last executing test programs: 2m46.691059022s ago: executing program 4 (id=4221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x100}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) 2m46.682276923s ago: executing program 4 (id=4222): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 2m46.623465738s ago: executing program 4 (id=4225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 2m46.544947574s ago: executing program 4 (id=4228): r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000240), 0x3, 0x461, &(0x7f0000000980)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x290, 0x24, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {0x6, 0x7}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x2, 0x8, 0x2, 0x8000, 0xff5, 0x4}}, {0xc, 0x2, [0x7, 0x3, 0xff2, 0x56]}}, {{0x1c, 0x1, {0x0, 0x3, 0x6, 0x80000000, 0x0, 0x401, 0xe, 0xa}}, {0x18, 0x2, [0x10, 0x9, 0x1, 0x1, 0x8, 0x401, 0x3, 0x1, 0x1ff, 0x3]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1000, 0xa, 0x1, 0x3, 0x400, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0x7, 0x7, 0xfff]}}, {{0x1c, 0x1, {0x4, 0x10, 0x8c, 0x9, 0x2, 0x1, 0x0, 0x6}}, {0x10, 0x2, [0xb, 0x101, 0x4, 0x7, 0x40, 0x1]}}, {{0x1c, 0x1, {0x1a, 0x1, 0x2, 0xfffffff8, 0x0, 0x1000, 0xffffffff, 0x7}}, {0x12, 0x2, [0xa418, 0x8, 0xf1c, 0x8001, 0x6, 0x8, 0x2]}}, {{0x1c, 0x1, {0x2, 0x6, 0x0, 0x8, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0xf, 0x7fff, 0x4]}}, {{0x1c, 0x1, {0x6, 0x34, 0x6, 0x7fffffff, 0x2, 0x2, 0x88000000, 0x6}}, {0x10, 0x2, [0x8, 0x7fff, 0x2, 0x78, 0xd, 0x2]}}, {{0x1c, 0x1, {0x9, 0x6, 0x4, 0xfffff982, 0x0, 0x10, 0x40, 0x4}}, {0xc, 0x2, [0x80, 0xe, 0x1, 0x10]}}, {{0x1c, 0x1, {0x6, 0xa3, 0x7ff, 0x7, 0x2, 0xe2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x6, 0x200]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0xcd5, 0x2, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x91, 0x4f1, 0x1000, 0xc69, 0x78]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff0000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5f, 0x5, 0x1, 0x7, 0x1, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x7f, 0x1]}}]}, @TCA_EGRESS_BLOCK={0x25, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xf, 0x7f, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x117, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x0, 0x8, 0x2, 0x400, 0x4, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x200, 0x2, 0x3, 0x5]}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8044}, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18f2ebfa3cf76518df70e1db86648ec5eabe727c36bfa5941b487d25f83a8fecbc2241167d8c2fea9f0e3653c1789e39d69ae6e692d59b819d3ef91dec7a18c6e3aad584000000d68b430d98555a6afff4bf63354abfa16655a8caf0a9c8b09bb3db6d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000003c0)) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x10001, 0x9) setxattr$incfs_size(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x6, 0x8, 0x1) 2m46.245679218s ago: executing program 4 (id=4233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x100}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) 2m45.811307773s ago: executing program 4 (id=4249): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$qrtrtun(r3, &(0x7f0000000580)="83", 0x1) 2m45.782801535s ago: executing program 32 (id=4249): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$qrtrtun(r3, &(0x7f0000000580)="83", 0x1) 2m45.394422137s ago: executing program 0 (id=4256): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m45.308628623s ago: executing program 0 (id=4258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 2m45.268016307s ago: executing program 0 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x100}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) 2m45.150560387s ago: executing program 0 (id=4260): r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$eJzs3c9vI1cdAPCvnThxfrRJSw+AoF3awoJW6yTeNqp6oOWEEKqE6BGkbUi8URQ7jmKnNGEP6RmJExKVOMGRP4DznrhzQXDjshyQ+BGBNkgcjGY8znoTexM2GzuKPx9pNPPmzc73vfX6vcw3a78ARtaNiDiIiImI+Cgi5rLzuWyL99tbct2jw/urR4f3V3PRan34j1xan5yLrj+TmMnuWYyI73874ke503Ebe/ubK9VqZScrLzRr2wuNvf3bG7WV9cp6ZatcXl5aXnznztvlJ+59Ea/VJrKjLz/8/cE3fpLcczY7092P56nd7sJxnMR4RHz3MoINwVjWn4lhN4Rnko+IlyPi9fT9Pxdj6asJAFxnrdZctOa6ywDAdZdPc2C5fCnLBcxGPl8qtXN4r8R0vlpvNG/dq+9urbVzZfNRyN/bqFYWs1zhfBRySXkpPX5cLp8o34mIlyLi55NTabm0Wq+uDfMHHwAYYTMn5v9/T7bnfwDgmisOuwEAwMCZ/wFg9Jj/AWD0mP8BYPS05/+pYTcDABggz/8AMHrM/wAwUr73wQfJ1jrKvv967eO93c36x7fXKo3NUm13tbRa39kurdfr6+l39tTOul+1Xt9eeit2P5n/5najudDY279bq+9uNe+m3+t9t1JIrzoYQM8AgH5eeu3Bn3LJjPzuVLpF11oOhaG2DLhs+WE3ABiasWE3ABiaHqt9TQ6jHcDgXeAZX3oAromz1tctnv6A0HuX2R7g8t38gvw/jKqu/L//BQwjRv4fRleP/D8wIlqt3HnX/I/zXggAXG1y/ECf3/+/nO1/k/1y4IdrJ6/47DJbBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdbZ/3fUrYW+Gzk86VSxAsRMR+F3L2NamUxIl6MiD9OFiaT8tKQ2wwAXFT+r7ls/a+bc2/OPlH16szx4URE/PiXH/7ik5Vmc+cPERO5f052zjc/y86XB996AOBsnXk63Xc9yD86vL/a2QbZnr99KyKK7fhHhxNxdBx/PMbTfTEKETH9r1xWbst15S4u4uDTiPh8r/7nYjbNgbRXPj0ZP4n9wkDj55+In0/r2vvk7+Jzz6EtMGoeJOPP+73ef/m4ke57v/+L6Qh1cdn4l9xq9SgdAx/H74x/Y33GvxvnjfHW777TPpo6XfdpxBfHIzqxj7rGn078XJ/4b54z/p+/9Orr/epav4q4Gb3jd8daaNa2Fxp7+7c3aivrlfXKVrm8vLS8+M6dt8sLaY56of9s8Pd3b73Yry7p/3Sf+MUz+v/Vc/b/1//96AdfeUr8r7/RK34+XnlK/GRO/No5469M/7Z46uTM4/hrffp/1ut/65zxH/5l/9Sy4QDA8DT29jdXqtXKzigcJM/agwza+XH7KvT9ehzEgF/B/+fgvUHFmojeVT99o/3P7URVq/VMsfqNGM8j6wZcBcdv+oj4z1Ov/NmjVmtgzQIAAAAAAAAAAAAAALoM4hNLw+4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//9prcps") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000240), 0x3, 0x461, &(0x7f0000000980)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x290, 0x24, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {0x6, 0x7}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x2, 0x8, 0x2, 0x8000, 0xff5, 0x4}}, {0xc, 0x2, [0x7, 0x3, 0xff2, 0x56]}}, {{0x1c, 0x1, {0x0, 0x3, 0x6, 0x80000000, 0x0, 0x401, 0xe, 0xa}}, {0x18, 0x2, [0x10, 0x9, 0x1, 0x1, 0x8, 0x401, 0x3, 0x1, 0x1ff, 0x3]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1000, 0xa, 0x1, 0x3, 0x400, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0x7, 0x7, 0xfff]}}, {{0x1c, 0x1, {0x4, 0x10, 0x8c, 0x9, 0x2, 0x1, 0x0, 0x6}}, {0x10, 0x2, [0xb, 0x101, 0x4, 0x7, 0x40, 0x1]}}, {{0x1c, 0x1, {0x1a, 0x1, 0x2, 0xfffffff8, 0x0, 0x1000, 0xffffffff, 0x7}}, {0x12, 0x2, [0xa418, 0x8, 0xf1c, 0x8001, 0x6, 0x8, 0x2]}}, {{0x1c, 0x1, {0x2, 0x6, 0x0, 0x8, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0xf, 0x7fff, 0x4]}}, {{0x1c, 0x1, {0x6, 0x34, 0x6, 0x7fffffff, 0x2, 0x2, 0x88000000, 0x6}}, {0x10, 0x2, [0x8, 0x7fff, 0x2, 0x78, 0xd, 0x2]}}, {{0x1c, 0x1, {0x9, 0x6, 0x4, 0xfffff982, 0x0, 0x10, 0x40, 0x4}}, {0xc, 0x2, [0x80, 0xe, 0x1, 0x10]}}, {{0x1c, 0x1, {0x6, 0xa3, 0x7ff, 0x7, 0x2, 0xe2, 0xfffffff9, 0x2}}, {0x8, 0x2, [0x6, 0x200]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0xcd5, 0x2, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x91, 0x4f1, 0x1000, 0xc69, 0x78]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff0000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5f, 0x5, 0x1, 0x7, 0x1, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x7f, 0x1]}}]}, @TCA_EGRESS_BLOCK={0x25, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xf, 0x7f, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x117, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x0, 0x8, 0x2, 0x400, 0x4, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x200, 0x2, 0x3, 0x5]}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8044}, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18f2ebfa3cf76518df70e1db86648ec5eabe727c36bfa5941b487d25f83a8fecbc2241167d8c2fea9f0e3653c1789e39d69ae6e692d59b819d3ef91dec7a18c6e3aad584000000d68b430d98555a6afff4bf63354abfa16655a8caf0a9c8b09bb3db6d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000003c0)) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x10001, 0x9) setxattr$incfs_size(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x6, 0x8, 0x1) 2m44.567429504s ago: executing program 0 (id=4265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRESDEC=r0, @ANYRES16], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$caif_stream(0x25, 0x1, 0x5) writev(r3, &(0x7f0000000c40)=[{&(0x7f0000000680)="bf3778", 0x3}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40880) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000fddbdf256a0000000a000600ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x7}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000002"]) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m43.752561919s ago: executing program 0 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 2m43.752394569s ago: executing program 33 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 5.418666823s ago: executing program 5 (id=7408): syz_read_part_table(0x1058, &(0x7f0000002780)="$eJzsz7uNwkAYhdHrnX1ocxIyUhJqMEVQAY04owZaIKIMWqAFAioADTLGogPk4JzozidN8Iep2O6SlCQ1v6902R9rLcNuy3N0w6skp+X778847udb7bXJX9J9jb3JbLWeJ83imvw3ffpONofPnAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0/YIAAD//yOzEzU=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0xffffffffffffffff, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x9, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x92d, 0xfffff801, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x8, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x20008, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x200, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x103, 0x0, 0xa, 0x5}, {0x4, 0xac, 0xffffffff, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="50c95b0115a4d2f19b9a40345a8f1d998998ab7f0db5677d36505b665310e8120d9ce9d397cff3dbb3f2a236fc0c84d843f0aa0dee91287183daee800f537f3174ecb256411b7e9c64f4d80451e487cd110780bde63c516f439be88d4e80b2e9cf31e287215d5bb0f75592c32846ef44e41d0ecf0200000000000000ccdfd1480500ce7f78c1773058933c3386e9cefa0d24e6c9144b7841f51135c2d015fa30c4bb19ddeec5181ada31a44f1767e251ca80b46ef8", 0xb5, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x4000890}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e2e2c00000000000109022400010000200c090400000103000000092100200301220500090581130004ff0000"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) setsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f00000011c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 3.96808153s ago: executing program 1 (id=7422): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x61) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) io_setup(0x7, &(0x7f0000000600)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) 2.540796625s ago: executing program 6 (id=7438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.522974567s ago: executing program 6 (id=7439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {0xe, 0x1}, 0x0, 0x2, &(0x7f0000000080)={0x60, 0xe, 0x81, 0x0, 0x78}, 0x8, 0x8, 0x1, 0x0, 0xff, 0x8, &(0x7f00000002c0)="d68b1374d9fed32ed69728eae5287bab1ba570e3090d051b9392e8ab5775fdd64d6979f588ab5115fdbe30a255a96349b787033a6118e33a9386a8389ee82dc1abd24c581461f695305b27da607b9c413b962c09d492049d6afb9788686728828946"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "b944d21c335c4d7e", "3e717109317023bbbdbfad9d914734b4", "ebc4df54", "9dbc9587f49367e1"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.48631848s ago: executing program 6 (id=7440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 2.48579954s ago: executing program 6 (id=7441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x2a2002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3974, 0xd00, 0x2, 0xffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.240725449s ago: executing program 5 (id=7443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0xa6, 0x86, ""/134}, &(0x7f00000000c0)=0xa6, 0x0) 2.186653254s ago: executing program 5 (id=7445): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='alloc_extent_state\x00', r2, 0x0, 0x3}, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.186092094s ago: executing program 1 (id=7446): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.159356366s ago: executing program 1 (id=7447): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x61) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) 2.147758197s ago: executing program 5 (id=7448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}], 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x3, r2, 0x2000008}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r5, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r4, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) getuid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, 0x0, 0x4004880) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(r6, &(0x7f0000010440)=[{&(0x7f00000004c0)=""/160, 0xa0}], 0x1, 0xc03, 0x1) 1.957184892s ago: executing program 5 (id=7453): open$dir(&(0x7f0000000000)='./bus\x00', 0x220000, 0x110) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="18000000120005010000000000000000050025"], 0x18}}, 0x20040810) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x300, 0x170bd27, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000004", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1.885868948s ago: executing program 3 (id=7457): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003100)=ANY=[], 0x10448) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) socket$inet6(0xa, 0x3, 0x5) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x7, 0xa, 0x760, 0x13, "d291ae4428fb7f68474aaaa24de9bb065fa6ee"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES8=r1], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) 988.79742ms ago: executing program 6 (id=7472): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "b944d21c335c4d7e", "3e717109317023bbbdbfad9d914734b4", "ebc4df54", "9dbc9587f49367e1"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fd5000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) 988.06798ms ago: executing program 3 (id=7473): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 960.240683ms ago: executing program 3 (id=7474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 943.663764ms ago: executing program 3 (id=7475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) 927.757995ms ago: executing program 3 (id=7476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}], 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x3, r2, 0x2000008}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd0, &(0x7f0000000b00)=""/208, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x4, 0x0, 0xc}, 0x10}, 0x94) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) getuid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, 0x0, 0x4004880) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(r5, &(0x7f0000010440)=[{&(0x7f00000004c0)=""/160, 0xa0}], 0x1, 0xc03, 0x1) 700.323804ms ago: executing program 3 (id=7477): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x11c, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) unshare(0x24040200) unshare(0x26020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r6 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000580)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noauto_da_alloc}, {@dax_always}, {@data_err_ignore, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x45a, &(0x7f00000009c0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='ext4_ext_convert_to_initialized_enter\x00', r9, 0x0, 0x2}, 0x18) 461.863223ms ago: executing program 5 (id=7478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffedb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000008800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000001080)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 278.250218ms ago: executing program 1 (id=7479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 261.412599ms ago: executing program 1 (id=7481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0xa6, 0x86, ""/134}, &(0x7f00000000c0)=0xa6, 0x0) 238.722131ms ago: executing program 1 (id=7483): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x11c, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) unshare(0x24040200) unshare(0x26020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r6 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000580)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noauto_da_alloc}, {@dax_always}, {@data_err_ignore, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x45a, &(0x7f00000009c0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='ext4_ext_convert_to_initialized_enter\x00', r9, 0x0, 0x2}, 0x18) 238.178401ms ago: executing program 2 (id=7484): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 151.182588ms ago: executing program 2 (id=7485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) unshare(0x2c060000) unshare(0x2c010200) 126.29799ms ago: executing program 2 (id=7486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 92.889402ms ago: executing program 2 (id=7487): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 77.794614ms ago: executing program 6 (id=7488): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 65.625244ms ago: executing program 2 (id=7489): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 0s ago: executing program 2 (id=7490): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r5, &(0x7f0000003100)=ANY=[], 0x10448) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) socket$inet6(0xa, 0x3, 0x5) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x7, 0xa, 0x760, 0x13, "d291ae4428fb7f68474aaaa24de9bb065fa6ee"}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYRES8=r1], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) kernel console output (not intermixed with test programs): nted on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.009570][T25180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.068240][ T1380] tipc: Disabling bearer [ 311.074593][ T1380] tipc: Left network mode [ 311.079465][T25180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.086533][T25180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.114147][T25180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.126276][ T1380] IPVS: stopping master sync thread 17683 ... [ 311.139570][ T1380] hsr_slave_0: left promiscuous mode [ 311.147737][ T1380] hsr_slave_1: left promiscuous mode [ 311.153536][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.161309][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.171133][ T1380] batman_adv: batadv0: Removing interface: dummy0 [ 311.214112][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 311.224913][ T1380] team0 (unregistering): Port device C removed [ 311.297973][T25180] hsr_slave_0: entered promiscuous mode [ 311.304436][T25180] hsr_slave_1: entered promiscuous mode [ 311.310308][T25180] debugfs: 'hsr0' already exists in 'hsr' [ 311.316251][T25180] Cannot create hsr debugfs directory [ 311.701643][T25180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.712993][T25180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.721849][T25180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.732699][T25180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.780587][T25180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.795206][T25180] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.824402][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.831795][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.841075][T25238] syzkaller0: entered allmulticast mode [ 311.853030][T25238] syzkaller0 (unregistering): left allmulticast mode [ 311.871811][T25241] serio: Serial port ptm0 [ 311.889568][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.896679][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.994051][T25180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.085519][T25180] veth0_vlan: entered promiscuous mode [ 312.095212][T25180] veth1_vlan: entered promiscuous mode [ 312.114087][T25180] veth0_macvtap: entered promiscuous mode [ 312.122126][T25180] veth1_macvtap: entered promiscuous mode [ 312.135867][T25180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.151661][T25180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.165388][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.181536][ T1380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.200556][ T1380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.218945][ T1380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.295482][T25267] random: crng reseeded on system resumption [ 312.312375][T25271] netlink: 'syz.2.6054': attribute type 21 has an invalid length. [ 312.320470][T25271] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6054'. [ 312.333393][T25271] netlink: 'syz.2.6054': attribute type 4 has an invalid length. [ 312.341202][T25271] netlink: 'syz.2.6054': attribute type 5 has an invalid length. [ 312.349174][T25271] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6054'. [ 312.366656][T25271] netlink: 'syz.2.6054': attribute type 13 has an invalid length. [ 312.426039][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.433428][T25271] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.479335][T25271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.491328][T25271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.571544][ T1380] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.584486][ T1380] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.594101][ T1380] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.620305][ T1380] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.650208][T25278] tipc: Started in network mode [ 312.655255][T25278] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 312.662683][T25278] tipc: Enabled bearer , priority 0 [ 312.719277][T25282] loop2: detected capacity change from 0 to 512 [ 312.916924][T25282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.930368][T25282] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.959870][T25180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.004911][T25294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6063'. [ 313.090220][T25268] syz.1.6053 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 313.101329][T25268] CPU: 0 UID: 0 PID: 25268 Comm: syz.1.6053 Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.101375][T25268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.101386][T25268] Call Trace: [ 313.101393][T25268] [ 313.101401][T25268] __dump_stack+0x1d/0x30 [ 313.101439][T25268] dump_stack_lvl+0xe8/0x140 [ 313.101543][T25268] dump_stack+0x15/0x1b [ 313.101556][T25268] dump_header+0x81/0x220 [ 313.101582][T25268] oom_kill_process+0x342/0x400 [ 313.101651][T25268] out_of_memory+0x979/0xb80 [ 313.101703][T25268] try_charge_memcg+0x5e6/0x9e0 [ 313.101735][T25268] charge_memcg+0x51/0xc0 [ 313.101753][T25268] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 313.101771][T25268] __read_swap_cache_async+0x1df/0x350 [ 313.101823][T25268] swap_cluster_readahead+0x277/0x3e0 [ 313.101922][T25268] swapin_readahead+0xde/0x6f0 [ 313.101947][T25268] ? __filemap_get_folio+0x4f7/0x6b0 [ 313.102055][T25268] ? swap_cache_get_folio+0x77/0x200 [ 313.102110][T25268] do_swap_page+0x301/0x2430 [ 313.102132][T25268] ? css_rstat_updated+0xb7/0x240 [ 313.102156][T25268] ? __pfx_default_wake_function+0x10/0x10 [ 313.102241][T25268] handle_mm_fault+0x9a5/0x2c20 [ 313.102270][T25268] do_user_addr_fault+0x636/0x1090 [ 313.102325][T25268] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 313.102354][T25268] exc_page_fault+0x62/0xa0 [ 313.102429][T25268] asm_exc_page_fault+0x26/0x30 [ 313.102484][T25268] RIP: 0033:0x7fd7d0135618 [ 313.102498][T25268] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d aa 27 35 00 00 0f 8e 09 fe ff ff e8 43 9e fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 [ 313.102512][T25268] RSP: 002b:00007fff17b068e0 EFLAGS: 00010212 [ 313.102578][T25268] RAX: 000000000004c40a RBX: 00007fd7d0487da0 RCX: 000000000004c2c0 [ 313.102590][T25268] RDX: 000000000000014a RSI: 00007fff17b068c0 RDI: 0000000000000001 [ 313.102605][T25268] RBP: 00007fd7d0487da0 R08: 0000000013b25d53 R09: 7fffffffffffffff [ 313.102667][T25268] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000004c442 [ 313.102680][T25268] R13: 00007fff17b069d0 R14: ffffffffffffffff R15: 00007fff17b069f0 [ 313.102697][T25268] [ 313.314320][T25268] memory: usage 307200kB, limit 307200kB, failcnt 600 [ 313.321344][T25268] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 313.329761][T25268] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 313.337221][T25268] Memory cgroup stats for /syz1: [ 313.343362][T25268] cache 0 [ 313.351873][T25268] rss 0 [ 313.354755][T25268] shmem 0 [ 313.357689][T25268] mapped_file 0 [ 313.361227][T25268] dirty 0 [ 313.364274][T25268] writeback 4096 [ 313.367820][T25268] workingset_refault_anon 206 [ 313.372669][T25268] workingset_refault_file 3093 [ 313.377601][T25268] swap 180224 [ 313.381165][T25268] swapcached 8192 [ 313.384891][T25268] pgpgin 321814 [ 313.388358][T25268] pgpgout 321801 [ 313.391912][T25268] pgfault 319010 [ 313.395782][T25268] pgmajfault 112 [ 313.399646][T25268] inactive_anon 8192 [ 313.403611][T25268] active_anon 0 [ 313.407166][T25268] inactive_file 45056 [ 313.411461][T25268] active_file 0 [ 313.415091][T25268] unevictable 0 [ 313.418661][T25268] hierarchical_memory_limit 314572800 [ 313.424139][T25268] hierarchical_memsw_limit 9223372036854771712 [ 313.430634][T25268] total_cache 0 [ 313.434110][T25268] total_rss 0 [ 313.437680][T25268] total_shmem 0 [ 313.441322][T25268] total_mapped_file 0 [ 313.445362][T25268] total_dirty 0 [ 313.449295][T25268] total_writeback 4096 [ 313.453470][T25268] total_workingset_refault_anon 206 [ 313.458861][T25268] total_workingset_refault_file 3093 [ 313.464291][T25268] total_swap 180224 [ 313.468236][T25268] total_swapcached 8192 [ 313.472542][T25268] total_pgpgin 321814 [ 313.476543][T25268] total_pgpgout 321801 [ 313.480857][T25268] total_pgfault 319010 [ 313.485076][T25268] total_pgmajfault 112 [ 313.489347][T25268] total_inactive_anon 8192 [ 313.493989][T25268] total_active_anon 0 [ 313.497982][T25268] total_inactive_file 45056 [ 313.502657][T25268] total_active_file 0 [ 313.506648][T25268] total_unevictable 0 [ 313.510722][T25268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6053,pid=25268,uid=0 [ 313.525576][T25268] Memory cgroup out of memory: Killed process 25268 (syz.1.6053) total-vm:95680kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 313.590922][T25308] tipc: Enabling of bearer rejected, already enabled [ 313.648315][T25313] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.6071'. [ 313.681297][T25316] FAULT_INJECTION: forcing a failure. [ 313.681297][T25316] name failslab, interval 1, probability 0, space 0, times 0 [ 313.694109][T25316] CPU: 1 UID: 0 PID: 25316 Comm: syz.5.6072 Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.694179][T25316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.694190][T25316] Call Trace: [ 313.694205][T25316] [ 313.694214][T25316] __dump_stack+0x1d/0x30 [ 313.694238][T25316] dump_stack_lvl+0xe8/0x140 [ 313.694257][T25316] dump_stack+0x15/0x1b [ 313.694274][T25316] should_fail_ex+0x265/0x280 [ 313.694314][T25316] should_failslab+0x8c/0xb0 [ 313.694352][T25316] kmem_cache_alloc_noprof+0x50/0x310 [ 313.694375][T25316] ? audit_log_start+0x365/0x6c0 [ 313.694400][T25316] audit_log_start+0x365/0x6c0 [ 313.694426][T25316] audit_seccomp+0x48/0x100 [ 313.694524][T25316] ? __seccomp_filter+0x68c/0x10d0 [ 313.694542][T25316] __seccomp_filter+0x69d/0x10d0 [ 313.694604][T25316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.694627][T25316] ? vfs_write+0x7e8/0x960 [ 313.694650][T25316] __secure_computing+0x82/0x150 [ 313.694725][T25316] syscall_trace_enter+0xcf/0x1e0 [ 313.694745][T25316] do_syscall_64+0xac/0x200 [ 313.694840][T25316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.694859][T25316] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 313.694879][T25316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.694904][T25316] RIP: 0033:0x7fc07378ebe9 [ 313.694917][T25316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.694932][T25316] RSP: 002b:00007fc0721ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 313.694949][T25316] RAX: ffffffffffffffda RBX: 00007fc0739b5fa0 RCX: 00007fc07378ebe9 [ 313.694959][T25316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.694970][T25316] RBP: 00007fc0721ef090 R08: 0000000000000000 R09: 0000000000000000 [ 313.694980][T25316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.695058][T25316] R13: 00007fc0739b6038 R14: 00007fc0739b5fa0 R15: 00007fffca2b3cc8 [ 313.695073][T25316] [ 313.903069][ T9] tipc: Node number set to 11578026 [ 313.957952][T25324] loop6: detected capacity change from 0 to 512 [ 313.965171][T25324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.971827][T25324] EXT4-fs: dax option not supported [ 314.051705][T25340] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.6082'. [ 314.094097][T25347] random: crng reseeded on system resumption [ 314.390889][T25363] syzkaller1: entered promiscuous mode [ 314.390978][T25363] syzkaller1: entered allmulticast mode [ 314.496772][T25365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6093'. [ 314.496791][T25365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6093'. [ 314.551460][T25369] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.6095'. [ 314.597316][T25373] random: crng reseeded on system resumption [ 314.693613][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 314.693632][ T29] audit: type=1400 audit(1757520329.110:19092): avc: denied { create } for pid=25374 comm="syz.5.6098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 314.719689][ T29] audit: type=1400 audit(1757520329.110:19093): avc: denied { ioctl } for pid=25374 comm="syz.5.6098" path="socket:[70700]" dev="sockfs" ino=70700 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 314.803868][T25384] tipc: Enabling of bearer rejected, already enabled [ 314.814792][T25385] syzkaller0: entered allmulticast mode [ 314.823114][T25385] syzkaller0 (unregistering): left allmulticast mode [ 314.833307][ T29] audit: type=1326 audit(1757520329.250:19094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 314.836674][ T29] audit: type=1326 audit(1757520329.260:19095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 314.884838][ T29] audit: type=1326 audit(1757520329.290:19096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 314.884864][ T29] audit: type=1326 audit(1757520329.290:19097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 314.884888][ T29] audit: type=1400 audit(1757520329.290:19098): avc: denied { write } for pid=25386 comm="syz.6.6104" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.884950][ T29] audit: type=1400 audit(1757520329.290:19099): avc: denied { open } for pid=25386 comm="syz.6.6104" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.884972][ T29] audit: type=1326 audit(1757520329.290:19100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 314.885028][ T29] audit: type=1326 audit(1757520329.290:19101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25386 comm="syz.6.6104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 315.018892][T25389] FAULT_INJECTION: forcing a failure. [ 315.018892][T25389] name failslab, interval 1, probability 0, space 0, times 0 [ 315.018932][T25389] CPU: 1 UID: 0 PID: 25389 Comm: syz.5.6105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.018969][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.018986][T25389] Call Trace: [ 315.018994][T25389] [ 315.019002][T25389] __dump_stack+0x1d/0x30 [ 315.019025][T25389] dump_stack_lvl+0xe8/0x140 [ 315.019123][T25389] dump_stack+0x15/0x1b [ 315.019139][T25389] should_fail_ex+0x265/0x280 [ 315.019161][T25389] should_failslab+0x8c/0xb0 [ 315.019239][T25389] kmem_cache_alloc_noprof+0x50/0x310 [ 315.019266][T25389] ? audit_log_start+0x365/0x6c0 [ 315.019294][T25389] audit_log_start+0x365/0x6c0 [ 315.019324][T25389] audit_seccomp+0x48/0x100 [ 315.019416][T25389] ? __seccomp_filter+0x68c/0x10d0 [ 315.019443][T25389] __seccomp_filter+0x69d/0x10d0 [ 315.019466][T25389] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.019491][T25389] ? vfs_write+0x7e8/0x960 [ 315.019517][T25389] __secure_computing+0x82/0x150 [ 315.019588][T25389] syscall_trace_enter+0xcf/0x1e0 [ 315.019612][T25389] do_syscall_64+0xac/0x200 [ 315.019670][T25389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 315.019692][T25389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 315.019747][T25389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.019768][T25389] RIP: 0033:0x7fc07378ebe9 [ 315.019784][T25389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.019800][T25389] RSP: 002b:00007fc0721ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 315.019872][T25389] RAX: ffffffffffffffda RBX: 00007fc0739b5fa0 RCX: 00007fc07378ebe9 [ 315.019886][T25389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 315.019956][T25389] RBP: 00007fc0721ef090 R08: 0000000000000000 R09: 0000000000000000 [ 315.019969][T25389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.019982][T25389] R13: 00007fc0739b6038 R14: 00007fc0739b5fa0 R15: 00007fffca2b3cc8 [ 315.020001][T25389] [ 315.094805][T25394] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.6107'. [ 315.118412][T25396] serio: Serial port ptm0 [ 315.298078][T25399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6109'. [ 315.317102][T25401] loop3: detected capacity change from 0 to 512 [ 315.329808][T25401] EXT4-fs: Ignoring removed bh option [ 315.331673][T25403] serio: Serial port ptm0 [ 315.342683][T25401] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.352000][T25401] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 315.362959][T25401] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 315.372603][T25401] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 315.381930][T25401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.397539][T25401] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6110: bg 0: block 353: padding at end of block bitmap is not set [ 315.419953][T25401] sit0: entered allmulticast mode [ 315.430013][T25401] sit0: entered promiscuous mode [ 315.495410][T25045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.583478][T25429] loop6: detected capacity change from 0 to 512 [ 315.715390][T25444] syz_tun: entered allmulticast mode [ 315.730946][T25444] dvmrp8: entered allmulticast mode [ 315.747385][T25444] syz_tun: left allmulticast mode [ 315.747489][T25444] dvmrp8: left allmulticast mode [ 315.780993][T25476] syzkaller0: entered allmulticast mode [ 315.788550][T25476] syzkaller0 (unregistering): left allmulticast mode [ 316.054870][T25518] loop2: detected capacity change from 0 to 512 [ 316.066332][T25518] EXT4-fs: Ignoring removed oldalloc option [ 316.076165][T25518] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6140: Parent and EA inode have the same ino 15 [ 316.077999][T25518] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6140: Parent and EA inode have the same ino 15 [ 316.078294][T25518] EXT4-fs (loop2): 1 orphan inode deleted [ 316.078752][T25518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.114941][T25180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.126691][T25522] hub 9-0:1.0: USB hub found [ 316.219356][T25506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.219615][T25522] hub 9-0:1.0: 8 ports detected [ 316.229869][T25506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.283986][T25527] loop6: detected capacity change from 0 to 512 [ 316.284275][T25527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.284597][T25527] EXT4-fs: dax option not supported [ 316.286805][T25531] RDS: rds_bind could not find a transport for fe80::29, load rds_tcp or rds_rdma? [ 316.417699][T25547] FAULT_INJECTION: forcing a failure. [ 316.417699][T25547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.431689][T25547] CPU: 1 UID: 0 PID: 25547 Comm: syz.2.6152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 316.431779][T25547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.431789][T25547] Call Trace: [ 316.431796][T25547] [ 316.431805][T25547] __dump_stack+0x1d/0x30 [ 316.431827][T25547] dump_stack_lvl+0xe8/0x140 [ 316.431843][T25547] dump_stack+0x15/0x1b [ 316.431857][T25547] should_fail_ex+0x265/0x280 [ 316.431952][T25547] should_fail+0xb/0x20 [ 316.431966][T25547] should_fail_usercopy+0x1a/0x20 [ 316.431983][T25547] _copy_from_iter+0xd2/0xe80 [ 316.432047][T25547] ? __build_skb_around+0x1a0/0x200 [ 316.432074][T25547] ? __alloc_skb+0x223/0x320 [ 316.432091][T25547] pfkey_sendmsg+0x126/0x900 [ 316.432114][T25547] ? avc_has_perm+0xf7/0x180 [ 316.432176][T25547] ? selinux_socket_sendmsg+0x175/0x1b0 [ 316.432250][T25547] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 316.432306][T25547] __sock_sendmsg+0x145/0x180 [ 316.432333][T25547] ____sys_sendmsg+0x345/0x4e0 [ 316.432383][T25547] ___sys_sendmsg+0x17b/0x1d0 [ 316.432412][T25547] __sys_sendmmsg+0x178/0x300 [ 316.432438][T25547] __x64_sys_sendmmsg+0x57/0x70 [ 316.432456][T25547] x64_sys_call+0x1c4a/0x2ff0 [ 316.432474][T25547] do_syscall_64+0xd2/0x200 [ 316.432579][T25547] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 316.432603][T25547] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 316.432627][T25547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.432648][T25547] RIP: 0033:0x7f8915dfebe9 [ 316.432686][T25547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.432702][T25547] RSP: 002b:00007f8914867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 316.432722][T25547] RAX: ffffffffffffffda RBX: 00007f8916025fa0 RCX: 00007f8915dfebe9 [ 316.432765][T25547] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 316.432777][T25547] RBP: 00007f8914867090 R08: 0000000000000000 R09: 0000000000000000 [ 316.432795][T25547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.432806][T25547] R13: 00007f8916026038 R14: 00007f8916025fa0 R15: 00007ffe1bf53308 [ 316.432825][T25547] [ 316.662875][T25549] syzkaller0: entered allmulticast mode [ 316.684251][T25551] loop2: detected capacity change from 0 to 512 [ 316.691317][T25551] EXT4-fs: Ignoring removed oldalloc option [ 316.699701][T25549] syzkaller0 (unregistering): left allmulticast mode [ 316.710496][T25551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6154: Parent and EA inode have the same ino 15 [ 316.726701][T25551] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6154: Parent and EA inode have the same ino 15 [ 316.739761][T25551] EXT4-fs (loop2): 1 orphan inode deleted [ 316.746169][T25551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.767710][T25180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.885725][T25570] loop3: detected capacity change from 0 to 512 [ 316.892771][T25570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.905156][T25570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6159: bg 0: block 4: invalid block bitmap [ 316.918168][T25570] EXT4-fs (loop3): Remounting filesystem read-only [ 316.925075][T25570] EXT4-fs (loop3): 1 truncate cleaned up [ 316.931324][T25570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.401160][T25598] __nla_validate_parse: 6 callbacks suppressed [ 317.401178][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6172'. [ 317.473165][T25604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6175'. [ 317.502716][T25606] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.6176'. [ 317.668943][T25045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.779200][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6184'. [ 317.814512][T25628] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.6187'. [ 317.868636][T25630] loop3: detected capacity change from 0 to 8192 [ 317.942471][T25638] syzkaller0: entered allmulticast mode [ 317.973331][T25642] hub 9-0:1.0: USB hub found [ 317.978231][T25642] hub 9-0:1.0: 8 ports detected [ 317.986135][T25642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.995999][T25642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.021235][T25644] syzkaller0 (unregistering): left allmulticast mode [ 318.186324][T25632] hub 9-0:1.0: USB hub found [ 318.201065][T25632] hub 9-0:1.0: 8 ports detected [ 318.221415][T25632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.230711][T25632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.440272][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6197'. [ 318.482587][T25658] lo speed is unknown, defaulting to 1000 [ 318.640409][T25670] loop3: detected capacity change from 0 to 512 [ 318.640810][T25670] EXT4-fs: Ignoring removed oldalloc option [ 318.707041][T25670] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.6203: Parent and EA inode have the same ino 15 [ 318.710916][T25670] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.6203: Parent and EA inode have the same ino 15 [ 318.744606][T25670] EXT4-fs (loop3): 1 orphan inode deleted [ 318.745180][T25670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.790652][T25045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.849551][T25678] loop3: detected capacity change from 0 to 512 [ 318.850858][T25678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.880964][T25678] EXT4-fs (loop3): 1 truncate cleaned up [ 318.881388][T25678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.332362][T25687] loop6: detected capacity change from 0 to 512 [ 319.340921][T25687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.348181][T25687] EXT4-fs: dax option not supported [ 319.413096][T25695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6213'. [ 319.613836][T25704] lo speed is unknown, defaulting to 1000 [ 319.910858][T25712] loop2: detected capacity change from 0 to 512 [ 319.937892][T25712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.948865][T25712] EXT4-fs (loop2): 1 truncate cleaned up [ 319.949313][T25712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.203891][T25726] FAULT_INJECTION: forcing a failure. [ 320.203891][T25726] name failslab, interval 1, probability 0, space 0, times 0 [ 320.203923][T25726] CPU: 0 UID: 0 PID: 25726 Comm: syz.6.6224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.204092][T25726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.204114][T25726] Call Trace: [ 320.204121][T25726] [ 320.204130][T25726] __dump_stack+0x1d/0x30 [ 320.204208][T25726] dump_stack_lvl+0xe8/0x140 [ 320.204239][T25726] dump_stack+0x15/0x1b [ 320.204253][T25726] should_fail_ex+0x265/0x280 [ 320.204304][T25726] should_failslab+0x8c/0xb0 [ 320.204327][T25726] kmem_cache_alloc_noprof+0x50/0x310 [ 320.204349][T25726] ? security_inode_alloc+0x37/0x100 [ 320.204372][T25726] security_inode_alloc+0x37/0x100 [ 320.204446][T25726] inode_init_always_gfp+0x4b7/0x500 [ 320.204467][T25726] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 320.204487][T25726] alloc_inode+0x58/0x170 [ 320.204581][T25726] new_inode+0x1d/0xe0 [ 320.204689][T25726] shmem_get_inode+0x244/0x750 [ 320.204708][T25726] __shmem_file_setup+0x113/0x210 [ 320.204776][T25726] shmem_file_setup+0x3b/0x50 [ 320.204800][T25726] __se_sys_memfd_create+0x2c3/0x590 [ 320.204819][T25726] __x64_sys_memfd_create+0x31/0x40 [ 320.204839][T25726] x64_sys_call+0x2abe/0x2ff0 [ 320.204919][T25726] do_syscall_64+0xd2/0x200 [ 320.204974][T25726] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 320.205016][T25726] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.205041][T25726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.205063][T25726] RIP: 0033:0x7f3162c3ebe9 [ 320.205077][T25726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.205091][T25726] RSP: 002b:00007f3161685e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 320.205155][T25726] RAX: ffffffffffffffda RBX: 0000000000000433 RCX: 00007f3162c3ebe9 [ 320.205174][T25726] RDX: 00007f3161685ef0 RSI: 0000000000000000 RDI: 00007f3162cc27e8 [ 320.205185][T25726] RBP: 0000200000000d80 R08: 00007f3161685bb7 R09: 00007f3161685e40 [ 320.205196][T25726] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 320.205207][T25726] R13: 00007f3161685ef0 R14: 00007f3161685eb0 R15: 0000200000000580 [ 320.205224][T25726] [ 320.585362][T25731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6225'. [ 320.678543][T25737] loop1: detected capacity change from 0 to 512 [ 320.685512][T25737] EXT4-fs: Ignoring removed oldalloc option [ 320.702953][T25737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6228: Parent and EA inode have the same ino 15 [ 320.718759][T25737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.6228: Parent and EA inode have the same ino 15 [ 320.745542][T25737] EXT4-fs (loop1): 1 orphan inode deleted [ 320.755837][T25737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.808763][T24313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.525777][T25772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25772 comm=syz.3.6242 [ 321.526146][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6242'. [ 321.580334][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 321.589564][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 321.589584][ T29] audit: type=1400 audit(1757520335.997:19241): avc: denied { write } for pid=25771 comm="syz.3.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.589619][ T29] audit: type=1400 audit(1757520335.997:19242): avc: denied { nlmsg_write } for pid=25771 comm="syz.3.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.616920][ T29] audit: type=1400 audit(1757520336.027:19243): avc: denied { firmware_load } for pid=25771 comm="syz.3.6242" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 321.776211][T25778] random: crng reseeded on system resumption [ 321.982035][T25789] serio: Serial port ptm0 [ 322.220704][T25803] lo speed is unknown, defaulting to 1000 [ 322.274908][ T29] audit: type=1400 audit(1757520336.687:19244): avc: denied { bind } for pid=25801 comm="syz.6.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.307322][ T29] audit: type=1400 audit(1757520336.687:19245): avc: denied { setopt } for pid=25801 comm="syz.6.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.328597][ T29] audit: type=1400 audit(1757520336.687:19246): avc: denied { setopt } for pid=25801 comm="syz.6.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.348611][ T29] audit: type=1400 audit(1757520336.697:19247): avc: denied { connect } for pid=25801 comm="syz.6.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.371250][T25811] netlink: 'syz.6.6254': attribute type 10 has an invalid length. [ 322.528745][T25820] netlink: 'syz.6.6254': attribute type 10 has an invalid length. [ 322.595936][T25820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 322.674883][T25811] bond0: (slave dummy0): Releasing backup interface [ 322.709386][T25832] serio: Serial port ptm1 [ 322.718262][T25811] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 322.740251][T25811] team0: Failed to send options change via netlink (err -105) [ 322.747786][T25811] team0: Port device dummy0 added [ 322.898604][T25845] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6273'. [ 322.991879][T25847] lo speed is unknown, defaulting to 1000 [ 323.027011][ T29] audit: type=1326 audit(1757520337.436:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d025ebe9 code=0x7ffc0000 [ 323.052203][ T29] audit: type=1326 audit(1757520337.436:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7d025ebe9 code=0x7ffc0000 [ 323.076430][ T29] audit: type=1326 audit(1757520337.436:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d025ebe9 code=0x7ffc0000 [ 323.560981][T25880] loop6: detected capacity change from 0 to 512 [ 323.561357][T25880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.561400][T25880] EXT4-fs: dax option not supported [ 323.737291][T25892] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.6293'. [ 324.420415][T25916] loop6: detected capacity change from 0 to 512 [ 324.484415][T25916] EXT4-fs: Ignoring removed oldalloc option [ 324.615858][T25916] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6301: Parent and EA inode have the same ino 15 [ 324.623690][T25916] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.6301: Parent and EA inode have the same ino 15 [ 324.624401][T25916] EXT4-fs (loop6): 1 orphan inode deleted [ 324.625951][T25916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.664538][T20394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.827399][T25923] hub 9-0:1.0: USB hub found [ 324.827486][T25923] hub 9-0:1.0: 8 ports detected [ 324.876918][T25922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.877048][T25922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.045071][T25928] syzkaller0: entered allmulticast mode [ 325.046184][T25928] syzkaller0 (unregistering): left allmulticast mode [ 325.274472][T25940] serio: Serial port ptm0 [ 325.892771][T25962] loop6: detected capacity change from 0 to 128 [ 325.900212][T25962] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4627: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 325.913755][T25962] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 325.967828][T25970] loop6: detected capacity change from 0 to 512 [ 325.975050][T25970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.989470][T25970] EXT4-fs (loop6): 1 truncate cleaned up [ 325.996068][T25970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.022644][T25973] loop1: detected capacity change from 0 to 128 [ 326.034333][T25973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 326.042880][T25973] FAT-fs (loop1): Filesystem has been set read-only [ 326.053068][T25973] syz.1.6325: attempt to access beyond end of device [ 326.053068][T25973] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 326.067853][T25973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 326.075883][T25973] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 326.084362][T25973] syz.1.6325: attempt to access beyond end of device [ 326.084362][T25973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 326.098968][T25973] syz.1.6325: attempt to access beyond end of device [ 326.098968][T25973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 326.113789][T25973] syz.1.6325: attempt to access beyond end of device [ 326.113789][T25973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 326.127652][T25973] syz.1.6325: attempt to access beyond end of device [ 326.127652][T25973] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 326.141668][T25975] syz.1.6325: attempt to access beyond end of device [ 326.141668][T25975] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 326.155448][T25975] Buffer I/O error on dev loop1, logical block 2065, async page read [ 326.170010][T25976] program syz.1.6325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.173277][T25975] syz.1.6325: attempt to access beyond end of device [ 326.173277][T25975] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 326.192868][T25975] Buffer I/O error on dev loop1, logical block 2066, async page read [ 326.204084][T25975] syz.1.6325: attempt to access beyond end of device [ 326.204084][T25975] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 326.217609][T25975] Buffer I/O error on dev loop1, logical block 2067, async page read [ 326.226455][T25975] syz.1.6325: attempt to access beyond end of device [ 326.226455][T25975] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 326.240695][T25975] Buffer I/O error on dev loop1, logical block 2068, async page read [ 326.249611][T25975] syz.1.6325: attempt to access beyond end of device [ 326.249611][T25975] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 326.263065][T25975] Buffer I/O error on dev loop1, logical block 2069, async page read [ 326.276615][T25975] Buffer I/O error on dev loop1, logical block 2070, async page read [ 326.323716][T25983] serio: Serial port ptm0 [ 326.342564][T25975] Buffer I/O error on dev loop1, logical block 2071, async page read [ 326.357100][T25988] syzkaller0: entered allmulticast mode [ 326.364602][T25988] syzkaller0 (unregistering): left allmulticast mode [ 326.373145][T25975] Buffer I/O error on dev loop1, logical block 2072, async page read [ 326.381821][T25973] Buffer I/O error on dev loop1, logical block 2065, async page read [ 326.399361][T25973] Buffer I/O error on dev loop1, logical block 2066, async page read [ 326.497517][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6331'. [ 326.662282][T26005] serio: Serial port ptm0 [ 326.718551][T25999] hub 9-0:1.0: USB hub found [ 326.724771][T25999] hub 9-0:1.0: 8 ports detected [ 326.734952][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.744667][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.881036][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 326.881106][ T29] audit: type=1400 audit(1757520341.274:19325): avc: denied { unmount } for pid=24313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 326.883067][T26015] serio: Serial port ptm0 [ 327.021383][T26022] hub 9-0:1.0: USB hub found [ 327.027200][T26022] hub 9-0:1.0: 8 ports detected [ 327.036644][T26022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.036793][T26022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.253131][T26030] random: crng reseeded on system resumption [ 327.294824][ T29] audit: type=1326 audit(1757520341.704:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.294940][ T29] audit: type=1326 audit(1757520341.704:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345284][ T29] audit: type=1326 audit(1757520341.734:19328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345322][ T29] audit: type=1326 audit(1757520341.734:19329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345344][ T29] audit: type=1326 audit(1757520341.734:19330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345377][ T29] audit: type=1326 audit(1757520341.734:19331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345400][ T29] audit: type=1326 audit(1757520341.734:19332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345438][ T29] audit: type=1326 audit(1757520341.734:19333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.345515][ T29] audit: type=1326 audit(1757520341.734:19334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3162c3ebe9 code=0x7ffc0000 [ 327.350718][T26035] serio: Serial port ptm0 [ 328.073681][T26061] loop1: detected capacity change from 0 to 512 [ 328.088978][T26061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.179591][T26061] EXT4-fs (loop1): 1 truncate cleaned up [ 328.265897][T26061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.306764][T26067] lo speed is unknown, defaulting to 1000 [ 328.422796][T26075] serio: Serial port ptm0 [ 328.514030][T26083] random: crng reseeded on system resumption [ 329.157120][T26104] hub 9-0:1.0: USB hub found [ 329.172796][T26104] hub 9-0:1.0: 8 ports detected [ 329.196273][T26080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.243470][T26080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.400032][T26126] FAULT_INJECTION: forcing a failure. [ 329.400032][T26126] name failslab, interval 1, probability 0, space 0, times 0 [ 329.413842][T26126] CPU: 1 UID: 0 PID: 26126 Comm: syz.1.6384 Not tainted syzkaller #0 PREEMPT(voluntary) [ 329.413871][T26126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.413889][T26126] Call Trace: [ 329.413897][T26126] [ 329.413906][T26126] __dump_stack+0x1d/0x30 [ 329.413954][T26126] dump_stack_lvl+0xe8/0x140 [ 329.413970][T26126] dump_stack+0x15/0x1b [ 329.413986][T26126] should_fail_ex+0x265/0x280 [ 329.414051][T26126] should_failslab+0x8c/0xb0 [ 329.414073][T26126] kmem_cache_alloc_noprof+0x50/0x310 [ 329.414099][T26126] ? alloc_vfsmnt+0x2d/0x300 [ 329.414179][T26126] alloc_vfsmnt+0x2d/0x300 [ 329.414280][T26126] clone_mnt+0x46/0x630 [ 329.414305][T26126] copy_tree+0xb9/0x8c0 [ 329.414321][T26126] ? proc_alloc_inum+0x4f/0x70 [ 329.414345][T26126] copy_mnt_ns+0x120/0x5c0 [ 329.414430][T26126] ? kmem_cache_alloc_noprof+0x220/0x310 [ 329.414451][T26126] ? create_new_namespaces+0x3c/0x3d0 [ 329.414503][T26126] create_new_namespaces+0x83/0x3d0 [ 329.414528][T26126] unshare_nsproxy_namespaces+0xe8/0x120 [ 329.414553][T26126] ksys_unshare+0x3d0/0x6d0 [ 329.414693][T26126] ? trace_sys_enter+0xd0/0xf0 [ 329.414713][T26126] __x64_sys_unshare+0x1f/0x30 [ 329.414747][T26126] x64_sys_call+0x2911/0x2ff0 [ 329.414764][T26126] do_syscall_64+0xd2/0x200 [ 329.414793][T26126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.414867][T26126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.414887][T26126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.414919][T26126] RIP: 0033:0x7fd7d025ebe9 [ 329.414962][T26126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.415000][T26126] RSP: 002b:00007fd7cecbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 329.415017][T26126] RAX: ffffffffffffffda RBX: 00007fd7d0485fa0 RCX: 00007fd7d025ebe9 [ 329.415091][T26126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 329.415102][T26126] RBP: 00007fd7cecbf090 R08: 0000000000000000 R09: 0000000000000000 [ 329.415166][T26126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.415177][T26126] R13: 00007fd7d0486038 R14: 00007fd7d0485fa0 R15: 00007fff17b06778 [ 329.415193][T26126] [ 329.684131][T26130] lo speed is unknown, defaulting to 1000 [ 330.375578][T26172] lo speed is unknown, defaulting to 1000 [ 330.532115][T26180] netlink: 'syz.2.6406': attribute type 37 has an invalid length. [ 330.786396][T26202] hub 9-0:1.0: USB hub found [ 330.793189][T26202] hub 9-0:1.0: 8 ports detected [ 330.798008][T26201] lo speed is unknown, defaulting to 1000 [ 330.802575][T26202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.815749][T26202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.838432][T26203] hub 9-0:1.0: USB hub found [ 330.853415][T26203] hub 9-0:1.0: 8 ports detected [ 330.868956][T26203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.881461][T26203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.914625][T26208] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6416'. [ 330.947537][T26210] lo speed is unknown, defaulting to 1000 [ 331.070913][T26217] random: crng reseeded on system resumption [ 331.443497][T26237] lo speed is unknown, defaulting to 1000 [ 331.929588][T26253] hub 9-0:1.0: USB hub found [ 331.929662][T26253] hub 9-0:1.0: 8 ports detected [ 331.975912][T26253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.991314][T26253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.254751][T26267] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6440'. [ 332.299342][T26272] tipc: Enabling of bearer rejected, already enabled [ 332.754875][T26299] random: crng reseeded on system resumption [ 332.795783][T26305] random: crng reseeded on system resumption [ 332.918295][T26318] C: renamed from team_slave_0 (while UP) [ 332.926862][T26318] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6464'. [ 333.025514][T26330] netlink: 'syz.2.6469': attribute type 37 has an invalid length. [ 333.045487][T26331] hub 9-0:1.0: USB hub found [ 333.045620][T26331] hub 9-0:1.0: 8 ports detected [ 333.059266][T26303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.059390][T26303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.446631][T26346] lo speed is unknown, defaulting to 1000 [ 333.684788][T26358] serio: Serial port ptm1 [ 333.705742][T26356] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6477'. [ 333.884926][T26368] serio: Serial port ptm0 [ 333.907972][T26374] lo speed is unknown, defaulting to 1000 [ 334.004330][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6487'. [ 334.013646][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6487'. [ 334.046697][T26385] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6489'. [ 334.685718][T26397] random: crng reseeded on system resumption [ 334.729847][T26381] syz.1.6488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 334.729891][T26381] CPU: 0 UID: 0 PID: 26381 Comm: syz.1.6488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 334.729919][T26381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.729932][T26381] Call Trace: [ 334.729941][T26381] [ 334.729949][T26381] __dump_stack+0x1d/0x30 [ 334.730036][T26381] dump_stack_lvl+0xe8/0x140 [ 334.730057][T26381] dump_stack+0x15/0x1b [ 334.730075][T26381] dump_header+0x81/0x220 [ 334.730149][T26381] oom_kill_process+0x342/0x400 [ 334.730180][T26381] out_of_memory+0x979/0xb80 [ 334.730247][T26381] try_charge_memcg+0x5e6/0x9e0 [ 334.730273][T26381] obj_cgroup_charge_pages+0xa6/0x150 [ 334.730300][T26381] __memcg_kmem_charge_page+0x9f/0x170 [ 334.730334][T26381] __alloc_frozen_pages_noprof+0x188/0x360 [ 334.730408][T26381] alloc_pages_mpol+0xb3/0x250 [ 334.730435][T26381] alloc_pages_noprof+0x90/0x130 [ 334.730481][T26381] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 334.730557][T26381] __kvmalloc_node_noprof+0x30f/0x4e0 [ 334.730654][T26381] ? ip_set_alloc+0x1f/0x30 [ 334.730693][T26381] ? ip_set_alloc+0x1f/0x30 [ 334.730786][T26381] ? hash_netiface_create+0x21b/0x740 [ 334.730819][T26381] ? __kmalloc_cache_noprof+0x189/0x320 [ 334.730877][T26381] ip_set_alloc+0x1f/0x30 [ 334.730982][T26381] hash_netiface_create+0x282/0x740 [ 334.731025][T26381] ? __pfx_hash_netiface_create+0x10/0x10 [ 334.731058][T26381] ip_set_create+0x3c9/0x960 [ 334.731111][T26381] ? __nla_parse+0x40/0x60 [ 334.731206][T26381] nfnetlink_rcv_msg+0x4c3/0x590 [ 334.731252][T26381] netlink_rcv_skb+0x123/0x220 [ 334.731325][T26381] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 334.731360][T26381] nfnetlink_rcv+0x16b/0x1690 [ 334.731390][T26381] ? nlmon_xmit+0x4f/0x60 [ 334.731434][T26381] ? consume_skb+0x49/0x150 [ 334.731454][T26381] ? nlmon_xmit+0x4f/0x60 [ 334.731511][T26381] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 334.731535][T26381] ? __dev_queue_xmit+0x1200/0x2000 [ 334.731556][T26381] ? __dev_queue_xmit+0x182/0x2000 [ 334.731593][T26381] ? ref_tracker_free+0x37d/0x3e0 [ 334.731619][T26381] ? __netlink_deliver_tap+0x4dc/0x500 [ 334.731644][T26381] netlink_unicast+0x5bd/0x690 [ 334.731689][T26381] netlink_sendmsg+0x58b/0x6b0 [ 334.731773][T26381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.731794][T26381] __sock_sendmsg+0x145/0x180 [ 334.731822][T26381] ____sys_sendmsg+0x31e/0x4e0 [ 334.731848][T26381] ___sys_sendmsg+0x17b/0x1d0 [ 334.731957][T26381] __x64_sys_sendmsg+0xd4/0x160 [ 334.731985][T26381] x64_sys_call+0x191e/0x2ff0 [ 334.732014][T26381] do_syscall_64+0xd2/0x200 [ 334.732042][T26381] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.732088][T26381] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.732114][T26381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.732140][T26381] RIP: 0033:0x7fd7d025ebe9 [ 334.732156][T26381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.732208][T26381] RSP: 002b:00007fd7cecbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.732228][T26381] RAX: ffffffffffffffda RBX: 00007fd7d0485fa0 RCX: 00007fd7d025ebe9 [ 334.732241][T26381] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 334.732254][T26381] RBP: 00007fd7d02e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.732267][T26381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.732279][T26381] R13: 00007fd7d0486038 R14: 00007fd7d0485fa0 R15: 00007fff17b06778 [ 334.732298][T26381] [ 334.732373][T26381] memory: usage 307200kB, limit 307200kB, failcnt 856 [ 334.824252][T26400] netlink: 'syz.2.6495': attribute type 37 has an invalid length. [ 334.826760][T26381] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 334.872314][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 334.872330][ T29] audit: type=1400 audit(1757520349.280:19373): avc: denied { watch watch_reads } for pid=26401 comm="syz.5.6496" path="/428" dev="tmpfs" ino=2270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 334.874643][T26381] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 334.874676][T26381] Memory cgroup stats for /syz1: [ 335.254669][T26381] cache 20480 [ 335.254681][T26381] rss 0 [ 335.254689][T26381] shmem 0 [ 335.254696][T26381] mapped_file 0 [ 335.254703][T26381] dirty 0 [ 335.254716][T26381] writeback 0 [ 335.254722][T26381] workingset_refault_anon 235 [ 335.254734][T26381] workingset_refault_file 3237 [ 335.254742][T26381] swap 446464 [ 335.254750][T26381] swapcached 4096 [ 335.254757][T26381] pgpgin 339035 [ 335.254765][T26381] pgpgout 339017 [ 335.254772][T26381] pgfault 348519 [ 335.254779][T26381] pgmajfault 134 [ 335.311997][T26381] inactive_anon 4096 [ 335.312008][T26381] active_anon 0 [ 335.312014][T26381] inactive_file 0 [ 335.312020][T26381] active_file 69632 [ 335.312027][T26381] unevictable 0 [ 335.312071][T26381] hierarchical_memory_limit 314572800 [ 335.312080][T26381] hierarchical_memsw_limit 9223372036854771712 [ 335.312090][T26381] total_cache 20480 [ 335.312098][T26381] total_rss 0 [ 335.312104][T26381] total_shmem 0 [ 335.319421][ T29] audit: type=1400 audit(1757520349.730:19374): avc: denied { unmount } for pid=20314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 335.320277][T26381] total_mapped_file 0 [ 335.320286][T26381] total_dirty 0 [ 335.320293][T26381] total_writeback 0 [ 335.388736][T26381] total_workingset_refault_anon 235 [ 335.388750][T26381] total_workingset_refault_file 3237 [ 335.388759][T26381] total_swap 446464 [ 335.388766][T26381] total_swapcached 4096 [ 335.408116][T26381] total_pgpgin 339035 [ 335.408127][T26381] total_pgpgout 339017 [ 335.408134][T26381] total_pgfault 348519 [ 335.408181][T26381] total_pgmajfault 134 [ 335.408187][T26381] total_inactive_anon 4096 [ 335.408195][T26381] total_active_anon 0 [ 335.408202][T26381] total_inactive_file 0 [ 335.408209][T26381] total_active_file 69632 [ 335.437363][T26409] random: crng reseeded on system resumption [ 335.438766][T26381] total_unevictable 0 [ 335.452687][T26381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6488,pid=26380,uid=0 [ 335.468889][T26381] Memory cgroup out of memory: Killed process 26380 (syz.1.6488) total-vm:95680kB, anon-rss:944kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 335.608533][T26414] serio: Serial port ptm0 [ 335.840976][T26423] serio: Serial port ptm0 [ 335.990113][T26435] lo speed is unknown, defaulting to 1000 [ 336.329327][T26459] random: crng reseeded on system resumption [ 336.825159][ T29] audit: type=1326 audit(1757520351.169:19375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8915dfebe9 code=0x7ffc0000 [ 336.825211][ T29] audit: type=1326 audit(1757520351.169:19376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8915dfebe9 code=0x7ffc0000 [ 336.825236][ T29] audit: type=1326 audit(1757520351.169:19377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8915dfebe9 code=0x7ffc0000 [ 336.893112][T26471] syz_tun: entered allmulticast mode [ 336.908948][T26471] dvmrp8: entered allmulticast mode [ 336.912573][ T29] audit: type=1326 audit(1757520351.319:19378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3de8ebe9 code=0x7ffc0000 [ 336.912622][ T29] audit: type=1326 audit(1757520351.319:19379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f0d3de8ebe9 code=0x7ffc0000 [ 336.912692][ T29] audit: type=1326 audit(1757520351.319:19380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3de8ebe9 code=0x7ffc0000 [ 336.912717][ T29] audit: type=1326 audit(1757520351.319:19381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0d3de8ebe9 code=0x7ffc0000 [ 336.912779][ T29] audit: type=1326 audit(1757520351.319:19382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26470 comm="syz.3.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3de8ebe9 code=0x7ffc0000 [ 337.203186][T26471] syz_tun: left allmulticast mode [ 337.209800][T26471] dvmrp8: left allmulticast mode [ 337.229654][T26480] lo speed is unknown, defaulting to 1000 [ 337.316182][T26485] syzkaller0: entered allmulticast mode [ 337.325997][T26485] syzkaller0 (unregistering): left allmulticast mode [ 337.686179][T26504] lo speed is unknown, defaulting to 1000 [ 337.725228][T26496] hub 9-0:1.0: USB hub found [ 337.730033][T26496] hub 9-0:1.0: 8 ports detected [ 337.743162][T26496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.760831][T26496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.869613][T26524] random: crng reseeded on system resumption [ 338.173618][T26535] hub 9-0:1.0: USB hub found [ 338.173725][T26535] hub 9-0:1.0: 8 ports detected [ 338.189873][T26535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.189925][T26535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.656585][T26545] lo speed is unknown, defaulting to 1000 [ 338.874802][T26564] lo: entered allmulticast mode [ 338.888671][T26564] dvmrp8: entered allmulticast mode [ 338.912587][T26564] lo: left allmulticast mode [ 338.917578][T26564] dvmrp8: left allmulticast mode [ 338.935429][T26572] syzkaller0: entered allmulticast mode [ 338.956417][T26572] syzkaller0 (unregistering): left allmulticast mode [ 339.975096][T26616] random: crng reseeded on system resumption [ 341.098049][T26645] serio: Serial port ptm0 [ 341.282385][T26656] netlink: 'syz.3.6596': attribute type 37 has an invalid length. [ 341.502500][T26666] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6602'. [ 341.658715][T26672] random: crng reseeded on system resumption [ 341.888407][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 341.888422][ T29] audit: type=1400 audit(1757520356.297:19418): avc: denied { getopt } for pid=26693 comm="syz.6.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 341.915421][T26694] IPVS: length: 113 != 24 [ 341.947148][ T29] audit: type=1400 audit(1757520356.347:19419): avc: denied { write } for pid=26693 comm="syz.6.6615" name="file0" dev="tmpfs" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.971552][ T29] audit: type=1400 audit(1757520356.347:19420): avc: denied { open } for pid=26693 comm="syz.6.6615" path="/363/file0" dev="tmpfs" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.996022][ T29] audit: type=1400 audit(1757520356.407:19421): avc: denied { ioctl } for pid=26693 comm="syz.6.6615" path="/363/file0" dev="tmpfs" ino=1950 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.669842][T26752] serio: Serial port ptm0 [ 342.822130][T26766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6646'. [ 343.207072][T26795] serio: Serial port ptm0 [ 343.244776][T26798] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6659'. [ 343.567986][T26815] IPVS: length: 113 != 24 [ 343.868521][T26833] serio: Serial port ptm1 [ 344.185865][T26858] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6685'. [ 344.220605][T26865] serio: Serial port ptm1 [ 344.263125][T26873] C: renamed from team_slave_0 [ 344.271065][T26873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6692'. [ 344.461575][T26880] hub 9-0:1.0: USB hub found [ 344.467406][T26880] hub 9-0:1.0: 8 ports detected [ 344.476708][T26880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.485615][T26880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.567512][T26900] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6705'. [ 344.682910][T26909] serio: Serial port ptm0 [ 344.820157][T26913] hub 9-0:1.0: USB hub found [ 344.820209][T26913] hub 9-0:1.0: 8 ports detected [ 344.829332][T26913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.830921][T26914] hub 9-0:1.0: USB hub found [ 344.874868][T26913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.891246][T26914] hub 9-0:1.0: 8 ports detected [ 344.902080][T26912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.902139][T26912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.222129][T26940] random: crng reseeded on system resumption [ 345.337995][T26952] serio: Serial port ptm0 [ 345.504542][T26969] lo speed is unknown, defaulting to 1000 [ 345.595050][T26988] serio: Serial port ptm0 [ 345.679674][T27003] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6750'. [ 346.738913][T27050] random: crng reseeded on system resumption [ 346.855341][T27063] netlink: 'syz.3.6774': attribute type 37 has an invalid length. [ 347.411721][T27083] hub 9-0:1.0: USB hub found [ 347.416801][T27083] hub 9-0:1.0: 8 ports detected [ 347.431370][T27083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.441736][T27083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.795810][T27121] hub 9-0:1.0: USB hub found [ 347.801085][T27121] hub 9-0:1.0: 8 ports detected [ 347.812718][T27121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.812901][T27121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.222132][T27145] random: crng reseeded on system resumption [ 348.237923][T27146] netlink: 'syz.2.6809': attribute type 37 has an invalid length. [ 348.663043][T27191] lo speed is unknown, defaulting to 1000 [ 348.768207][T27201] random: crng reseeded on system resumption [ 349.102392][T27219] lo speed is unknown, defaulting to 1000 [ 349.210373][T27230] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.6847'. [ 349.239909][T27232] random: crng reseeded on system resumption [ 349.316043][T27238] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6851'. [ 349.336971][T27241] dummy0: entered allmulticast mode [ 349.345932][T27241] dummy0: left allmulticast mode [ 349.360069][T27241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27241 comm=syz.2.6852 [ 349.373044][T27241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27241 comm=syz.2.6852 [ 349.388993][T27241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=27241 comm=syz.2.6852 [ 349.425357][T27246] netlink: 'syz.1.6854': attribute type 37 has an invalid length. [ 349.786838][T27279] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.6867'. [ 349.828598][T27286] random: crng reseeded on system resumption [ 349.860833][T27290] serio: Serial port ptm2 [ 350.052695][T27296] lo speed is unknown, defaulting to 1000 [ 350.320272][T27321] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.6885'. [ 350.362145][T27325] lo speed is unknown, defaulting to 1000 [ 350.644475][T27363] serio: Serial port ptm0 [ 350.721271][T27370] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.6905'. [ 350.758635][T27373] random: crng reseeded on system resumption [ 351.347470][T27352] syz.3.6899 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 351.362019][T27352] CPU: 1 UID: 0 PID: 27352 Comm: syz.3.6899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 351.362047][T27352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.362060][T27352] Call Trace: [ 351.362067][T27352] [ 351.362075][T27352] __dump_stack+0x1d/0x30 [ 351.362100][T27352] dump_stack_lvl+0xe8/0x140 [ 351.362120][T27352] dump_stack+0x15/0x1b [ 351.362190][T27352] dump_header+0x81/0x220 [ 351.362222][T27352] oom_kill_process+0x342/0x400 [ 351.362269][T27352] out_of_memory+0x979/0xb80 [ 351.362300][T27352] try_charge_memcg+0x5e6/0x9e0 [ 351.362327][T27352] obj_cgroup_charge_pages+0xa6/0x150 [ 351.362403][T27352] __memcg_kmem_charge_page+0x9f/0x170 [ 351.362473][T27352] __alloc_frozen_pages_noprof+0x188/0x360 [ 351.362511][T27352] alloc_pages_mpol+0xb3/0x250 [ 351.362546][T27352] alloc_pages_noprof+0x90/0x130 [ 351.362625][T27352] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 351.362672][T27352] __kvmalloc_node_noprof+0x30f/0x4e0 [ 351.362700][T27352] ? ip_set_alloc+0x1f/0x30 [ 351.362768][T27352] ? ip_set_alloc+0x1f/0x30 [ 351.362797][T27352] ? __kmalloc_cache_noprof+0x189/0x320 [ 351.362822][T27352] ip_set_alloc+0x1f/0x30 [ 351.362856][T27352] hash_netiface_create+0x282/0x740 [ 351.362923][T27352] ? __pfx_hash_netiface_create+0x10/0x10 [ 351.362956][T27352] ip_set_create+0x3c9/0x960 [ 351.363009][T27352] ? __nla_parse+0x40/0x60 [ 351.363032][T27352] nfnetlink_rcv_msg+0x4c3/0x590 [ 351.363076][T27352] netlink_rcv_skb+0x123/0x220 [ 351.363099][T27352] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.363180][T27352] nfnetlink_rcv+0x16b/0x1690 [ 351.363211][T27352] ? nlmon_xmit+0x4f/0x60 [ 351.363234][T27352] ? consume_skb+0x49/0x150 [ 351.363255][T27352] ? nlmon_xmit+0x4f/0x60 [ 351.363289][T27352] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 351.363312][T27352] ? __dev_queue_xmit+0x1200/0x2000 [ 351.363377][T27352] ? __dev_queue_xmit+0x182/0x2000 [ 351.363402][T27352] ? ref_tracker_free+0x37d/0x3e0 [ 351.363432][T27352] ? __netlink_deliver_tap+0x4dc/0x500 [ 351.363457][T27352] netlink_unicast+0x5bd/0x690 [ 351.363490][T27352] netlink_sendmsg+0x58b/0x6b0 [ 351.363518][T27352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.363538][T27352] __sock_sendmsg+0x145/0x180 [ 351.363608][T27352] ____sys_sendmsg+0x31e/0x4e0 [ 351.363637][T27352] ___sys_sendmsg+0x17b/0x1d0 [ 351.363700][T27352] __x64_sys_sendmsg+0xd4/0x160 [ 351.363724][T27352] x64_sys_call+0x191e/0x2ff0 [ 351.363743][T27352] do_syscall_64+0xd2/0x200 [ 351.363806][T27352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 351.363831][T27352] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 351.363917][T27352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.363956][T27352] RIP: 0033:0x7f0d3de8ebe9 [ 351.363979][T27352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.363994][T27352] RSP: 002b:00007f0d3c8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.364075][T27352] RAX: ffffffffffffffda RBX: 00007f0d3e0b5fa0 RCX: 00007f0d3de8ebe9 [ 351.364088][T27352] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 351.364102][T27352] RBP: 00007f0d3df11e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.364117][T27352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.364150][T27352] R13: 00007f0d3e0b6038 R14: 00007f0d3e0b5fa0 R15: 00007ffd142a40e8 [ 351.364171][T27352] [ 351.364178][T27352] memory: usage 307200kB, limit 307200kB, failcnt 459 [ 351.715985][T27352] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 351.716005][T27352] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 351.716018][T27352] Memory cgroup stats for /syz3: [ 351.731516][T27352] cache 8192 [ 351.739690][T27352] rss 4096 [ 351.743426][T27352] shmem 0 [ 351.746357][T27352] mapped_file 0 [ 351.749888][T27352] dirty 0 [ 351.752913][T27352] writeback 0 [ 351.756276][T27352] workingset_refault_anon 302 [ 351.760952][T27352] workingset_refault_file 7118 [ 351.765920][T27352] swap 442368 [ 351.769374][T27352] swapcached 12288 [ 351.773818][T27352] pgpgin 589761 [ 351.777423][T27352] pgpgout 589752 [ 351.780964][T27352] pgfault 428981 [ 351.784552][T27352] pgmajfault 188 [ 351.788113][T27352] inactive_anon 12288 [ 351.792208][T27352] active_anon 0 [ 351.795748][T27352] inactive_file 16384 [ 351.799707][T27352] active_file 8192 [ 351.803862][T27352] unevictable 0 [ 351.807382][T27352] hierarchical_memory_limit 314572800 [ 351.812954][T27352] hierarchical_memsw_limit 9223372036854771712 [ 351.819260][T27352] total_cache 8192 [ 351.823078][T27352] total_rss 4096 [ 351.826654][T27352] total_shmem 0 [ 351.830205][T27352] total_mapped_file 0 [ 351.834635][T27352] total_dirty 0 [ 351.838281][T27352] total_writeback 0 [ 351.842409][T27352] total_workingset_refault_anon 302 [ 351.848301][T27352] total_workingset_refault_file 7118 [ 351.853783][T27352] total_swap 442368 [ 351.857575][T27352] total_swapcached 12288 [ 351.862736][T27352] total_pgpgin 589761 [ 351.867025][T27352] total_pgpgout 589752 [ 351.871087][T27352] total_pgfault 428981 [ 351.875194][T27352] total_pgmajfault 188 [ 351.879449][T27352] total_inactive_anon 12288 [ 351.884134][T27352] total_active_anon 0 [ 351.888110][T27352] total_inactive_file 16384 [ 351.893471][T27352] total_active_file 8192 [ 351.898487][T27352] total_unevictable 0 [ 351.902494][T27352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6899,pid=27351,uid=0 [ 351.917530][T27352] Memory cgroup out of memory: Killed process 27351 (syz.3.6899) total-vm:93632kB, anon-rss:944kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 352.002284][T27397] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6917'. [ 352.032942][T27401] random: crng reseeded on system resumption [ 352.288556][T27430] dummy0: entered allmulticast mode [ 352.295164][T27430] dummy0: left allmulticast mode [ 352.301163][T27430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27430 comm=syz.1.6930 [ 352.314274][T27430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27430 comm=syz.1.6930 [ 352.328509][T27430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=27430 comm=syz.1.6930 [ 352.400905][T27437] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.6931'. [ 353.038750][T27449] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6936'. [ 353.161417][T27459] random: crng reseeded on system resumption [ 353.335298][T27477] lo speed is unknown, defaulting to 1000 [ 353.393324][T27490] random: crng reseeded on system resumption [ 353.586593][T27508] serio: Serial port ptm0 [ 353.955448][T27521] lo speed is unknown, defaulting to 1000 [ 354.056445][T27527] random: crng reseeded on system resumption [ 354.475650][T27540] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.6975'. [ 355.146730][T27542] syz.2.6976 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 355.161094][T27542] CPU: 0 UID: 0 PID: 27542 Comm: syz.2.6976 Not tainted syzkaller #0 PREEMPT(voluntary) [ 355.161128][T27542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.161142][T27542] Call Trace: [ 355.161150][T27542] [ 355.161157][T27542] __dump_stack+0x1d/0x30 [ 355.161179][T27542] dump_stack_lvl+0xe8/0x140 [ 355.161287][T27542] dump_stack+0x15/0x1b [ 355.161302][T27542] dump_header+0x81/0x220 [ 355.161331][T27542] oom_kill_process+0x342/0x400 [ 355.161418][T27542] out_of_memory+0x979/0xb80 [ 355.161451][T27542] try_charge_memcg+0x5e6/0x9e0 [ 355.161478][T27542] obj_cgroup_charge_pages+0xa6/0x150 [ 355.161589][T27542] __memcg_kmem_charge_page+0x9f/0x170 [ 355.161683][T27542] __alloc_frozen_pages_noprof+0x188/0x360 [ 355.161729][T27542] alloc_pages_mpol+0xb3/0x250 [ 355.161760][T27542] alloc_pages_noprof+0x90/0x130 [ 355.161833][T27542] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 355.161926][T27542] __kvmalloc_node_noprof+0x30f/0x4e0 [ 355.161952][T27542] ? ip_set_alloc+0x1f/0x30 [ 355.162017][T27542] ? ip_set_alloc+0x1f/0x30 [ 355.162047][T27542] ? __kmalloc_cache_noprof+0x189/0x320 [ 355.162080][T27542] ip_set_alloc+0x1f/0x30 [ 355.162180][T27542] hash_netiface_create+0x282/0x740 [ 355.162246][T27542] ? __pfx_hash_netiface_create+0x10/0x10 [ 355.162323][T27542] ip_set_create+0x3c9/0x960 [ 355.162352][T27542] ? __nla_parse+0x40/0x60 [ 355.162454][T27542] nfnetlink_rcv_msg+0x4c3/0x590 [ 355.162510][T27542] netlink_rcv_skb+0x123/0x220 [ 355.162533][T27542] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 355.162563][T27542] nfnetlink_rcv+0x16b/0x1690 [ 355.162587][T27542] ? free_frozen_page_commit+0x6f/0x2a0 [ 355.162693][T27542] ? _raw_spin_unlock+0x26/0x50 [ 355.162722][T27542] ? __free_frozen_pages+0x25a/0x4e0 [ 355.162822][T27542] ? free_large_kmalloc+0xb1/0x100 [ 355.162852][T27542] ? bpf_check+0x29d6/0xd9e0 [ 355.162896][T27542] ? __rcu_read_unlock+0x4f/0x70 [ 355.162921][T27542] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 355.162954][T27542] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 355.162987][T27542] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 355.163081][T27542] ? should_fail_ex+0x30/0x280 [ 355.163098][T27542] ? selinux_nlmsg_lookup+0x99/0x890 [ 355.163126][T27542] ? __rcu_read_unlock+0x34/0x70 [ 355.163197][T27542] ? __netlink_lookup+0x266/0x2a0 [ 355.163225][T27542] netlink_unicast+0x5bd/0x690 [ 355.163262][T27542] netlink_sendmsg+0x58b/0x6b0 [ 355.163287][T27542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.163310][T27542] __sock_sendmsg+0x145/0x180 [ 355.163382][T27542] ____sys_sendmsg+0x31e/0x4e0 [ 355.163408][T27542] ___sys_sendmsg+0x17b/0x1d0 [ 355.163439][T27542] __x64_sys_sendmsg+0xd4/0x160 [ 355.163509][T27542] x64_sys_call+0x191e/0x2ff0 [ 355.163574][T27542] do_syscall_64+0xd2/0x200 [ 355.163677][T27542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 355.163704][T27542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 355.163728][T27542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.163749][T27542] RIP: 0033:0x7f8915dfebe9 [ 355.163784][T27542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.163800][T27542] RSP: 002b:00007f8914867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.163818][T27542] RAX: ffffffffffffffda RBX: 00007f8916025fa0 RCX: 00007f8915dfebe9 [ 355.163830][T27542] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 355.163844][T27542] RBP: 00007f8915e81e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.163859][T27542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.163873][T27542] R13: 00007f8916026038 R14: 00007f8916025fa0 R15: 00007ffe1bf53308 [ 355.163927][T27542] [ 355.534389][T27542] memory: usage 307200kB, limit 307200kB, failcnt 898 [ 355.541602][T27542] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 355.550164][T27542] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 355.557865][T27542] Memory cgroup stats for /syz2: [ 355.565101][T27542] cache 8192 [ 355.573630][T27542] rss 0 [ 355.576643][T27542] shmem 0 [ 355.579596][T27542] mapped_file 0 [ 355.580431][T27565] serio: Serial port ptm0 [ 355.583091][T27542] dirty 0 [ 355.583099][T27542] writeback 0 [ 355.594535][T27542] workingset_refault_anon 307 [ 355.599778][T27542] workingset_refault_file 5666 [ 355.604785][T27542] swap 438272 [ 355.608447][T27542] swapcached 16384 [ 355.612158][T27542] pgpgin 433647 [ 355.615639][T27542] pgpgout 433616 [ 355.619233][T27542] pgfault 417448 [ 355.622783][T27542] pgmajfault 146 [ 355.626719][T27542] inactive_anon 0 [ 355.630334][T27542] active_anon 16384 [ 355.634303][T27542] inactive_file 0 [ 355.638119][T27542] active_file 110592 [ 355.642090][T27542] unevictable 0 [ 355.645619][T27542] hierarchical_memory_limit 314572800 [ 355.651002][T27542] hierarchical_memsw_limit 9223372036854771712 [ 355.657609][T27542] total_cache 8192 [ 355.661430][T27542] total_rss 0 [ 355.665103][T27542] total_shmem 0 [ 355.668734][T27542] total_mapped_file 0 [ 355.673563][T27542] total_dirty 0 [ 355.677397][T27542] total_writeback 0 [ 355.681403][T27542] total_workingset_refault_anon 307 [ 355.687015][T27542] total_workingset_refault_file 5666 [ 355.692567][T27542] total_swap 438272 [ 355.696425][T27542] total_swapcached 16384 [ 355.700685][T27542] total_pgpgin 433647 [ 355.704887][T27542] total_pgpgout 433616 [ 355.709101][T27542] total_pgfault 417448 [ 355.713183][T27542] total_pgmajfault 146 [ 355.717811][T27542] total_inactive_anon 0 [ 355.721963][T27542] total_active_anon 16384 [ 355.726411][T27542] total_inactive_file 0 [ 355.730643][T27542] total_active_file 110592 [ 355.735128][T27542] total_unevictable 0 [ 355.739393][T27542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6976,pid=27541,uid=0 [ 355.755258][T27542] Memory cgroup out of memory: Killed process 27541 (syz.2.6976) total-vm:93632kB, anon-rss:944kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 356.030770][T27588] random: crng reseeded on system resumption [ 356.090011][T27592] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6997'. [ 356.503134][T27610] netlink: 'syz.1.7005': attribute type 37 has an invalid length. [ 356.619723][T27616] random: crng reseeded on system resumption [ 356.684189][T27611] lo speed is unknown, defaulting to 1000 [ 356.731627][T27623] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7009'. [ 356.869470][T27627] hub 9-0:1.0: USB hub found [ 356.883561][T27627] hub 9-0:1.0: 8 ports detected [ 356.898698][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.907894][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.948517][T27598] syz.2.7000 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 356.963173][T27598] CPU: 0 UID: 0 PID: 27598 Comm: syz.2.7000 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.963204][T27598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.963217][T27598] Call Trace: [ 356.963226][T27598] [ 356.963234][T27598] __dump_stack+0x1d/0x30 [ 356.963257][T27598] dump_stack_lvl+0xe8/0x140 [ 356.963344][T27598] dump_stack+0x15/0x1b [ 356.963358][T27598] dump_header+0x81/0x220 [ 356.963424][T27598] oom_kill_process+0x342/0x400 [ 356.963456][T27598] out_of_memory+0x979/0xb80 [ 356.963492][T27598] try_charge_memcg+0x5e6/0x9e0 [ 356.963520][T27598] obj_cgroup_charge_pages+0xa6/0x150 [ 356.963565][T27598] __memcg_kmem_charge_page+0x9f/0x170 [ 356.963591][T27598] __alloc_frozen_pages_noprof+0x188/0x360 [ 356.963732][T27598] alloc_pages_mpol+0xb3/0x250 [ 356.963791][T27598] alloc_pages_noprof+0x90/0x130 [ 356.963847][T27598] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 356.963924][T27598] __kvmalloc_node_noprof+0x30f/0x4e0 [ 356.964002][T27598] ? ip_set_alloc+0x1f/0x30 [ 356.964027][T27598] ? ip_set_alloc+0x1f/0x30 [ 356.964100][T27598] ? __kmalloc_cache_noprof+0x189/0x320 [ 356.964124][T27598] ip_set_alloc+0x1f/0x30 [ 356.964183][T27598] hash_netiface_create+0x282/0x740 [ 356.964214][T27598] ? __pfx_hash_netiface_create+0x10/0x10 [ 356.964304][T27598] ip_set_create+0x3c9/0x960 [ 356.964330][T27598] ? __nla_parse+0x40/0x60 [ 356.964352][T27598] nfnetlink_rcv_msg+0x4c3/0x590 [ 356.964421][T27598] ? __pfx_cmp_ex_search+0x10/0x10 [ 356.964463][T27598] netlink_rcv_skb+0x123/0x220 [ 356.964480][T27598] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 356.964533][T27598] nfnetlink_rcv+0x16b/0x1690 [ 356.964599][T27598] ? cmp_ex_search+0x25/0x40 [ 356.964623][T27598] ? strncpy_from_kernel_nofault+0x78/0x130 [ 356.964643][T27598] ? cmp_ex_search+0x25/0x40 [ 356.964718][T27598] ? bsearch+0x95/0xc0 [ 356.964743][T27598] ? __pfx_cmp_ex_search+0x10/0x10 [ 356.964770][T27598] ? strncpy_from_kernel_nofault+0x78/0x130 [ 356.964827][T27598] ? search_extable+0x53/0x80 [ 356.964851][T27598] ? strncpy_from_kernel_nofault+0x78/0x130 [ 356.964872][T27598] ? strncpy_from_kernel_nofault+0x78/0x130 [ 356.964941][T27598] ? fixup_exception+0x741/0xd50 [ 356.964963][T27598] ? strncpy_from_kernel_nofault+0x78/0x130 [ 356.964984][T27598] ? spurious_kernel_fault+0xf4/0x4a0 [ 356.965043][T27598] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 356.965077][T27598] ? exc_page_fault+0x7b/0xa0 [ 356.965101][T27598] ? should_fail_ex+0x30/0x280 [ 356.965122][T27598] ? selinux_nlmsg_lookup+0x99/0x890 [ 356.965181][T27598] ? __rcu_read_unlock+0x34/0x70 [ 356.965202][T27598] ? __netlink_lookup+0x266/0x2a0 [ 356.965227][T27598] netlink_unicast+0x5bd/0x690 [ 356.965335][T27598] netlink_sendmsg+0x58b/0x6b0 [ 356.965414][T27598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.965435][T27598] __sock_sendmsg+0x145/0x180 [ 356.965461][T27598] ____sys_sendmsg+0x31e/0x4e0 [ 356.965484][T27598] ___sys_sendmsg+0x17b/0x1d0 [ 356.965586][T27598] __x64_sys_sendmsg+0xd4/0x160 [ 356.965614][T27598] x64_sys_call+0x191e/0x2ff0 [ 356.965690][T27598] do_syscall_64+0xd2/0x200 [ 356.965750][T27598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.965770][T27598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 356.965810][T27598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.965860][T27598] RIP: 0033:0x7f8915dfebe9 [ 356.965935][T27598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.965979][T27598] RSP: 002b:00007f8914867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.965999][T27598] RAX: ffffffffffffffda RBX: 00007f8916025fa0 RCX: 00007f8915dfebe9 [ 356.966013][T27598] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 356.966027][T27598] RBP: 00007f8915e81e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.966039][T27598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.966052][T27598] R13: 00007f8916026038 R14: 00007f8916025fa0 R15: 00007ffe1bf53308 [ 356.966096][T27598] [ 357.360226][T27598] memory: usage 307200kB, limit 307200kB, failcnt 1044 [ 357.367515][T27598] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 357.375550][T27598] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 357.383252][T27598] Memory cgroup stats for /syz2: [ 357.423822][T27598] cache 16384 [ 357.432433][T27598] rss 0 [ 357.435868][T27598] shmem 0 [ 357.438996][T27598] mapped_file 0 [ 357.442458][T27598] dirty 0 [ 357.445434][T27598] writeback 0 [ 357.448706][T27598] workingset_refault_anon 334 [ 357.453407][T27598] workingset_refault_file 5735 [ 357.458402][T27598] swap 450560 [ 357.461899][T27598] swapcached 4096 [ 357.466596][T27598] pgpgin 434126 [ 357.470268][T27598] pgpgout 434096 [ 357.473804][T27598] pgfault 418311 [ 357.477428][T27598] pgmajfault 161 [ 357.481085][T27598] inactive_anon 0 [ 357.484735][T27598] active_anon 0 [ 357.488245][T27598] inactive_file 0 [ 357.491973][T27598] active_file 118784 [ 357.496731][T27598] unevictable 0 [ 357.500256][T27598] hierarchical_memory_limit 314572800 [ 357.505668][T27598] hierarchical_memsw_limit 9223372036854771712 [ 357.511818][T27598] total_cache 16384 [ 357.515647][T27598] total_rss 0 [ 357.518910][T27598] total_shmem 0 [ 357.522373][T27598] total_mapped_file 0 [ 357.526736][T27598] total_dirty 0 [ 357.530379][T27598] total_writeback 0 [ 357.534334][T27598] total_workingset_refault_anon 334 [ 357.539776][T27598] total_workingset_refault_file 5735 [ 357.545325][T27598] total_swap 450560 [ 357.549216][T27598] total_swapcached 4096 [ 357.553461][T27598] total_pgpgin 434126 [ 357.558314][T27598] total_pgpgout 434096 [ 357.562556][T27598] total_pgfault 418311 [ 357.566790][T27598] total_pgmajfault 161 [ 357.570957][T27598] total_inactive_anon 0 [ 357.575442][T27598] total_active_anon 0 [ 357.579683][T27598] total_inactive_file 0 [ 357.584527][T27598] total_active_file 118784 [ 357.589777][T27598] total_unevictable 0 [ 357.593961][T27598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7000,pid=27597,uid=0 [ 357.610117][T27598] Memory cgroup out of memory: Killed process 27597 (syz.2.7000) total-vm:93632kB, anon-rss:1068kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 357.739031][T27652] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7023'. [ 357.801070][T27656] lo speed is unknown, defaulting to 1000 [ 357.828331][T27662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27662 comm=syz.2.7027 [ 357.841535][T27662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27662 comm=syz.2.7027 [ 358.056227][T27691] lo speed is unknown, defaulting to 1000 [ 358.286144][T27709] netlink: 'syz.6.7045': attribute type 37 has an invalid length. [ 358.338001][T27708] hub 9-0:1.0: USB hub found [ 358.342946][T27708] hub 9-0:1.0: 8 ports detected [ 358.353661][T27708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.362757][T27708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.611151][T27693] syz.3.7036 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 358.626218][T27693] CPU: 1 UID: 0 PID: 27693 Comm: syz.3.7036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 358.626263][T27693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.626319][T27693] Call Trace: [ 358.626326][T27693] [ 358.626335][T27693] __dump_stack+0x1d/0x30 [ 358.626365][T27693] dump_stack_lvl+0xe8/0x140 [ 358.626380][T27693] dump_stack+0x15/0x1b [ 358.626395][T27693] dump_header+0x81/0x220 [ 358.626427][T27693] oom_kill_process+0x342/0x400 [ 358.626520][T27693] out_of_memory+0x979/0xb80 [ 358.626554][T27693] try_charge_memcg+0x5e6/0x9e0 [ 358.626612][T27693] obj_cgroup_charge_pages+0xa6/0x150 [ 358.626646][T27693] __memcg_kmem_charge_page+0x9f/0x170 [ 358.626685][T27693] __alloc_frozen_pages_noprof+0x188/0x360 [ 358.626721][T27693] alloc_pages_mpol+0xb3/0x250 [ 358.626835][T27693] alloc_pages_noprof+0x90/0x130 [ 358.626873][T27693] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 358.626918][T27693] __kvmalloc_node_noprof+0x30f/0x4e0 [ 358.626965][T27693] ? ip_set_alloc+0x1f/0x30 [ 358.627068][T27693] ? ip_set_alloc+0x1f/0x30 [ 358.627094][T27693] ? __kmalloc_cache_noprof+0x189/0x320 [ 358.627132][T27693] ip_set_alloc+0x1f/0x30 [ 358.627189][T27693] hash_netiface_create+0x282/0x740 [ 358.627245][T27693] ? __pfx_hash_netiface_create+0x10/0x10 [ 358.627274][T27693] ip_set_create+0x3c9/0x960 [ 358.627299][T27693] ? __nla_parse+0x40/0x60 [ 358.627321][T27693] nfnetlink_rcv_msg+0x4c3/0x590 [ 358.627380][T27693] netlink_rcv_skb+0x123/0x220 [ 358.627398][T27693] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 358.627432][T27693] nfnetlink_rcv+0x16b/0x1690 [ 358.627493][T27693] ? nlmon_xmit+0x4f/0x60 [ 358.627516][T27693] ? consume_skb+0x49/0x150 [ 358.627603][T27693] ? nlmon_xmit+0x4f/0x60 [ 358.627636][T27693] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 358.627679][T27693] ? __dev_queue_xmit+0x1200/0x2000 [ 358.627701][T27693] ? __dev_queue_xmit+0x182/0x2000 [ 358.627722][T27693] ? ref_tracker_free+0x37d/0x3e0 [ 358.627746][T27693] ? __netlink_deliver_tap+0x4dc/0x500 [ 358.627810][T27693] netlink_unicast+0x5bd/0x690 [ 358.627843][T27693] netlink_sendmsg+0x58b/0x6b0 [ 358.627868][T27693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.627966][T27693] __sock_sendmsg+0x145/0x180 [ 358.627993][T27693] ____sys_sendmsg+0x31e/0x4e0 [ 358.628021][T27693] ___sys_sendmsg+0x17b/0x1d0 [ 358.628059][T27693] __x64_sys_sendmsg+0xd4/0x160 [ 358.628083][T27693] x64_sys_call+0x191e/0x2ff0 [ 358.628102][T27693] do_syscall_64+0xd2/0x200 [ 358.628194][T27693] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 358.628216][T27693] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 358.628274][T27693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.628351][T27693] RIP: 0033:0x7f0d3de8ebe9 [ 358.628410][T27693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.628430][T27693] RSP: 002b:00007f0d3c8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.628452][T27693] RAX: ffffffffffffffda RBX: 00007f0d3e0b5fa0 RCX: 00007f0d3de8ebe9 [ 358.628465][T27693] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 358.628477][T27693] RBP: 00007f0d3df11e19 R08: 0000000000000000 R09: 0000000000000000 [ 358.628507][T27693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.628522][T27693] R13: 00007f0d3e0b6038 R14: 00007f0d3e0b5fa0 R15: 00007ffd142a40e8 [ 358.628542][T27693] [ 358.628551][T27693] memory: usage 307200kB, limit 307200kB, failcnt 865 [ 358.981117][T27693] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 358.981136][T27693] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 358.981147][T27693] Memory cgroup stats for /syz3: [ 358.981883][T27693] cache 8192 [ 358.981892][T27693] rss 0 [ 358.981898][T27693] shmem 0 [ 358.981904][T27693] mapped_file 0 [ 358.981910][T27693] dirty 0 [ 358.981918][T27693] writeback 0 [ 358.982000][T27693] workingset_refault_anon 330 [ 358.982009][T27693] workingset_refault_file 7409 [ 358.982017][T27693] swap 434176 [ 358.982025][T27693] swapcached 20480 [ 358.982033][T27693] pgpgin 592282 [ 358.982040][T27693] pgpgout 592271 [ 358.982047][T27693] pgfault 432629 [ 358.982054][T27693] pgmajfault 203 [ 358.982061][T27693] inactive_anon 4096 [ 358.982068][T27693] active_anon 16384 [ 358.982074][T27693] inactive_file 0 [ 358.982080][T27693] active_file 24576 [ 358.982087][T27693] unevictable 0 [ 358.982093][T27693] hierarchical_memory_limit 314572800 [ 358.982100][T27693] hierarchical_memsw_limit 9223372036854771712 [ 358.982108][T27693] total_cache 8192 [ 358.982114][T27693] total_rss 0 [ 358.982121][T27693] total_shmem 0 [ 358.982127][T27693] total_mapped_file 0 [ 358.982133][T27693] total_dirty 0 [ 358.982164][T27693] total_writeback 0 [ 358.982171][T27693] total_workingset_refault_anon 330 [ 358.982178][T27693] total_workingset_refault_file 7409 [ 358.982185][T27693] total_swap 434176 [ 358.982192][T27693] total_swapcached 20480 [ 358.982199][T27693] total_pgpgin 592282 [ 358.982207][T27693] total_pgpgout 592271 [ 358.982260][T27693] total_pgfault 432629 [ 358.982268][T27693] total_pgmajfault 203 [ 358.982276][T27693] total_inactive_anon 4096 [ 358.982284][T27693] total_active_anon 16384 [ 358.982292][T27693] total_inactive_file 0 [ 358.982300][T27693] total_active_file 24576 [ 358.982307][T27693] total_unevictable 0 [ 358.982315][T27693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7036,pid=27692,uid=0 [ 358.982458][T27693] Memory cgroup out of memory: Killed process 27692 (syz.3.7036) total-vm:93632kB, anon-rss:940kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 359.067362][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 359.283138][T27737] lo speed is unknown, defaulting to 1000 [ 359.808816][T27782] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7075'. [ 359.860965][T27784] random: crng reseeded on system resumption [ 360.539144][T27805] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7087'. [ 360.727870][T27809] hub 9-0:1.0: USB hub found [ 360.732577][T27809] hub 9-0:1.0: 8 ports detected [ 360.740698][T27809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.750618][T27809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.799197][T27795] hub 9-0:1.0: USB hub found [ 360.804001][T27795] hub 9-0:1.0: 8 ports detected [ 360.811722][T27795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.821829][T27795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.456802][T27837] lo speed is unknown, defaulting to 1000 [ 361.790403][T27882] lo speed is unknown, defaulting to 1000 [ 361.852940][T27889] dummy0: entered allmulticast mode [ 361.873840][T27889] dummy0: left allmulticast mode [ 362.728837][T27929] dummy0: entered allmulticast mode [ 362.734761][T27929] dummy0: left allmulticast mode [ 362.863540][T27940] lo speed is unknown, defaulting to 1000 [ 362.981146][T27948] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7143'. [ 363.096334][T27951] hub 9-0:1.0: USB hub found [ 363.103423][T27951] hub 9-0:1.0: 8 ports detected [ 363.129130][T27951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.140414][T27951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.766303][T27977] hub 9-0:1.0: USB hub found [ 363.766489][T27977] hub 9-0:1.0: 8 ports detected [ 363.769550][T27977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.787186][T27977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.076185][T27994] netlink: 'syz.6.7160': attribute type 37 has an invalid length. [ 364.093829][T27996] lo speed is unknown, defaulting to 1000 [ 364.183355][T28006] lo speed is unknown, defaulting to 1000 [ 364.250283][T28016] dummy0: entered allmulticast mode [ 364.255817][T28016] dummy0: left allmulticast mode [ 364.262125][T28016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28016 comm=syz.2.7170 [ 364.275197][T28016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28016 comm=syz.2.7170 [ 364.437829][T28027] lo speed is unknown, defaulting to 1000 [ 364.612559][T28037] random: crng reseeded on system resumption [ 364.785409][T28043] lo speed is unknown, defaulting to 1000 [ 364.807421][T28048] dummy0: entered allmulticast mode [ 364.807512][T28048] dummy0: left allmulticast mode [ 364.807898][T28048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28048 comm=syz.1.7183 [ 364.807961][T28048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28048 comm=syz.1.7183 [ 364.916716][T28055] netlink: 'syz.3.7185': attribute type 37 has an invalid length. [ 364.967950][T28056] hub 9-0:1.0: USB hub found [ 364.968008][T28056] hub 9-0:1.0: 8 ports detected [ 364.970880][T28056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.988498][T28056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.204430][T28065] lo speed is unknown, defaulting to 1000 [ 365.258563][T28072] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7194'. [ 365.352937][T28083] netlink: 'syz.6.7196': attribute type 37 has an invalid length. [ 365.779691][T28099] random: crng reseeded on system resumption [ 365.926065][T28109] serio: Serial port ptm0 [ 365.958840][T28116] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7207'. [ 365.996063][T28120] dummy0: entered allmulticast mode [ 366.002421][T28120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28120 comm=syz.3.7210 [ 366.015553][T28120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28120 comm=syz.3.7210 [ 366.030160][T28119] dummy0: left allmulticast mode [ 366.102474][T28123] lo speed is unknown, defaulting to 1000 [ 366.209973][T28131] lo speed is unknown, defaulting to 1000 [ 366.322010][T28138] hub 9-0:1.0: USB hub found [ 366.322158][T28138] hub 9-0:1.0: 8 ports detected [ 366.325996][T28138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.341371][T28138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.365379][T28144] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7220'. [ 366.428901][T28148] dummy0: entered allmulticast mode [ 366.446823][T28148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28148 comm=syz.6.7222 [ 366.446852][T28148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28148 comm=syz.6.7222 [ 366.447137][T28147] dummy0: left allmulticast mode [ 366.706120][T28163] lo speed is unknown, defaulting to 1000 [ 367.047584][T28181] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.7233'. [ 367.164646][T28189] lo speed is unknown, defaulting to 1000 [ 367.390645][T28192] hub 9-0:1.0: USB hub found [ 367.395814][T28192] hub 9-0:1.0: 8 ports detected [ 367.401088][T28192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.410298][T28192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.606275][T28199] serio: Serial port ptm0 [ 367.930269][T28212] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.7246'. [ 367.966886][T28213] hub 9-0:1.0: USB hub found [ 367.967009][T28213] hub 9-0:1.0: 8 ports detected [ 368.000710][T28213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.000788][T28213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.110585][T28220] netlink: 'syz.1.7248': attribute type 37 has an invalid length. [ 368.169236][T28223] lo speed is unknown, defaulting to 1000 [ 368.234893][T28228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28228 comm=syz.3.7251 [ 368.234940][T28228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28228 comm=syz.3.7251 [ 368.453705][T28239] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7256'. [ 368.530018][T28243] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.7257'. [ 368.643332][T28254] netlink: 'syz.5.7260': attribute type 37 has an invalid length. [ 369.005626][T28269] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.7269'. [ 369.254412][T28294] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.7281'. [ 369.546572][T28320] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7292'. [ 369.656693][T28324] hub 9-0:1.0: USB hub found [ 369.665167][T28324] hub 9-0:1.0: 8 ports detected [ 369.666978][T28321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.693148][T28316] hub 9-0:1.0: USB hub found [ 369.693557][T28321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.698030][T28316] hub 9-0:1.0: 8 ports detected [ 369.718733][T28316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.718790][T28316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.298012][T28350] random: crng reseeded on system resumption [ 370.822794][T28380] selinux_netlink_send: 2 callbacks suppressed [ 370.822814][T28380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28380 comm=syz.1.7315 [ 370.822837][T28380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28380 comm=syz.1.7315 [ 371.436886][T28399] netlink: 'syz.3.7323': attribute type 37 has an invalid length. [ 371.794387][T24313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 371.805802][T24313] CPU: 0 UID: 0 PID: 24313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 371.805833][T24313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.805846][T24313] Call Trace: [ 371.805854][T24313] [ 371.805863][T24313] __dump_stack+0x1d/0x30 [ 371.805896][T24313] dump_stack_lvl+0xe8/0x140 [ 371.805916][T24313] dump_stack+0x15/0x1b [ 371.805999][T24313] dump_header+0x81/0x220 [ 371.806084][T24313] oom_kill_process+0x342/0x400 [ 371.806178][T24313] out_of_memory+0x979/0xb80 [ 371.806275][T24313] try_charge_memcg+0x5e6/0x9e0 [ 371.806305][T24313] charge_memcg+0x51/0xc0 [ 371.806323][T24313] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 371.806383][T24313] __read_swap_cache_async+0x1df/0x350 [ 371.806478][T24313] swap_cluster_readahead+0x277/0x3e0 [ 371.806508][T24313] swapin_readahead+0xde/0x6f0 [ 371.806601][T24313] ? __filemap_get_folio+0x4f7/0x6b0 [ 371.806633][T24313] ? swap_cache_get_folio+0x77/0x200 [ 371.806658][T24313] do_swap_page+0x301/0x2430 [ 371.806800][T24313] ? finish_task_switch+0xad/0x2b0 [ 371.806823][T24313] ? __pfx_default_wake_function+0x10/0x10 [ 371.806845][T24313] handle_mm_fault+0x9a5/0x2c20 [ 371.806883][T24313] do_user_addr_fault+0x636/0x1090 [ 371.806916][T24313] ? fpregs_restore_userregs+0xe2/0x1d0 [ 371.806944][T24313] ? switch_fpu_return+0xe/0x20 [ 371.807043][T24313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 371.807066][T24313] exc_page_fault+0x62/0xa0 [ 371.807101][T24313] asm_exc_page_fault+0x26/0x30 [ 371.807190][T24313] RIP: 0033:0x7fd7d0291465 [ 371.807208][T24313] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 371.807222][T24313] RSP: 002b:00007fff17b06ab8 EFLAGS: 00010246 [ 371.807315][T24313] RAX: 0000000000000000 RBX: 0000000000000396 RCX: 00007fd7d0291463 [ 371.807329][T24313] RDX: 00007fff17b06ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.807342][T24313] RBP: 00007fff17b06b3c R08: 0000000039ea9185 R09: 0000000000000000 [ 371.807355][T24313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 371.807386][T24313] R13: 00000000000927c0 R14: 000000000005a5b6 R15: 00007fff17b06b90 [ 371.807406][T24313] [ 371.807414][T24313] memory: usage 307200kB, limit 307200kB, failcnt 1085 [ 371.866794][T28390] hub 9-0:1.0: USB hub found [ 371.867533][T24313] memory+swap: usage 307616kB, limit 9007199254740988kB, failcnt 0 [ 371.873880][T28390] hub 9-0:1.0: 8 ports detected [ 371.878675][T24313] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 371.878693][T24313] Memory cgroup stats for /syz1: [ 371.882407][T24313] cache 16384 [ 371.899464][T28390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.900176][T24313] rss 4096 [ 371.900185][T24313] shmem 0 [ 371.907020][T28390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.910481][T24313] mapped_file 0 [ 371.910491][T24313] dirty 0 [ 371.969919][T28410] netlink: 'syz.6.7326': attribute type 37 has an invalid length. [ 371.984160][T24313] writeback 0 [ 371.984175][T24313] workingset_refault_anon 254 [ 371.984182][T24313] workingset_refault_file 3365 [ 371.984249][T24313] swap 425984 [ 371.984256][T24313] swapcached 28672 [ 371.984262][T24313] pgpgin 393081 [ 371.984270][T24313] pgpgout 393058 [ 371.984277][T24313] pgfault 402312 [ 371.984283][T24313] pgmajfault 148 [ 371.984288][T24313] inactive_anon 28672 [ 371.984295][T24313] active_anon 0 [ 371.984302][T24313] inactive_file 65536 [ 371.984309][T24313] active_file 0 [ 371.984316][T24313] unevictable 0 [ 371.984323][T24313] hierarchical_memory_limit 314572800 [ 371.984332][T24313] hierarchical_memsw_limit 9223372036854771712 [ 371.984407][T24313] total_cache 16384 [ 371.984414][T24313] total_rss 4096 [ 371.984421][T24313] total_shmem 0 [ 371.984428][T24313] total_mapped_file 0 [ 371.984436][T24313] total_dirty 0 [ 371.984443][T24313] total_writeback 0 [ 371.984449][T24313] total_workingset_refault_anon 254 [ 371.984457][T24313] total_workingset_refault_file 3365 [ 371.984464][T24313] total_swap 425984 [ 371.984479][T24313] total_swapcached 28672 [ 371.984486][T24313] total_pgpgin 393081 [ 371.984493][T24313] total_pgpgout 393058 [ 371.984500][T24313] total_pgfault 402312 [ 371.984506][T24313] total_pgmajfault 148 [ 371.984514][T24313] total_inactive_anon 28672 [ 371.984583][T24313] total_active_anon 0 [ 371.984591][T24313] total_inactive_file 65536 [ 371.984598][T24313] total_active_file 0 [ 371.984673][T24313] total_unevictable 0 [ 371.984681][T24313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7316,pid=28381,uid=0 [ 371.984761][T24313] Memory cgroup out of memory: Killed process 28381 (syz.1.7316) total-vm:95680kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 372.325257][T28415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28415 comm=syz.3.7328 [ 372.338300][T28415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28415 comm=syz.3.7328 [ 373.322380][T28437] syz.3.7337 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 373.333759][T28437] CPU: 0 UID: 0 PID: 28437 Comm: syz.3.7337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.333790][T28437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.333829][T28437] Call Trace: [ 373.333835][T28437] [ 373.333842][T28437] __dump_stack+0x1d/0x30 [ 373.333863][T28437] dump_stack_lvl+0xe8/0x140 [ 373.333882][T28437] dump_stack+0x15/0x1b [ 373.333916][T28437] dump_header+0x81/0x220 [ 373.333945][T28437] oom_kill_process+0x342/0x400 [ 373.334030][T28437] out_of_memory+0x979/0xb80 [ 373.334060][T28437] try_charge_memcg+0x5e6/0x9e0 [ 373.334088][T28437] charge_memcg+0x51/0xc0 [ 373.334149][T28437] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 373.334173][T28437] __read_swap_cache_async+0x1df/0x350 [ 373.334298][T28437] swap_cluster_readahead+0x277/0x3e0 [ 373.334331][T28437] swapin_readahead+0xde/0x6f0 [ 373.334387][T28437] ? __filemap_get_folio+0x4f7/0x6b0 [ 373.334422][T28437] ? swap_cache_get_folio+0x77/0x200 [ 373.334460][T28437] do_swap_page+0x301/0x2430 [ 373.334484][T28437] ? css_rstat_updated+0xb7/0x240 [ 373.334512][T28437] ? __pfx_default_wake_function+0x10/0x10 [ 373.334553][T28437] handle_mm_fault+0x9a5/0x2c20 [ 373.334580][T28437] do_user_addr_fault+0x636/0x1090 [ 373.334646][T28437] ? fpregs_restore_userregs+0xad/0x1d0 [ 373.334685][T28437] ? switch_fpu_return+0xe/0x20 [ 373.334706][T28437] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 373.334737][T28437] exc_page_fault+0x62/0xa0 [ 373.334863][T28437] asm_exc_page_fault+0x26/0x30 [ 373.334888][T28437] RIP: 0033:0x7f0d3dec1453 [ 373.334905][T28437] Code: f6 08 00 48 8d 3d f6 f6 08 00 e8 08 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 373.334921][T28437] RSP: 002b:00007ffd142a4208 EFLAGS: 00010293 [ 373.334938][T28437] RAX: 00000000fffffffa RBX: 00007f0d3e0b5fa0 RCX: 0000000000000000 [ 373.334976][T28437] RDX: 00007ffd142a4220 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.334987][T28437] RBP: 00007f0d3e0b7da0 R08: 000000001d12d480 R09: 7fffffffffffffff [ 373.334998][T28437] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005afcd [ 373.335010][T28437] R13: 00007ffd142a4340 R14: ffffffffffffffff R15: 00007ffd142a4360 [ 373.335026][T28437] [ 373.335081][T28437] memory: usage 307200kB, limit 307200kB, failcnt 1008 [ 373.374330][T28451] netlink: 'syz.6.7340': attribute type 37 has an invalid length. [ 373.375619][T28437] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 373.417664][T28447] netlink: 'syz.1.7339': attribute type 37 has an invalid length. [ 373.422304][T28437] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 373.599767][T28437] Memory cgroup stats for /syz3: [ 373.600093][T28437] cache 4096 [ 373.609584][T28437] rss 0 [ 373.612432][T28437] shmem 0 [ 373.615525][T28437] mapped_file 0 [ 373.619020][T28437] dirty 0 [ 373.622239][T28437] writeback 0 [ 373.625677][T28437] workingset_refault_anon 349 [ 373.630809][T28437] workingset_refault_file 7540 [ 373.636289][T28437] swap 446464 [ 373.639587][T28437] swapcached 8192 [ 373.643299][T28437] pgpgin 604583 [ 373.646758][T28437] pgpgout 604576 [ 373.651365][T28437] pgfault 450832 [ 373.652005][T28461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28461 comm=syz.5.7345 [ 373.655131][T28437] pgmajfault 216 [ 373.667953][T28461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28461 comm=syz.5.7345 [ 373.684578][T28437] inactive_anon 8192 [ 373.688735][T28437] active_anon 0 [ 373.692194][T28437] inactive_file 16384 [ 373.696927][T28437] active_file 4096 [ 373.701210][T28437] unevictable 0 [ 373.704888][T28437] hierarchical_memory_limit 314572800 [ 373.710297][T28437] hierarchical_memsw_limit 9223372036854771712 [ 373.716650][T28437] total_cache 4096 [ 373.720595][T28437] total_rss 0 [ 373.724056][T28437] total_shmem 0 [ 373.727716][T28437] total_mapped_file 0 [ 373.731809][T28437] total_dirty 0 [ 373.735954][T28437] total_writeback 0 [ 373.739934][T28437] total_workingset_refault_anon 349 [ 373.745240][T28437] total_workingset_refault_file 7540 [ 373.750602][T28437] total_swap 446464 [ 373.754425][T28437] total_swapcached 8192 [ 373.758594][T28437] total_pgpgin 604583 [ 373.762733][T28437] total_pgpgout 604576 [ 373.767299][T28437] total_pgfault 450832 [ 373.771350][T28437] total_pgmajfault 216 [ 373.775632][T28437] total_inactive_anon 8192 [ 373.780394][T28437] total_active_anon 0 [ 373.784638][T28437] total_inactive_file 16384 [ 373.789387][T28437] total_active_file 4096 [ 373.794123][T28437] total_unevictable 0 [ 373.798227][T28437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7337,pid=28437,uid=0 [ 373.813447][T28437] Memory cgroup out of memory: Killed process 28437 (syz.3.7337) total-vm:93632kB, anon-rss:1068kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 374.101512][T28472] hub 9-0:1.0: USB hub found [ 374.108660][T28472] hub 9-0:1.0: 8 ports detected [ 374.119117][T28472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.119167][T28472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.221287][T28483] lo speed is unknown, defaulting to 1000 [ 375.120826][T28494] syz.6.7359 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 375.135193][T28494] CPU: 0 UID: 0 PID: 28494 Comm: syz.6.7359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 375.135246][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.135257][T28494] Call Trace: [ 375.135266][T28494] [ 375.135275][T28494] __dump_stack+0x1d/0x30 [ 375.135333][T28494] dump_stack_lvl+0xe8/0x140 [ 375.135351][T28494] dump_stack+0x15/0x1b [ 375.135366][T28494] dump_header+0x81/0x220 [ 375.135395][T28494] oom_kill_process+0x342/0x400 [ 375.135460][T28494] out_of_memory+0x979/0xb80 [ 375.135492][T28494] try_charge_memcg+0x5e6/0x9e0 [ 375.135520][T28494] obj_cgroup_charge_pages+0xa6/0x150 [ 375.135578][T28494] __memcg_kmem_charge_page+0x9f/0x170 [ 375.135603][T28494] __alloc_frozen_pages_noprof+0x188/0x360 [ 375.135715][T28494] alloc_pages_mpol+0xb3/0x250 [ 375.135803][T28494] alloc_pages_noprof+0x90/0x130 [ 375.135831][T28494] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 375.135904][T28494] __kvmalloc_node_noprof+0x30f/0x4e0 [ 375.135933][T28494] ? ip_set_alloc+0x1f/0x30 [ 375.136005][T28494] ? ip_set_alloc+0x1f/0x30 [ 375.136036][T28494] ? __kmalloc_cache_noprof+0x189/0x320 [ 375.136068][T28494] ip_set_alloc+0x1f/0x30 [ 375.136154][T28494] hash_netiface_create+0x282/0x740 [ 375.136184][T28494] ? __pfx_hash_netiface_create+0x10/0x10 [ 375.136224][T28494] ip_set_create+0x3c9/0x960 [ 375.136256][T28494] ? __nla_parse+0x40/0x60 [ 375.136317][T28494] nfnetlink_rcv_msg+0x4c3/0x590 [ 375.136363][T28494] netlink_rcv_skb+0x123/0x220 [ 375.136432][T28494] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 375.136500][T28494] nfnetlink_rcv+0x16b/0x1690 [ 375.136527][T28494] ? nlmon_xmit+0x4f/0x60 [ 375.136603][T28494] ? consume_skb+0x49/0x150 [ 375.136624][T28494] ? nlmon_xmit+0x4f/0x60 [ 375.136647][T28494] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 375.136672][T28494] ? __dev_queue_xmit+0x1200/0x2000 [ 375.136776][T28494] ? __dev_queue_xmit+0x182/0x2000 [ 375.136852][T28494] ? ref_tracker_free+0x37d/0x3e0 [ 375.136878][T28494] ? __netlink_deliver_tap+0x4dc/0x500 [ 375.136939][T28494] netlink_unicast+0x5bd/0x690 [ 375.136973][T28494] netlink_sendmsg+0x58b/0x6b0 [ 375.136997][T28494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.137054][T28494] __sock_sendmsg+0x145/0x180 [ 375.137083][T28494] ____sys_sendmsg+0x31e/0x4e0 [ 375.137108][T28494] ___sys_sendmsg+0x17b/0x1d0 [ 375.137238][T28494] __x64_sys_sendmsg+0xd4/0x160 [ 375.137276][T28494] x64_sys_call+0x191e/0x2ff0 [ 375.137299][T28494] do_syscall_64+0xd2/0x200 [ 375.137393][T28494] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 375.137417][T28494] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 375.137442][T28494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.137463][T28494] RIP: 0033:0x7f3162c3ebe9 [ 375.137481][T28494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.137543][T28494] RSP: 002b:00007f31616a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.137562][T28494] RAX: ffffffffffffffda RBX: 00007f3162e65fa0 RCX: 00007f3162c3ebe9 [ 375.137576][T28494] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 375.137610][T28494] RBP: 00007f3162cc1e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.137622][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.137636][T28494] R13: 00007f3162e66038 R14: 00007f3162e65fa0 R15: 00007ffe50b70d58 [ 375.137655][T28494] [ 375.137662][T28494] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 375.484140][T28494] memory+swap: usage 307940kB, limit 9007199254740988kB, failcnt 0 [ 375.492061][T28494] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 375.499479][T28494] Memory cgroup stats for /syz6: [ 375.500055][T28494] cache 8192 [ 375.508197][T28494] rss 4096 [ 375.508206][T28494] shmem 0 [ 375.508212][T28494] mapped_file 0 [ 375.508218][T28494] dirty 0 [ 375.508231][T28494] writeback 0 [ 375.508239][T28494] workingset_refault_anon 170 [ 375.508248][T28494] workingset_refault_file 0 [ 375.508256][T28494] swap 757760 [ 375.508263][T28494] swapcached 32768 [ 375.508274][T28494] pgpgin 120967 [ 375.508280][T28494] pgpgout 120956 [ 375.508286][T28494] pgfault 133032 [ 375.508292][T28494] pgmajfault 78 [ 375.508298][T28494] inactive_anon 16384 [ 375.508304][T28494] active_anon 16384 [ 375.508310][T28494] inactive_file 0 [ 375.508317][T28494] active_file 12288 [ 375.508323][T28494] unevictable 0 [ 375.508329][T28494] hierarchical_memory_limit 314572800 [ 375.508337][T28494] hierarchical_memsw_limit 9223372036854771712 [ 375.540712][T28512] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7367'. [ 375.541684][T28494] total_cache 8192 [ 375.541694][T28494] total_rss 4096 [ 375.541701][T28494] total_shmem 0 [ 375.541708][T28494] total_mapped_file 0 [ 375.611419][T28494] total_dirty 0 [ 375.611432][T28494] total_writeback 0 [ 375.611439][T28494] total_workingset_refault_anon 170 [ 375.611457][T28494] total_workingset_refault_file 0 [ 375.611466][T28494] total_swap 757760 [ 375.633433][T28494] total_swapcached 32768 [ 375.633528][T28494] total_pgpgin 120969 [ 375.633534][T28494] total_pgpgout 120958 [ 375.633608][T28494] total_pgfault 133036 [ 375.633616][T28494] total_pgmajfault 78 [ 375.633623][T28494] total_inactive_anon 16384 [ 375.641228][T28518] netlink: 'syz.5.7369': attribute type 37 has an invalid length. [ 375.642218][T28494] total_active_anon 16384 [ 375.642228][T28494] total_inactive_file 0 [ 375.642236][T28494] total_active_file 12288 [ 375.680751][T28494] total_unevictable 0 [ 375.680765][T28494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7359,pid=28493,uid=0 [ 375.680834][T28494] Memory cgroup out of memory: Killed process 28493 (syz.6.7359) total-vm:93632kB, anon-rss:1068kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 375.923452][T28535] hub 9-0:1.0: USB hub found [ 375.929859][T28535] hub 9-0:1.0: 8 ports detected [ 375.947862][T28535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.956925][T28535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.086416][T28543] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7379'. [ 376.456116][T28550] dummy0: entered allmulticast mode [ 376.456297][T28550] dummy0: left allmulticast mode [ 376.743108][T28571] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7390'. [ 376.880751][T28576] netlink: 'syz.1.7392': attribute type 37 has an invalid length. [ 377.256848][T28581] hub 9-0:1.0: USB hub found [ 377.256947][T28581] hub 9-0:1.0: 8 ports detected [ 377.270219][T28581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.270272][T28581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.324308][T28567] syz.3.7389 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 377.324337][T28567] CPU: 0 UID: 0 PID: 28567 Comm: syz.3.7389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 377.324361][T28567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.324460][T28567] Call Trace: [ 377.324468][T28567] [ 377.324477][T28567] __dump_stack+0x1d/0x30 [ 377.324500][T28567] dump_stack_lvl+0xe8/0x140 [ 377.324585][T28567] dump_stack+0x15/0x1b [ 377.324622][T28567] dump_header+0x81/0x220 [ 377.324652][T28567] oom_kill_process+0x342/0x400 [ 377.324678][T28567] out_of_memory+0x979/0xb80 [ 377.324769][T28567] try_charge_memcg+0x5e6/0x9e0 [ 377.324865][T28567] charge_memcg+0x51/0xc0 [ 377.324979][T28567] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 377.325002][T28567] __read_swap_cache_async+0x1df/0x350 [ 377.325088][T28567] swap_cluster_readahead+0x277/0x3e0 [ 377.325123][T28567] swapin_readahead+0xde/0x6f0 [ 377.325150][T28567] ? __filemap_get_folio+0x4f7/0x6b0 [ 377.325192][T28567] ? __rcu_read_unlock+0x34/0x70 [ 377.325215][T28567] ? swap_cache_get_folio+0x77/0x200 [ 377.325268][T28567] do_swap_page+0x301/0x2430 [ 377.325297][T28567] ? css_rstat_updated+0xb7/0x240 [ 377.325340][T28567] ? __pfx_default_wake_function+0x10/0x10 [ 377.325365][T28567] handle_mm_fault+0x9a5/0x2c20 [ 377.325396][T28567] do_user_addr_fault+0x636/0x1090 [ 377.325426][T28567] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 377.325494][T28567] exc_page_fault+0x62/0xa0 [ 377.325521][T28567] asm_exc_page_fault+0x26/0x30 [ 377.325539][T28567] RIP: 0033:0x7f0d3de8eb46 [ 377.325552][T28567] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 377.325566][T28567] RSP: 002b:00007ffd142a4220 EFLAGS: 00010246 [ 377.325656][T28567] RAX: 000000000005bece RBX: 00007f0d3e0b5fa0 RCX: 000000000005bcc0 [ 377.325669][T28567] RDX: 000000000000020e RSI: 0000000000000000 RDI: 00000000000003e8 [ 377.325681][T28567] RBP: 00007f0d3e0b7da0 R08: 000000001f68d66e R09: 7fffffffffffffff [ 377.325692][T28567] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000005bfb1 [ 377.325704][T28567] R13: 00007ffd142a4340 R14: ffffffffffffffff R15: 00007ffd142a4360 [ 377.325724][T28567] [ 377.325867][T28567] memory: usage 307200kB, limit 307200kB, failcnt 1372 [ 377.325881][T28567] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 377.325895][T28567] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 377.325930][T28567] Memory cgroup stats for /syz3: [ 377.328047][T28567] cache 4096 [ 377.328055][T28567] rss 0 [ 377.328061][T28567] shmem 0 [ 377.328068][T28567] mapped_file 0 [ 377.328075][T28567] dirty 0 [ 377.328082][T28567] writeback 0 [ 377.328089][T28567] workingset_refault_anon 387 [ 377.328097][T28567] workingset_refault_file 7928 [ 377.328105][T28567] swap 450560 [ 377.328136][T28567] swapcached 4096 [ 377.328143][T28567] pgpgin 609363 [ 377.328150][T28567] pgpgout 609357 [ 377.328157][T28567] pgfault 455786 [ 377.328163][T28567] pgmajfault 230 [ 377.328169][T28567] inactive_anon 4096 [ 377.328175][T28567] active_anon 0 [ 377.328180][T28567] inactive_file 16384 [ 377.328186][T28567] active_file 4096 [ 377.328270][T28567] unevictable 0 [ 377.328276][T28567] hierarchical_memory_limit 314572800 [ 377.328283][T28567] hierarchical_memsw_limit 9223372036854771712 [ 377.328293][T28567] total_cache 4096 [ 377.328299][T28567] total_rss 0 [ 377.328305][T28567] total_shmem 0 [ 377.328310][T28567] total_mapped_file 0 [ 377.328323][T28567] total_dirty 0 [ 377.328329][T28567] total_writeback 0 [ 377.328394][T28567] total_workingset_refault_anon 387 [ 377.328449][T28567] total_workingset_refault_file 7928 [ 377.328457][T28567] total_swap 450560 [ 377.328465][T28567] total_swapcached 4096 [ 377.328473][T28567] total_pgpgin 609363 [ 377.328481][T28567] total_pgpgout 609357 [ 377.328488][T28567] total_pgfault 455786 [ 377.328533][T28567] total_pgmajfault 230 [ 377.328615][T28567] total_inactive_anon 4096 [ 377.328623][T28567] total_active_anon 0 [ 377.328631][T28567] total_inactive_file 16384 [ 377.328654][T28567] total_active_file 4096 [ 377.328660][T28567] total_unevictable 0 [ 377.328667][T28567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7389,pid=28567,uid=0 [ 377.328811][T28567] Memory cgroup out of memory: Killed process 28567 (syz.3.7389) total-vm:93632kB, anon-rss:940kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 378.204732][T28604] lo speed is unknown, defaulting to 1000 [ 378.473323][T28623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28623 comm=syz.3.7409 [ 378.486400][T28623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28623 comm=syz.3.7409 [ 379.016862][T28633] hub 9-0:1.0: USB hub found [ 379.022750][T28632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.032555][T28632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.039008][T28633] hub 9-0:1.0: 8 ports detected [ 379.326414][T28636] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7412'. [ 379.569990][T28619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.578577][T28619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.698143][T28670] netlink: 'syz.3.7424': attribute type 37 has an invalid length. [ 381.013459][T28696] netlink: 'syz.2.7435': attribute type 37 has an invalid length. [ 381.559951][T28721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7446'. [ 381.920376][T28753] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7458'. [ 382.024969][T28754] netlink: 'syz.5.7453': attribute type 37 has an invalid length. [ 382.343189][T28770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=28770 comm=syz.2.7465 [ 382.757187][T28786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28786 comm=syz.3.7473 [ 382.769914][T28786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28786 comm=syz.3.7473 [ 383.549332][T28814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28814 comm=syz.2.7484 [ 383.562485][T28814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28814 comm=syz.2.7484 [ 383.652580][T28822] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7487'. [ 383.820391][T28828] ================================================================== [ 383.828589][T28828] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 383.835621][T28828] [ 383.837959][T28828] write to 0xffff888119026508 of 44 bytes by task 28829 on cpu 1: [ 383.846222][T28828] tty_set_termios+0xc0/0x8c0 [ 383.850899][T28828] set_termios+0x35b/0x4e0 [ 383.855506][T28828] tty_mode_ioctl+0x379/0x5c0 [ 383.860522][T28828] n_tty_ioctl_helper+0x91/0x210 [ 383.865541][T28828] n_tty_ioctl+0x101/0x200 [ 383.869951][T28828] tty_ioctl+0x845/0xb80 [ 383.874188][T28828] __se_sys_ioctl+0xce/0x140 [ 383.878934][T28828] __x64_sys_ioctl+0x43/0x50 [ 383.883534][T28828] x64_sys_call+0x1816/0x2ff0 [ 383.888573][T28828] do_syscall_64+0xd2/0x200 [ 383.893262][T28828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.899324][T28828] [ 383.901720][T28828] read to 0xffff888119026514 of 4 bytes by task 28828 on cpu 0: [ 383.909685][T28828] n_tty_write+0x9f/0xb50 [ 383.914112][T28828] file_tty_write+0x370/0x690 [ 383.919052][T28828] tty_write+0x25/0x30 [ 383.923204][T28828] vfs_write+0x52a/0x960 [ 383.927443][T28828] ksys_write+0xda/0x1a0 [ 383.932025][T28828] __x64_sys_write+0x40/0x50 [ 383.936705][T28828] x64_sys_call+0x27fe/0x2ff0 [ 383.941462][T28828] do_syscall_64+0xd2/0x200 [ 383.946064][T28828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.952050][T28828] [ 383.954446][T28828] value changed: 0x00008a3b -> 0x00000760 [ 383.960320][T28828] [ 383.962625][T28828] Reported by Kernel Concurrency Sanitizer on: [ 383.968935][T28828] CPU: 0 UID: 0 PID: 28828 Comm: syz.2.7490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 383.978818][T28828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.989142][T28828] ================================================================== [ 384.548785][T28824] syz.6.7488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 384.563690][T28824] CPU: 0 UID: 0 PID: 28824 Comm: syz.6.7488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 384.563741][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.563752][T28824] Call Trace: [ 384.563759][T28824] [ 384.563767][T28824] __dump_stack+0x1d/0x30 [ 384.563790][T28824] dump_stack_lvl+0xe8/0x140 [ 384.563812][T28824] dump_stack+0x15/0x1b [ 384.563849][T28824] dump_header+0x81/0x220 [ 384.563877][T28824] oom_kill_process+0x342/0x400 [ 384.563942][T28824] out_of_memory+0x979/0xb80 [ 384.563973][T28824] try_charge_memcg+0x5e6/0x9e0 [ 384.564086][T28824] obj_cgroup_charge_pages+0xa6/0x150 [ 384.564134][T28824] __memcg_kmem_charge_page+0x9f/0x170 [ 384.564167][T28824] __alloc_frozen_pages_noprof+0x188/0x360 [ 384.564212][T28824] alloc_pages_mpol+0xb3/0x250 [ 384.564241][T28824] alloc_pages_noprof+0x90/0x130 [ 384.564270][T28824] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 384.564404][T28824] __kvmalloc_node_noprof+0x30f/0x4e0 [ 384.564430][T28824] ? ip_set_alloc+0x1f/0x30 [ 384.564496][T28824] ? ip_set_alloc+0x1f/0x30 [ 384.564558][T28824] ? __kmalloc_cache_noprof+0x189/0x320 [ 384.564584][T28824] ip_set_alloc+0x1f/0x30 [ 384.564609][T28824] hash_netiface_create+0x282/0x740 [ 384.564658][T28824] ? __pfx_hash_netiface_create+0x10/0x10 [ 384.564687][T28824] ip_set_create+0x3c9/0x960 [ 384.564711][T28824] ? __nla_parse+0x40/0x60 [ 384.564813][T28824] nfnetlink_rcv_msg+0x4c3/0x590 [ 384.564855][T28824] netlink_rcv_skb+0x123/0x220 [ 384.564873][T28824] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 384.564983][T28824] nfnetlink_rcv+0x16b/0x1690 [ 384.565009][T28824] ? nlmon_xmit+0x4f/0x60 [ 384.565093][T28824] ? consume_skb+0x49/0x150 [ 384.565111][T28824] ? nlmon_xmit+0x4f/0x60 [ 384.565132][T28824] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 384.565153][T28824] ? __dev_queue_xmit+0x1200/0x2000 [ 384.565214][T28824] ? __dev_queue_xmit+0x182/0x2000 [ 384.565234][T28824] ? ref_tracker_free+0x37d/0x3e0 [ 384.565265][T28824] ? __netlink_deliver_tap+0x4dc/0x500 [ 384.565356][T28824] netlink_unicast+0x5bd/0x690 [ 384.565387][T28824] netlink_sendmsg+0x58b/0x6b0 [ 384.565406][T28824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.565478][T28824] __sock_sendmsg+0x145/0x180 [ 384.565504][T28824] ____sys_sendmsg+0x31e/0x4e0 [ 384.565525][T28824] ___sys_sendmsg+0x17b/0x1d0 [ 384.565604][T28824] __x64_sys_sendmsg+0xd4/0x160 [ 384.565625][T28824] x64_sys_call+0x191e/0x2ff0 [ 384.565644][T28824] do_syscall_64+0xd2/0x200 [ 384.565749][T28824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 384.565800][T28824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 384.565828][T28824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.565847][T28824] RIP: 0033:0x7f3162c3ebe9 [ 384.565862][T28824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.565878][T28824] RSP: 002b:00007f31616a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.565925][T28824] RAX: ffffffffffffffda RBX: 00007f3162e65fa0 RCX: 00007f3162c3ebe9 [ 384.565937][T28824] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 384.565948][T28824] RBP: 00007f3162cc1e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.565959][T28824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.566012][T28824] R13: 00007f3162e66038 R14: 00007f3162e65fa0 R15: 00007ffe50b70d58 [ 384.566028][T28824] [ 384.566062][T28824] memory: usage 307196kB, limit 307200kB, failcnt 366 [ 384.913884][T28824] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 384.922314][T28824] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 384.929982][T28824] Memory cgroup stats for /syz6: [ 384.930221][T28824] cache 8192 [ 384.938780][T28824] rss 4096 [ 384.941922][T28824] shmem 0 [ 384.944927][T28824] mapped_file 0 [ 384.948482][T28824] dirty 0 [ 384.951690][T28824] writeback 0 [ 384.955158][T28824] workingset_refault_anon 223 [ 384.960107][T28824] workingset_refault_file 0 [ 384.964805][T28824] swap 765952 [ 384.968357][T28824] swapcached 24576 [ 384.972520][T28824] pgpgin 122889 [ 384.976422][T28824] pgpgout 122880 [ 384.980176][T28824] pgfault 136050 [ 384.983742][T28824] pgmajfault 109 [ 384.987297][T28824] inactive_anon 20480 [ 384.991316][T28824] active_anon 4096 [ 384.995721][T28824] inactive_file 0 [ 384.999582][T28824] active_file 12288 [ 385.003670][T28824] unevictable 0 [ 385.007741][T28824] hierarchical_memory_limit 314572800 [ 385.013483][T28824] hierarchical_memsw_limit 9223372036854771712 [ 385.020119][T28824] total_cache 8192 [ 385.024026][T28824] total_rss 4096 [ 385.027952][T28824] total_shmem 0 [ 385.031448][T28824] total_mapped_file 0 [ 385.035647][T28824] total_dirty 0 [ 385.039186][T28824] total_writeback 0 [ 385.043162][T28824] total_workingset_refault_anon 223 [ 385.048542][T28824] total_workingset_refault_file 0 [ 385.053815][T28824] total_swap 765952 [ 385.057609][T28824] total_swapcached 24576 [ 385.061870][T28824] total_pgpgin 122891 [ 385.066277][T28824] total_pgpgout 122882 [ 385.070549][T28824] total_pgfault 136054 [ 385.074777][T28824] total_pgmajfault 109 [ 385.079077][T28824] total_inactive_anon 20480 [ 385.083607][T28824] total_active_anon 4096 [ 385.087887][T28824] total_inactive_file 0 [ 385.092205][T28824] total_active_file 12288 [ 385.096522][T28824] total_unevictable 0 [ 385.100500][T28824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7488,pid=28823,uid=0 [ 385.116045][T28824] Memory cgroup out of memory: Killed process 28823 (syz.6.7488) total-vm:93632kB, anon-rss:940kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000