last executing test programs: 2m19.37736114s ago: executing program 1 (id=2102): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10a1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbfffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x40}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfff9, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m19.080330778s ago: executing program 1 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 2m19.025324213s ago: executing program 1 (id=2105): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x4040040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000020000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000004f0800008a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008004f96000000000000000085000000820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000022}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd4, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d90b18c1f1"}, @NL80211_ATTR_KEY={0x78, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "00e41cecc5"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "95b9a0773ee86da3f9a1ab16fc"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d9d3033bfa918e9a191ec6abb7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8c4296e255"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_SEQ={0xd, 0x4, "b8fe83fe84a11c29c6"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2ced55962d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "741aaa10"}]}, 0xd4}}, 0x91) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xa, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x0, 0x3, 0x4, 0x8, 0xc, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000080)='syzkaller\x00', 0x14, 0x54, &(0x7f0000000380)=""/84, 0x41000, 0x18, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x10, 0x9, 0x7}, 0x10, 0x0, r2, 0x3, &(0x7f0000000440)=[r1, r1, r4, r1, r1], &(0x7f0000000480)=[{0x3, 0x5, 0x9, 0xb}, {0x0, 0x4, 0xd}, {0x3, 0x4, 0xb, 0x7}]}, 0x94) socket$inet(0x2, 0x3, 0x7f) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r5, 0x383b4f177a40ea3f, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x13}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x24008001) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m18.73592482s ago: executing program 1 (id=2107): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e21, 0x5, @empty, 0xc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) r7 = socket(0x10, 0x3, 0xfffffffc) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x40000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r8) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 2m17.607890534s ago: executing program 1 (id=2115): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000f10000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='mem_disconnect\x00', r1, 0x0, 0x5b77}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x866, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = fsmount(r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000040)=0x6f2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) eventfd(0x0) r7 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(r5, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x80480, 0x0, 0x25}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.401123844s ago: executing program 1 (id=2119): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}}) 2m2.039730776s ago: executing program 32 (id=2119): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}}) 1.912388104s ago: executing program 5 (id=4198): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000500)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x3ff2e233}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, &(0x7f0000000880)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_usbip_server_init(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000306010100000400000000000200000a0900020073797a30000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) setfsgid(0xee00) syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x88, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc32}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x6) 1.698812103s ago: executing program 2 (id=4204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x54}}, 0x24000840) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$kcm(0x10, 0x2, 0x4) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x34120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x140e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, 0x0, &(0x7f00000001c0)=r5}, 0x20) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x4008800) 1.591169103s ago: executing program 3 (id=4207): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000e00)=""/200, 0xc8, 0x0, &(0x7f0000000f00)=""/109, 0x6d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) r4 = io_uring_setup(0x6ed5, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r7, &(0x7f0000000fc0)={0x28, 0x0, 0x2710}, 0x10) 1.590602484s ago: executing program 3 (id=4208): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000002f00)=""/4094, 0xffe}], 0x5}, 0x4000000b}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 1.51669927s ago: executing program 3 (id=4209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_open_procfs(0x0, &(0x7f0000000740)='net/wireless\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf2506000000050005008000000014000680060005004e2100000600010000000000080002000600000008000200020000000800040081ffffff14000680060001000200000005000200050000000800020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44094) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) creat(&(0x7f00000003c0)='./file1\x00', 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) removexattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4000, 0x0, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x1, [{0x80005, 0x7ff, 0x4}, {0x2, 0x4, 0x9}], "b6"}, @enum64={0x5, 0x3, 0x0, 0x13, 0x1, 0x0, [{0xa, 0x1a, 0x80000001}, {0x2, 0x8001}, {0xa, 0x100, 0xf075}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000380)=""/178, 0x74, 0xb2, 0x1, 0x7, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1.440738887s ago: executing program 2 (id=4210): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 1.375011453s ago: executing program 2 (id=4211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfdfa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x5, 0x3, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffffffffffffffd, 0x20001006, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.338997617s ago: executing program 2 (id=4212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={r4}, 0x8) 1.215059248s ago: executing program 4 (id=4213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01001f774d20611e032f1b00000010002e800600040000000000000000000c00060001"], 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a00000005"], 0x5c}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1b00000018008103e00212ba0d81050423031000030f0600067c55", 0x1b}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 976.46374ms ago: executing program 0 (id=4214): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="1195955492ab5252c99a944ab607b49632d4de5414a3b1834310a968be9608601d955b2c87cc735b01172e222c4e157e0e6f179f026b9ce5", 0x38}, {&(0x7f0000000440)="40c979b85055abd7db6f46aaf07aaf7084f345f8846c536bcc81bca7b1a1b32480db6bdb62c021819a170fefc5eec698705437c246205b3242507b7dea17505154b38f753566c679d85a01f5ecda378a9c6c4474bfe8b2ca63f5ad7ed066c7a84a27f8a29d0d9a67911b774d03376a05b7dc5ef8862696201fe9ebfee1521cd407bac3d12d8b11b9a6b84eff8990dabf62abe3269dbd76616b27", 0x9a}, {&(0x7f0000000a80)="487ab063458c1408487fc9f5fc75c76dab1c724ffa6ffcb2ed332b6d76a43c5a341e36007d596c6ca2a116e715341f4200f240616bfc0701022862a8eefe1c9a53bf6c0a1de38afad795dd4092f6f23bdf99018b776304cd94839ec8645e366f52aa608215f29fd6366a431a45d8de0048e10fbbbcb535445f957e66a6d034b53844d35ffdbe999c8976e6cd9f0aead65c9a623be8410eadf1279ac5eb5d0105fd02fd0fa0e82727f5043cf4db49abe155cc4b500589bb60954f394d96d7f6db1973bb3bbb544c078539dbfb1707f13cd5be7ce2350e1090b010dbd499de0ddda8f868faa54f20bcbf95b3cbbb8c8011", 0xf0}], 0x3}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000b80)="92f2879f6c94da694277ad3bfb97ef3395c77c92fa812ffcacf4f3439d3a0b34883cae6c19334cb1925bed836d4af2bbfe2a70079a7534bb08fbc2c4334b78d3c31ed061bdb3948ee5456053c77b83690d832a5864f1e617c8dadaacdea90b7225d47ad488826228905ca5c5e6a7a99675adc13fe2c30b205aa64d671ab03e37c86966516b2727ed46daf5ea1112f922fd4fcc8e8966b154cb7167cafa71518d2de6060320d1f1a22c424d5422915fb9021d2b25295eb66736960da43f5f772fa776f00d15c9bed9", 0xc8}], 0x1, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000c80)="93eff93f574e1171d0b232aaf3e388a3fca34068bd3168954117f1d7044739779761caab385e295b425b6c178563915aa3c97d230cb0089a51f5421030a916c0995d6fc7b9f223cd0a475c845e14880e6bf3426649782cd2d7287c0c6d5949d30e1bfe78c25e4762461ab4687d814b02649ede330da0da324b5ba7cb7bfd3673b187338e9df006ef5f47a4cfa85470791d4146c9cff87f1515c488123c8be403ca94e4c2bd3b2f78c2fbbc347d4ed08038baa9c8bd682e29f0", 0xb9}, {&(0x7f0000000d40)="d80f2e9376bdbcd6ac6df0ac2c614ea75df1638c6dc7e8917a83d6bf36b0e016b881c8ce0bad7dae3a1cfd8c9ea0d927e9183e78778885abc9caff0239a68bd3d179c8f5ffb45ee9f56d1a51622f41bea566a294152e523427985dbe63f84df79651e58ea1ffa15008a5598f8b4554e6b34df21acd63ad1bb1c2198af19295b9ad5c5a6d731785b8df60fd101f8ad03d28389b539558da52fcc803b47d", 0x9d}, {&(0x7f0000000680)="1d3c2165b7635b3c0b9998e8916ddc48c7fad95a4c65a0cd2ce73adc5585441605eb4addf5ec3d4ac8e8091ca9f997a2", 0x30}, {&(0x7f00000007c0)="cc3a2d192e0fcdedb3e4528a420ab488f9b6cbae5ffd1baa11710347f55d2e46e22e3b9b7e38f2f7387485c0f080f622", 0x30}, {&(0x7f0000000800)="1c677c51f7146e51c3", 0x9}, {&(0x7f0000000880)="793c16a01521c89384b987070d2d5168638860e79b7114dcac671cdc75c7bd61173d7ccded5f72463c5833eb08f4d8274f06e1ddd9f0d2f1b846dc2f909ce5ca9bc545cc43e850a7c2e6c2c9f93c2ff6f4d07b1b317206193b8900", 0x5b}], 0x6, &(0x7f0000000fc0)=[@ip_retopts={{0x13c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x31, 0x3, 0x6, [{@multicast2, 0x7fff}, {@remote, 0x1}, {@rand_addr=0x64010100, 0x3}, {@remote, 0x10000}, {@multicast1, 0x8}, {@empty, 0x8001}, {@multicast2, 0x7fffffff}]}, @rr={0x7, 0x27, 0x6, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @loopback, @loopback, @local, @loopback, @private=0xa010100]}, @end, @timestamp={0x44, 0x18, 0xd2, 0x0, 0x0, [0x0, 0x5, 0x9e33, 0x9, 0x0]}, @timestamp_prespec={0x44, 0x54, 0x87, 0x3, 0x8, [{@private=0xa010102, 0xf101}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@multicast1, 0x982}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x8}, {@multicast1, 0x6}, {@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0xe6, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x724}, {@multicast1, 0x7fffffff}]}, @timestamp_addr={0x44, 0x3c, 0x5a, 0x1, 0x2, [{@rand_addr=0x64010100, 0x8}, {@broadcast, 0xfffffffe}, {@multicast1, 0x7d0}, {@local, 0x281e}, {@loopback, 0x5}, {@loopback, 0x8001}, {@local, 0x83d}]}, @noop]}}}], 0x140}}, {{&(0x7f0000000940)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000e80)="e718121e71f42578f77a5747353e91701180ef1736d7b028004fba9ff9e045175caac397", 0x24}, {&(0x7f0000000ec0)="bca8ee736fc6041212722d3c07b980a8321c0858dd773e80ff8167368c6ee06a0abb984c7807ae8613a5", 0x2a}, {&(0x7f0000001100)="994ce09985931d6ddec89c93da338515e0a07c663c4691ddf222e8501589fa781ee5c4255174b298236b83dafadaf6563ec2c0901be44933d4c188a244f44eb0a88467078f40e38288eea623047f9739f499fcfb8a84d2fc063b2b452a4f0562be195a53db29f0c33f37ac633ba765dfe9ff2d", 0x73}, {&(0x7f0000001180)="238e07cad80587cc4d1a23315172e2e04f4276f694cb5729520ae6af23ab1cabfc452b1732376f7694cc0cc9374a9ffbb7145f6583e3ae4db3770e2018f315104fb9359dffd5f94ec8d735859b069601722360a4b2bf4a110335f8c6d82299bc66cb7825368993946c6061ba8a70aa4f6083b9c1d5956d841a47cf05fad3fd46b24db099711af67ca70d75c4722efea7917f70dfd77496df50d529e9f2e3ee83c0d1cbbb48f1d12d5c7353536b75ed6dc3ce07fa786c93859f16b72034925014bee14b343a06bdfc06cc0cc084a211e68bfa9e3e547a6470993d62fb27cde961a0732c24906523586fb6bf3841a4834c0f78935f3d", 0xf5}, {&(0x7f0000001280)="69d1cb6b2db8655e2b94b39478005283b8d6361692b0e90059d039fea8b177c1ad141f148315887809cba15da3e077872913de9233c6a03ec1657fb8fca50d4199c75bc5df1b6e1e529f1a00ba687f94fa82aea2b893fa71a51378009bcb72c50270329d7fd088b3acbaf81e6cb6796a646d2e2649f4616d26998e146a16bea262e9aa888e8d29af7a8c7364b9b6375366447ad0ecc7941f4aaf3f4cbd5932099a19029b3c6aa856efc7bd0150e9f586f787acd911f332a922bab211d2a49b94c49c677d0f136361dd8ad2190ceb9ad08c58975f53519aa9f13620cb34bc6df4", 0xe0}, {0xffffffffffffffff}, {&(0x7f0000001380)="3f3b5e5e92a82552f9dd29e332894395ac6107cf7f3cc9b76a98a86d50563c9e7eea1529029b7caf52cfe95987b78f907e2c17f64e00366e73da48d9f799f7a7ae9433332e91c2a0eda6c6725699871b13556bfa91ba4781a75f0ec11eadda8dbe4b723ac7a1aafe26f513a458e0b518ba445fe191d6c663f510e573e382db2a20891dffadde51062398c0df26a1831061b0d7f622b18deac4e0cc744b1c51d265a05db252b0c04cda8d526e6fb2e2d22d89e1c3daf1f7486803ebcb756493c301d8e3d8804c3f22b6a8", 0xca}, {&(0x7f0000001480)="9e9ea2d36b1a7a4f6b70c19afaf8bbef4d85fbabb098749bdfe89a663908f52656f1edba62c4e5974ba7ae7a70b5185b5d913350974df6a2cf92e52a381502fe3920a5c9e7ccdece72809ae8d92dfe0c1c7c26842f21d99b3a84ba8897f41cc1a3c2b18cebade330fd14e943d86f0010a8ec22e193eaf941823a3c2c6fe115e6b71d99b994202dd26ce63c055d3f03d451c0550575f6de27b64aada400cfc58057ef7e110b5bebce27def1ed075ee46fc30e6d7e186ff395264fc6b679c9bbaafa148c1420e2ee39ab86027ee546d5ff", 0xd0}, {&(0x7f0000001580)="98d9b9a3977f556d614c0ae053dd501873a461c3320bad665a1b2619c93492fd414cdc80dddaab60c7fcfe6e79171c26be737ef65180e80b957cab6b136d1e6e2a8717d5736ed8263a055e66e916977a5c19d63202af4afe58089bf29fafe57f1769dd5059fb055ee6ced6f9922b4959c76fe1fc36ef8ceb1834d32e059a758a4e1fd7939bd0c2698f6ed0b4abe62d70582d52dc8bac0d2956", 0x99}], 0x9, &(0x7f0000001700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xddb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}], 0x80}}, {{&(0x7f0000001780)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000017c0)="31c0d660e69cff548d9a950fbdf3cb95c2a1fe52c055a1a1c3214754117ffc4c74a844579c6f875638ee03d44b5ddf01fccd6f0d288d2d6b0f63e5df2964dd09d35b6dbf7efa7f4d4d42a12e6e57a43ea170ad6fe1f055413cafdb732bd5a2870ba3565cd20d967e801e027d3a8700589c06077aa9833be9fd1abacc28e2c3fb248bab770ba481811308f92db74250436d62d1994b5d25ef4b31ab486149751143941314a3cca33c48f6699927ff0c915d63872ac00231e1d920f1a2edbc744673635f1283e7752c6d39d9d360835ef98470392cc02529", 0xd7}, {&(0x7f00000018c0)="0a8127f0abf2e12fbf24f68fe2034b45a1f6c1255691a7b9472e4e8e093e6a9cd8e6dfb0a0abf64b3a692fc3de6e8259170a655b9a331a0930d6708e88213620858f50402e08c23182133977723b5b584275267e663851d1e7472bee2fdc5bade5e2fc01a78ca5fd9d348e7f7cac7c1abfd0ad5043cef7dbba522f4208edcb66b194c394a76bf41a39681adc05e1555d92caadd75ca505f0ea2b5c0c3230165ad8a514b9dc6ebae810e7cd87d4535ca17c7dfe339029553fb2c5413f377fc35fe4790b92eeb00b69614012627a4badbfb0a29ae2", 0xd4}, {&(0x7f00000019c0)="c03f7e2711eb1166cf0e3e0c96d832cc63c1ee13d699ac3ef2f623a59c06729f7bfe51b232ccf444d7162a2c5c89bce0524632beec6f826bbbb507b7177c970a1503ed2991046d516b1d359191e8bf20158afbda34bc799798eeb4728cbdc90213a7cbed6e76b4826f224ec0af659ab72e6ef86ee08ac5dec0a5a6a95cf725b2e329d8d697fad00f734af54b1d3d465280135ad443d59c9369f25bfded6e5bd2f36cbd504a75ea", 0xa7}, {&(0x7f0000001a80)="1d57f727748fce3ba0ee2f97958761756f888e2a690cf26df9bdbc7ec8039db1a449a923d04d4a47879ae3626a1e1a2e2303f4bad93c29f63975fbf3e3b74181a5e2db3d6384c3ff31bfc08c84c164", 0x4f}], 0x4, &(0x7f0000001c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x4e, 0x0, 0x9, [0xffff2595]}, @end, @timestamp_prespec={0x44, 0x34, 0x51, 0x3, 0x6, [{@multicast1, 0x3}, {@private=0xa010101, 0x4f7}, {@remote, 0x80000001}, {@broadcast, 0xa31}, {@multicast2, 0x10001}, {@empty}]}, @lsrr={0x83, 0x23, 0x1c, [@private=0xa010102, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x95, 0x3, 0x9, [{@rand_addr=0x64010100, 0x7}, {@remote, 0xff}, {@loopback, 0xa86f}, {@multicast2, 0x5}, {@multicast1, 0x100}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6fcfaff8}]}, @end, @rr={0x7, 0x7, 0x19, [@private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x1, [{@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}, {@loopback, 0x5a}, {@empty, 0x8}, {@multicast1, 0xc}]}, @timestamp_addr={0x44, 0xc, 0xee, 0x1, 0x2, [{@multicast2, 0xff}]}, @ssrr={0x89, 0x7, 0x80, [@multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast2}}}], 0x178}}, {{&(0x7f0000001d80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000001dc0)="9ff62eabe4bb8078c39fe69340e1e6904022beb12005d7bee2d1a5f84961b60f1214b3970add416a5e344120c6476d309affc2a4c7046e3cebf01ffd", 0x3c}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="4e8c73d55333", 0x6}], 0x4, &(0x7f0000003f40)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x44, 0x10, "9dbf3f206ec5c5c110addf5e178b"}, @ssrr={0x89, 0xf, 0x9d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0x5, [{@empty, 0x8b}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x9e, [@multicast1, @remote]}, @timestamp_prespec={0x44, 0x24, 0x7a, 0x3, 0x6, [{@broadcast, 0x7}, {@remote, 0x5}, {@empty}, {@rand_addr=0x64010102, 0x2}]}, @generic={0x88, 0x5, "106443"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x1e, [@private=0xa010101, @local, @private=0xa010102]}, @ssrr={0x89, 0x13, 0xbd, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @multicast1, @private=0xa010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @end, @generic={0x7, 0xb, "044e135d700a9e52c8"}, @ra={0x94, 0x4}]}}}], 0x178}}, {{&(0x7f00000040c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004100)="72c98bf42ef4b7a3039bdfc8f573917b817d8e8c71082f36e36a46052c54ab117ae2ffefdd5b75eabeb7668693a9f9ae26a2666457b55ea239397af7b578040aa8b20f54beacb36eb8f9edfb70fcb1c7705a7aad6f29323583d8b20e4fd8bddc77603fe92ae19361edd07725d429ebbcd30ee82fc3d8db54b0f04adfc2a04c85bf67097be52ef18fbe5144e980dba3ffa5d9eaaaec8571697b42e2672d358d2c18e9ada3ba076f257d6fdcc612237abf29ac59184fdf7808f63acf8443c1ed0f8cfb753959a9c136e30d485991b557f1b18ecd89e5ac21e11dd4de24fa9db63fba589296", 0xe4}, {&(0x7f0000004200)="79f4ea555c74d3b2ee67e8a3d815e270bf50875d6f695e26f85fd0fe1bebd66e0469eeded4fbdc84c4c12005009cfc8ffa90af60919d5b65af1b22a492b6b2b9083d76b9928838", 0x47}], 0x2, &(0x7f0000004340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x20}}], 0x7, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0) 847.731012ms ago: executing program 0 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xf0, 0x7, 0x6, 0x48, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote, 0x10, 0x700, 0xd, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 519.850313ms ago: executing program 5 (id=4216): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000f1000000000000001811", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) eventfd(0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x80480, 0x0, 0x25}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.155109ms ago: executing program 0 (id=4217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 375.026396ms ago: executing program 2 (id=4218): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x7) 374.242876ms ago: executing program 0 (id=4219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private2, @in=@private}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 352.878228ms ago: executing program 5 (id=4220): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={0x0, 0x0, 0x8}, 0x18) 310.294552ms ago: executing program 5 (id=4221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 309.267052ms ago: executing program 4 (id=4222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfdfa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x5, 0x3, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffffffffffffffd, 0x20001006, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 272.853365ms ago: executing program 2 (id=4223): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r2) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 268.067586ms ago: executing program 3 (id=4224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xc}) r7 = dup(r5) ioctl$TCSETS(r5, 0x40045431, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"21edab2a4f34faeebdac77b05d04bf94"}, 0x8, 0x7, 0x1}}}, 0xa0) read(r5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 262.807496ms ago: executing program 5 (id=4225): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 250.467157ms ago: executing program 4 (id=4226): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/wakeup_count', 0x0, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) finit_module(r0, 0x0, 0x3) 199.859122ms ago: executing program 0 (id=4227): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 197.767132ms ago: executing program 5 (id=4228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={r4}, 0x8) 173.775254ms ago: executing program 4 (id=4229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) 129.122129ms ago: executing program 3 (id=4230): statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 83.188493ms ago: executing program 4 (id=4231): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 26.529369ms ago: executing program 3 (id=4232): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ptrace(0x4206, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0x10}, 0x18) wait4(r0, 0x0, 0x2, 0x0) (fail_nth: 3) 643.271µs ago: executing program 0 (id=4233): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x7) 0s ago: executing program 4 (id=4234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_open_procfs(0x0, &(0x7f0000000740)='net/wireless\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf2506000000050005008000000014000680060005004e2100000600010000000000080002000600000008000200020000000800040081ffffff14000680060001000200000005000200050000000800020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44094) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) creat(&(0x7f00000003c0)='./file1\x00', 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) removexattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4000, 0x0, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x1, [{0x80005, 0x7ff, 0x4}, {0x2, 0x4, 0x9}], "b6"}, @enum64={0x5, 0x3, 0x0, 0x13, 0x1, 0x0, [{0xa, 0x1a, 0x80000001}, {0x2, 0x8001}, {0xa, 0x100, 0xf075}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000380)=""/178, 0x74, 0xb2, 0x1, 0x7, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): .319812][T14333] __dump_stack+0x1d/0x30 [ 314.319915][T14333] dump_stack_lvl+0x95/0xd0 [ 314.319946][T14333] dump_stack+0x15/0x1b [ 314.319970][T14333] dump_header+0x81/0x240 [ 314.319992][T14333] oom_kill_process+0x295/0x350 [ 314.320017][T14333] out_of_memory+0x97b/0xb80 [ 314.320144][T14333] try_charge_memcg+0x610/0xa10 [ 314.320275][T14333] obj_cgroup_charge_pages+0xa6/0x150 [ 314.320338][T14333] __memcg_kmem_charge_page+0x9f/0x170 [ 314.320375][T14333] __alloc_frozen_pages_noprof+0x18f/0x360 [ 314.320412][T14333] alloc_pages_mpol+0xb3/0x260 [ 314.320455][T14333] alloc_pages_noprof+0x90/0x130 [ 314.320532][T14333] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 314.320627][T14333] __kvmalloc_node_noprof+0x492/0x6b0 [ 314.320745][T14333] ? ip_set_alloc+0x24/0x30 [ 314.320786][T14333] ? ip_set_alloc+0x24/0x30 [ 314.320827][T14333] ip_set_alloc+0x24/0x30 [ 314.320868][T14333] hash_netiface_create+0x282/0x740 [ 314.320959][T14333] ? __pfx_hash_netiface_create+0x10/0x10 [ 314.321075][T14333] ip_set_create+0x3cc/0x970 [ 314.321148][T14333] ? __nla_parse+0x40/0x60 [ 314.321187][T14333] nfnetlink_rcv_msg+0x4c6/0x590 [ 314.321242][T14333] netlink_rcv_skb+0x123/0x220 [ 314.321275][T14333] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 314.321344][T14333] nfnetlink_rcv+0x167/0x16c0 [ 314.321377][T14333] ? free_frozen_page_commit+0x79/0x3b0 [ 314.321416][T14333] ? _raw_spin_unlock+0x26/0x50 [ 314.321448][T14333] ? __free_frozen_pages+0x288/0x510 [ 314.321525][T14333] ? __rcu_read_unlock+0x34/0x70 [ 314.321595][T14333] ? __rcu_read_unlock+0x34/0x70 [ 314.321623][T14333] ? is_bpf_text_address+0x141/0x160 [ 314.321695][T14333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.321799][T14333] ? kernel_text_address+0x94/0xb0 [ 314.321825][T14333] ? __kernel_text_address+0xd/0x40 [ 314.321912][T14333] ? unwind_get_return_address+0x16/0x40 [ 314.321944][T14333] ? perf_callchain_kernel+0x2e9/0x350 [ 314.322004][T14333] ? bcmp+0x2e/0x90 [ 314.322029][T14333] ? __bpf_get_stackid+0x7ab/0x7d0 [ 314.322110][T14333] ? should_fail_ex+0x30/0x280 [ 314.322141][T14333] ? selinux_nlmsg_lookup+0x99/0x890 [ 314.322169][T14333] ? __rcu_read_unlock+0x34/0x70 [ 314.322241][T14333] ? __netlink_lookup+0x266/0x2a0 [ 314.322290][T14333] netlink_unicast+0x5c0/0x690 [ 314.322376][T14333] netlink_sendmsg+0x58b/0x6b0 [ 314.322463][T14333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.322511][T14333] __sock_sendmsg+0x145/0x180 [ 314.322538][T14333] ____sys_sendmsg+0x31e/0x4a0 [ 314.322624][T14333] ___sys_sendmsg+0x17b/0x1d0 [ 314.322679][T14333] __x64_sys_sendmsg+0xd4/0x160 [ 314.322714][T14333] x64_sys_call+0x17ba/0x3000 [ 314.322742][T14333] do_syscall_64+0xca/0x2b0 [ 314.322890][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.322914][T14333] RIP: 0033:0x7fd4dfd9f749 [ 314.322969][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.322996][T14333] RSP: 002b:00007fd4de807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.323023][T14333] RAX: ffffffffffffffda RBX: 00007fd4dfff5fa0 RCX: 00007fd4dfd9f749 [ 314.323041][T14333] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 314.323056][T14333] RBP: 00007fd4dfe23f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.323072][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.323161][T14333] R13: 00007fd4dfff6038 R14: 00007fd4dfff5fa0 R15: 00007ffc4e02dd78 [ 314.323186][T14333] [ 314.323230][T14333] memory: usage 307200kB, limit 307200kB, failcnt 2926 [ 314.699305][T14333] memory+swap: usage 307016kB, limit 9007199254740988kB, failcnt 0 [ 314.707359][T14333] kmem: usage 306760kB, limit 9007199254740988kB, failcnt 0 [ 314.714798][T14333] Memory cgroup stats for /syz2: [ 314.715461][T14333] cache 4096 [ 314.723872][T14333] rss 57344 [ 314.727111][T14333] shmem 0 [ 314.730080][T14333] mapped_file 4096 [ 314.733830][T14333] dirty 4096 [ 314.737090][T14333] writeback 0 [ 314.740429][T14333] workingset_refault_anon 672 [ 314.745174][T14333] workingset_refault_file 23474 [ 314.750084][T14333] swap 86016 [ 314.753301][T14333] swapcached 126976 [ 314.757166][T14333] pgpgin 458860 [ 314.760726][T14333] pgpgout 458827 [ 314.764289][T14333] pgfault 290814 [ 314.767931][T14333] pgmajfault 404 [ 314.771620][T14333] inactive_anon 98304 [ 314.775627][T14333] active_anon 32768 [ 314.779492][T14333] inactive_file 0 [ 314.783158][T14333] active_file 4096 [ 314.787035][T14333] unevictable 0 [ 314.790521][T14333] hierarchical_memory_limit 314572800 [ 314.796231][T14333] hierarchical_memsw_limit 9223372036854771712 [ 314.802885][T14333] total_cache 4096 [ 314.806719][T14333] total_rss 57344 [ 314.810380][T14333] total_shmem 0 [ 314.813921][T14333] total_mapped_file 4096 [ 314.818359][T14333] total_dirty 4096 [ 314.822253][T14333] total_writeback 0 [ 314.826147][T14333] total_workingset_refault_anon 672 [ 314.831367][T14333] total_workingset_refault_file 23474 [ 314.837056][T14333] total_swap 86016 [ 314.840815][T14333] total_swapcached 126976 [ 314.845332][T14333] total_pgpgin 458860 [ 314.849374][T14333] total_pgpgout 458827 [ 314.853530][T14333] total_pgfault 290814 [ 314.857663][T14333] total_pgmajfault 404 [ 314.861773][T14333] total_inactive_anon 98304 [ 314.866393][T14333] total_active_anon 32768 [ 314.870806][T14333] total_inactive_file 0 [ 314.875088][T14333] total_active_file 4096 [ 314.879383][T14333] total_unevictable 0 [ 314.883391][T14333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3646,pid=14332,uid=0 [ 314.898253][T14333] Memory cgroup out of memory: Killed process 14333 (syz.2.3646) total-vm:93968kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 314.969984][T14375] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 314.976605][T14375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.984075][T14375] vhci_hcd vhci_hcd.0: Device attached [ 314.998460][T14379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3661'. [ 315.017838][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 315.017857][ T29] audit: type=1400 audit(1767390001.021:21438): avc: denied { getopt } for pid=14371 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.068592][T14375] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3659'. [ 315.087281][ T29] audit: type=1400 audit(1767390001.041:21439): avc: denied { connect } for pid=14371 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.107327][ T29] audit: type=1400 audit(1767390001.041:21440): avc: denied { name_connect } for pid=14371 comm="syz.5.3659" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 315.156380][ T1038] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 315.172849][T14388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14388 comm=syz.4.3664 [ 315.185523][ T29] audit: type=1326 audit(1767390001.111:21441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.209177][ T29] audit: type=1326 audit(1767390001.111:21442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.232899][ T29] audit: type=1326 audit(1767390001.111:21443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.256657][ T29] audit: type=1326 audit(1767390001.111:21444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.280305][ T29] audit: type=1326 audit(1767390001.111:21445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.289014][ T1038] usb 11-1: new full-speed USB device number 8 using vhci_hcd [ 315.304038][ T29] audit: type=1326 audit(1767390001.111:21446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.335098][ T29] audit: type=1326 audit(1767390001.111:21447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.2.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 315.608728][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3669'. [ 315.674741][T14423] xt_recent: Unsupported userspace flags (000000b1) [ 315.719679][T14425] netlink: 'syz.0.3678': attribute type 4 has an invalid length. [ 316.014724][T14438] capability: warning: `syz.3.3683' uses deprecated v2 capabilities in a way that may be insecure [ 316.123354][T14415] syz.2.3674 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 316.134613][T14415] CPU: 1 UID: 0 PID: 14415 Comm: syz.2.3674 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 316.134673][T14415] Tainted: [W]=WARN [ 316.134682][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.134699][T14415] Call Trace: [ 316.134709][T14415] [ 316.134720][T14415] __dump_stack+0x1d/0x30 [ 316.134753][T14415] dump_stack_lvl+0x95/0xd0 [ 316.134779][T14415] dump_stack+0x15/0x1b [ 316.134870][T14415] dump_header+0x81/0x240 [ 316.134898][T14415] oom_kill_process+0x295/0x350 [ 316.134928][T14415] out_of_memory+0x97b/0xb80 [ 316.135034][T14415] try_charge_memcg+0x610/0xa10 [ 316.135145][T14415] charge_memcg+0x51/0xc0 [ 316.135184][T14415] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 316.135230][T14415] __read_swap_cache_async+0x17b/0x2d0 [ 316.135276][T14415] swap_cluster_readahead+0x262/0x3c0 [ 316.135318][T14415] swapin_readahead+0xde/0x820 [ 316.135419][T14415] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 316.135459][T14415] ? lruvec_stat_mod_folio+0xd6/0x120 [ 316.135487][T14415] ? __rcu_read_unlock+0x4f/0x70 [ 316.135509][T14415] ? swap_cache_get_folio+0x277/0x280 [ 316.135561][T14415] do_swap_page+0x2b4/0x21e0 [ 316.135606][T14415] ? __pfx_default_wake_function+0x10/0x10 [ 316.135653][T14415] handle_mm_fault+0x9d8/0x2c60 [ 316.135732][T14415] do_user_addr_fault+0x630/0x1080 [ 316.135767][T14415] exc_page_fault+0x62/0xa0 [ 316.135804][T14415] asm_exc_page_fault+0x26/0x30 [ 316.135831][T14415] RIP: 0033:0x7fd4dfdd1fb3 [ 316.135930][T14415] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 316.135954][T14415] RSP: 002b:00007ffc4e02de98 EFLAGS: 00010293 [ 316.136034][T14415] RAX: 00000000fffffffa RBX: 00007fd4dfff5fa0 RCX: 0000000000000000 [ 316.136046][T14415] RDX: 00007ffc4e02deb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.136058][T14415] RBP: 00007fd4dfff7da0 R08: 0000000004d3e344 R09: 7fffffffffffffff [ 316.136077][T14415] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004d39e [ 316.136091][T14415] R13: 00007ffc4e02dfd0 R14: ffffffffffffffff R15: 00007ffc4e02dff0 [ 316.136118][T14415] [ 316.350021][T14415] memory: usage 307196kB, limit 307200kB, failcnt 3315 [ 316.357039][T14415] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 316.364960][T14415] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 316.372424][T14415] Memory cgroup stats for /syz2: [ 316.395168][T14443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.440765][T14415] cache 0 [ 316.444028][T14415] rss 0 [ 316.446851][T14415] shmem 0 [ 316.449870][T14415] mapped_file 0 [ 316.453381][T14415] dirty 0 [ 316.456393][T14415] writeback 0 [ 316.459741][T14415] workingset_refault_anon 721 [ 316.464521][T14415] workingset_refault_file 23661 [ 316.469464][T14415] swap 208896 [ 316.472774][T14415] swapcached 8192 [ 316.476583][T14415] pgpgin 459358 [ 316.480366][T14415] pgpgout 459356 [ 316.483970][T14415] pgfault 291403 [ 316.486365][ T6672] usb 9-1: enqueue for inactive port 0 [ 316.487690][T14415] pgmajfault 448 [ 316.496659][T14415] inactive_anon 8192 [ 316.500577][T14415] active_anon 0 [ 316.504108][T14415] inactive_file 0 [ 316.507791][T14415] active_file 0 [ 316.511277][T14415] unevictable 0 [ 316.514772][T14415] hierarchical_memory_limit 314572800 [ 316.520236][T14415] hierarchical_memsw_limit 9223372036854771712 [ 316.526455][T14415] total_cache 0 [ 316.529991][T14415] total_rss 0 [ 316.533305][T14415] total_shmem 0 [ 316.536808][T14415] total_mapped_file 0 [ 316.540810][T14415] total_dirty 0 [ 316.544291][T14415] total_writeback 0 [ 316.548272][T14415] total_workingset_refault_anon 721 [ 316.553523][T14415] total_workingset_refault_file 23661 [ 316.558955][T14415] total_swap 208896 [ 316.562793][T14415] total_swapcached 8192 [ 316.566479][ T6672] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 316.566992][T14415] total_pgpgin 459358 [ 316.567001][T14415] total_pgpgout 459356 [ 316.567009][T14415] total_pgfault 291403 [ 316.567025][T14415] total_pgmajfault 448 [ 316.567033][T14415] total_inactive_anon 8192 [ 316.594106][T14415] total_active_anon 0 [ 316.598175][T14415] total_inactive_file 0 [ 316.602354][T14415] total_active_file 0 [ 316.606399][T14415] total_unevictable 0 [ 316.610407][T14415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3674,pid=14415,uid=0 [ 316.625223][T14415] Memory cgroup out of memory: Killed process 14415 (syz.2.3674) total-vm:93968kB, anon-rss:1132kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 316.733417][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 316.746799][T14452] team0: Device ip6gre0 is of different type [ 316.794061][T14457] xt_recent: Unsupported userspace flags (000000b1) [ 316.801120][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 316.868011][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3694'. [ 317.023943][T14376] vhci_hcd: connection reset by peer [ 317.042890][ T838] vhci_hcd vhci_hcd.5: stop threads [ 317.048395][ T838] vhci_hcd vhci_hcd.5: release socket [ 317.053840][ T838] vhci_hcd vhci_hcd.5: disconnect device [ 317.076823][T14474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 317.083414][T14474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.091095][T14474] vhci_hcd vhci_hcd.0: Device attached [ 317.197588][T14491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14491 comm=syz.2.3703 [ 317.216455][T14492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3699'. [ 317.306261][ T6672] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 317.327850][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 317.555612][T14503] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 317.911331][T14513] team0: Device ip6gre0 is of different type [ 318.122176][T14534] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 318.352640][T14552] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.486593][T14482] vhci_hcd: connection reset by peer [ 318.516161][ T2218] vhci_hcd vhci_hcd.4: stop threads [ 318.521462][ T2218] vhci_hcd vhci_hcd.4: release socket [ 318.527074][ T2218] vhci_hcd vhci_hcd.4: disconnect device [ 318.793387][T14574] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 319.025538][T14578] pimreg: entered allmulticast mode [ 319.041580][T14578] pimreg: left allmulticast mode [ 319.052558][T14579] __nla_validate_parse: 10 callbacks suppressed [ 319.052576][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 319.148308][T14590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14590 comm=syz.2.3739 [ 319.207762][T14593] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 319.267502][T14593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.316961][T14602] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 319.323640][T14602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.331269][T14602] vhci_hcd vhci_hcd.0: Device attached [ 319.371277][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 319.462426][T14611] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3742'. [ 319.516159][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 319.583254][T14628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14628 comm=syz.4.3752 [ 319.656411][ T3783] usb 5-1: new full-speed USB device number 17 using vhci_hcd [ 319.911267][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 320.001225][ T838] Bluetooth: hci0: Frame reassembly failed (-84) [ 320.046802][T14652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14652 comm=syz.0.3760 [ 320.080415][T14607] vhci_hcd: connection reset by peer [ 320.086063][ T5104] vhci_hcd vhci_hcd.2: stop threads [ 320.091494][ T5104] vhci_hcd vhci_hcd.2: release socket [ 320.097039][ T5104] vhci_hcd vhci_hcd.2: disconnect device [ 320.118585][T14654] audit_log_lost: 347 callbacks suppressed [ 320.118601][T14654] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 320.132382][T14654] audit: out of memory in audit_log_start [ 320.159643][T14654] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 320.168235][ T29] audit: type=1400 audit(1767390006.171:21795): avc: denied { relabelto } for pid=14653 comm="syz.0.3761" name="190" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 320.225854][ T29] audit: type=1400 audit(1767390006.171:21796): avc: denied { associate } for pid=14653 comm="syz.0.3761" name="190" dev="tmpfs" ino=988 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 320.252294][ T29] audit: type=1400 audit(1767390006.221:21797): avc: denied { remove_name } for pid=12173 comm="syz-executor" name="binderfs" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 320.278522][ T29] audit: type=1400 audit(1767390006.221:21798): avc: denied { rmdir } for pid=12173 comm="syz-executor" name="190" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 320.348953][T14625] syz.5.3751 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 320.360084][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.5.3751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.360197][T14625] Tainted: [W]=WARN [ 320.360204][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.360218][T14625] Call Trace: [ 320.360227][T14625] [ 320.360236][T14625] __dump_stack+0x1d/0x30 [ 320.360261][T14625] dump_stack_lvl+0x95/0xd0 [ 320.360284][T14625] dump_stack+0x15/0x1b [ 320.360395][T14625] dump_header+0x81/0x240 [ 320.360422][T14625] oom_kill_process+0x295/0x350 [ 320.360525][T14625] out_of_memory+0x97b/0xb80 [ 320.360551][T14625] try_charge_memcg+0x610/0xa10 [ 320.360605][T14625] charge_memcg+0x51/0xc0 [ 320.360758][T14625] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 320.360795][T14625] __read_swap_cache_async+0x17b/0x2d0 [ 320.360915][T14625] swap_cluster_readahead+0x262/0x3c0 [ 320.360958][T14625] swapin_readahead+0xde/0x820 [ 320.360991][T14625] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 320.361072][T14625] ? lruvec_stat_mod_folio+0xd6/0x120 [ 320.361128][T14625] ? __rcu_read_unlock+0x4f/0x70 [ 320.361152][T14625] ? swap_cache_get_folio+0x277/0x280 [ 320.361182][T14625] do_swap_page+0x2b4/0x21e0 [ 320.361267][T14625] ? __pfx_default_wake_function+0x10/0x10 [ 320.361375][T14625] handle_mm_fault+0x9d8/0x2c60 [ 320.361426][T14625] do_user_addr_fault+0x630/0x1080 [ 320.361526][T14625] exc_page_fault+0x62/0xa0 [ 320.361579][T14625] asm_exc_page_fault+0x26/0x30 [ 320.361605][T14625] RIP: 0033:0x7f086c811fb3 [ 320.361626][T14625] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 320.361648][T14625] RSP: 002b:00007ffde6ab3408 EFLAGS: 00010293 [ 320.361798][T14625] RAX: 00000000fffffffa RBX: 00007f086ca35fa0 RCX: 0000000000000000 [ 320.361816][T14625] RDX: 00007ffde6ab3420 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.361832][T14625] RBP: 00007f086ca37da0 R08: 000000001164d0a9 R09: 7fffffffffffffff [ 320.361849][T14625] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004e371 [ 320.361933][T14625] R13: 00007ffde6ab3540 R14: ffffffffffffffff R15: 00007ffde6ab3560 [ 320.361960][T14625] [ 320.361969][T14625] memory: usage 307200kB, limit 307200kB, failcnt 2939 [ 320.583901][T14625] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 320.591870][T14625] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 320.599235][T14625] Memory cgroup stats for /syz5: [ 320.602312][ T1038] usb 11-1: enqueue for inactive port 0 [ 320.612901][ T1038] usb 11-1: enqueue for inactive port 0 [ 320.619787][T14625] cache 0 [ 320.622840][T14625] rss 0 [ 320.625621][T14625] shmem 0 [ 320.628642][T14625] mapped_file 0 [ 320.632142][T14625] dirty 0 [ 320.635159][T14625] writeback 8192 [ 320.637642][T14659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14659 comm=syz.0.3763 [ 320.638758][T14625] workingset_refault_anon 368 [ 320.638769][T14625] workingset_refault_file 5855 [ 320.638777][T14625] swap 192512 [ 320.664107][T14625] swapcached 16384 [ 320.667873][T14625] pgpgin 169821 [ 320.671426][T14625] pgpgout 169817 [ 320.675006][T14625] pgfault 61545 [ 320.678597][T14625] pgmajfault 199 [ 320.682167][T14625] inactive_anon 8192 [ 320.686143][T14625] active_anon 8192 [ 320.689914][T14625] inactive_file 0 [ 320.693618][T14625] active_file 0 [ 320.697313][T14625] unevictable 0 [ 320.701012][T14625] hierarchical_memory_limit 314572800 [ 320.706451][T14625] hierarchical_memsw_limit 9223372036854771712 [ 320.712627][T14625] total_cache 0 [ 320.716156][T14625] total_rss 0 [ 320.719537][T14625] total_shmem 0 [ 320.723148][T14625] total_mapped_file 0 [ 320.727238][T14625] total_dirty 0 [ 320.730723][T14625] total_writeback 8192 [ 320.734899][T14625] total_workingset_refault_anon 368 [ 320.740237][T14625] total_workingset_refault_file 5855 [ 320.745575][T14625] total_swap 192512 [ 320.749438][T14625] total_swapcached 16384 [ 320.753704][T14625] total_pgpgin 169821 [ 320.757748][T14625] total_pgpgout 169817 [ 320.762093][T14625] total_pgfault 61545 [ 320.766172][T14625] total_pgmajfault 199 [ 320.770258][T14625] total_inactive_anon 8192 [ 320.774715][T14625] total_active_anon 8192 [ 320.779228][T14625] total_inactive_file 0 [ 320.783425][T14625] total_active_file 0 [ 320.787459][T14625] total_unevictable 0 [ 320.791478][T14625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3751,pid=14625,uid=0 [ 320.806459][T14625] Memory cgroup out of memory: Killed process 14625 (syz.5.3751) total-vm:93968kB, anon-rss:1244kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 320.823999][ T1038] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 320.916868][T14668] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 320.923452][T14668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 320.931059][T14668] vhci_hcd vhci_hcd.0: Device attached [ 320.936779][ T29] audit: type=1326 audit(1767390006.921:21799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.5.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 320.960452][ T29] audit: type=1326 audit(1767390006.921:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.5.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 320.984160][ T29] audit: type=1326 audit(1767390006.921:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.5.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 321.008025][ T29] audit: type=1326 audit(1767390006.921:21802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.5.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 321.066163][T14675] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 321.072740][T14675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 321.080492][T14675] vhci_hcd vhci_hcd.0: Device attached [ 321.116912][T14674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3767'. [ 321.128431][T14677] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 321.135007][T14677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 321.142784][T14677] vhci_hcd vhci_hcd.0: Device attached [ 321.326143][ T1038] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 321.357401][T14688] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 321.506725][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'. [ 322.036218][ T4607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 322.038863][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 322.151928][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3781'. [ 322.234749][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3782'. [ 322.260781][T14725] netlink: 'syz.2.3783': attribute type 4 has an invalid length. [ 322.467388][T14734] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 322.522677][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3787'. [ 322.537619][T14734] bond3: entered promiscuous mode [ 322.542724][T14734] bond3: entered allmulticast mode [ 322.630027][T14734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.021764][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3794'. [ 323.063896][T14679] vhci_hcd: connection reset by peer [ 323.074290][ T52] vhci_hcd vhci_hcd.5: stop threads [ 323.079622][ T52] vhci_hcd vhci_hcd.5: release socket [ 323.085094][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 323.243615][T14671] vhci_hcd: connection closed [ 323.246367][ T53] vhci_hcd vhci_hcd.2: stop threads [ 323.256385][ T53] vhci_hcd vhci_hcd.2: release socket [ 323.261820][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 323.332674][T14768] netlink: 'syz.4.3800': attribute type 4 has an invalid length. [ 323.402724][T14774] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 323.478517][T14774] bond4: entered promiscuous mode [ 323.483668][T14774] bond4: entered allmulticast mode [ 323.491213][T14780] block device autoloading is deprecated and will be removed. [ 323.549288][T14774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.656733][T14790] team0: Device ip6gre0 is of different type [ 323.722657][T14794] netlink: 'syz.3.3811': attribute type 1 has an invalid length. [ 323.766360][T14794] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.850820][T14803] binfmt_misc: register: failed to install interpreter file ./file2 [ 323.917333][T14805] loop4: detected capacity change from 0 to 512 [ 323.947075][T14805] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.967053][T14805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 323.981504][T14805] EXT4-fs (loop4): failed to initialize system zone (-117) [ 323.989066][T14805] EXT4-fs (loop4): mount failed [ 324.015224][T14682] vhci_hcd: connection reset by peer [ 324.033050][ T5123] vhci_hcd vhci_hcd.4: stop threads [ 324.038385][ T5123] vhci_hcd vhci_hcd.4: release socket [ 324.043850][ T5123] vhci_hcd vhci_hcd.4: disconnect device [ 324.056943][T14818] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 324.071792][T14818] bond1: entered promiscuous mode [ 324.076952][T14818] bond1: entered allmulticast mode [ 324.082776][T14818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.093644][T14818] __nla_validate_parse: 2 callbacks suppressed [ 324.093682][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3821'. [ 324.167788][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 324.246115][T14829] team0: Device ip6gre0 is of different type [ 324.297751][T14833] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 324.304373][T14833] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 324.311888][T14833] vhci_hcd vhci_hcd.0: Device attached [ 324.374985][T14837] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3827'. [ 324.740935][T14851] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 324.800950][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3833'. [ 324.830526][T14851] bond4: entered promiscuous mode [ 324.835674][T14851] bond4: entered allmulticast mode [ 324.843994][T14851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.881041][T14861] netlink: 'syz.3.3837': attribute type 4 has an invalid length. [ 324.997807][T14872] xt_recent: Unsupported userspace flags (000000b1) [ 325.313629][T14889] netlink: 'syz.4.3849': attribute type 1 has an invalid length. [ 325.344777][T14889] bond5: entered promiscuous mode [ 325.349973][T14889] bond5: entered allmulticast mode [ 325.365695][T14889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.375634][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 325.411093][T14834] vhci_hcd: connection reset by peer [ 325.423305][ T5062] vhci_hcd vhci_hcd.2: stop threads [ 325.428686][ T5062] vhci_hcd vhci_hcd.2: release socket [ 325.434162][ T5062] vhci_hcd vhci_hcd.2: disconnect device [ 325.440193][ T3783] usb 5-1: enqueue for inactive port 0 [ 325.446140][ T3783] usb 5-1: enqueue for inactive port 0 [ 325.460138][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 325.460155][ T29] audit: type=1326 audit(1767390011.461:22264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.516130][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 325.553682][T14903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14903 comm=syz.4.3855 [ 325.575303][ T29] audit: type=1326 audit(1767390011.481:22265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.599380][ T29] audit: type=1326 audit(1767390011.481:22266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.623085][ T29] audit: type=1326 audit(1767390011.481:22267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.646860][ T29] audit: type=1326 audit(1767390011.481:22268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.670646][ T29] audit: type=1326 audit(1767390011.491:22269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.694529][ T29] audit: type=1326 audit(1767390011.491:22270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.715307][T14874] syz.0.3843 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 325.718327][ T29] audit: type=1326 audit(1767390011.491:22271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.729382][T14874] CPU: 1 UID: 0 PID: 14874 Comm: syz.0.3843 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.729535][T14874] Tainted: [W]=WARN [ 325.729551][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.729588][T14874] Call Trace: [ 325.729616][T14874] [ 325.729640][T14874] __dump_stack+0x1d/0x30 [ 325.729725][T14874] dump_stack_lvl+0x95/0xd0 [ 325.729833][T14874] dump_stack+0x15/0x1b [ 325.729901][T14874] dump_header+0x81/0x240 [ 325.729973][T14874] oom_kill_process+0x295/0x350 [ 325.730082][T14874] out_of_memory+0x97b/0xb80 [ 325.730160][T14874] try_charge_memcg+0x610/0xa10 [ 325.730289][T14874] charge_memcg+0x51/0xc0 [ 325.730409][T14874] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 325.730577][T14874] __read_swap_cache_async+0x17b/0x2d0 [ 325.730676][T14874] swap_cluster_readahead+0x262/0x3c0 [ 325.730891][T14874] swapin_readahead+0xde/0x820 [ 325.730980][T14874] ? __rcu_read_unlock+0x4f/0x70 [ 325.731052][T14874] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 325.731127][T14874] ? __list_add_valid_or_report+0x38/0xe0 [ 325.731353][T14874] ? __rcu_read_unlock+0x4f/0x70 [ 325.731419][T14874] ? swap_cache_get_folio+0x277/0x280 [ 325.731565][T14874] do_swap_page+0x2b4/0x21e0 [ 325.731663][T14874] ? _raw_spin_unlock+0x26/0x50 [ 325.731747][T14874] ? __schedule+0x85f/0xcd0 [ 325.731800][T14874] ? __pfx_default_wake_function+0x10/0x10 [ 325.731896][T14874] handle_mm_fault+0x9d8/0x2c60 [ 325.732029][T14874] do_user_addr_fault+0x630/0x1080 [ 325.732205][T14874] exc_page_fault+0x62/0xa0 [ 325.732315][T14874] asm_exc_page_fault+0x26/0x30 [ 325.732388][T14874] RIP: 0033:0x7f0ff89159ec [ 325.732435][T14874] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 325.732498][T14874] RSP: 002b:00007fffed8afac0 EFLAGS: 00010206 [ 325.732550][T14874] RAX: 0000000000000000 RBX: 00007f0ff8c95fa0 RCX: 0000000000000000 [ 325.732650][T14874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556db04808 [ 325.732695][T14874] RBP: 00007f0ff8c97da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 325.732738][T14874] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004f8ea [ 325.732773][T14874] R13: 00007f0ff8c96090 R14: ffffffffffffffff R15: 00007fffed8afbd0 [ 325.732833][T14874] [ 325.732855][T14874] memory: usage 307200kB, limit 307200kB, failcnt 7310 [ 325.752924][ T29] audit: type=1326 audit(1767390011.491:22272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.764496][T14874] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 325.768091][ T29] audit: type=1326 audit(1767390011.491:22273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 325.778172][T14874] kmem: usage 307012kB, limit 9007199254740988kB, failcnt 0 [ 326.052403][T14874] Memory cgroup stats for /syz0: [ 326.077010][T14904] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 326.088559][T14904] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.096208][T14904] vhci_hcd vhci_hcd.0: Device attached [ 326.321061][ T3484] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 326.401250][T14921] netlink: 'syz.2.3858': attribute type 4 has an invalid length. [ 326.410594][ T3484] usb 7-1: new full-speed USB device number 11 using vhci_hcd [ 326.420735][T14919] netlink: 'syz.4.3860': attribute type 1 has an invalid length. [ 326.430285][T14874] cache 0 [ 326.433313][T14874] rss 0 [ 326.436186][T14874] shmem 0 [ 326.439148][T14874] mapped_file 0 [ 326.442692][T14874] dirty 0 [ 326.445650][T14874] writeback 4096 [ 326.449283][T14874] workingset_refault_anon 1579 [ 326.454159][T14874] workingset_refault_file 8527 [ 326.459007][T14874] swap 196608 [ 326.462356][T14874] swapcached 12288 [ 326.466571][T14874] pgpgin 476493 [ 326.470053][T14874] pgpgout 476490 [ 326.473649][T14874] pgfault 299508 [ 326.477331][T14874] pgmajfault 1011 [ 326.481003][T14874] inactive_anon 12288 [ 326.485011][T14874] active_anon 0 [ 326.488525][T14874] inactive_file 0 [ 326.492217][T14874] active_file 0 [ 326.495721][T14874] unevictable 0 [ 326.499258][T14874] hierarchical_memory_limit 314572800 [ 326.504652][T14874] hierarchical_memsw_limit 9223372036854771712 [ 326.510986][T14874] total_cache 0 [ 326.514499][T14874] total_rss 0 [ 326.517983][T14874] total_shmem 0 [ 326.521470][T14874] total_mapped_file 0 [ 326.525499][T14874] total_dirty 0 [ 326.529127][T14874] total_writeback 4096 [ 326.533223][T14874] total_workingset_refault_anon 1579 [ 326.538644][T14874] total_workingset_refault_file 8527 [ 326.543996][T14874] total_swap 196608 [ 326.547938][T14874] total_swapcached 12288 [ 326.552203][T14874] total_pgpgin 476493 [ 326.556301][T14874] total_pgpgout 476490 [ 326.560390][T14874] total_pgfault 299508 [ 326.564526][T14874] total_pgmajfault 1011 [ 326.568733][T14874] total_inactive_anon 12288 [ 326.573289][T14874] total_active_anon 0 [ 326.577494][T14874] total_inactive_file 0 [ 326.581680][T14874] total_active_file 0 [ 326.585685][T14874] total_unevictable 0 [ 326.589849][T14874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3843,pid=14874,uid=0 [ 326.604796][T14874] Memory cgroup out of memory: Killed process 14874 (syz.0.3843) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 326.622370][ T1038] usb 11-1: enqueue for inactive port 0 [ 326.628018][ T1038] usb 11-1: enqueue for inactive port 0 [ 326.635383][T14919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.684926][T14929] binfmt_misc: register: failed to install interpreter file ./file2 [ 326.696502][ T1038] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 326.742407][T14931] netlink: 'syz.2.3863': attribute type 1 has an invalid length. [ 326.759493][T14934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14934 comm=syz.3.3864 [ 326.793815][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'. [ 326.805030][T14931] bond2: entered promiscuous mode [ 326.810192][T14931] bond2: entered allmulticast mode [ 326.830591][T14944] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 326.856268][T14931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.888444][T14944] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 327.000845][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3868'. [ 327.054294][T14960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 327.069433][T14960] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 327.126616][T14962] netlink: 'syz.3.3874': attribute type 4 has an invalid length. [ 327.318271][T14974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14974 comm=syz.4.3878 [ 327.873384][T14905] vhci_hcd: connection reset by peer [ 327.887279][ T813] vhci_hcd vhci_hcd.3: stop threads [ 327.892590][ T813] vhci_hcd vhci_hcd.3: release socket [ 327.898374][ T813] vhci_hcd vhci_hcd.3: disconnect device [ 328.110428][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 328.200883][T15008] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 328.244519][T15008] bond3: entered promiscuous mode [ 328.249854][T15008] bond3: entered allmulticast mode [ 328.258630][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3892'. [ 328.260515][T15008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.337381][T15018] loop4: detected capacity change from 0 to 512 [ 328.346974][T15018] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.384937][T15018] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3896: Allocating blocks 41-42 which overlap fs metadata [ 328.419571][T15018] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3896: Allocating blocks 41-42 which overlap fs metadata [ 328.466306][T15018] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3896: Failed to acquire dquot type 1 [ 328.479710][T15030] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 328.510049][T15018] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 328.546133][T15018] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3896: corrupted inode contents [ 328.590073][T15018] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.3896: mark_inode_dirty error [ 328.623540][T15037] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 328.626602][T15018] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3896: corrupted inode contents [ 328.630116][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 328.630404][T15037] vhci_hcd vhci_hcd.0: Device attached [ 328.659336][T15018] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3896: mark_inode_dirty error [ 328.672106][T15043] netlink: 'syz.0.3904': attribute type 1 has an invalid length. [ 328.686506][T15018] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3896: corrupted inode contents [ 328.708094][T15043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.733211][T15018] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 328.742269][T15018] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.3896: corrupted inode contents [ 328.760864][T15037] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3902'. [ 328.771187][T15018] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.3896: mark_inode_dirty error [ 328.794389][T15018] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 328.803981][T15018] EXT4-fs (loop4): 1 truncate cleaned up [ 328.810614][T15018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.825344][T15050] binfmt_misc: register: failed to install interpreter file ./file2 [ 328.836408][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 328.869296][T15018] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 328.875992][T15018] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 328.883536][T15018] vhci_hcd vhci_hcd.0: Device attached [ 328.896146][ T9] usb 11-1: new full-speed USB device number 9 using vhci_hcd [ 328.903789][T15055] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3896: Failed to acquire dquot type 1 [ 329.169056][T15053] vhci_hcd: connection reset by peer [ 329.174686][ T186] vhci_hcd vhci_hcd.4: stop threads [ 329.180021][ T186] vhci_hcd vhci_hcd.4: release socket [ 329.185446][ T186] vhci_hcd vhci_hcd.4: disconnect device [ 329.191612][ T6672] usb 9-1: enqueue for inactive port 0 [ 329.266179][ T6672] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 329.309121][T15064] team0: Device ip6gre0 is of different type [ 329.374908][T15070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.449212][T15041] vhci_hcd: connection reset by peer [ 329.456121][ T186] vhci_hcd vhci_hcd.5: stop threads [ 329.461401][ T186] vhci_hcd vhci_hcd.5: release socket [ 329.466985][ T186] vhci_hcd vhci_hcd.5: disconnect device [ 329.495286][T15081] netlink: 'syz.0.3919': attribute type 4 has an invalid length. [ 329.583611][T15091] team0: Device ip6gre0 is of different type [ 329.637199][T15101] __nla_validate_parse: 1 callbacks suppressed [ 329.637216][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 329.653680][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 329.685517][T11827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.733008][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 329.764904][T15111] loop4: detected capacity change from 0 to 512 [ 329.786405][T15111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 329.800936][T15111] System zones: 0-2, 18-18, 34-34 [ 329.809438][T15111] EXT4-fs (loop4): too many log groups per flexible block group [ 329.818103][T15111] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 329.825132][T15111] EXT4-fs (loop4): mount failed [ 329.880554][T15116] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 329.887178][T15116] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.894688][T15116] vhci_hcd vhci_hcd.0: Device attached [ 330.026124][T15121] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3931'. [ 330.066564][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 330.145659][ T3783] usb 5-1: new full-speed USB device number 18 using vhci_hcd [ 330.541752][T15107] syz.4.3929 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 330.552891][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.4.3929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.552933][T15107] Tainted: [W]=WARN [ 330.552940][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.552956][T15107] Call Trace: [ 330.552965][T15107] [ 330.553049][T15107] __dump_stack+0x1d/0x30 [ 330.553089][T15107] dump_stack_lvl+0x95/0xd0 [ 330.553164][T15107] dump_stack+0x15/0x1b [ 330.553184][T15107] dump_header+0x81/0x240 [ 330.553205][T15107] oom_kill_process+0x295/0x350 [ 330.553228][T15107] out_of_memory+0x97b/0xb80 [ 330.553285][T15107] try_charge_memcg+0x610/0xa10 [ 330.553353][T15107] charge_memcg+0x51/0xc0 [ 330.553389][T15107] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 330.553488][T15107] __read_swap_cache_async+0x17b/0x2d0 [ 330.553530][T15107] swap_cluster_readahead+0x262/0x3c0 [ 330.553585][T15107] swapin_readahead+0xde/0x820 [ 330.553673][T15107] ? __rcu_read_unlock+0x4f/0x70 [ 330.553699][T15107] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 330.553730][T15107] ? __list_add_valid_or_report+0x38/0xe0 [ 330.553764][T15107] ? __rcu_read_unlock+0x4f/0x70 [ 330.553849][T15107] ? swap_cache_get_folio+0x277/0x280 [ 330.553889][T15107] do_swap_page+0x2b4/0x21e0 [ 330.553988][T15107] ? _raw_spin_unlock+0x26/0x50 [ 330.554085][T15107] ? __schedule+0x85f/0xcd0 [ 330.554112][T15107] ? __pfx_default_wake_function+0x10/0x10 [ 330.554159][T15107] handle_mm_fault+0x9d8/0x2c60 [ 330.554261][T15107] do_user_addr_fault+0x630/0x1080 [ 330.554375][T15107] exc_page_fault+0x62/0xa0 [ 330.554412][T15107] asm_exc_page_fault+0x26/0x30 [ 330.554438][T15107] RIP: 0033:0x7f7f963f59ec [ 330.554457][T15107] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 330.554523][T15107] RSP: 002b:00007ffcd79071a0 EFLAGS: 00010202 [ 330.554548][T15107] RAX: 0000000000000000 RBX: 00007f7f96775fa0 RCX: 0000000000000000 [ 330.554561][T15107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555ecf2808 [ 330.554575][T15107] RBP: 00007f7f96777da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 330.554623][T15107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000050b0e [ 330.554640][T15107] R13: 00007f7f96776090 R14: ffffffffffffffff R15: 00007ffcd79072b0 [ 330.554664][T15107] [ 330.554674][T15107] memory: usage 307200kB, limit 307200kB, failcnt 5692 [ 330.790975][T15107] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 330.798922][T15107] kmem: usage 306936kB, limit 9007199254740988kB, failcnt 0 [ 330.806260][T15107] Memory cgroup stats for /syz4: [ 330.846184][T15107] cache 0 [ 330.854131][T15107] rss 4096 [ 330.857226][T15107] shmem 0 [ 330.860180][T15107] mapped_file 0 [ 330.863664][T15107] dirty 0 [ 330.866658][T15107] writeback 0 [ 330.869762][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 330.869775][ T29] audit: type=1326 audit(1767390016.811:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 330.870012][T15107] workingset_refault_anon 1501 [ 330.870022][T15107] workingset_refault_file 24036 [ 330.870030][T15107] swap 196608 [ 330.870037][T15107] swapcached 16384 [ 330.870045][T15107] pgpgin 564971 [ 330.870052][T15107] pgpgout 564966 [ 330.870059][T15107] pgfault 251820 [ 330.870103][T15107] pgmajfault 1043 [ 330.870118][T15107] inactive_anon 0 [ 330.876326][ T29] audit: type=1326 audit(1767390016.821:22594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 330.899858][T15107] active_anon 16384 [ 330.899871][T15107] inactive_file 0 [ 330.899941][T15107] active_file 4096 [ 330.920989][ T29] audit: type=1400 audit(1767390016.921:22595): avc: denied { bind } for pid=15131 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.923687][T15107] unevictable 0 [ 330.993545][T15107] hierarchical_memory_limit 314572800 [ 330.999015][T15107] hierarchical_memsw_limit 9223372036854771712 [ 331.005237][T15107] total_cache 0 [ 331.008748][T15107] total_rss 4096 [ 331.012317][T15107] total_shmem 0 [ 331.015800][T15107] total_mapped_file 0 [ 331.019836][T15107] total_dirty 0 [ 331.023333][T15107] total_writeback 0 [ 331.027192][T15107] total_workingset_refault_anon 1501 [ 331.032508][T15107] total_workingset_refault_file 24036 [ 331.038017][T15107] total_swap 196608 [ 331.041850][T15107] total_swapcached 16384 [ 331.046197][T15107] total_pgpgin 564971 [ 331.050208][T15107] total_pgpgout 564966 [ 331.054297][T15107] total_pgfault 251820 [ 331.058412][T15107] total_pgmajfault 1043 [ 331.062657][T15107] total_inactive_anon 0 [ 331.066857][T15107] total_active_anon 16384 [ 331.071215][T15107] total_inactive_file 0 [ 331.075430][T15107] total_active_file 4096 [ 331.079747][T15107] total_unevictable 0 [ 331.083829][T15107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3929,pid=15107,uid=0 [ 331.098652][T15107] Memory cgroup out of memory: Killed process 15107 (syz.4.3929) total-vm:93968kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 331.250614][ T29] audit: type=1400 audit(1767390017.251:22596): avc: denied { write } for pid=15131 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.270549][ T29] audit: type=1400 audit(1767390017.251:22597): avc: denied { name_connect } for pid=15131 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 331.348434][T15144] netlink: 'syz.3.3940': attribute type 4 has an invalid length. [ 331.359126][T15147] binfmt_misc: register: failed to install interpreter file ./file2 [ 331.372648][T15144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3940'. [ 331.392437][ T29] audit: type=1400 audit(1767390017.251:22598): avc: denied { shutdown } for pid=15131 comm="syz.5.3932" lport=51768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.413433][ T29] audit: type=1326 audit(1767390017.311:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 331.437575][ T29] audit: type=1326 audit(1767390017.311:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 331.461407][ T29] audit: type=1326 audit(1767390017.311:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 331.485164][ T29] audit: type=1326 audit(1767390017.311:22602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1eaf749 code=0x7ffc0000 [ 331.526186][ T3484] usb 7-1: enqueue for inactive port 0 [ 331.531728][ T3484] usb 7-1: enqueue for inactive port 0 [ 331.617102][ T3484] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 331.821349][T15169] netlink: 'syz.2.3947': attribute type 2 has an invalid length. [ 331.829253][T15169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3947'. [ 331.991522][T15152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15152 comm=syz.4.3943 [ 332.084644][T15186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15186 comm=syz.4.3957 [ 332.138098][T15190] netlink: 'syz.5.3956': attribute type 4 has an invalid length. [ 332.163116][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 332.175089][T15196] ip6gre0: entered promiscuous mode [ 332.182971][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 332.193196][T15196] team0: Device ip6gre0 is of different type [ 332.211304][T15190] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3956'. [ 332.222332][T15194] team0: Port device team_slave_1 removed [ 332.356580][T15203] FAULT_INJECTION: forcing a failure. [ 332.356580][T15203] name failslab, interval 1, probability 0, space 0, times 0 [ 332.369428][T15203] CPU: 0 UID: 0 PID: 15203 Comm: syz.3.3963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.369474][T15203] Tainted: [W]=WARN [ 332.369484][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.369502][T15203] Call Trace: [ 332.369555][T15203] [ 332.369565][T15203] __dump_stack+0x1d/0x30 [ 332.369598][T15203] dump_stack_lvl+0x95/0xd0 [ 332.369627][T15203] dump_stack+0x15/0x1b [ 332.369680][T15203] should_fail_ex+0x265/0x280 [ 332.369766][T15203] should_failslab+0x8c/0xb0 [ 332.369794][T15203] __kmalloc_noprof+0xb9/0x5a0 [ 332.369822][T15203] ? lwtunnel_state_alloc+0x1d/0x30 [ 332.369850][T15203] ? __nla_parse+0x40/0x60 [ 332.369945][T15203] lwtunnel_state_alloc+0x1d/0x30 [ 332.369968][T15203] mpls_build_state+0x136/0x2a0 [ 332.370004][T15203] lwtunnel_build_state+0x127/0x200 [ 332.370030][T15203] fib_nh_common_init+0xaa/0x260 [ 332.370058][T15203] fib_nh_init+0x67/0x1a0 [ 332.370082][T15203] fib_create_info+0xec6/0x1950 [ 332.370148][T15203] fib_table_insert+0x60/0xeb0 [ 332.370177][T15203] ? rtm_to_fib_config+0x929/0x950 [ 332.370251][T15203] ? fib_new_table+0xad/0x1c0 [ 332.370286][T15203] inet_rtm_newroute+0xab/0x140 [ 332.370374][T15203] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 332.370424][T15203] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 332.370465][T15203] netlink_rcv_skb+0x123/0x220 [ 332.370497][T15203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.370596][T15203] rtnetlink_rcv+0x1c/0x30 [ 332.370628][T15203] netlink_unicast+0x5c0/0x690 [ 332.370662][T15203] netlink_sendmsg+0x58b/0x6b0 [ 332.370776][T15203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.370809][T15203] __sock_sendmsg+0x145/0x180 [ 332.370830][T15203] ____sys_sendmsg+0x345/0x4a0 [ 332.370902][T15203] ___sys_sendmsg+0x17b/0x1d0 [ 332.371019][T15203] __sys_sendmmsg+0x178/0x300 [ 332.371109][T15203] __x64_sys_sendmmsg+0x57/0x70 [ 332.371139][T15203] x64_sys_call+0x1e28/0x3000 [ 332.371210][T15203] do_syscall_64+0xca/0x2b0 [ 332.371247][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.371270][T15203] RIP: 0033:0x7f4cc1eaf749 [ 332.371286][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.371332][T15203] RSP: 002b:00007f4cc0917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.371353][T15203] RAX: ffffffffffffffda RBX: 00007f4cc2105fa0 RCX: 00007f4cc1eaf749 [ 332.371366][T15203] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 332.371380][T15203] RBP: 00007f4cc0917090 R08: 0000000000000000 R09: 0000000000000000 [ 332.371393][T15203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.371406][T15203] R13: 00007f4cc2106038 R14: 00007f4cc2105fa0 R15: 00007ffd1960f658 [ 332.371467][T15203] [ 332.679199][T15117] vhci_hcd: connection reset by peer [ 332.684820][ T31] vhci_hcd vhci_hcd.2: stop threads [ 332.690317][ T31] vhci_hcd vhci_hcd.2: release socket [ 332.695846][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 332.788285][T15214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15214 comm=syz.0.3966 [ 332.821672][T15216] FAULT_INJECTION: forcing a failure. [ 332.821672][T15216] name failslab, interval 1, probability 0, space 0, times 0 [ 332.833766][T15199] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3961'. [ 332.834379][T15216] CPU: 1 UID: 0 PID: 15216 Comm: syz.2.3969 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.834466][T15216] Tainted: [W]=WARN [ 332.834502][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.834560][T15216] Call Trace: [ 332.834593][T15216] [ 332.834625][T15216] __dump_stack+0x1d/0x30 [ 332.834725][T15216] dump_stack_lvl+0x95/0xd0 [ 332.834803][T15216] dump_stack+0x15/0x1b [ 332.834928][T15216] should_fail_ex+0x265/0x280 [ 332.835011][T15216] should_failslab+0x8c/0xb0 [ 332.835079][T15216] kmem_cache_alloc_noprof+0x69/0x4b0 [ 332.835148][T15216] ? security_inode_alloc+0x37/0x100 [ 332.835285][T15216] security_inode_alloc+0x37/0x100 [ 332.835413][T15216] inode_init_always_gfp+0x4b7/0x500 [ 332.835574][T15216] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 332.835740][T15216] alloc_inode+0x58/0x170 [ 332.835805][T15216] new_inode+0x1d/0xe0 [ 332.835885][T15216] shmem_get_inode+0x246/0x750 [ 332.836001][T15216] __shmem_file_setup+0x113/0x210 [ 332.836075][T15216] shmem_file_setup+0x3b/0x50 [ 332.836181][T15216] __se_sys_memfd_create+0x2f7/0x6b0 [ 332.836297][T15216] __x64_sys_memfd_create+0x31/0x40 [ 332.836408][T15216] x64_sys_call+0x28cb/0x3000 [ 332.836525][T15216] do_syscall_64+0xca/0x2b0 [ 332.836640][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.836757][T15216] RIP: 0033:0x7fd4dfd9f749 [ 332.836810][T15216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.836873][T15216] RSP: 002b:00007fd4de806e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 332.836922][T15216] RAX: ffffffffffffffda RBX: 00000000000007ab RCX: 00007fd4dfd9f749 [ 332.837004][T15216] RDX: 00007fd4de806ef0 RSI: 0000000000000000 RDI: 00007fd4dfe24960 [ 332.837039][T15216] RBP: 0000200000001100 R08: 00007fd4de806bb7 R09: 00007fd4de806e40 [ 332.837080][T15216] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 332.837124][T15216] R13: 00007fd4de806ef0 R14: 00007fd4de806eb0 R15: 0000200000000200 [ 332.837185][T15216] [ 333.115862][T15231] netlink: 'syz.0.3975': attribute type 4 has an invalid length. [ 333.144108][T15235] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 333.177172][T15235] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 333.238381][T15244] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 333.310667][T15254] netlink: 'syz.5.3984': attribute type 1 has an invalid length. [ 333.345507][T15254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.377421][T15263] binfmt_misc: register: failed to install interpreter file ./file2 [ 333.449337][T15274] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 333.455911][T15274] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.463522][T15274] vhci_hcd vhci_hcd.0: Device attached [ 333.807968][T15293] team0: Device ip6gre0 is of different type [ 333.947869][T15299] binfmt_misc: register: failed to install interpreter file ./file2 [ 333.956193][ T9] usb 11-1: enqueue for inactive port 0 [ 333.963675][ T9] usb 11-1: enqueue for inactive port 0 [ 334.038371][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 334.083822][T15311] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 334.090397][T15311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 334.098105][T15311] vhci_hcd vhci_hcd.0: Device attached [ 334.208778][T15325] team0: Device ip6gre0 is of different type [ 334.272181][T15329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15329 comm=syz.5.4012 [ 334.286159][T15327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 334.286979][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 334.292809][T15327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.306767][T15327] vhci_hcd vhci_hcd.0: Device attached [ 334.312354][T15275] vhci_hcd: connection closed [ 334.316390][ T1625] vhci_hcd vhci_hcd.2: stop threads [ 334.326552][ T1625] vhci_hcd vhci_hcd.2: release socket [ 334.332064][ T1625] vhci_hcd vhci_hcd.2: disconnect device [ 334.366483][ T1038] usb 7-1: new full-speed USB device number 12 using vhci_hcd [ 334.708634][T15351] binfmt_misc: register: failed to install interpreter file ./file2 [ 334.775373][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15357 comm=syz.4.4023 [ 334.816423][T15359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15359 comm=syz.3.4024 [ 334.908733][T15130] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.120052][T15373] __nla_validate_parse: 11 callbacks suppressed [ 335.120074][T15373] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4030'. [ 335.238971][ T3783] usb 5-1: enqueue for inactive port 0 [ 335.244644][ T3783] usb 5-1: enqueue for inactive port 0 [ 335.307161][T15312] vhci_hcd: connection reset by peer [ 335.315018][T14932] vhci_hcd vhci_hcd.3: stop threads [ 335.320454][T14932] vhci_hcd vhci_hcd.3: release socket [ 335.325929][T14932] vhci_hcd vhci_hcd.3: disconnect device [ 335.356148][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 335.382963][T15381] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 335.389633][T15381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.397193][T15381] vhci_hcd vhci_hcd.0: Device attached [ 335.459741][T15390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15390 comm=syz.2.4037 [ 335.477825][T15391] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4035'. [ 335.576420][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 335.659595][ T9] usb 11-1: new full-speed USB device number 10 using vhci_hcd [ 335.837151][T15414] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 335.848335][T15414] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 335.944338][T15421] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 335.960619][T15330] vhci_hcd: connection closed [ 335.960937][T14932] vhci_hcd vhci_hcd.0: stop threads [ 335.971034][T14932] vhci_hcd vhci_hcd.0: release socket [ 335.976562][T14932] vhci_hcd vhci_hcd.0: disconnect device [ 336.012818][T15421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.348765][T15384] vhci_hcd: connection reset by peer [ 336.354456][T15130] vhci_hcd vhci_hcd.5: stop threads [ 336.359790][T15130] vhci_hcd vhci_hcd.5: release socket [ 336.365212][T15130] vhci_hcd vhci_hcd.5: disconnect device [ 336.613034][T15441] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 336.620861][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 336.629855][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4058'. [ 336.645932][T15441] bridge1: entered promiscuous mode [ 336.651326][T15441] bridge1: entered allmulticast mode [ 336.916314][ T4607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.065710][T15473] netlink: 'syz.5.4066': attribute type 1 has an invalid length. [ 337.097399][T15476] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 337.106970][T15473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.119228][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4070'. [ 337.147171][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 337.304477][T15448] syz.0.4062 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 337.315590][T15448] CPU: 1 UID: 0 PID: 15448 Comm: syz.0.4062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.315624][T15448] Tainted: [W]=WARN [ 337.315631][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.315648][T15448] Call Trace: [ 337.315657][T15448] [ 337.315695][T15448] __dump_stack+0x1d/0x30 [ 337.315778][T15448] dump_stack_lvl+0x95/0xd0 [ 337.315808][T15448] dump_stack+0x15/0x1b [ 337.315836][T15448] dump_header+0x81/0x240 [ 337.315864][T15448] oom_kill_process+0x295/0x350 [ 337.315950][T15448] out_of_memory+0x97b/0xb80 [ 337.316028][T15448] try_charge_memcg+0x610/0xa10 [ 337.316089][T15448] charge_memcg+0x51/0xc0 [ 337.316128][T15448] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 337.316173][T15448] __read_swap_cache_async+0x17b/0x2d0 [ 337.316225][T15448] swap_cluster_readahead+0x262/0x3c0 [ 337.316266][T15448] swapin_readahead+0xde/0x820 [ 337.316299][T15448] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 337.316373][T15448] ? lruvec_stat_mod_folio+0xd6/0x120 [ 337.316398][T15448] ? __rcu_read_unlock+0x4f/0x70 [ 337.316419][T15448] ? swap_cache_get_folio+0x277/0x280 [ 337.316472][T15448] do_swap_page+0x2b4/0x21e0 [ 337.316553][T15448] ? __pfx_default_wake_function+0x10/0x10 [ 337.316601][T15448] handle_mm_fault+0x9d8/0x2c60 [ 337.316650][T15448] do_user_addr_fault+0x630/0x1080 [ 337.316761][T15448] exc_page_fault+0x62/0xa0 [ 337.316799][T15448] asm_exc_page_fault+0x26/0x30 [ 337.316834][T15448] RIP: 0033:0x7f0ff89159ec [ 337.316851][T15448] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 337.316873][T15448] RSP: 002b:00007fffed8afac0 EFLAGS: 00010206 [ 337.316895][T15448] RAX: 0000000000000000 RBX: 00007f0ff8c95fa0 RCX: 0000000000000000 [ 337.316912][T15448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556db04808 [ 337.316926][T15448] RBP: 00007f0ff8c97da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 337.316939][T15448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000052656 [ 337.316986][T15448] R13: 00007f0ff8c96090 R14: ffffffffffffffff R15: 00007fffed8afbd0 [ 337.317067][T15448] [ 337.531361][T15448] memory: usage 307200kB, limit 307200kB, failcnt 7907 [ 337.538347][T15448] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 337.546318][T15448] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 337.553651][T15448] Memory cgroup stats for /syz0: [ 337.554536][T15448] cache 0 [ 337.562609][T15448] rss 4096 [ 337.565752][T15448] shmem 0 [ 337.568756][T15448] mapped_file 0 [ 337.572241][T15448] dirty 0 [ 337.575195][T15448] writeback 12288 [ 337.578973][T15448] workingset_refault_anon 1652 [ 337.583770][T15448] workingset_refault_file 9103 [ 337.588581][T15448] swap 196608 [ 337.591897][T15448] swapcached 12288 [ 337.595749][T15448] pgpgin 500164 [ 337.599277][T15448] pgpgout 500161 [ 337.602903][T15448] pgfault 316233 [ 337.606612][T15448] pgmajfault 1061 [ 337.610300][T15448] inactive_anon 12288 [ 337.614336][T15448] active_anon 0 [ 337.617846][T15448] inactive_file 0 [ 337.621509][T15448] active_file 0 [ 337.625004][T15448] unevictable 0 [ 337.628514][T15448] hierarchical_memory_limit 314572800 [ 337.633913][T15448] hierarchical_memsw_limit 9223372036854771712 [ 337.640213][T15448] total_cache 0 [ 337.643734][T15448] total_rss 4096 [ 337.647344][T15448] total_shmem 0 [ 337.650863][T15448] total_mapped_file 0 [ 337.654880][T15448] total_dirty 0 [ 337.658413][T15448] total_writeback 12288 [ 337.662616][T15448] total_workingset_refault_anon 1652 [ 337.667971][T15448] total_workingset_refault_file 9103 [ 337.673286][T15448] total_swap 196608 [ 337.677159][T15448] total_swapcached 12288 [ 337.681451][T15448] total_pgpgin 500164 [ 337.685457][T15448] total_pgpgout 500161 [ 337.689661][T15448] total_pgfault 316233 [ 337.693838][T15448] total_pgmajfault 1061 [ 337.698094][T15448] total_inactive_anon 12288 [ 337.702630][T15448] total_active_anon 0 [ 337.706677][T15448] total_inactive_file 0 [ 337.710893][T15448] total_active_file 0 [ 337.714902][T15448] total_unevictable 0 [ 337.719021][T15448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4062,pid=15448,uid=0 [ 337.733845][T15448] Memory cgroup out of memory: Killed process 15448 (syz.0.4062) total-vm:93968kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 337.795060][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 337.795078][ T29] audit: type=1400 audit(1767390023.791:22902): avc: denied { name_bind } for pid=15495 comm="syz.4.4081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 337.845648][T15501] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 337.884839][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4082'. [ 337.926341][T15511] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 337.938670][ T29] audit: type=1400 audit(1767390023.941:22903): avc: denied { map } for pid=15495 comm="syz.4.4081" path="socket:[46514]" dev="sockfs" ino=46514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 338.000596][ T29] audit: type=1400 audit(1767390023.971:22904): avc: denied { ioctl } for pid=15514 comm="syz.5.4087" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 338.092222][T15526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15526 comm=syz.3.4092 [ 338.148827][ T29] audit: type=1326 audit(1767390024.151:22905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.184432][ T29] audit: type=1326 audit(1767390024.151:22906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.208181][ T29] audit: type=1326 audit(1767390024.151:22907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.231917][ T29] audit: type=1326 audit(1767390024.151:22908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.255807][ T29] audit: type=1326 audit(1767390024.151:22909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.279971][ T29] audit: type=1326 audit(1767390024.151:22910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.303587][ T29] audit: type=1326 audit(1767390024.151:22911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.5.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 338.313824][T15537] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 338.333880][T15537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.341850][T15537] vhci_hcd vhci_hcd.0: Device attached [ 338.522011][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 338.567666][T15549] netlink: 'syz.2.4098': attribute type 4 has an invalid length. [ 338.593170][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'. [ 338.881996][T15566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15566 comm=syz.3.4105 [ 339.123408][T15582] ip6gre0: entered promiscuous mode [ 339.145837][T15582] team0: Device ip6gre0 is of different type [ 339.284167][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4118'. [ 339.290088][T15540] syz.0.4096 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 339.305037][T15592] bridge_slave_1: left allmulticast mode [ 339.307289][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.0.4096 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.307323][T15540] Tainted: [W]=WARN [ 339.307332][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.307347][T15540] Call Trace: [ 339.307371][T15540] [ 339.307413][T15540] __dump_stack+0x1d/0x30 [ 339.307562][T15540] dump_stack_lvl+0x95/0xd0 [ 339.307637][T15540] dump_stack+0x15/0x1b [ 339.307711][T15540] dump_header+0x81/0x240 [ 339.307783][T15540] oom_kill_process+0x295/0x350 [ 339.307871][T15540] out_of_memory+0x97b/0xb80 [ 339.308013][T15540] try_charge_memcg+0x610/0xa10 [ 339.308230][T15540] obj_cgroup_charge_pages+0xa6/0x150 [ 339.308328][T15540] __memcg_kmem_charge_page+0x9f/0x170 [ 339.308417][T15540] __alloc_frozen_pages_noprof+0x18f/0x360 [ 339.308598][T15540] alloc_pages_mpol+0xb3/0x260 [ 339.308698][T15540] alloc_pages_noprof+0x90/0x130 [ 339.308803][T15540] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 339.308968][T15540] __kvmalloc_node_noprof+0x492/0x6b0 [ 339.309068][T15540] ? ip_set_alloc+0x24/0x30 [ 339.309187][T15540] ? ip_set_alloc+0x24/0x30 [ 339.309345][T15540] ? __slab_alloc+0x25/0x50 [ 339.309443][T15540] ip_set_alloc+0x24/0x30 [ 339.309532][T15540] hash_netiface_create+0x282/0x740 [ 339.309671][T15540] ? __pfx_hash_netiface_create+0x10/0x10 [ 339.309784][T15540] ip_set_create+0x3cc/0x970 [ 339.309994][T15540] ? __mutex_lock_slowpath+0xa/0x10 [ 339.310101][T15540] nfnetlink_rcv_msg+0x4c6/0x590 [ 339.310280][T15540] netlink_rcv_skb+0x123/0x220 [ 339.310394][T15540] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 339.310564][T15540] nfnetlink_rcv+0x167/0x16c0 [ 339.310753][T15540] ? free_frozen_page_commit+0x79/0x3b0 [ 339.310860][T15540] ? _raw_spin_unlock+0x26/0x50 [ 339.310933][T15540] ? __free_frozen_pages+0x288/0x510 [ 339.311089][T15540] ? bpf_check+0x9d67/0xc860 [ 339.311220][T15540] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 339.311335][T15540] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 339.311458][T15540] ? css_rstat_updated+0xbb/0x280 [ 339.311541][T15540] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 339.311626][T15540] ? should_fail_ex+0x30/0x280 [ 339.311717][T15540] ? selinux_nlmsg_lookup+0x99/0x890 [ 339.311743][T15540] ? __rcu_read_unlock+0x34/0x70 [ 339.311771][T15540] ? __netlink_lookup+0x266/0x2a0 [ 339.311914][T15540] netlink_unicast+0x5c0/0x690 [ 339.312021][T15540] netlink_sendmsg+0x58b/0x6b0 [ 339.312175][T15540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.312281][T15540] __sock_sendmsg+0x145/0x180 [ 339.312341][T15540] ____sys_sendmsg+0x31e/0x4a0 [ 339.312533][T15540] ___sys_sendmsg+0x17b/0x1d0 [ 339.312744][T15540] __x64_sys_sendmsg+0xd4/0x160 [ 339.312847][T15540] x64_sys_call+0x17ba/0x3000 [ 339.312939][T15540] do_syscall_64+0xca/0x2b0 [ 339.313057][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.313207][T15540] RIP: 0033:0x7f0ff8a3f749 [ 339.313262][T15540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.313325][T15540] RSP: 002b:00007f0ff74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.313377][T15540] RAX: ffffffffffffffda RBX: 00007f0ff8c95fa0 RCX: 00007f0ff8a3f749 [ 339.313420][T15540] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 339.313463][T15540] RBP: 00007f0ff8ac3f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.313538][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.313580][T15540] R13: 00007f0ff8c96038 R14: 00007f0ff8c95fa0 R15: 00007fffed8af958 [ 339.313651][T15540] [ 339.313673][T15540] memory: usage 307200kB, limit 307200kB, failcnt 8122 [ 339.324429][T15592] bridge_slave_1: left promiscuous mode [ 339.328280][T15540] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 339.328297][T15540] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 339.338926][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.342362][T15540] Memory cgroup stats for /syz0: [ 339.700100][T15592] bridge_slave_0: left allmulticast mode [ 339.704161][ T1038] usb 7-1: enqueue for inactive port 0 [ 339.705199][T15592] bridge_slave_0: left promiscuous mode [ 339.710878][ T1038] usb 7-1: enqueue for inactive port 0 [ 339.716734][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.746951][T15540] cache 0 [ 339.749956][T15540] rss 28672 [ 339.753209][T15540] shmem 0 [ 339.756331][T15540] mapped_file 0 [ 339.759834][T15540] dirty 0 [ 339.762880][T15540] writeback 0 [ 339.766262][T15540] workingset_refault_anon 1757 [ 339.771052][T15540] workingset_refault_file 9103 [ 339.775979][T15540] swap 139264 [ 339.779335][T15540] swapcached 69632 [ 339.783085][T15540] pgpgin 500534 [ 339.786628][T15540] pgpgout 500517 [ 339.790204][T15540] pgfault 316892 [ 339.793777][T15540] pgmajfault 1126 [ 339.797487][T15540] inactive_anon 53248 [ 339.801576][T15540] active_anon 16384 [ 339.805413][T15540] inactive_file 0 [ 339.809182][T15540] active_file 0 [ 339.812668][T15540] unevictable 0 [ 339.816285][T15540] hierarchical_memory_limit 314572800 [ 339.821760][T15540] hierarchical_memsw_limit 9223372036854771712 [ 339.828061][T15540] total_cache 0 [ 339.831556][T15540] total_rss 28672 [ 339.835239][T15540] total_shmem 0 [ 339.838760][T15540] total_mapped_file 0 [ 339.842765][T15540] total_dirty 0 [ 339.846285][T15540] total_writeback 0 [ 339.850123][T15540] total_workingset_refault_anon 1757 [ 339.855429][T15540] total_workingset_refault_file 9103 [ 339.860794][T15540] total_swap 139264 [ 339.864722][T15540] total_swapcached 69632 [ 339.869032][T15540] total_pgpgin 500534 [ 339.873066][T15540] total_pgpgout 500517 [ 339.877217][T15540] total_pgfault 316892 [ 339.881534][T15540] total_pgmajfault 1126 [ 339.885980][T15540] total_inactive_anon 53248 [ 339.890587][T15540] total_active_anon 16384 [ 339.894947][T15540] total_inactive_file 0 [ 339.899154][T15540] total_active_file 0 [ 339.903159][T15540] total_unevictable 0 [ 339.907221][T15540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4096,pid=15533,uid=0 [ 339.922136][T15540] Memory cgroup out of memory: Killed process 15533 (syz.0.4096) total-vm:93968kB, anon-rss:1260kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 339.939620][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 340.077979][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 340.084684][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.092253][T15614] vhci_hcd vhci_hcd.0: Device attached [ 340.123044][T15616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 340.129691][T15616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.137281][T15616] vhci_hcd vhci_hcd.0: Device attached [ 340.208123][T15631] __nla_validate_parse: 1 callbacks suppressed [ 340.208139][T15631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4127'. [ 340.247256][T15633] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4128'. [ 340.266428][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 340.351452][T15642] netlink: 'syz.4.4136': attribute type 4 has an invalid length. [ 340.364557][T15538] vhci_hcd: connection closed [ 340.364889][T15531] vhci_hcd vhci_hcd.5: stop threads [ 340.375047][T15531] vhci_hcd vhci_hcd.5: release socket [ 340.380551][T15531] vhci_hcd vhci_hcd.5: disconnect device [ 340.417474][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 340.430916][ T3783] usb 5-1: new full-speed USB device number 19 using vhci_hcd [ 340.436810][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 340.759342][ T9] usb 11-1: enqueue for inactive port 0 [ 340.765372][ T9] usb 11-1: enqueue for inactive port 0 [ 340.793919][T15640] syz.0.4135 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 340.808151][T15640] CPU: 1 UID: 0 PID: 15640 Comm: syz.0.4135 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.808193][T15640] Tainted: [W]=WARN [ 340.808203][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.808218][T15640] Call Trace: [ 340.808282][T15640] [ 340.808291][T15640] __dump_stack+0x1d/0x30 [ 340.808318][T15640] dump_stack_lvl+0x95/0xd0 [ 340.808390][T15640] dump_stack+0x15/0x1b [ 340.808418][T15640] dump_header+0x81/0x240 [ 340.808445][T15640] oom_kill_process+0x295/0x350 [ 340.808515][T15640] out_of_memory+0x97b/0xb80 [ 340.808549][T15640] try_charge_memcg+0x610/0xa10 [ 340.808600][T15640] obj_cgroup_charge_pages+0xa6/0x150 [ 340.808640][T15640] __memcg_kmem_charge_page+0x9f/0x170 [ 340.808740][T15640] __alloc_frozen_pages_noprof+0x18f/0x360 [ 340.808896][T15640] alloc_pages_mpol+0xb3/0x260 [ 340.808928][T15640] alloc_pages_noprof+0x90/0x130 [ 340.809088][T15640] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 340.809133][T15640] __kvmalloc_node_noprof+0x492/0x6b0 [ 340.809209][T15640] ? ip_set_alloc+0x24/0x30 [ 340.809255][T15640] ? ip_set_alloc+0x24/0x30 [ 340.809349][T15640] ip_set_alloc+0x24/0x30 [ 340.809438][T15640] hash_netiface_create+0x282/0x740 [ 340.809489][T15640] ? __pfx_hash_netiface_create+0x10/0x10 [ 340.809530][T15640] ip_set_create+0x3cc/0x970 [ 340.809654][T15640] ? __nla_parse+0x40/0x60 [ 340.809692][T15640] nfnetlink_rcv_msg+0x4c6/0x590 [ 340.809750][T15640] netlink_rcv_skb+0x123/0x220 [ 340.809808][T15640] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 340.809854][T15640] nfnetlink_rcv+0x167/0x16c0 [ 340.809885][T15640] ? free_frozen_page_commit+0x79/0x3b0 [ 340.809913][T15640] ? _raw_spin_unlock+0x26/0x50 [ 340.809998][T15640] ? __free_frozen_pages+0x288/0x510 [ 340.810029][T15640] ? bpf_check+0x9d67/0xc860 [ 340.810073][T15640] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 340.810117][T15640] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 340.810153][T15640] ? css_rstat_updated+0xbb/0x280 [ 340.810203][T15640] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 340.810232][T15640] ? should_fail_ex+0x30/0x280 [ 340.810256][T15640] ? selinux_nlmsg_lookup+0x99/0x890 [ 340.810352][T15640] ? __rcu_read_unlock+0x34/0x70 [ 340.810392][T15640] ? __netlink_lookup+0x266/0x2a0 [ 340.810433][T15640] netlink_unicast+0x5c0/0x690 [ 340.810525][T15640] netlink_sendmsg+0x58b/0x6b0 [ 340.810567][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.810708][T15640] __sock_sendmsg+0x145/0x180 [ 340.810730][T15640] ____sys_sendmsg+0x31e/0x4a0 [ 340.810774][T15640] ___sys_sendmsg+0x17b/0x1d0 [ 340.810849][T15640] __x64_sys_sendmsg+0xd4/0x160 [ 340.810886][T15640] x64_sys_call+0x17ba/0x3000 [ 340.810918][T15640] do_syscall_64+0xca/0x2b0 [ 340.810956][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.811031][T15640] RIP: 0033:0x7f0ff8a3f749 [ 340.811049][T15640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.811068][T15640] RSP: 002b:00007f0ff74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.811089][T15640] RAX: ffffffffffffffda RBX: 00007f0ff8c95fa0 RCX: 00007f0ff8a3f749 [ 340.811108][T15640] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 340.811126][T15640] RBP: 00007f0ff8ac3f91 R08: 0000000000000000 R09: 0000000000000000 [ 340.811177][T15640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.811196][T15640] R13: 00007f0ff8c96038 R14: 00007f0ff8c95fa0 R15: 00007fffed8af958 [ 340.811261][T15640] [ 340.811269][T15640] memory: usage 307200kB, limit 307200kB, failcnt 8347 [ 340.836312][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 340.836799][T15640] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 340.885377][T15617] vhci_hcd: connection reset by peer [ 340.885529][T15640] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 340.892166][T15531] vhci_hcd vhci_hcd.2: stop threads [ 340.896200][T15640] Memory cgroup stats for /syz0: [ 340.896856][T15640] cache 0 [ 340.901264][T15531] vhci_hcd vhci_hcd.2: release socket [ 340.901374][T15531] vhci_hcd vhci_hcd.2: disconnect device [ 340.907219][T15640] rss 0 [ 340.907231][T15640] shmem 0 [ 340.907241][T15640] mapped_file 0 [ 340.927888][T15621] vhci_hcd: connection reset by peer [ 340.931433][T15640] dirty 0 [ 340.931445][T15640] writeback 0 [ 340.940876][T15531] vhci_hcd vhci_hcd.3: stop threads [ 340.941816][T15640] workingset_refault_anon 1855 [ 340.946286][T15531] vhci_hcd vhci_hcd.3: release socket [ 340.951239][T15640] workingset_refault_file 9103 [ 340.951254][T15640] swap 204800 [ 340.951264][T15640] swapcached 4096 [ 340.956038][T15531] vhci_hcd vhci_hcd.3: disconnect device [ 340.961571][T15640] pgpgin 500897 [ 341.269430][T15640] pgpgout 500896 [ 341.272979][T15640] pgfault 317510 [ 341.276575][T15640] pgmajfault 1183 [ 341.280312][T15640] inactive_anon 4096 [ 341.284218][T15640] active_anon 0 [ 341.287722][T15640] inactive_file 0 [ 341.291370][T15640] active_file 0 [ 341.294904][T15640] unevictable 0 [ 341.298441][T15640] hierarchical_memory_limit 314572800 [ 341.303925][T15640] hierarchical_memsw_limit 9223372036854771712 [ 341.310229][T15640] total_cache 0 [ 341.313737][T15640] total_rss 0 [ 341.317067][T15640] total_shmem 0 [ 341.320548][T15640] total_mapped_file 0 [ 341.324539][T15640] total_dirty 0 [ 341.328067][T15640] total_writeback 0 [ 341.331920][T15640] total_workingset_refault_anon 1855 [ 341.337273][T15640] total_workingset_refault_file 9103 [ 341.342663][T15640] total_swap 204800 [ 341.346506][T15640] total_swapcached 4096 [ 341.350743][T15640] total_pgpgin 500897 [ 341.354864][T15640] total_pgpgout 500896 [ 341.358992][T15640] total_pgfault 317510 [ 341.363092][T15640] total_pgmajfault 1183 [ 341.367393][T15640] total_inactive_anon 4096 [ 341.371839][T15640] total_active_anon 0 [ 341.375896][T15640] total_inactive_file 0 [ 341.380209][T15640] total_active_file 0 [ 341.384250][T15640] total_unevictable 0 [ 341.388347][T15640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4135,pid=15639,uid=0 [ 341.403120][T15640] Memory cgroup out of memory: Killed process 15639 (syz.0.4135) total-vm:93968kB, anon-rss:1132kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 341.485657][T15649] netlink: 'syz.2.4138': attribute type 1 has an invalid length. [ 341.548243][T15656] loop4: detected capacity change from 0 to 512 [ 341.557439][T15649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.577835][T15656] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.603874][T15656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 341.622749][T15656] EXT4-fs (loop4): failed to initialize system zone (-117) [ 341.638042][T15656] EXT4-fs (loop4): mount failed [ 342.088587][T15679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15679 comm=syz.0.4150 [ 342.152003][T15664] syz.3.4144 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 342.166386][T15664] CPU: 1 UID: 0 PID: 15664 Comm: syz.3.4144 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 342.166430][T15664] Tainted: [W]=WARN [ 342.166447][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.166461][T15664] Call Trace: [ 342.166469][T15664] [ 342.166477][T15664] __dump_stack+0x1d/0x30 [ 342.166504][T15664] dump_stack_lvl+0x95/0xd0 [ 342.166528][T15664] dump_stack+0x15/0x1b [ 342.166603][T15664] dump_header+0x81/0x240 [ 342.166632][T15664] oom_kill_process+0x295/0x350 [ 342.166659][T15664] out_of_memory+0x97b/0xb80 [ 342.166692][T15664] try_charge_memcg+0x610/0xa10 [ 342.166748][T15664] obj_cgroup_charge_pages+0xa6/0x150 [ 342.166827][T15664] __memcg_kmem_charge_page+0x9f/0x170 [ 342.166897][T15664] __alloc_frozen_pages_noprof+0x18f/0x360 [ 342.166930][T15664] alloc_pages_mpol+0xb3/0x260 [ 342.167135][T15664] alloc_pages_noprof+0x90/0x130 [ 342.167167][T15664] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 342.167285][T15664] __kvmalloc_node_noprof+0x492/0x6b0 [ 342.167321][T15664] ? ip_set_alloc+0x24/0x30 [ 342.167390][T15664] ? ip_set_alloc+0x24/0x30 [ 342.167490][T15664] ip_set_alloc+0x24/0x30 [ 342.167526][T15664] hash_netiface_create+0x282/0x740 [ 342.167571][T15664] ? __pfx_hash_netiface_create+0x10/0x10 [ 342.167648][T15664] ip_set_create+0x3cc/0x970 [ 342.167693][T15664] ? __nla_parse+0x40/0x60 [ 342.167730][T15664] nfnetlink_rcv_msg+0x4c6/0x590 [ 342.168085][T15664] netlink_rcv_skb+0x123/0x220 [ 342.168137][T15664] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 342.168296][T15664] nfnetlink_rcv+0x167/0x16c0 [ 342.168356][T15664] ? kmem_cache_free+0xe3/0x3a0 [ 342.168386][T15664] ? __kfree_skb+0x109/0x150 [ 342.168420][T15664] ? nlmon_xmit+0x4f/0x60 [ 342.168480][T15664] ? consume_skb+0x49/0x150 [ 342.168504][T15664] ? nlmon_xmit+0x4f/0x60 [ 342.168527][T15664] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 342.168563][T15664] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 342.168646][T15664] ? __dev_queue_xmit+0x148/0x1ee0 [ 342.168681][T15664] ? __vmap_pages_range_noflush+0x2b4/0xcf0 [ 342.168713][T15664] ? ref_tracker_free+0x37d/0x3e0 [ 342.168752][T15664] ? __netlink_deliver_tap+0x4dc/0x500 [ 342.168831][T15664] netlink_unicast+0x5c0/0x690 [ 342.168873][T15664] netlink_sendmsg+0x58b/0x6b0 [ 342.168916][T15664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.169023][T15664] __sock_sendmsg+0x145/0x180 [ 342.169050][T15664] ____sys_sendmsg+0x31e/0x4a0 [ 342.169105][T15664] ___sys_sendmsg+0x17b/0x1d0 [ 342.169215][T15664] __x64_sys_sendmsg+0xd4/0x160 [ 342.169266][T15664] x64_sys_call+0x17ba/0x3000 [ 342.169297][T15664] do_syscall_64+0xca/0x2b0 [ 342.169351][T15664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.169379][T15664] RIP: 0033:0x7f4cc1eaf749 [ 342.169401][T15664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.169423][T15664] RSP: 002b:00007f4cc0917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.169518][T15664] RAX: ffffffffffffffda RBX: 00007f4cc2105fa0 RCX: 00007f4cc1eaf749 [ 342.169531][T15664] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.169544][T15664] RBP: 00007f4cc1f33f91 R08: 0000000000000000 R09: 0000000000000000 [ 342.169597][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.169614][T15664] R13: 00007f4cc2106038 R14: 00007f4cc2105fa0 R15: 00007ffd1960f658 [ 342.169637][T15664] [ 342.169714][T15664] memory: usage 307200kB, limit 307200kB, failcnt 9032 [ 342.300909][T15685] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 342.305017][T15664] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 342.325045][T15685] loop4: detected capacity change from 0 to 512 [ 342.325126][T15664] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 342.391324][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 342.395426][T15664] Memory cgroup stats for [ 342.494722][T15686] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 342.502584][T15664] /syz3 [ 342.517464][T15690] binfmt_misc: register: failed to install interpreter file ./file2 [ 342.520819][T15664] : [ 342.522100][T15664] cache 0 [ 342.555201][T15686] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 342.555791][T15664] rss 0 [ 342.555829][T15664] shmem 0 [ 342.596104][T15664] mapped_file 0 [ 342.599592][T15664] dirty 0 [ 342.602551][T15664] writeback 0 [ 342.605856][T15664] workingset_refault_anon 1441 [ 342.610679][T15664] workingset_refault_file 14458 [ 342.615551][T15664] swap 204800 [ 342.618946][T15664] swapcached 4096 [ 342.622603][T15664] pgpgin 553905 [ 342.626146][T15664] pgpgout 553904 [ 342.629714][T15664] pgfault 313220 [ 342.633369][T15664] pgmajfault 817 [ 342.637023][T15664] inactive_anon 0 [ 342.640679][T15664] active_anon 4096 [ 342.644431][T15664] inactive_file 0 [ 342.648187][T15664] active_file 0 [ 342.651685][T15664] unevictable 0 [ 342.655181][T15664] hierarchical_memory_limit 314572800 [ 342.660675][T15664] hierarchical_memsw_limit 9223372036854771712 [ 342.666878][T15664] total_cache 0 [ 342.670395][T15664] total_rss 0 [ 342.673710][T15664] total_shmem 0 [ 342.677240][T15664] total_mapped_file 0 [ 342.681252][T15664] total_dirty 0 [ 342.684734][T15664] total_writeback 0 [ 342.688826][T15664] total_workingset_refault_anon 1441 [ 342.694240][T15664] total_workingset_refault_file 14458 [ 342.699702][T15664] total_swap 204800 [ 342.703609][T15664] total_swapcached 4096 [ 342.707895][T15664] total_pgpgin 553905 [ 342.711946][T15664] total_pgpgout 553904 [ 342.716098][T15664] total_pgfault 313220 [ 342.720218][T15664] total_pgmajfault 817 [ 342.724392][T15664] total_inactive_anon 0 [ 342.728613][T15664] total_active_anon 4096 [ 342.733027][T15664] total_inactive_file 0 [ 342.737273][T15664] total_active_file 0 [ 342.741320][T15664] total_unevictable 0 [ 342.745352][T15664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4144,pid=15663,uid=0 [ 342.760185][T15664] Memory cgroup out of memory: Killed process 15663 (syz.3.4144) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 342.954811][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 342.954830][ T29] audit: type=1326 audit(1767390028.951:23164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.006971][ T29] audit: type=1326 audit(1767390028.991:23165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.030933][ T29] audit: type=1326 audit(1767390028.991:23166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.054665][ T29] audit: type=1326 audit(1767390028.991:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.078367][ T29] audit: type=1326 audit(1767390028.991:23168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.102126][ T29] audit: type=1326 audit(1767390028.991:23169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.126046][ T29] audit: type=1326 audit(1767390028.991:23170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.149880][ T29] audit: type=1326 audit(1767390028.991:23171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15705 comm="syz.4.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9651f749 code=0x7ffc0000 [ 343.173853][ T29] audit: type=1326 audit(1767390028.991:23172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15705 comm="syz.4.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9651f749 code=0x7ffc0000 [ 343.197667][ T29] audit: type=1326 audit(1767390028.991:23173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15703 comm="syz.5.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f086c7df749 code=0x7ffc0000 [ 343.291964][T15719] loop4: detected capacity change from 0 to 512 [ 343.304831][T15719] EXT4-fs: Ignoring removed nobh option [ 343.337825][T15719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 343.380542][T15719] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4163: iget: bad i_size value: 38620345925642 [ 343.431256][T15727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15727 comm=syz.5.4166 [ 343.463328][T15719] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4163: couldn't read orphan inode 15 (err -117) [ 343.487851][T14932] Bluetooth: hci0: Frame reassembly failed (-84) [ 343.497422][T15719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.590688][T15719] netem: change failed [ 343.628465][T11827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.763386][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4170'. [ 343.781288][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 343.787868][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.795378][T15743] vhci_hcd vhci_hcd.0: Device attached [ 343.947282][T15758] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4172'. [ 343.979744][T15760] netlink: 'syz.4.4177': attribute type 1 has an invalid length. [ 344.007647][T15760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.197696][T15733] syz.5.4169 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 344.208857][T15733] CPU: 1 UID: 0 PID: 15733 Comm: syz.5.4169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.208987][T15733] Tainted: [W]=WARN [ 344.208994][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.209006][T15733] Call Trace: [ 344.209014][T15733] [ 344.209022][T15733] __dump_stack+0x1d/0x30 [ 344.209127][T15733] dump_stack_lvl+0x95/0xd0 [ 344.209157][T15733] dump_stack+0x15/0x1b [ 344.209180][T15733] dump_header+0x81/0x240 [ 344.209204][T15733] oom_kill_process+0x295/0x350 [ 344.209231][T15733] out_of_memory+0x97b/0xb80 [ 344.209271][T15733] try_charge_memcg+0x610/0xa10 [ 344.209332][T15733] charge_memcg+0x51/0xc0 [ 344.209367][T15733] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 344.209433][T15733] __read_swap_cache_async+0x17b/0x2d0 [ 344.209471][T15733] swap_cluster_readahead+0x262/0x3c0 [ 344.209512][T15733] swapin_readahead+0xde/0x820 [ 344.209605][T15733] ? __rcu_read_unlock+0x4f/0x70 [ 344.209628][T15733] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 344.209709][T15733] ? __list_add_valid_or_report+0x38/0xe0 [ 344.209744][T15733] ? __rcu_read_unlock+0x4f/0x70 [ 344.209767][T15733] ? swap_cache_get_folio+0x277/0x280 [ 344.209811][T15733] do_swap_page+0x2b4/0x21e0 [ 344.209844][T15733] ? _raw_spin_unlock+0x26/0x50 [ 344.209871][T15733] ? __schedule+0x85f/0xcd0 [ 344.209905][T15733] ? __pfx_default_wake_function+0x10/0x10 [ 344.210011][T15733] handle_mm_fault+0x9d8/0x2c60 [ 344.210055][T15733] do_user_addr_fault+0x630/0x1080 [ 344.210117][T15733] exc_page_fault+0x62/0xa0 [ 344.210144][T15733] asm_exc_page_fault+0x26/0x30 [ 344.210165][T15733] RIP: 0033:0x7f086c6b59ec [ 344.210185][T15733] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 344.210272][T15733] RSP: 002b:00007ffde6ab3450 EFLAGS: 00010206 [ 344.210294][T15733] RAX: 0000000000000000 RBX: 00007f086ca35fa0 RCX: 0000000000000000 [ 344.210311][T15733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558776d808 [ 344.210328][T15733] RBP: 00007f086ca37da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 344.210345][T15733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000054173 [ 344.210361][T15733] R13: 00007f086ca36090 R14: ffffffffffffffff R15: 00007ffde6ab3560 [ 344.210415][T15733] [ 344.210425][T15733] memory: usage 307200kB, limit 307200kB, failcnt 3240 [ 344.447487][T15733] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 344.455489][T15733] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 344.462868][T15733] Memory cgroup stats for /syz5: [ 344.463299][T15733] cache 0 [ 344.471389][T15733] rss 0 [ 344.474165][T15733] shmem 0 [ 344.477166][T15733] mapped_file 0 [ 344.480806][T15733] dirty 0 [ 344.483809][T15733] writeback 8192 [ 344.487405][T15733] workingset_refault_anon 429 [ 344.492137][T15733] workingset_refault_file 8031 [ 344.497010][T15733] swap 204800 [ 344.500316][T15733] swapcached 8192 [ 344.504029][T15733] pgpgin 248800 [ 344.507690][T15733] pgpgout 248798 [ 344.511311][T15733] pgfault 89039 [ 344.514858][T15733] pgmajfault 236 [ 344.518468][T15733] inactive_anon 8192 [ 344.522661][T15733] active_anon 0 [ 344.526162][T15733] inactive_file 0 [ 344.529818][T15733] active_file 0 [ 344.533278][T15733] unevictable 0 [ 344.536868][T15733] hierarchical_memory_limit 314572800 [ 344.542336][T15733] hierarchical_memsw_limit 9223372036854771712 [ 344.548703][T15733] total_cache 0 [ 344.552194][T15733] total_rss 0 [ 344.555554][T15733] total_shmem 0 [ 344.559071][T15733] total_mapped_file 0 [ 344.563104][T15733] total_dirty 0 [ 344.566634][T15733] total_writeback 8192 [ 344.570831][T15733] total_workingset_refault_anon 429 [ 344.576137][T15733] total_workingset_refault_file 8031 [ 344.581488][T15733] total_swap 204800 [ 344.581879][T15744] vhci_hcd: connection closed [ 344.585325][T15733] total_swapcached 8192 [ 344.585339][T15733] total_pgpgin 248800 [ 344.585350][T15733] total_pgpgout 248798 [ 344.602456][T15733] total_pgfault 89039 [ 344.606585][T15733] total_pgmajfault 236 [ 344.610823][T15733] total_inactive_anon 8192 [ 344.615275][T15733] total_active_anon 0 [ 344.616298][ T5693] vhci_hcd vhci_hcd.2: stop threads [ 344.619540][T15733] total_inactive_file 0 [ 344.624784][ T5693] vhci_hcd vhci_hcd.2: release socket [ 344.628874][T15733] total_active_file 0 [ 344.634288][ T5693] vhci_hcd vhci_hcd.2: disconnect device [ 344.638301][T15733] total_unevictable 0 [ 344.638314][T15733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4169,pid=15733,uid=0 [ 344.662763][T15733] Memory cgroup out of memory: Killed process 15733 (syz.5.4169) total-vm:93968kB, anon-rss:1244kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 344.928814][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'. [ 345.178791][T15792] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 345.220090][T15792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.254201][T15796] loop4: detected capacity change from 0 to 128 [ 345.287530][T15796] ext4: Unknown parameter 'uid' [ 345.379102][T15796] bridge: RTM_NEWNEIGH with invalid ether address [ 345.423331][T15781] syz.5.4184 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 345.437618][T15781] CPU: 1 UID: 0 PID: 15781 Comm: syz.5.4184 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.437658][T15781] Tainted: [W]=WARN [ 345.437665][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.437680][T15781] Call Trace: [ 345.437688][T15781] [ 345.437753][T15781] __dump_stack+0x1d/0x30 [ 345.437790][T15781] dump_stack_lvl+0x95/0xd0 [ 345.437890][T15781] dump_stack+0x15/0x1b [ 345.437932][T15781] dump_header+0x81/0x240 [ 345.437964][T15781] oom_kill_process+0x295/0x350 [ 345.438026][T15781] out_of_memory+0x97b/0xb80 [ 345.438060][T15781] try_charge_memcg+0x610/0xa10 [ 345.438147][T15781] obj_cgroup_charge_pages+0xa6/0x150 [ 345.438185][T15781] __memcg_kmem_charge_page+0x9f/0x170 [ 345.438230][T15781] __alloc_frozen_pages_noprof+0x18f/0x360 [ 345.438271][T15781] alloc_pages_mpol+0xb3/0x260 [ 345.438372][T15781] alloc_pages_noprof+0x90/0x130 [ 345.438405][T15781] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 345.438456][T15781] __kvmalloc_node_noprof+0x492/0x6b0 [ 345.438521][T15781] ? ip_set_alloc+0x24/0x30 [ 345.438564][T15781] ? ip_set_alloc+0x24/0x30 [ 345.438610][T15781] ip_set_alloc+0x24/0x30 [ 345.438652][T15781] hash_netiface_create+0x282/0x740 [ 345.438706][T15781] ? __pfx_hash_netiface_create+0x10/0x10 [ 345.438829][T15781] ip_set_create+0x3cc/0x970 [ 345.438878][T15781] ? __nla_parse+0x40/0x60 [ 345.438970][T15781] nfnetlink_rcv_msg+0x4c6/0x590 [ 345.439040][T15781] netlink_rcv_skb+0x123/0x220 [ 345.439081][T15781] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 345.439118][T15781] nfnetlink_rcv+0x167/0x16c0 [ 345.439162][T15781] ? free_frozen_page_commit+0x79/0x3b0 [ 345.439265][T15781] ? _raw_spin_unlock+0x26/0x50 [ 345.439329][T15781] ? __free_frozen_pages+0x288/0x510 [ 345.439385][T15781] ? bpf_check+0x9d67/0xc860 [ 345.439441][T15781] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 345.439480][T15781] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 345.439510][T15781] ? css_rstat_updated+0xbb/0x280 [ 345.439537][T15781] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 345.439604][T15781] ? should_fail_ex+0x30/0x280 [ 345.439685][T15781] ? selinux_nlmsg_lookup+0x99/0x890 [ 345.439715][T15781] ? __rcu_read_unlock+0x34/0x70 [ 345.439745][T15781] ? __netlink_lookup+0x266/0x2a0 [ 345.439837][T15781] netlink_unicast+0x5c0/0x690 [ 345.439873][T15781] netlink_sendmsg+0x58b/0x6b0 [ 345.439976][T15781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.440021][T15781] __sock_sendmsg+0x145/0x180 [ 345.440057][T15781] ____sys_sendmsg+0x31e/0x4a0 [ 345.440104][T15781] ___sys_sendmsg+0x17b/0x1d0 [ 345.440161][T15781] __x64_sys_sendmsg+0xd4/0x160 [ 345.440264][T15781] x64_sys_call+0x17ba/0x3000 [ 345.440292][T15781] do_syscall_64+0xca/0x2b0 [ 345.440410][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.440460][T15781] RIP: 0033:0x7f086c7df749 [ 345.440483][T15781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.440511][T15781] RSP: 002b:00007f086b247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.440543][T15781] RAX: ffffffffffffffda RBX: 00007f086ca35fa0 RCX: 00007f086c7df749 [ 345.440557][T15781] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 345.440573][T15781] RBP: 00007f086c863f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.440586][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.440599][T15781] R13: 00007f086ca36038 R14: 00007f086ca35fa0 R15: 00007ffde6ab32e8 [ 345.440623][T15781] [ 345.440701][T15781] memory: usage 307200kB, limit 307200kB, failcnt 4364 [ 345.583283][ T4607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 345.585531][T15781] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 345.585551][T15781] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 345.585564][T15781] Memory cgroup stats for /syz5: [ 345.585672][ T3783] usb 5-1: enqueue for inactive port 0 [ 345.592384][T15781] cache 0 [ 345.596146][ T3783] usb 5-1: enqueue for inactive port 0 [ 345.602066][T15781] rss 4096 [ 345.676282][ T3783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 345.679435][T15781] shmem 0 [ 345.845265][T15781] mapped_file 0 [ 345.848793][T15781] dirty 0 [ 345.851750][T15781] writeback 0 [ 345.855058][T15781] workingset_refault_anon 642 [ 345.859791][T15781] workingset_refault_file 8031 [ 345.864593][T15781] swap 196608 [ 345.867955][T15781] swapcached 16384 [ 345.871702][T15781] pgpgin 249231 [ 345.875264][T15781] pgpgout 249227 [ 345.878884][T15781] pgfault 89633 [ 345.882372][T15781] pgmajfault 359 [ 345.886036][T15781] inactive_anon 12288 [ 345.890070][T15781] active_anon 4096 [ 345.893819][T15781] inactive_file 0 [ 345.897535][T15781] active_file 0 [ 345.901022][T15781] unevictable 0 [ 345.904582][T15781] hierarchical_memory_limit 314572800 [ 345.910123][T15781] hierarchical_memsw_limit 9223372036854771712 [ 345.916410][T15781] total_cache 0 [ 345.919899][T15781] total_rss 4096 [ 345.923479][T15781] total_shmem 0 [ 345.927011][T15781] total_mapped_file 0 [ 345.931013][T15781] total_dirty 0 [ 345.934588][T15781] total_writeback 0 [ 345.938547][T15781] total_workingset_refault_anon 642 [ 345.943963][T15781] total_workingset_refault_file 8031 [ 345.949345][T15781] total_swap 196608 [ 345.953188][T15781] total_swapcached 16384 [ 345.957634][T15781] total_pgpgin 249231 [ 345.961699][T15781] total_pgpgout 249227 [ 345.965803][T15781] total_pgfault 89633 [ 345.969931][T15781] total_pgmajfault 359 [ 345.974066][T15781] total_inactive_anon 12288 [ 345.978729][T15781] total_active_anon 4096 [ 345.983221][T15781] total_inactive_file 0 [ 345.987495][T15781] total_active_file 0 [ 345.991517][T15781] total_unevictable 0 [ 345.995583][T15781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4184,pid=15780,uid=0 [ 346.010495][T15781] Memory cgroup out of memory: Killed process 15780 (syz.5.4184) total-vm:93968kB, anon-rss:1244kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 346.036156][ T1038] usb 7-1: enqueue for inactive port 0 [ 346.041727][ T1038] usb 7-1: enqueue for inactive port 0 [ 346.147342][T15818] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 346.153973][T15818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.161488][T15818] vhci_hcd vhci_hcd.0: Device attached [ 346.167778][T15815] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 346.174356][T15815] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.182122][T15815] vhci_hcd vhci_hcd.0: Device attached [ 346.188488][T15820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15820 comm=syz.3.4199 [ 346.216439][T15824] vhci_hcd: connection closed [ 346.216579][T14932] vhci_hcd vhci_hcd.4: stop threads [ 346.226662][T14932] vhci_hcd vhci_hcd.4: release socket [ 346.232081][T14932] vhci_hcd vhci_hcd.4: disconnect device [ 346.238571][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 346.254497][T15829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15829 comm=syz.2.4201 [ 346.270317][T15818] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4198'. [ 346.287674][T15831] netlink: 'syz.0.4202': attribute type 4 has an invalid length. [ 346.336163][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 346.359115][T15839] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 346.374957][T15839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.396252][ T9] usb 11-1: new full-speed USB device number 11 using vhci_hcd [ 346.440992][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4204'. [ 346.813210][T15861] netlink: 'syz.4.4213': attribute type 4 has an invalid length. [ 346.913555][T15851] syz.3.4209 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 346.927963][T15851] CPU: 1 UID: 0 PID: 15851 Comm: syz.3.4209 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.928000][T15851] Tainted: [W]=WARN [ 346.928073][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.928087][T15851] Call Trace: [ 346.928095][T15851] [ 346.928103][T15851] __dump_stack+0x1d/0x30 [ 346.928136][T15851] dump_stack_lvl+0x95/0xd0 [ 346.928164][T15851] dump_stack+0x15/0x1b [ 346.928185][T15851] dump_header+0x81/0x240 [ 346.928280][T15851] oom_kill_process+0x295/0x350 [ 346.928309][T15851] out_of_memory+0x97b/0xb80 [ 346.928339][T15851] try_charge_memcg+0x610/0xa10 [ 346.928435][T15851] obj_cgroup_charge_pages+0xa6/0x150 [ 346.928561][T15851] __memcg_kmem_charge_page+0x9f/0x170 [ 346.928602][T15851] __alloc_frozen_pages_noprof+0x18f/0x360 [ 346.928645][T15851] alloc_pages_mpol+0xb3/0x260 [ 346.928696][T15851] alloc_pages_noprof+0x90/0x130 [ 346.928737][T15851] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 346.928788][T15851] __kvmalloc_node_noprof+0x492/0x6b0 [ 346.928874][T15851] ? ip_set_alloc+0x24/0x30 [ 346.928907][T15851] ? ip_set_alloc+0x24/0x30 [ 346.929003][T15851] ip_set_alloc+0x24/0x30 [ 346.929036][T15851] hash_netiface_create+0x282/0x740 [ 346.929145][T15851] ? __pfx_hash_netiface_create+0x10/0x10 [ 346.929221][T15851] ip_set_create+0x3cc/0x970 [ 346.929276][T15851] ? __nla_parse+0x40/0x60 [ 346.929385][T15851] nfnetlink_rcv_msg+0x4c6/0x590 [ 346.929440][T15851] netlink_rcv_skb+0x123/0x220 [ 346.929480][T15851] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 346.929537][T15851] nfnetlink_rcv+0x167/0x16c0 [ 346.929563][T15851] ? kmem_cache_free+0xe3/0x3a0 [ 346.929589][T15851] ? __kfree_skb+0x109/0x150 [ 346.929637][T15851] ? nlmon_xmit+0x4f/0x60 [ 346.929687][T15851] ? consume_skb+0x49/0x150 [ 346.929744][T15851] ? nlmon_xmit+0x4f/0x60 [ 346.929769][T15851] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 346.929811][T15851] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 346.929920][T15851] ? __dev_queue_xmit+0x148/0x1ee0 [ 346.929955][T15851] ? htab_map_hash+0x1cc/0x1d0 [ 346.930088][T15851] ? ref_tracker_free+0x37d/0x3e0 [ 346.930120][T15851] ? __netlink_deliver_tap+0x4dc/0x500 [ 346.930165][T15851] netlink_unicast+0x5c0/0x690 [ 346.930207][T15851] netlink_sendmsg+0x58b/0x6b0 [ 346.930318][T15851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.930360][T15851] __sock_sendmsg+0x145/0x180 [ 346.930381][T15851] ____sys_sendmsg+0x31e/0x4a0 [ 346.930454][T15851] ___sys_sendmsg+0x17b/0x1d0 [ 346.930506][T15851] __x64_sys_sendmsg+0xd4/0x160 [ 346.930541][T15851] x64_sys_call+0x17ba/0x3000 [ 346.930629][T15851] do_syscall_64+0xca/0x2b0 [ 346.930683][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.930739][T15851] RIP: 0033:0x7f4cc1eaf749 [ 346.930760][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.930805][T15851] RSP: 002b:00007f4cc0917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.930911][T15851] RAX: ffffffffffffffda RBX: 00007f4cc2105fa0 RCX: 00007f4cc1eaf749 [ 346.930929][T15851] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 346.930947][T15851] RBP: 00007f4cc1f33f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.930964][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.930981][T15851] R13: 00007f4cc2106038 R14: 00007f4cc2105fa0 R15: 00007ffd1960f658 [ 346.931021][T15851] [ 346.931029][T15851] memory: usage 307200kB, limit 307200kB, failcnt 9842 [ 346.945690][T15819] vhci_hcd: connection reset by peer [ 346.946427][T15851] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 346.974074][ T5693] vhci_hcd vhci_hcd.5: stop threads [ 346.975791][T15851] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 346.975809][T15851] Memory cgroup stats for /syz3: [ 346.977545][T15851] cache 0 [ 346.980329][ T5693] vhci_hcd vhci_hcd.5: release socket [ 346.985145][T15851] rss 0 [ 346.985172][T15851] shmem 0 [ 346.985179][T15851] mapped_file 0 [ 346.985186][T15851] dirty 0 [ 346.985193][T15851] writeback 0 [ 346.985201][T15851] workingset_refault_anon 1525 [ 346.985209][T15851] workingset_refault_file 14606 [ 346.985219][T15851] swap 200704 [ 346.989908][ T5693] vhci_hcd vhci_hcd.5: disconnect device [ 346.994765][T15851] swapcached 8192 [ 346.994777][T15851] pgpgin 555161 [ 346.994785][T15851] pgpgout 555159 [ 346.994793][T15851] pgfault 315271 [ 346.994800][T15851] pgmajfault 887 [ 347.139958][T15867] team0: Device ip6gre0 is of different type [ 347.140285][T15851] inactive_anon 8192 [ 347.374382][T15851] active_anon 0 [ 347.377934][T15851] inactive_file 0 [ 347.381766][T15851] active_file 0 [ 347.385687][T15851] unevictable 0 [ 347.389286][T15851] hierarchical_memory_limit 314572800 [ 347.394682][T15851] hierarchical_memsw_limit 9223372036854771712 [ 347.401029][T15851] total_cache 0 [ 347.404519][T15851] total_rss 0 [ 347.407868][T15851] total_shmem 0 [ 347.411379][T15851] total_mapped_file 0 [ 347.415419][T15851] total_dirty 0 [ 347.418978][T15851] total_writeback 0 [ 347.422878][T15851] total_workingset_refault_anon 1525 [ 347.428217][T15851] total_workingset_refault_file 14606 [ 347.433686][T15851] total_swap 200704 [ 347.437619][T15851] total_swapcached 8192 [ 347.441906][T15851] total_pgpgin 555161 [ 347.445917][T15851] total_pgpgout 555159 [ 347.450111][T15851] total_pgfault 315271 [ 347.454198][T15851] total_pgmajfault 887 [ 347.458330][T15851] total_inactive_anon 8192 [ 347.462790][T15851] total_active_anon 0 [ 347.466846][T15851] total_inactive_file 0 [ 347.471083][T15851] total_active_file 0 [ 347.475091][T15851] total_unevictable 0 [ 347.479253][T15851] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4209,pid=15850,uid=0 [ 347.494006][T15851] Memory cgroup out of memory: Killed process 15850 (syz.3.4209) total-vm:93968kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 347.615205][T15873] binfmt_misc: register: failed to install interpreter file ./file2 [ 347.678376][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 347.687629][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 347.824848][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4224'. [ 347.867550][T15896] netlink: 'syz.0.4227': attribute type 21 has an invalid length. [ 347.887449][T15896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4227'. [ 347.897995][T15896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4227'. [ 347.957683][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 347.957703][ T29] audit: type=1326 audit(1767390033.961:23670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4dfd9df90 code=0x7ffc0000 [ 348.016397][ T29] audit: type=1326 audit(1767390033.961:23671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4dfd9e3aa code=0x7ffc0000 [ 348.040063][ T29] audit: type=1326 audit(1767390033.991:23672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.063935][ T29] audit: type=1326 audit(1767390033.991:23673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.100998][ T29] audit: type=1326 audit(1767390034.041:23674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.124834][ T29] audit: type=1326 audit(1767390034.091:23675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.148739][ T29] audit: type=1326 audit(1767390034.091:23676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.172392][ T29] audit: type=1326 audit(1767390034.091:23677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.196182][ T29] audit: type=1326 audit(1767390034.091:23678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.2.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4dfd9f749 code=0x7ffc0000 [ 348.219763][ T29] audit: type=1400 audit(1767390034.091:23679): avc: denied { create } for pid=15886 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 348.260137][T15909] FAULT_INJECTION: forcing a failure. [ 348.260137][T15909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.273596][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.3.4232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.273714][T15909] Tainted: [W]=WARN [ 348.273721][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.273735][T15909] Call Trace: [ 348.273745][T15909] [ 348.273758][T15909] __dump_stack+0x1d/0x30 [ 348.273793][T15909] dump_stack_lvl+0x95/0xd0 [ 348.273905][T15909] dump_stack+0x15/0x1b [ 348.273925][T15909] should_fail_ex+0x265/0x280 [ 348.273951][T15909] should_fail+0xb/0x20 [ 348.273972][T15909] should_fail_usercopy+0x1a/0x20 [ 348.274060][T15909] _copy_from_user+0x1c/0xb0 [ 348.274090][T15909] restore_altstack+0x4b/0x2d0 [ 348.274111][T15909] ? __set_task_blocked+0x23a/0x2a0 [ 348.274233][T15909] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 348.274319][T15909] ? bpf_get_current_uid_gid+0x7a/0xa0 [ 348.274339][T15909] ? __rcu_read_unlock+0x4f/0x70 [ 348.274533][T15909] ? bpf_trace_run2+0x124/0x1d0 [ 348.274577][T15909] ? __bpf_trace_sys_enter+0x10/0x30 [ 348.274602][T15909] ? trace_sys_enter+0xd0/0xf0 [ 348.274648][T15909] x64_sys_call+0x274a/0x3000 [ 348.274694][T15909] do_syscall_64+0xca/0x2b0 [ 348.274731][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.274787][T15909] RIP: 0033:0x7f4cc1e4b829 [ 348.274804][T15909] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 348.274823][T15909] RSP: 002b:00007f4cc0916a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 348.274848][T15909] RAX: ffffffffffffffda RBX: 00007f4cc2105fa0 RCX: 00007f4cc1e4b829 [ 348.274866][T15909] RDX: 00007f4cc0916a80 RSI: 00007f4cc0916bb0 RDI: 0000000000000011 [ 348.274909][T15909] RBP: 00007f4cc0917090 R08: 0000000000000000 R09: 0000000000000000 [ 348.274923][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.274936][T15909] R13: 00007f4cc2106038 R14: 00007f4cc2105fa0 R15: 00007ffd1960f658 [ 348.274957][T15909] [ 348.491284][T15916] loop4: detected capacity change from 0 to 512 [ 348.501399][T14783] ================================================================== [ 348.509641][T14783] BUG: KCSAN: data-race in set_nlink / set_nlink [ 348.516116][T14783] [ 348.518551][T14783] read to 0xffff888107bc4eb8 of 4 bytes by task 3009 on cpu 1: [ 348.526120][T14783] set_nlink+0x29/0xb0 [ 348.530233][T14783] kernfs_iop_permission+0x1e2/0x220 [ 348.535638][T14783] inode_permission+0x2de/0x3c0 [ 348.540517][T14783] link_path_walk+0x779/0xe30 [ 348.545219][T14783] path_lookupat+0x8c/0x500 [ 348.549764][T14783] filename_lookup+0x147/0x340 [ 348.554556][T14783] vfs_statx+0x9d/0x390 [ 348.558772][T14783] vfs_fstatat+0x115/0x170 [ 348.563219][T14783] __se_sys_newfstatat+0x55/0x260 [ 348.568370][T14783] __x64_sys_newfstatat+0x55/0x70 [ 348.573458][T14783] x64_sys_call+0x111f/0x3000 [ 348.578172][T14783] do_syscall_64+0xca/0x2b0 [ 348.582710][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.588626][T14783] [ 348.590971][T14783] write to 0xffff888107bc4eb8 of 4 bytes by task 14783 on cpu 0: [ 348.598801][T14783] set_nlink+0x99/0xb0 [ 348.603247][T14783] kernfs_iop_permission+0x1e2/0x220 [ 348.608581][T14783] inode_permission+0x2de/0x3c0 [ 348.613460][T14783] link_path_walk+0x779/0xe30 [ 348.618172][T14783] path_openat+0x1c0/0x23b0 [ 348.622713][T14783] do_filp_open+0x109/0x230 [ 348.627254][T14783] do_sys_openat2+0xa6/0x150 [ 348.631881][T14783] __x64_sys_openat+0xf2/0x120 [ 348.636677][T14783] x64_sys_call+0x2b07/0x3000 [ 348.641380][T14783] do_syscall_64+0xca/0x2b0 [ 348.645928][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.651851][T14783] [ 348.654195][T14783] value changed: 0x00000008 -> 0x00000009 [ 348.659931][T14783] [ 348.662451][T14783] Reported by Kernel Concurrency Sanitizer on: [ 348.668634][T14783] CPU: 0 UID: 0 PID: 14783 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.679610][T14783] Tainted: [W]=WARN [ 348.683443][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.693546][T14783] ================================================================== [ 348.752623][T15916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 348.773318][T15916] System zones: 0-2, 18-18, 34-34 [ 348.785215][T15916] EXT4-fs (loop4): too many log groups per flexible block group [ 348.793206][T15916] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 348.800294][T15916] EXT4-fs (loop4): mount failed [ 351.476274][ T9] usb 11-1: enqueue for inactive port 0 [ 351.481922][ T9] usb 11-1: enqueue for inactive port 0 [ 351.556182][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set