][ T4312] __x64_sys_sendmsg+0xd4/0x160 [ 61.748392][ T4312] x64_sys_call+0x17ba/0x3000 [ 61.748423][ T4312] do_syscall_64+0xca/0x2b0 [ 61.748463][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.748564][ T4312] RIP: 0033:0x7f0c4387f749 [ 61.748584][ T4312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.748671][ T4312] RSP: 002b:00007f0c422df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.748720][ T4312] RAX: ffffffffffffffda RBX: 00007f0c43ad5fa0 RCX: 00007f0c4387f749 [ 61.748733][ T4312] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 61.748745][ T4312] RBP: 00007f0c43903f91 R08: 0000000000000000 R09: 0000000000000000 [ 61.748758][ T4312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.748772][ T4312] R13: 00007f0c43ad6038 R14: 00007f0c43ad5fa0 R15: 00007fff3a9280a8 [ 61.748791][ T4312] [ 61.748800][ T4312] memory: usage 307200kB, limit 307200kB, failcnt 7027 [ 61.886076][ T4361] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.889126][ T4312] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 61.889146][ T4312] kmem: usage 306672kB, limit 9007199254740988kB, failcnt 0 [ 61.895086][ T4361] SELinux: failed to load policy [ 61.899407][ T4312] Memory cgroup stats for /syz1: [ 61.900285][ T4312] cache 8192 [ 62.017373][ T4363] SELinux: failed to load policy [ 62.023081][ T4312] rss 0 [ 62.023095][ T4312] shmem 0 [ 62.130435][ T4312] mapped_file 0 [ 62.134069][ T4312] dirty 0 [ 62.137125][ T4312] writeback 0 [ 62.140417][ T4312] workingset_refault_anon 4992 [ 62.145241][ T4312] workingset_refault_file 1815 [ 62.150286][ T4312] swap 720896 [ 62.153607][ T4312] swapcached 8192 [ 62.157343][ T4312] pgpgin 44136 [ 62.160804][ T4312] pgpgout 44004 [ 62.164316][ T4312] pgfault 55392 [ 62.167873][ T4312] pgmajfault 834 [ 62.171434][ T4312] inactive_anon 532480 [ 62.175547][ T4312] active_anon 0 [ 62.179020][ T4312] inactive_file 8192 [ 62.182999][ T4312] active_file 0 [ 62.186555][ T4312] unevictable 0 [ 62.190029][ T4312] hierarchical_memory_limit 314572800 [ 62.195459][ T4312] hierarchical_memsw_limit 9223372036854771712 [ 62.201650][ T4312] total_cache 8192 [ 62.205413][ T4312] total_rss 0 [ 62.208726][ T4312] total_shmem 0 [ 62.212190][ T4312] total_mapped_file 0 [ 62.216385][ T4312] total_dirty 0 [ 62.220094][ T4312] total_writeback 0 [ 62.223988][ T4312] total_workingset_refault_anon 4992 [ 62.229370][ T4312] total_workingset_refault_file 1815 [ 62.234716][ T4312] total_swap 720896 [ 62.238541][ T4312] total_swapcached 8192 [ 62.242813][ T4312] total_pgpgin 44136 [ 62.246740][ T4312] total_pgpgout 44004 [ 62.250782][ T4312] total_pgfault 55392 [ 62.254804][ T4312] total_pgmajfault 834 [ 62.258882][ T4312] total_inactive_anon 532480 [ 62.263630][ T4312] total_active_anon 0 [ 62.267671][ T4312] total_inactive_file 8192 [ 62.272091][ T4312] total_active_file 0 [ 62.276112][ T4312] total_unevictable 0 [ 62.280104][ T4312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.244,pid=4311,uid=0 [ 62.294806][ T4312] Memory cgroup out of memory: Killed process 4311 (syz.1.244) total-vm:96148kB, anon-rss:1268kB, file-rss:22452kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 62.449760][ T4376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.262'. [ 62.479715][ T4374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 62.508482][ T4374] SELinux: failed to load policy [ 62.528058][ T4378] loop1: detected capacity change from 0 to 1024 [ 62.537233][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 62.537248][ T29] audit: type=1400 audit(1767453143.980:2452): avc: denied { name_bind } for pid=4379 comm="syz.2.263" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.565865][ T29] audit: type=1400 audit(1767453143.980:2453): avc: denied { node_bind } for pid=4379 comm="syz.2.263" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.594626][ T4378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.783318][ T4384] SELinux: failed to load policy [ 63.065218][ T4396] lo speed is unknown, defaulting to 1000 [ 63.099430][ T4398] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.151374][ T4399] bond0 (unregistering): Released all slaves [ 63.160648][ T4398] SELinux: failed to load policy [ 63.259229][ T29] audit: type=1326 audit(1767453144.700:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.326554][ T29] audit: type=1326 audit(1767453144.700:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.349932][ T29] audit: type=1326 audit(1767453144.730:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.373523][ T29] audit: type=1326 audit(1767453144.730:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.396846][ T29] audit: type=1326 audit(1767453144.730:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.420862][ T29] audit: type=1326 audit(1767453144.730:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.444352][ T29] audit: type=1326 audit(1767453144.730:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.468062][ T29] audit: type=1326 audit(1767453144.730:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4401 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0899d1f749 code=0x7ffc0000 [ 63.648552][ T4391] serio: Serial port ttyS3 [ 63.666203][ T4407] siw: device registration error -23 [ 63.670639][ T4405] lo speed is unknown, defaulting to 1000 [ 64.023889][ T4417] sch_fq: defrate 0 ignored. [ 64.085912][ T4419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'. [ 64.197968][ T4423] loop1: detected capacity change from 0 to 1024 [ 64.205075][ T4423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.408975][ T4436] bridge_slave_0: left allmulticast mode [ 64.414735][ T4436] bridge_slave_0: left promiscuous mode [ 64.420456][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.437098][ T4438] loop2: detected capacity change from 0 to 1024 [ 64.452011][ T4436] bridge_slave_1: left allmulticast mode [ 64.457829][ T4436] bridge_slave_1: left promiscuous mode [ 64.463672][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.475913][ T4438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.490581][ T4436] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 64.508876][ T4436] bond_slave_0: left promiscuous mode [ 64.521941][ T4439] loop3: detected capacity change from 0 to 128 [ 64.529966][ T4439] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.545474][ T4436] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 64.553355][ T4436] bond_slave_1: left promiscuous mode [ 64.574854][ T4439] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.585797][ T4436] team0: Port device team_slave_0 removed [ 64.597566][ T4436] team0: Port device team_slave_1 removed [ 64.621979][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.629537][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.653589][ T4439] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.678047][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.685622][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.716489][ T4442] serio: Serial port ttyS3 [ 64.732839][ T4436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.753561][ T4444] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 64.765336][ T4444] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 64.778498][ T4444] FAULT_INJECTION: forcing a failure. [ 64.778498][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 64.791277][ T4444] CPU: 1 UID: 0 PID: 4444 Comm: syz.4.282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.791307][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.791389][ T4444] Call Trace: [ 64.791397][ T4444] [ 64.791405][ T4444] __dump_stack+0x1d/0x30 [ 64.791429][ T4444] dump_stack_lvl+0x95/0xd0 [ 64.791448][ T4444] dump_stack+0x15/0x1b [ 64.791468][ T4444] should_fail_ex+0x265/0x280 [ 64.791490][ T4444] should_failslab+0x8c/0xb0 [ 64.791556][ T4444] __kmalloc_cache_noprof+0x65/0x4c0 [ 64.791578][ T4444] ? sf_setstate+0x188/0x300 [ 64.791655][ T4444] sf_setstate+0x188/0x300 [ 64.791722][ T4444] ip_mc_del_src+0x31b/0x480 [ 64.791749][ T4444] ? _raw_spin_lock_bh+0x56/0xb0 [ 64.791826][ T4444] ip_mc_leave_group+0x29a/0x330 [ 64.791861][ T4444] do_ip_setsockopt+0x1e98/0x2240 [ 64.791890][ T4444] ip_setsockopt+0x58/0x110 [ 64.791996][ T4444] udp_setsockopt+0x99/0xb0 [ 64.792024][ T4444] sock_common_setsockopt+0x69/0x80 [ 64.792049][ T4444] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.792136][ T4444] __sys_setsockopt+0x184/0x200 [ 64.792164][ T4444] __x64_sys_setsockopt+0x64/0x80 [ 64.792230][ T4444] x64_sys_call+0x21d5/0x3000 [ 64.792262][ T4444] do_syscall_64+0xca/0x2b0 [ 64.792389][ T4444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.792414][ T4444] RIP: 0033:0x7f7082acf749 [ 64.792433][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.792452][ T4444] RSP: 002b:00007f708152f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.792473][ T4444] RAX: ffffffffffffffda RBX: 00007f7082d25fa0 RCX: 00007f7082acf749 [ 64.792487][ T4444] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000006 [ 64.792508][ T4444] RBP: 00007f708152f090 R08: 000000000000000c R09: 0000000000000000 [ 64.792522][ T4444] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 64.792613][ T4444] R13: 00007f7082d26038 R14: 00007f7082d25fa0 R15: 00007fff6dfe73e8 [ 64.792630][ T4444] [ 65.034900][ T4428] serio: Serial port ttyS3 [ 65.255374][ T4458] loop0: detected capacity change from 0 to 1024 [ 65.283130][ T4458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.300834][ T1628] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.398883][ T4465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'. [ 65.511858][ T4466] SELinux: failed to load policy [ 65.562831][ T4469] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 65.609861][ T4469] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 65.667953][ T4471] wireguard0: entered promiscuous mode [ 65.832487][ T4458] serio: Serial port ttyS3 [ 66.000285][ T4484] loop2: detected capacity change from 0 to 1024 [ 66.025491][ T3325] EXT4-fs unmount: 10 callbacks suppressed [ 66.025518][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.035884][ T4484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.084425][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.107168][ T4489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.123899][ T4485] sch_fq: defrate 0 ignored. [ 66.157722][ T4495] loop1: detected capacity change from 0 to 1024 [ 66.168136][ T4495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.195493][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.269840][ T4501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.299'. [ 66.280367][ T4489] loop4: detected capacity change from 0 to 128 [ 66.313798][ T4489] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.373773][ T4489] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.448574][ T4504] SELinux: failed to load policy [ 66.556376][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'. [ 66.645809][ T4509] loop3: detected capacity change from 0 to 1024 [ 66.673978][ T4509] EXT4-fs: Ignoring removed orlov option [ 66.685214][ T4509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.716439][ T4500] serio: Serial port ttyS3 [ 66.868368][ T4513] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 66.875075][ T4513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.883286][ T4513] vhci_hcd vhci_hcd.0: Device attached [ 66.919774][ T4514] vhci_hcd: connection closed [ 66.919891][ T1628] vhci_hcd vhci_hcd.3: stop threads [ 66.930218][ T1628] vhci_hcd vhci_hcd.3: release socket [ 66.935831][ T1628] vhci_hcd vhci_hcd.3: disconnect device [ 66.964664][ T2853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.040218][ T4519] loop4: detected capacity change from 0 to 1024 [ 67.050638][ T4502] serio: Serial port ttyS3 [ 67.052576][ T4519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.095981][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.445178][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 67.455944][ T4522] serio: Serial port ttyS3 [ 67.549485][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 67.549574][ T29] audit: type=1400 audit(1767453148.990:2558): avc: denied { create } for pid=4528 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.578930][ T4529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 67.584283][ T29] audit: type=1400 audit(1767453149.020:2559): avc: denied { setopt } for pid=4528 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.608319][ T4483] syz.2.293 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 67.619246][ T4483] CPU: 1 UID: 0 PID: 4483 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.619272][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.619291][ T4483] Call Trace: [ 67.619298][ T4483] [ 67.619385][ T4483] __dump_stack+0x1d/0x30 [ 67.619411][ T4483] dump_stack_lvl+0x95/0xd0 [ 67.619434][ T4483] dump_stack+0x15/0x1b [ 67.619454][ T4483] dump_header+0x81/0x240 [ 67.619474][ T4483] oom_kill_process+0x295/0x350 [ 67.619499][ T4483] out_of_memory+0x97b/0xb80 [ 67.619520][ T4483] try_charge_memcg+0x610/0xa10 [ 67.619590][ T4483] charge_memcg+0x51/0xc0 [ 67.619638][ T4483] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 67.619672][ T4483] __read_swap_cache_async+0x17b/0x2d0 [ 67.619731][ T4483] swap_cluster_readahead+0x362/0x3c0 [ 67.619822][ T4483] swapin_readahead+0xde/0x820 [ 67.619885][ T4483] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 67.619909][ T4483] ? lruvec_stat_mod_folio+0xd6/0x120 [ 67.619959][ T4483] ? __rcu_read_unlock+0x4f/0x70 [ 67.619993][ T4483] ? swap_cache_get_folio+0x277/0x280 [ 67.620024][ T4483] do_swap_page+0x2b4/0x21e0 [ 67.620063][ T4483] ? __pfx_default_wake_function+0x10/0x10 [ 67.620149][ T4483] handle_mm_fault+0x9d8/0x2c60 [ 67.620244][ T4483] do_user_addr_fault+0x630/0x1080 [ 67.620272][ T4483] exc_page_fault+0x62/0xa0 [ 67.620298][ T4483] asm_exc_page_fault+0x26/0x30 [ 67.620320][ T4483] RIP: 0033:0x7f20eb0ef762 [ 67.620404][ T4483] Code: d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f [ 67.620424][ T4483] RSP: 002b:00007ffd24111bc8 EFLAGS: 00010286 [ 67.620440][ T4483] RAX: ffffffffffffffff RBX: 00000000000106de RCX: ffffffffffffffa8 [ 67.620454][ T4483] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20eb34609c [ 67.620469][ T4483] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000001824111ebf [ 67.620483][ T4483] R10: 00007ffd24111cc0 R11: 0000000000000246 R12: 00007f20eb34609c [ 67.620498][ T4483] R13: 00007ffd24111cc0 R14: 0000000000010710 R15: 00007ffd24111ce0 [ 67.620519][ T4483] [ 67.620596][ T4483] memory: usage 307200kB, limit 307200kB, failcnt 9954 [ 67.669098][ T29] audit: type=1400 audit(1767453149.110:2560): avc: denied { connect } for pid=4528 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.673589][ T4483] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 67.694747][ T4530] FAULT_INJECTION: forcing a failure. [ 67.694747][ T4530] name failslab, interval 1, probability 0, space 0, times 0 [ 67.699813][ T4483] kmem: usage 306656kB, limit 9007199254740988kB, failcnt 0 [ 67.704720][ T4530] CPU: 0 UID: 0 PID: 4530 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.704748][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.704760][ T4530] Call Trace: [ 67.704807][ T4530] [ 67.704816][ T4530] __dump_stack+0x1d/0x30 [ 67.704841][ T4530] dump_stack_lvl+0x95/0xd0 [ 67.704863][ T4530] dump_stack+0x15/0x1b [ 67.704883][ T4530] should_fail_ex+0x265/0x280 [ 67.704984][ T4530] should_failslab+0x8c/0xb0 [ 67.705007][ T4530] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 67.705084][ T4530] ? __get_vm_area_node+0x106/0x1d0 [ 67.705213][ T4530] __get_vm_area_node+0x106/0x1d0 [ 67.705237][ T4530] __vmalloc_node_range_noprof+0x28e/0x1310 [ 67.705263][ T4530] ? vmalloc_array_noprof+0x2f/0x50 [ 67.705307][ T4530] ? obj_cgroup_charge_account+0x122/0x1a0 [ 67.705454][ T4530] ? __rcu_read_unlock+0x4f/0x70 [ 67.705475][ T4530] ? __rcu_read_unlock+0x4f/0x70 [ 67.705497][ T4530] ? vmalloc_array_noprof+0x2f/0x50 [ 67.705518][ T4530] __vmalloc_noprof+0xa4/0xf0 [ 67.705603][ T4530] ? vmalloc_array_noprof+0x2f/0x50 [ 67.705624][ T4530] vmalloc_array_noprof+0x2f/0x50 [ 67.705645][ T4530] do_update_counters+0x48/0x2d0 [ 67.705688][ T4530] ? should_fail_ex+0xdb/0x280 [ 67.705712][ T4530] do_ebt_set_ctl+0x3a3/0xac0 [ 67.705741][ T4530] ? terminate_walk+0x1e6/0x210 [ 67.705828][ T4530] ? path_openat+0x1d88/0x23b0 [ 67.705880][ T4530] ? _raw_spin_lock_bh+0x56/0xb0 [ 67.705902][ T4530] ? _raw_spin_unlock_bh+0x36/0x40 [ 67.705924][ T4530] ? tcp_release_cb+0xf1/0x370 [ 67.706067][ T4530] nf_setsockopt+0x199/0x1b0 [ 67.706090][ T4530] ip_setsockopt+0x102/0x110 [ 67.706142][ T4530] ipv6_setsockopt+0xfb/0x130 [ 67.706174][ T4530] tcp_setsockopt+0x98/0xb0 [ 67.706268][ T4530] sock_common_setsockopt+0x69/0x80 [ 67.706289][ T4530] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.706330][ T4530] smc_setsockopt+0x183/0x750 [ 67.706360][ T4530] ? __pfx_smc_setsockopt+0x10/0x10 [ 67.706447][ T4530] __sys_setsockopt+0x184/0x200 [ 67.706505][ T4530] __x64_sys_setsockopt+0x64/0x80 [ 67.706531][ T4530] x64_sys_call+0x21d5/0x3000 [ 67.706555][ T4530] do_syscall_64+0xca/0x2b0 [ 67.706657][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.706679][ T4530] RIP: 0033:0x7f0899d1f749 [ 67.706695][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.706713][ T4530] RSP: 002b:00007f0898766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.706777][ T4530] RAX: ffffffffffffffda RBX: 00007f0899f76090 RCX: 00007f0899d1f749 [ 67.706790][ T4530] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.706803][ T4530] RBP: 00007f0898766090 R08: 0000000000000088 R09: 0000000000000000 [ 67.706881][ T4530] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 67.706893][ T4530] R13: 00007f0899f76128 R14: 00007f0899f76090 R15: 00007ffd6cf148d8 [ 67.706911][ T4530] [ 67.706920][ T4530] +}[@: vmalloc error: size 16, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 67.710270][ T4483] Memory cgroup stats for /syz2 [ 67.715655][ T4530] ,cpuset= [ 67.720594][ T4483] : [ 67.725984][ T4530] / [ 67.731106][ T4483] cache 32768 [ 67.736645][ T4530] ,mems_allowed=0 [ 67.736672][ T4530] CPU: 0 UID: 0 PID: 4530 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.736741][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.736754][ T4530] Call Trace: [ 67.736761][ T4530] [ 67.736770][ T4530] __dump_stack+0x1d/0x30 [ 67.736861][ T4530] dump_stack_lvl+0x95/0xd0 [ 67.736883][ T4530] dump_stack+0x15/0x1b [ 67.736902][ T4530] warn_alloc+0x12b/0x1a0 [ 67.737003][ T4530] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 67.737078][ T4530] ? obj_cgroup_charge_account+0x122/0x1a0 [ 67.737109][ T4530] ? __rcu_read_unlock+0x4f/0x70 [ 67.737171][ T4530] ? __rcu_read_unlock+0x4f/0x70 [ 67.737193][ T4530] ? vmalloc_array_noprof+0x2f/0x50 [ 67.737215][ T4530] __vmalloc_noprof+0xa4/0xf0 [ 67.737238][ T4530] ? vmalloc_array_noprof+0x2f/0x50 [ 67.737274][ T4530] vmalloc_array_noprof+0x2f/0x50 [ 67.737294][ T4530] do_update_counters+0x48/0x2d0 [ 67.737330][ T4530] ? should_fail_ex+0xdb/0x280 [ 67.737354][ T4530] do_ebt_set_ctl+0x3a3/0xac0 [ 67.737392][ T4530] ? terminate_walk+0x1e6/0x210 [ 67.737428][ T4530] ? path_openat+0x1d88/0x23b0 [ 67.737459][ T4530] ? _raw_spin_lock_bh+0x56/0xb0 [ 67.737481][ T4530] ? _raw_spin_unlock_bh+0x36/0x40 [ 67.737574][ T4530] ? tcp_release_cb+0xf1/0x370 [ 67.737639][ T4530] nf_setsockopt+0x199/0x1b0 [ 67.737661][ T4530] ip_setsockopt+0x102/0x110 [ 67.737687][ T4530] ipv6_setsockopt+0xfb/0x130 [ 67.737787][ T4530] tcp_setsockopt+0x98/0xb0 [ 67.737818][ T4530] sock_common_setsockopt+0x69/0x80 [ 67.737849][ T4530] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.737870][ T4530] smc_setsockopt+0x183/0x750 [ 67.737900][ T4530] ? __pfx_smc_setsockopt+0x10/0x10 [ 67.737992][ T4530] __sys_setsockopt+0x184/0x200 [ 67.738041][ T4530] __x64_sys_setsockopt+0x64/0x80 [ 67.738126][ T4530] x64_sys_call+0x21d5/0x3000 [ 67.738150][ T4530] do_syscall_64+0xca/0x2b0 [ 67.738183][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.738206][ T4530] RIP: 0033:0x7f0899d1f749 [ 67.738223][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.738241][ T4530] RSP: 002b:00007f0898766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.738261][ T4530] RAX: ffffffffffffffda RBX: 00007f0899f76090 RCX: 00007f0899d1f749 [ 67.738298][ T4530] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.738310][ T4530] RBP: 00007f0898766090 R08: 0000000000000088 R09: 0000000000000000 [ 67.738323][ T4530] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 67.738335][ T4530] R13: 00007f0899f76128 R14: 00007f0899f76090 R15: 00007ffd6cf148d8 [ 67.738354][ T4530] [ 67.738391][ T4530] Mem-Info: [ 67.741519][ T4483] rss 0 [ 67.741584][ T4483] shmem 0 [ 67.746765][ T4530] active_anon:14051 inactive_anon:128 isolated_anon:0 [ 67.746765][ T4530] active_file:8861 inactive_file:2318 isolated_file:0 [ 67.746765][ T4530] unevictable:0 dirty:17 writeback:0 [ 67.746765][ T4530] slab_reclaimable:3195 slab_unreclaimable:14292 [ 67.746765][ T4530] mapped:34969 shmem:6299 pagetables:1170 [ 67.746765][ T4530] sec_pagetables:0 bounce:0 [ 67.746765][ T4530] kernel_misc_reclaimable:0 [ 67.746765][ T4530] free:1811734 free_pcp:7378 free_cma:0 [ 67.751247][ T4483] mapped_file 0 [ 67.756226][ T4530] Node 0 active_anon:56204kB inactive_anon:512kB active_file:35444kB inactive_file:9272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139876kB dirty:68kB writeback:0kB shmem:25196kB kernel_stack:4000kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 67.760708][ T4483] dirty 0 [ 67.760718][ T4483] writeback 0 [ 67.780814][ T4530] Node 0 [ 67.787073][ T4483] workingset_refault_anon 830 [ 67.787087][ T4483] workingset_refault_file 4237 [ 67.795360][ T4530] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.803496][ T4483] swap 724992 [ 67.811472][ T4530] lowmem_reserve[]: 0 [ 67.819498][ T4483] swapcached 0 [ 67.819510][ T4483] pgpgin 38309 [ 67.819519][ T4483] pgpgout 38173 [ 67.827510][ T4530] 2880 7859 7859 [ 67.827533][ T4530] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 67.830567][ T4483] pgfault 56102 [ 67.830577][ T4483] pgmajfault 457 [ 67.837451][ T4530] lowmem_reserve[]: 0 0 4978 4978 [ 67.857039][ T4483] inactive_anon 524288 [ 67.857052][ T4483] active_anon 0 [ 67.865031][ T4530] [ 67.865038][ T4530] Node 0 Normal free:4285588kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56204kB inactive_anon:512kB active_file:35444kB inactive_file:9272kB unevictable:0kB writepending:68kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:25984kB local_pcp:1560kB free_cma:0kB [ 67.877686][ T4483] inactive_file 24576 [ 67.884954][ T4530] lowmem_reserve[]: 0 0 [ 67.894189][ T4483] active_file 8192 [ 67.904249][ T4530] 0 [ 67.907514][ T4483] unevictable 0 [ 67.910444][ T4530] 0 [ 67.914778][ T4483] hierarchical_memory_limit 314572800 [ 67.914790][ T4483] hierarchical_memsw_limit 9223372036854771712 [ 67.919275][ T4530] Node 0 DMA: 0*4kB [ 67.923441][ T4483] total_cache 32768 [ 67.923452][ T4483] total_rss 0 [ 67.928113][ T4530] 0*8kB [ 67.932702][ T4483] total_shmem 0 [ 67.938443][ T4530] 0*16kB [ 67.943639][ T4483] total_mapped_file 0 [ 67.948650][ T4530] 0*32kB 0*64kB [ 67.954547][ T4483] total_dirty 0 [ 67.954558][ T4483] total_writeback 0 [ 67.959745][ T4530] 0*128kB 0*256kB [ 67.965564][ T4483] total_workingset_refault_anon 830 [ 67.965577][ T4483] total_workingset_refault_file 4237 [ 67.970585][ T4530] 0*512kB [ 67.975522][ T4483] total_swap 724992 [ 67.975534][ T4483] total_swapcached 0 [ 67.980743][ T4530] 1*1024kB [ 67.985424][ T4483] total_pgpgin 38309 [ 67.985436][ T4483] total_pgpgout 38173 [ 67.990618][ T4530] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.995808][ T4483] total_pgfault 56102 [ 67.995882][ T4483] total_pgmajfault 457 [ 68.000754][ T4530] Node 0 DMA32: [ 68.005526][ T4483] total_inactive_anon 524288 [ 68.005539][ T4483] total_active_anon 0 [ 68.010197][ T4530] 3*4kB [ 68.015121][ T4483] total_inactive_file 24576 [ 68.015133][ T4483] total_active_file 8192 [ 68.019902][ T4530] (M) 3*8kB [ 68.024850][ T4483] total_unevictable 0 [ 68.029950][ T4530] (M) 4*16kB [ 68.034862][ T4483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 68.039448][ T4530] (M) 3*32kB [ 68.044045][ T4483] /,mems_allowed=0 [ 68.048718][ T4530] (M) [ 68.053213][ T4483] ,oom_memcg=/syz2 [ 68.058454][ T4530] 4*64kB [ 68.064572][ T4483] ,task_memcg= [ 68.069405][ T4530] (M) 2*128kB [ 68.074786][ T4483] /syz2,task=syz.2.293,pid=4483,uid=0 [ 68.074832][ T4483] Memory cgroup out of memory: Killed process 4483 (syz.2.293) total-vm:96148kB, anon-rss:1312kB, file-rss:22624kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 68.079757][ T4530] (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 68.924280][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.932752][ T4530] Node 0 Normal: 1384*4kB (UME) 766*8kB (UME) 475*16kB (UME) 379*32kB (UME) 298*64kB (UME) 254*128kB (UME) 178*256kB (UME) 187*512kB (UME) 164*1024kB (UME) 155*2048kB (UM) 816*4096kB (UM) = 4052000kB [ 68.961597][ T4530] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 68.971030][ T4530] 13530 total pagecache pages [ 68.975861][ T4530] 0 pages in swap cache [ 68.980023][ T4530] Free swap = 124452kB [ 68.984246][ T4530] Total swap = 124996kB [ 68.988495][ T4530] 2097051 pages RAM [ 68.992360][ T4530] 0 pages HighMem/MovableOnly [ 68.997153][ T4530] 81272 pages reserved [ 69.008310][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.017775][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.043715][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.119974][ T4537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.311'. [ 69.155831][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 69.164713][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 69.174600][ T29] audit: type=1326 audit(1767453150.590:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.198655][ T29] audit: type=1326 audit(1767453150.590:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.222169][ T29] audit: type=1326 audit(1767453150.590:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.245813][ T29] audit: type=1326 audit(1767453150.590:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.269292][ T29] audit: type=1326 audit(1767453150.590:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.293030][ T29] audit: type=1326 audit(1767453150.590:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.316614][ T29] audit: type=1326 audit(1767453150.590:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 69.346758][ T4542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.308'. [ 69.417699][ T4541] sch_fq: defrate 0 ignored. [ 69.548782][ T4555] loop4: detected capacity change from 0 to 164 [ 69.633165][ T4555] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 69.653710][ T4565] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 69.688771][ T4566] loop2: detected capacity change from 0 to 1024 [ 69.713342][ T4565] SELinux: failed to load policy [ 69.737159][ T4566] EXT4-fs: Ignoring removed orlov option [ 69.775519][ T4566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.849387][ T4568] bridge_slave_0: left allmulticast mode [ 69.855407][ T4568] bridge_slave_0: left promiscuous mode [ 69.861472][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.877949][ T4573] loop3: detected capacity change from 0 to 1024 [ 69.884966][ T4573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.892606][ T4574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 69.899212][ T4574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.907521][ T4574] vhci_hcd vhci_hcd.0: Device attached [ 69.926205][ T4573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.951734][ T4571] loop0: detected capacity change from 0 to 128 [ 69.978029][ T4571] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.997633][ T4575] vhci_hcd: connection closed [ 70.003478][ T2325] vhci_hcd vhci_hcd.2: stop threads [ 70.013512][ T2325] vhci_hcd vhci_hcd.2: release socket [ 70.018910][ T2325] vhci_hcd vhci_hcd.2: disconnect device [ 70.026101][ T4568] bridge_slave_1: left allmulticast mode [ 70.031880][ T4568] bridge_slave_1: left promiscuous mode [ 70.037733][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.045514][ T4571] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.083304][ T4571] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.094421][ T4568] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 70.102477][ T4568] bond_slave_0: left promiscuous mode [ 70.110788][ T4568] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 70.119592][ T4568] bond_slave_1: left promiscuous mode [ 70.154363][ T4568] team0: Port device team_slave_0 removed [ 70.164962][ T4568] team0: Port device team_slave_1 removed [ 70.171828][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.179498][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.189271][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.196732][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.217774][ T4568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.561742][ T4584] netlink: 'syz.4.320': attribute type 4 has an invalid length. [ 70.574646][ T4584] netlink: 'syz.4.320': attribute type 4 has an invalid length. [ 70.660762][ T123] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.965491][ T4598] sch_fq: defrate 0 ignored. [ 70.971787][ T4581] serio: Serial port ttyS3 [ 71.047093][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.154363][ T4601] loop0: detected capacity change from 0 to 128 [ 71.172237][ T4606] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 71.182388][ T4606] SELinux: failed to load policy [ 71.314858][ T4616] tipc: Enabled bearer , priority 0 [ 71.341561][ T4615] tipc: Disabling bearer [ 71.351203][ T4572] syz.3.319 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 71.362428][ T4572] CPU: 1 UID: 0 PID: 4572 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.362456][ T4572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.362547][ T4572] Call Trace: [ 71.362553][ T4572] [ 71.362560][ T4572] __dump_stack+0x1d/0x30 [ 71.362590][ T4572] dump_stack_lvl+0x95/0xd0 [ 71.362669][ T4572] dump_stack+0x15/0x1b [ 71.362692][ T4572] dump_header+0x81/0x240 [ 71.362716][ T4572] oom_kill_process+0x295/0x350 [ 71.362738][ T4572] out_of_memory+0x97b/0xb80 [ 71.362759][ T4572] try_charge_memcg+0x610/0xa10 [ 71.362808][ T4572] charge_memcg+0x51/0xc0 [ 71.362861][ T4572] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 71.362899][ T4572] __read_swap_cache_async+0x17b/0x2d0 [ 71.362927][ T4572] swap_cluster_readahead+0x262/0x3c0 [ 71.362967][ T4572] swapin_readahead+0xde/0x820 [ 71.362993][ T4572] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 71.363020][ T4572] ? lruvec_stat_mod_folio+0xd6/0x120 [ 71.363060][ T4572] ? __rcu_read_unlock+0x4f/0x70 [ 71.363150][ T4572] ? swap_cache_get_folio+0x277/0x280 [ 71.363258][ T4572] do_swap_page+0x2b4/0x21e0 [ 71.363413][ T4572] ? __pfx_default_wake_function+0x10/0x10 [ 71.363453][ T4572] handle_mm_fault+0x9d8/0x2c60 [ 71.363486][ T4572] do_user_addr_fault+0x630/0x1080 [ 71.363515][ T4572] exc_page_fault+0x62/0xa0 [ 71.363633][ T4572] asm_exc_page_fault+0x26/0x30 [ 71.363659][ T4572] RIP: 0033:0x7f1b4d83d71f [ 71.363674][ T4572] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 71.363690][ T4572] RSP: 002b:00007ffe185c9188 EFLAGS: 00010202 [ 71.363708][ T4572] RAX: 0000000081d43243 RBX: 00007f1b4e705720 RCX: 0000000000000020 [ 71.363723][ T4572] RDX: 0000000000001243 RSI: ffffffff81d43243 RDI: 000000000000000c [ 71.363798][ T4572] RBP: ffffffff81d43243 R08: 00007f1b4dbc0000 R09: 00007f1b4dbc2000 [ 71.363830][ T4572] R10: 0000000081d43247 R11: 000000000000000c R12: 000000000000000c [ 71.363844][ T4572] R13: 0000000000000000 R14: ffffffff81d43c7d R15: 0000000000000020 [ 71.363933][ T4572] ? avc_lookup+0x19d/0x1a0 [ 71.364014][ T4572] ? avc_ss_reset+0x1c3/0x240 [ 71.364048][ T4572] ? avc_ss_reset+0x1c3/0x240 [ 71.364104][ T4572] [ 71.588895][ T4572] memory: usage 307200kB, limit 307200kB, failcnt 7026 [ 71.595816][ T4572] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 71.603743][ T4572] kmem: usage 306660kB, limit 9007199254740988kB, failcnt 0 [ 71.611196][ T4572] Memory cgroup stats for /syz3: [ 71.619858][ T4572] cache 16384 [ 71.628583][ T4572] rss 4096 [ 71.631722][ T4572] shmem 0 [ 71.634906][ T4572] mapped_file 0 [ 71.638376][ T4572] dirty 0 [ 71.641316][ T4572] writeback 12288 [ 71.645451][ T4572] workingset_refault_anon 2055 [ 71.650232][ T4572] workingset_refault_file 3902 [ 71.655184][ T4572] swap 716800 [ 71.658478][ T4572] swapcached 12288 [ 71.662187][ T4572] pgpgin 45967 [ 71.665627][ T4572] pgpgout 45832 [ 71.669198][ T4572] pgfault 70979 [ 71.672659][ T4572] pgmajfault 530 [ 71.676360][ T4572] inactive_anon 286720 [ 71.680455][ T4572] active_anon 225280 [ 71.681411][ T4620] loop1: detected capacity change from 0 to 164 [ 71.684394][ T4572] inactive_file 0 [ 71.684406][ T4572] active_file 16384 [ 71.698561][ T4572] unevictable 0 [ 71.702037][ T4572] hierarchical_memory_limit 314572800 [ 71.707610][ T4572] hierarchical_memsw_limit 9223372036854771712 [ 71.713986][ T4572] total_cache 16384 [ 71.717810][ T4572] total_rss 4096 [ 71.721221][ T4620] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 71.721360][ T4572] total_shmem 0 [ 71.732485][ T4572] total_mapped_file 0 [ 71.736652][ T4572] total_dirty 0 [ 71.740192][ T4572] total_writeback 12288 [ 71.744369][ T4572] total_workingset_refault_anon 2055 [ 71.749705][ T4572] total_workingset_refault_file 3902 [ 71.755093][ T4572] total_swap 716800 [ 71.758978][ T4572] total_swapcached 12288 [ 71.763383][ T4572] total_pgpgin 45967 [ 71.767363][ T4572] total_pgpgout 45832 [ 71.771387][ T4572] total_pgfault 70979 [ 71.775378][ T4572] total_pgmajfault 530 [ 71.779540][ T4572] total_inactive_anon 286720 [ 71.784196][ T4572] total_active_anon 225280 [ 71.788637][ T4572] total_inactive_file 0 [ 71.792800][ T4572] total_active_file 16384 [ 71.797178][ T4572] total_unevictable 0 [ 71.801232][ T4572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.319,pid=4572,uid=0 [ 71.815785][ T4572] Memory cgroup out of memory: Killed process 4572 (syz.3.319) total-vm:94100kB, anon-rss:1164kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 71.924477][ T4623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.945979][ T4624] loop2: detected capacity change from 0 to 128 [ 71.980875][ T4624] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.005042][ T4624] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.179300][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.245363][ T4633] loop0: detected capacity change from 0 to 1024 [ 72.255527][ T4633] EXT4-fs: Ignoring removed orlov option [ 72.269213][ T4633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.434010][ T4633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 72.440678][ T4633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.448882][ T4633] vhci_hcd vhci_hcd.0: Device attached [ 72.464976][ T4638] SELinux: failed to load policy [ 72.475206][ T4641] vhci_hcd: connection closed [ 72.475364][ T1628] vhci_hcd vhci_hcd.0: stop threads [ 72.485466][ T1628] vhci_hcd vhci_hcd.0: release socket [ 72.490916][ T1628] vhci_hcd vhci_hcd.0: disconnect device [ 72.628423][ T4648] sch_fq: defrate 0 ignored. [ 72.741276][ T2325] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.761123][ T4658] loop2: detected capacity change from 0 to 128 [ 72.776543][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 72.776562][ T29] audit: type=1326 audit(1767453154.220:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.808823][ T29] audit: type=1326 audit(1767453154.220:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.832569][ T29] audit: type=1326 audit(1767453154.220:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.856051][ T29] audit: type=1326 audit(1767453154.220:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.879581][ T29] audit: type=1326 audit(1767453154.220:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.903281][ T29] audit: type=1326 audit(1767453154.220:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.926889][ T29] audit: type=1326 audit(1767453154.220:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.950703][ T29] audit: type=1326 audit(1767453154.220:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 72.958890][ T4665] loop3: detected capacity change from 0 to 1024 [ 72.974543][ T29] audit: type=1326 audit(1767453154.220:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 73.005126][ T29] audit: type=1326 audit(1767453154.220:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20eb0ef749 code=0x7ffc0000 [ 73.012469][ T4665] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.039741][ T4665] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 73.049689][ T4665] EXT4-fs (loop3): invalid journal inode [ 73.055525][ T4665] EXT4-fs (loop3): can't get journal size [ 73.067191][ T4665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.085812][ T4665] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.345: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=511, rec_len=1024, size=1024 fake=0 [ 73.121410][ T4668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.130866][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.147578][ T4668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.333088][ T4678] SELinux: failed to load policy [ 73.346619][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 73.355897][ T4680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 73.396683][ T4681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.349'. [ 73.462400][ T4685] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.482684][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 73.491864][ T4684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 73.516457][ T4685] SELinux: failed to load policy [ 73.527620][ T4684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.361'. [ 73.619732][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.642612][ T4689] SELinux: failed to load policy [ 73.717590][ T4696] sch_fq: defrate 0 ignored. [ 73.784332][ T4699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.800403][ T4702] $Hÿ: renamed from bond0 (while UP) [ 73.810584][ T4702] $Hÿ: entered promiscuous mode [ 73.816298][ T4676] serio: Serial port ttyS3 [ 73.923468][ T4699] EXT4-fs: Ignoring removed orlov option [ 73.934903][ T4699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.182969][ T4715] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 74.223448][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.295011][ T4718] SELinux: failed to load policy [ 74.435049][ T4722] netlink: 7 bytes leftover after parsing attributes in process `syz.4.364'. [ 74.454248][ T4722] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 74.464777][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 74.538413][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 74.663023][ T4733] sch_fq: defrate 0 ignored. [ 74.693886][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.734044][ T4740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 75.280807][ T4758] SELinux: failed to load policy [ 75.646529][ T4770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.663097][ T4771] $Hÿ: renamed from bond0 (while UP) [ 75.671469][ T4771] $Hÿ: entered promiscuous mode [ 75.717154][ T4770] set_capacity_and_notify: 5 callbacks suppressed [ 75.717172][ T4770] loop4: detected capacity change from 0 to 1024 [ 75.733130][ T4770] EXT4-fs: Ignoring removed orlov option [ 75.748349][ T4770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.121153][ T4794] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 76.148008][ T4796] loop0: detected capacity change from 0 to 512 [ 76.165383][ T4796] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 76.173662][ T4796] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 76.182456][ T4796] EXT4-fs (loop0): 1 truncate cleaned up [ 76.188855][ T4796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.203551][ T4796] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.224025][ T4799] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.253601][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.305048][ T4805] loop0: detected capacity change from 0 to 128 [ 76.558483][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.583914][ T4810] loop4: detected capacity change from 0 to 1024 [ 76.590794][ T4810] EXT4-fs: Ignoring removed orlov option [ 76.599544][ T4810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.678061][ T4812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 76.684739][ T4812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.692952][ T4812] vhci_hcd vhci_hcd.0: Device attached [ 76.699272][ T4813] vhci_hcd: connection closed [ 76.699401][ T2325] vhci_hcd vhci_hcd.4: stop threads [ 76.709656][ T2325] vhci_hcd vhci_hcd.4: release socket [ 76.715094][ T2325] vhci_hcd vhci_hcd.4: disconnect device [ 77.058562][ T4824] loop1: detected capacity change from 0 to 1024 [ 77.066315][ T4824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.101590][ T4824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.322531][ T4835] sch_fq: defrate 0 ignored. [ 77.389762][ T4829] serio: Serial port ttyS3 [ 77.786034][ T4824] syz.1.397 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 77.800175][ T4824] CPU: 1 UID: 0 PID: 4824 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.800276][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.800288][ T4824] Call Trace: [ 77.800294][ T4824] [ 77.800302][ T4824] __dump_stack+0x1d/0x30 [ 77.800399][ T4824] dump_stack_lvl+0x95/0xd0 [ 77.800426][ T4824] dump_stack+0x15/0x1b [ 77.800446][ T4824] dump_header+0x81/0x240 [ 77.800466][ T4824] oom_kill_process+0x295/0x350 [ 77.800536][ T4824] out_of_memory+0x97b/0xb80 [ 77.800564][ T4824] try_charge_memcg+0x610/0xa10 [ 77.800662][ T4824] obj_cgroup_charge_pages+0xa6/0x150 [ 77.800695][ T4824] __memcg_kmem_charge_page+0x9f/0x170 [ 77.800731][ T4824] __alloc_frozen_pages_noprof+0x18f/0x360 [ 77.800835][ T4824] alloc_pages_mpol+0xb3/0x260 [ 77.800864][ T4824] alloc_pages_noprof+0x90/0x130 [ 77.800898][ T4824] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 77.800931][ T4824] __kvmalloc_node_noprof+0x492/0x6b0 [ 77.801031][ T4824] ? ip_set_alloc+0x24/0x30 [ 77.801067][ T4824] ? ip_set_alloc+0x24/0x30 [ 77.801101][ T4824] ip_set_alloc+0x24/0x30 [ 77.801160][ T4824] hash_netiface_create+0x282/0x740 [ 77.801189][ T4824] ? __pfx_hash_netiface_create+0x10/0x10 [ 77.801221][ T4824] ip_set_create+0x3cc/0x970 [ 77.801303][ T4824] ? _raw_spin_unlock+0x26/0x50 [ 77.801347][ T4824] nfnetlink_rcv_msg+0x4c6/0x590 [ 77.801424][ T4824] netlink_rcv_skb+0x123/0x220 [ 77.801541][ T4824] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 77.801570][ T4824] nfnetlink_rcv+0x167/0x16c0 [ 77.801666][ T4824] ? kmem_cache_free+0xe3/0x3a0 [ 77.801693][ T4824] ? __kfree_skb+0x109/0x150 [ 77.801720][ T4824] ? nlmon_xmit+0x4f/0x60 [ 77.801742][ T4824] ? consume_skb+0x49/0x150 [ 77.801793][ T4824] ? nlmon_xmit+0x4f/0x60 [ 77.801815][ T4824] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 77.801951][ T4824] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 77.801982][ T4824] ? __dev_queue_xmit+0x148/0x1ee0 [ 77.802016][ T4824] ? ref_tracker_free+0x37d/0x3e0 [ 77.802042][ T4824] ? __netlink_deliver_tap+0x4dc/0x500 [ 77.802119][ T4824] netlink_unicast+0x5c0/0x690 [ 77.802321][ T4824] netlink_sendmsg+0x58b/0x6b0 [ 77.802360][ T4824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.802394][ T4824] __sock_sendmsg+0x145/0x180 [ 77.802418][ T4824] ____sys_sendmsg+0x31e/0x4a0 [ 77.802460][ T4824] ___sys_sendmsg+0x17b/0x1d0 [ 77.802495][ T4824] __x64_sys_sendmsg+0xd4/0x160 [ 77.802582][ T4824] x64_sys_call+0x17ba/0x3000 [ 77.802606][ T4824] do_syscall_64+0xca/0x2b0 [ 77.802662][ T4824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.802705][ T4824] RIP: 0033:0x7f0c4387f749 [ 77.802722][ T4824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.802740][ T4824] RSP: 002b:00007f0c422df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.802760][ T4824] RAX: ffffffffffffffda RBX: 00007f0c43ad5fa0 RCX: 00007f0c4387f749 [ 77.802775][ T4824] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 77.802791][ T4824] RBP: 00007f0c43903f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.802806][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.802821][ T4824] R13: 00007f0c43ad6038 R14: 00007f0c43ad5fa0 R15: 00007fff3a9280a8 [ 77.802906][ T4824] [ 77.802915][ T4824] memory: usage 307200kB, limit 307200kB, failcnt 9034 [ 78.134982][ T4824] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 78.134998][ T4824] kmem: usage 306672kB, limit 9007199254740988kB, failcnt 0 [ 78.135009][ T4824] Memory cgroup stats for /syz1: [ 78.135322][ T4824] cache 16384 [ 78.135345][ T4824] rss 0 [ 78.135353][ T4824] shmem 0 [ 78.135360][ T4824] mapped_file 0 [ 78.135367][ T4824] dirty 0 [ 78.135372][ T4824] writeback 0 [ 78.135377][ T4824] workingset_refault_anon 6817 [ 78.135382][ T4824] workingset_refault_file 1815 [ 78.135448][ T4824] swap 729088 [ 78.135456][ T4824] swapcached 0 [ 78.135465][ T4824] pgpgin 70504 [ 78.135472][ T4824] pgpgout 70372 [ 78.135480][ T4824] pgfault 93388 [ 78.135489][ T4824] pgmajfault 1272 [ 78.135497][ T4824] inactive_anon 524288 [ 78.135567][ T4824] active_anon 0 [ 78.135576][ T4824] inactive_file 8192 [ 78.135585][ T4824] active_file 8192 [ 78.135594][ T4824] unevictable 0 [ 78.135603][ T4824] hierarchical_memory_limit 314572800 [ 78.135675][ T4824] hierarchical_memsw_limit 9223372036854771712 [ 78.135685][ T4824] total_cache 16384 [ 78.135694][ T4824] total_rss 0 [ 78.135702][ T4824] total_shmem 0 [ 78.135710][ T4824] total_mapped_file 0 [ 78.135718][ T4824] total_dirty 0 [ 78.135726][ T4824] total_writeback 0 [ 78.135735][ T4824] total_workingset_refault_anon 6817 [ 78.135741][ T4824] total_workingset_refault_file 1815 [ 78.135746][ T4824] total_swap 729088 [ 78.135772][ T4824] total_swapcached 0 [ 78.135777][ T4824] total_pgpgin 70504 [ 78.135782][ T4824] total_pgpgout 70372 [ 78.135787][ T4824] total_pgfault 93388 [ 78.135792][ T4824] total_pgmajfault 1272 [ 78.135797][ T4824] total_inactive_anon 524288 [ 78.135802][ T4824] total_active_anon 0 [ 78.135807][ T4824] total_inactive_file 8192 [ 78.135823][ T4824] total_active_file 8192 [ 78.135828][ T4824] total_unevictable 0 [ 78.135834][ T4824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=4821,uid=0 [ 78.135900][ T4824] Memory cgroup out of memory: Killed process 4821 (syz.1.397) total-vm:94100kB, anon-rss:1316kB, file-rss:22312kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 78.139274][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.332787][ T4847] SELinux: failed to load policy [ 78.353005][ T4850] loop3: detected capacity change from 0 to 1024 [ 78.451483][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.461655][ T4850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.491424][ T4850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.512742][ T4857] loop4: detected capacity change from 0 to 128 [ 78.572159][ T29] kauditd_printk_skb: 1255 callbacks suppressed [ 78.572176][ T29] audit: type=1326 audit(1767453160.010:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.613405][ T29] audit: type=1326 audit(1767453160.020:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.636911][ T29] audit: type=1326 audit(1767453160.020:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.660716][ T29] audit: type=1326 audit(1767453160.020:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.684635][ T29] audit: type=1326 audit(1767453160.020:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.708173][ T29] audit: type=1326 audit(1767453160.020:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.731711][ T29] audit: type=1326 audit(1767453160.020:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.755808][ T29] audit: type=1326 audit(1767453160.020:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.779463][ T29] audit: type=1326 audit(1767453160.020:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 78.802822][ T29] audit: type=1326 audit(1767453160.020:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7082acf749 code=0x7ffc0000 [ 79.166889][ T4873] loop0: detected capacity change from 0 to 1024 [ 79.195635][ T4873] EXT4-fs: Ignoring removed orlov option [ 79.208244][ T4861] serio: Serial port ttyS3 [ 79.220218][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.327221][ T4877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 79.333865][ T4877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.342078][ T4877] vhci_hcd vhci_hcd.0: Device attached [ 79.357925][ T4878] vhci_hcd: connection closed [ 79.358091][ T2461] vhci_hcd vhci_hcd.0: stop threads [ 79.368193][ T2461] vhci_hcd vhci_hcd.0: release socket [ 79.374038][ T2461] vhci_hcd vhci_hcd.0: disconnect device [ 79.419952][ T4881] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.431052][ T4881] SELinux: failed to load policy [ 79.445560][ T4883] __nla_validate_parse: 5 callbacks suppressed [ 79.445578][ T4883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.415'. [ 79.502037][ T4887] loop1: detected capacity change from 0 to 1024 [ 79.523370][ T4887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.536230][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.539392][ T4887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.664622][ T4896] sch_fq: defrate 0 ignored. [ 79.726441][ T4893] lo speed is unknown, defaulting to 1000 [ 79.767674][ T4900] siw: device registration error -23 [ 79.797818][ T4899] SELinux: failed to load policy [ 79.912866][ T4895] serio: Serial port ttyS3 [ 80.076476][ T4909] loop3: detected capacity change from 0 to 128 [ 80.456480][ T4887] syz.1.417 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 80.470630][ T4887] CPU: 0 UID: 0 PID: 4887 Comm: syz.1.417 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.470743][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.470758][ T4887] Call Trace: [ 80.470767][ T4887] [ 80.470777][ T4887] __dump_stack+0x1d/0x30 [ 80.470834][ T4887] dump_stack_lvl+0x95/0xd0 [ 80.470913][ T4887] dump_stack+0x15/0x1b [ 80.470995][ T4887] dump_header+0x81/0x240 [ 80.471020][ T4887] oom_kill_process+0x295/0x350 [ 80.471052][ T4887] out_of_memory+0x97b/0xb80 [ 80.471074][ T4887] try_charge_memcg+0x610/0xa10 [ 80.471190][ T4887] obj_cgroup_charge_pages+0xa6/0x150 [ 80.471226][ T4887] __memcg_kmem_charge_page+0x9f/0x170 [ 80.471324][ T4887] __alloc_frozen_pages_noprof+0x18f/0x360 [ 80.471356][ T4887] alloc_pages_mpol+0xb3/0x260 [ 80.471389][ T4887] alloc_pages_noprof+0x90/0x130 [ 80.471468][ T4887] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 80.471508][ T4887] __kvmalloc_node_noprof+0x492/0x6b0 [ 80.471539][ T4887] ? ip_set_alloc+0x24/0x30 [ 80.471619][ T4887] ? ip_set_alloc+0x24/0x30 [ 80.471646][ T4887] ? __slab_alloc+0x25/0x50 [ 80.471677][ T4887] ip_set_alloc+0x24/0x30 [ 80.471768][ T4887] hash_netiface_create+0x282/0x740 [ 80.471808][ T4887] ? __pfx_hash_netiface_create+0x10/0x10 [ 80.471903][ T4887] ip_set_create+0x3cc/0x970 [ 80.471952][ T4887] ? __nla_parse+0x40/0x60 [ 80.471980][ T4887] nfnetlink_rcv_msg+0x4c6/0x590 [ 80.472102][ T4887] netlink_rcv_skb+0x123/0x220 [ 80.472134][ T4887] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.472163][ T4887] nfnetlink_rcv+0x167/0x16c0 [ 80.472193][ T4887] ? kmem_cache_free+0xe3/0x3a0 [ 80.472222][ T4887] ? __kfree_skb+0x109/0x150 [ 80.472273][ T4887] ? nlmon_xmit+0x4f/0x60 [ 80.472345][ T4887] ? consume_skb+0x49/0x150 [ 80.472439][ T4887] ? nlmon_xmit+0x4f/0x60 [ 80.472459][ T4887] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 80.472568][ T4887] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 80.472594][ T4887] ? __dev_queue_xmit+0x148/0x1ee0 [ 80.472621][ T4887] ? ref_tracker_free+0x37d/0x3e0 [ 80.472697][ T4887] ? __netlink_deliver_tap+0x4dc/0x500 [ 80.472733][ T4887] netlink_unicast+0x5c0/0x690 [ 80.472779][ T4887] netlink_sendmsg+0x58b/0x6b0 [ 80.472845][ T4887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.472937][ T4887] __sock_sendmsg+0x145/0x180 [ 80.472956][ T4887] ____sys_sendmsg+0x31e/0x4a0 [ 80.473012][ T4887] ___sys_sendmsg+0x17b/0x1d0 [ 80.473102][ T4887] __x64_sys_sendmsg+0xd4/0x160 [ 80.473139][ T4887] x64_sys_call+0x17ba/0x3000 [ 80.473173][ T4887] do_syscall_64+0xca/0x2b0 [ 80.473209][ T4887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.473230][ T4887] RIP: 0033:0x7f0c4387f749 [ 80.473299][ T4887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.473322][ T4887] RSP: 002b:00007f0c422df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.473346][ T4887] RAX: ffffffffffffffda RBX: 00007f0c43ad5fa0 RCX: 00007f0c4387f749 [ 80.473362][ T4887] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 80.473408][ T4887] RBP: 00007f0c43903f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.473420][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.473436][ T4887] R13: 00007f0c43ad6038 R14: 00007f0c43ad5fa0 R15: 00007fff3a9280a8 [ 80.473458][ T4887] [ 80.800512][ T4887] memory: usage 307200kB, limit 307200kB, failcnt 9680 [ 80.801224][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.807984][ T4887] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 80.824784][ T4887] kmem: usage 306668kB, limit 9007199254740988kB, failcnt 0 [ 80.832226][ T4887] Memory cgroup stats for /syz1: [ 80.832447][ T4887] cache 12288 [ 80.840772][ T4887] rss 0 [ 80.843838][ T4887] shmem 0 [ 80.846837][ T4887] mapped_file 0 [ 80.849671][ T4915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.427'. [ 80.850301][ T4887] dirty 0 [ 80.862652][ T4887] writeback 0 [ 80.866077][ T4887] workingset_refault_anon 6940 [ 80.870852][ T4887] workingset_refault_file 1818 [ 80.875669][ T4887] swap 720896 [ 80.879200][ T4887] swapcached 8192 [ 80.883059][ T4887] pgpgin 73889 [ 80.886495][ T4887] pgpgout 73756 [ 80.890097][ T4887] pgfault 101023 [ 80.893697][ T4887] pgmajfault 1333 [ 80.897352][ T4887] inactive_anon 532480 [ 80.901443][ T4887] active_anon 0 [ 80.904953][ T4887] inactive_file 12288 [ 80.909056][ T4887] active_file 0 [ 80.912590][ T4887] unevictable 0 [ 80.916475][ T4887] hierarchical_memory_limit 314572800 [ 80.921872][ T4887] hierarchical_memsw_limit 9223372036854771712 [ 80.928090][ T4887] total_cache 12288 [ 80.931916][ T4887] total_rss 0 [ 80.935228][ T4887] total_shmem 0 [ 80.938677][ T4887] total_mapped_file 0 [ 80.942632][ T4887] total_dirty 0 [ 80.946096][ T4887] total_writeback 0 [ 80.949893][ T4887] total_workingset_refault_anon 6940 [ 80.955193][ T4887] total_workingset_refault_file 1818 [ 80.960465][ T4887] total_swap 720896 [ 80.964280][ T4887] total_swapcached 8192 [ 80.968513][ T4887] total_pgpgin 73889 [ 80.972460][ T4887] total_pgpgout 73756 [ 80.976459][ T4887] total_pgfault 101023 [ 80.980555][ T4887] total_pgmajfault 1333 [ 80.984726][ T4887] total_inactive_anon 532480 [ 80.989335][ T4887] total_active_anon 0 [ 80.993329][ T4887] total_inactive_file 12288 [ 80.997820][ T4887] total_active_file 0 [ 81.001817][ T4887] total_unevictable 0 [ 81.005817][ T4887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.417,pid=4886,uid=0 [ 81.020385][ T4887] Memory cgroup out of memory: Killed process 4886 (syz.1.417) total-vm:94100kB, anon-rss:1048kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 81.090744][ T4919] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 81.111133][ T4919] SELinux: failed to load policy [ 81.143226][ T4921] loop3: detected capacity change from 0 to 1024 [ 81.154600][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.163729][ T4921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.185405][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.244981][ T4930] SELinux: failed to load policy [ 81.362373][ T4940] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 81.425791][ T4942] loop2: detected capacity change from 0 to 1024 [ 81.445163][ T4942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.465865][ T4942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.555227][ T4950] lo speed is unknown, defaulting to 1000 [ 81.603645][ T4956] siw: device registration error -23 [ 81.661795][ T4936] serio: Serial port ttyS3 [ 81.767721][ T4961] loop1: detected capacity change from 0 to 128 [ 81.797854][ T4955] serio: Serial port ttyS3 [ 81.976430][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.010457][ T4963] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.020982][ T4963] SELinux: failed to load policy [ 82.546646][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.651351][ T4977] SELinux: failed to load policy [ 82.724954][ T4983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'. [ 82.770152][ T4988] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 82.821035][ T4992] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.831039][ T4992] SELinux: failed to load policy [ 82.865844][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 82.874690][ T4995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.455'. [ 82.885510][ T4995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.455'. [ 82.911431][ T5002] loop3: detected capacity change from 0 to 128 [ 82.918375][ T5000] loop1: detected capacity change from 0 to 1024 [ 82.936226][ T5000] EXT4-fs: Ignoring removed orlov option [ 82.954324][ T5000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.039103][ T5006] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 83.045916][ T5006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.054450][ T5006] vhci_hcd vhci_hcd.0: Device attached [ 83.060922][ T5007] vhci_hcd: connection closed [ 83.061190][ T123] vhci_hcd vhci_hcd.1: stop threads [ 83.071282][ T123] vhci_hcd vhci_hcd.1: release socket [ 83.076762][ T123] vhci_hcd vhci_hcd.1: disconnect device [ 83.187799][ T5011] loop4: detected capacity change from 0 to 1024 [ 83.194626][ T5011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.205219][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.219950][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 83.325582][ T5011] serio: Serial port ttyS3 [ 83.419887][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.582573][ T29] kauditd_printk_skb: 1029 callbacks suppressed [ 83.582593][ T29] audit: type=1326 audit(1767453165.020:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4d9765e7 code=0x7ffc0000 [ 83.612775][ T29] audit: type=1326 audit(1767453165.050:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4d91b829 code=0x7ffc0000 [ 83.636500][ T29] audit: type=1326 audit(1767453165.050:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1b4d97f749 code=0x7ffc0000 [ 83.660570][ T29] audit: type=1326 audit(1767453165.070:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4d9765e7 code=0x7ffc0000 [ 83.684035][ T29] audit: type=1326 audit(1767453165.070:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4d91b829 code=0x7ffc0000 [ 83.707595][ T29] audit: type=1326 audit(1767453165.070:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1b4d97f749 code=0x7ffc0000 [ 83.731042][ T29] audit: type=1326 audit(1767453165.080:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4d9765e7 code=0x7ffc0000 [ 83.754646][ T29] audit: type=1326 audit(1767453165.080:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4d91b829 code=0x7ffc0000 [ 83.778104][ T29] audit: type=1326 audit(1767453165.080:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1b4d97f749 code=0x7ffc0000 [ 83.801693][ T29] audit: type=1326 audit(1767453165.100:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4d9765e7 code=0x7ffc0000 [ 83.877008][ T5025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.464'. [ 83.920349][ T5029] loop4: detected capacity change from 0 to 1024 [ 83.927718][ T5029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.945133][ T5029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.999792][ T5026] lo speed is unknown, defaulting to 1000 [ 84.051742][ T5026] siw: device registration error -23 [ 84.056277][ T5035] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 84.071150][ T5035] SELinux: failed to load policy [ 84.281412][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 84.290269][ T5040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.468'. [ 84.299513][ T5033] serio: Serial port ttyS3 [ 84.335341][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.389570][ T5045] loop1: detected capacity change from 0 to 1024 [ 84.423728][ T5045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.451361][ T5045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.493653][ T5051] loop3: detected capacity change from 0 to 1024 [ 84.500681][ T5051] EXT4-fs: Ignoring removed orlov option [ 84.508724][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.699980][ T5060] loop2: detected capacity change from 0 to 128 [ 84.748803][ T5054] serio: Serial port ttyS3 [ 84.865232][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.303371][ T5067] __nla_validate_parse: 1 callbacks suppressed [ 85.303391][ T5067] netlink: 7 bytes leftover after parsing attributes in process `syz.4.477'. [ 85.327248][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.344679][ T5067] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 85.353585][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 85.472248][ T5073] EXT4-fs: Ignoring removed orlov option [ 85.505686][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.596439][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.625111][ T5077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.667959][ T5077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.681724][ T5082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 85.688472][ T5082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 85.696647][ T5082] vhci_hcd vhci_hcd.0: Device attached [ 85.705249][ T5081] SELinux: failed to load policy [ 85.711195][ T5085] vhci_hcd: connection closed [ 85.711394][ T2101] vhci_hcd vhci_hcd.4: stop threads [ 85.721433][ T2101] vhci_hcd vhci_hcd.4: release socket [ 85.726851][ T2101] vhci_hcd vhci_hcd.4: disconnect device [ 85.752894][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 85.946928][ T5095] serio: Serial port ttyS3 [ 86.120164][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.521771][ T5106] netlink: 7 bytes leftover after parsing attributes in process `syz.2.489'. [ 86.531437][ T5106] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 86.541263][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 86.644069][ T5114] set_capacity_and_notify: 2 callbacks suppressed [ 86.644087][ T5114] loop1: detected capacity change from 0 to 128 [ 86.646333][ T5111] SELinux: failed to load policy [ 86.825546][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.926685][ T5124] sch_fq: defrate 0 ignored. [ 87.138527][ T5135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.175673][ T5135] loop4: detected capacity change from 0 to 128 [ 87.185381][ T5137] netlink: 7 bytes leftover after parsing attributes in process `syz.2.502'. [ 87.191107][ T5135] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.207121][ T5137] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 87.225499][ T5135] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.225559][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 87.292817][ T5144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.505'. [ 87.328607][ T5145] ================================================================== [ 87.336927][ T5145] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 87.344889][ T5145] [ 87.347230][ T5145] write to 0xffff88811b9dc814 of 4 bytes by task 5135 on cpu 1: [ 87.354884][ T5145] xas_set_mark+0x12b/0x140 [ 87.359438][ T5145] __folio_start_writeback+0x155/0x340 [ 87.364933][ T5145] mpage_writepages+0xd18/0x1250 [ 87.369909][ T5145] fat_writepages+0x24/0x30 [ 87.374447][ T5145] do_writepages+0x1c6/0x310 [ 87.379416][ T5145] file_write_and_wait_range+0x156/0x2c0 [ 87.385080][ T5145] __generic_file_fsync+0x46/0x160 [ 87.390226][ T5145] fat_file_fsync+0x49/0x100 [ 87.394843][ T5145] vfs_fsync_range+0x10d/0x130 [ 87.399627][ T5145] generic_file_write_iter+0x1b8/0x2f0 [ 87.405101][ T5145] iter_file_splice_write+0x66b/0xa20 [ 87.410562][ T5145] direct_splice_actor+0x156/0x2a0 [ 87.415767][ T5145] splice_direct_to_actor+0x312/0x680 [ 87.421326][ T5145] do_splice_direct+0xda/0x150 [ 87.426188][ T5145] do_sendfile+0x380/0x650 [ 87.430701][ T5145] __x64_sys_sendfile64+0x105/0x150 [ 87.435995][ T5145] x64_sys_call+0x2db1/0x3000 [ 87.440765][ T5145] do_syscall_64+0xca/0x2b0 [ 87.445288][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.451184][ T5145] [ 87.453508][ T5145] read to 0xffff88811b9dc814 of 4 bytes by task 5145 on cpu 0: [ 87.461049][ T5145] __writeback_single_inode+0x201/0x7c0 [ 87.466611][ T5145] writeback_single_inode+0x16d/0x3f0 [ 87.472178][ T5145] sync_inode_metadata+0x5b/0x90 [ 87.477143][ T5145] __generic_file_fsync+0x109/0x160 [ 87.482356][ T5145] fat_file_fsync+0x49/0x100 [ 87.486960][ T5145] vfs_fsync_range+0x10d/0x130 [ 87.491729][ T5145] generic_file_write_iter+0x1b8/0x2f0 [ 87.497211][ T5145] iter_file_splice_write+0x66b/0xa20 [ 87.502589][ T5145] direct_splice_actor+0x156/0x2a0 [ 87.507749][ T5145] splice_direct_to_actor+0x312/0x680 [ 87.513136][ T5145] do_splice_direct+0xda/0x150 [ 87.517920][ T5145] do_sendfile+0x380/0x650 [ 87.522397][ T5145] __x64_sys_sendfile64+0x105/0x150 [ 87.527695][ T5145] x64_sys_call+0x2db1/0x3000 [ 87.532391][ T5145] do_syscall_64+0xca/0x2b0 [ 87.536909][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.542820][ T5145] [ 87.545227][ T5145] value changed: 0x0a000021 -> 0x00000021 [ 87.550957][ T5145] [ 87.553280][ T5145] Reported by Kernel Concurrency Sanitizer on: [ 87.559443][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: syz.4.501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.569084][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.579145][ T5145] ================================================================== [ 87.973953][ T123] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)