last executing test programs: 1m41.323435709s ago: executing program 3 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 1m41.322783119s ago: executing program 3 (id=3028): socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000072520300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000400)={0x20, 0x3, 0x6, 0x7, 0x0, 0xffffffff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000070000000000000000000000b8cb9ec866f6deea7d17fb08373bab2ec122259bca69b1e517cc3bf34299a5aeb0da992f8b30609e2c53ccfd8983b3a4b0daf1d5302854329c145d0e0e876b5d4189ac82566582a5f357658bdb05b68744faec19b06d4353632829d7c75446ccf1db06eb1d4f18d6e10383eda4c1eab5644b22b200988c3b8109b680ca213a1bed4cd5660beecab2db9672f079748aa979801d0369af159c042440ea8a89661073793dbf7a995bac79f837b618e4905140c309b252b4fbc400d359b3839993072c7959d3f62028b89a356aba3a0f1d1b25c8c0f4b503b64056182fd6297017656b357b3567148ff5a97941eee39b5f049c0ed931ec2ee4a2b38103af63692b3e63812ce19239b26734c059f8383136b605ff94b9d63a8e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 1m41.264881255s ago: executing program 3 (id=3031): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) close(r0) 1m41.165726185s ago: executing program 3 (id=3032): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2400, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000001b00ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$caif_stream(0x25, 0x1, 0x4) flistxattr(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.042859007s ago: executing program 3 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'team_slave_0\x00', 0xb0c}) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x5, 0x4002) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010000000000ecffffff00000000", @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772657461703000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0), 0x10}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4040, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000007c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2400, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x23ac, 0x4, 0x0, 0x1, [{0x1114, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1104, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x1004, 0x3, "a680c4bbbecc3764d0d64e35972851bca15f6ae17c9d44453264c99621ed171d41c6b3e75da4835382e688561267d7748a7081ac1963f02d85a8d2672689d028183762bbaf7c14300235e34062ce6ce1a197e45f871571bdead4a31aa9af5e18dafbc47a8d0b653e1965251ba9a74dad99f88aca36e1176157740ab8f039f63e4476ead5d070aa17938d065adbe3e931b1ebb3ed9b682cb60efdaa23639e7349b49ff452fdaf3afb69d6ffc03d97f35be2a8a23711a89072482872f6ff2397ba79ba2452acd9411346d2e8d1b71813b30616bbd9377489078849519bc8530edf53850871aabd00aa0170a57c00e2328f02a5f6d3c6ea023de32e02e104b0d5a6d97991e248f3a219a7c12febedb74a69bc2b45edbb5692e5beaaada04ced5362174d34129c3495927de6059ae3db3071d3bde18544852b39e25df048e60615516b50af0b0eeec8679e20aa1bb613fbe210a012cb5a0e6dbfc80e96fb085c3f4a22da25a3e9b1dc7effdd4979d8c137a3cc7710be4ec92851cc6b411f6cf58af0653624fe912a1f238570e5e425ce6bf1877d4d860657b98d947b9b75278d877fc2f85dc5695e9596b6e671e389f68ed6db03d3b777e2cd600c7e35bdde01f1322b77f0c8bc14dfef671564a83eb001c1759a81c46bb8a74f5946e0af9b24d38c79b8ec7f2e9023c769695cce8c65f52f8a511c996e3ce9ddd5bbededa6beb7756023c206f0c75f33d32eee6a949523659b9251cfd9b394eb96b7ebce7cea4214e89f690e947d77e04b736c3c5f5a236bf03da5a9fd1a33deb1f47093dc4d3d3812ef255ca7185a8bb7e3c4eefffc4648bc804365a6a2e3fc545ab609d9644aa262d45cd09791733e9517432d235918e1a98cbca1412ef60fe3c9736b67f0de796a7f5e6d63d11caa3755c1548643691461e6e23d618258a4cb58d70b6df5f68429e939fd021a88bbc277bcfe43936e2916a757e5dada1c806b59011b93e70e68d29f7d61c2dc21e6c53299de642caf8b2bb54227aad476366471cd54e235ef4638606f513416cf3add60a0bb92855585782ca687e85b4731c4148dbf6c00afa9cf7fa41948a93753b4d47c2b849a1a991d025ad4ae813aa85b4524ed8d2b509d20bfe5fda91ac7dbbe7f88a3e68f9e492aa478a0821d85ff299d0e358f6d3976f0f9af5067fdc4354f577171750edd40dd08c2eb46a9563ebabac5c99ed5a320c14e638c5849bb8bbd8346a3c024cd07cda8c21827297731e943b8901a77bc302fdd9f58d5d6c074f5e86457479861b2374c05a3f28f0bfe08289da85a9c94d46510f1f02c2ae9f7c576748e1f69d707253bb4930c70d951ca5973c55a83de90043c4a4197b6591c5db5d3d9dccb8bdae0e25ecc2aeb2eee51065106d3ee1d14c14fb4d352c9f7fca64955f3234d2776c385e676a9eda363b679d5c8491a04177dd5f10fe67ef2fd1836f717b6fad68aada2361bfc160944d1ea915a2c75cd45100ecb17e88d70a1bdbfee639e8fedc637a18451b6506a20219e2e23c7ba1b17021724a731a6e5ee69866c9b9a859cc4c80d921d8c50db99f03c4417302c833d64a00fb3b3a6dc296ca824595ec23b3eb3121d3c40ed355242a951c28e0338b6a636b757959f09c3a4557f17ea3ee2ad6ed5879d7209b57269667c40a485d174a15ca9acbc4d1ac3e2cc169da4a1e45155a97598930f273e527b7f4df26a0b3adc810c4b257faf6f680d87961e7365871dc0dd8b708dc53de5d1203bc9bb45f6593f50c29e46966543135bd8493d037efaa48d1655aa6dc3547e55c3e81ad25060fc83e99132a966db7277195cb8441bbfd5bbcbea02fe5d5619518bffc463a82a2b03f9f81dfdce766bc8f587db01f8fb533575ec5ec3d4138b14d0998ed52526a7f3b867858a4881c25ac1a81d3f9343a89e0c0378d8aa02f645d99b492e6c436c26dac6c3a3906d6d67c9b14ac6a13fbf74bd34ee4e376f9196b185ae5f5bfe9810c65607c8f3d1ca4d38522c4d635a1fd73a751b9e3361b38a0f8524b5d3a61d25ee9b363f04c9dad7f14f81c5af7d6448f055128cd47da795b57247c2a59fb835cee14f9ae4c1991f4071c071d9e39f9a34759cb098b3209ea20ddba39464bd18b3623002bb26492867d32b6d7c425ee24251a9459e8de0bbb674de12688fec95b9403fa1333ac80c742cc022f78c148f8f5a6b8473bf4e37d19d3a48485709165282441e5c122af32e568a9e438b88f72de4260b4fd5c7719ce4a4f0c248af27873ee45a6a1e687e381ec00498ab0d1e9da60ae940c1568ba3dcad35bd6935b8848af575f1e0fa0dfbd471d3dc0e7a8723f1d007757affc8933f7e8fd6af0bd65d4ba58f0bf75df53441727497fd82e9c616c128ea9200ee14f36e434f7a7fc608e05a0907b9cd4e259422e87de1383bb13f76d030400ef2071ed2bf2a4f8c17fb96323cf97da100f478ad8575b8bdf476bb17a1dd8e135cad43aa76180f9af630d37e5f55ed323888e0f0881169ec5a8bbd17a36b21a28acdeda49f0fd8ec0b9f906b6c276aa47e5f57582f6711048428c9677df3afb916fedf38fbfe799960b40f09dbed8147e5564502c16608359586e04882032d3365bce99b81f882db4b96747a8c4e62309fbad9e723ea67d5c57c32aca7afe8732b6753f01165942ef6afcf4f71c5b33870e75b20c8f4922501a2868953cc0a31850cc0381afd0812738041ee9e7de042f44f6f40778b2ae480c2bb0e7aa2970c2e8ec316989b3ff03a504ca109a9adecc29732320287f8198bc980b9050bfeffa7ea6ec38e2ce908130175e3073d9da7d8a452e473fee9c4494be9e46aab8b135385a2d709830dc9834b7d830a73a7db4baeda910ed137e7d46c4b72b2c1097842bdad95c42f2f8edaf5c2fc1b6d46f994d94fb2531c7320dc60b21d40eacf005af0a71afecf1f47d36677644c3f8dcef987bf5011de9d13ced651bfa18e0e1fe9f331e996262321e8f7b7e304a84d559b39e85717c457651e9c3fba181a2f1de61498ec50b2d7fc8f05bcd3e0e277f4e8582775e89e7924be501b53c33014ea0a0d21a46820fda97884e7a5e566f6fd60db975f7ca586ff4057a74c3d734551dfd9f45f03bf3a516cbfa61679980b15454d4fc8ae43a85d8de15b35e2ca00388f9e4467f06bbcb09d15bff6aae5050bfb7b5c42a09da6712b04d27c58813c653b1722e2bb2309c02195f179f06209804894f8176f0605f6909a0ca66e9d7496f03e1c1ee08950feefb5c7547a6b8e589ed6df9512a5686a401a6b922d5c7c3801b3ac0edda3a98a1c7293ee16bd8bd0f4d29e2c8fb68c14bd8e7e1941da52e97c3d32366821789444a254b1158fc046a8c9e4bafbff127eada50f5b4f264ad82388de8866f0b06205ae08ace283bfae7d3e6cc85361b75c25586d39c78f9b8df3c79022736137dad9cd59f6414578f9404f0fe20a7155932f59cc69a813995cba4a771857ff81d195b5d2339b9fa4e50bb9c1174a6a9500ce9e6c4ec5610c377c983e602d43729e0d5d30ccfb9503711feabe0d5c8291be53249f12c2b5178a17bbb47640a8af19f16cf370fa38c431b5aa579a6de6078a82dca46b1c876e370f0baa90b2aef74047dc3b16501b89362e23711ea5d9a2dcc7706ecc60786a36420d9a6dc2fcad7b6cb5fd73d0ca0354dc5397200cc667f3d60657fd9aa1d0df5696a9a8b09c80105f3b12888de9b69d9756ce4108a0084d008f1406721f070304555fa9e92a8eed736fa22ac8951fdfb1723b32a4da108cc3b7cc4896b183199f24586a9773a98ac39dbdb978555d9515b318a100117405b02a8dfa844f6561ed7238a6092e933d8ae73cd111f6693595a3a18edcae649f6ed56feb4ecbbd8af9a4a511ca216724068a724c303c56f58fa40d26fea76830ef29b1f4fd0f800e7e408f272d5a2b09423ac98478b9b37766ae1a301cc7a7f07198b930e4408aa30baa095b59a837744929f31d04279db4845ed359d45a0b8521a3121ee1505319d4728a618a628940f2876619b1658365b29e4f3a0b686dd9803e3255f40d303f6bff36534316868888c77f485fa32218734eae19aeb69310aa6ce18026017fa6dcb475afca589ef702c7e48f720177a6dae4eb724e5194ce08df02cf8745ce21925e8018d54d642dff56a6e206218177eb3d51e7212388661841b7fe94cb3edad348e981c379a5b8a705dca38945960e2bd22d34a61cad40e399428bf75cce8cbe732b087f8c106a4e7681516e0d793ac9666cf973817e8d7d73c43adcccca4abd20c78187368142fe481ff23a7508c15e8e239a9983ed5b620fa3729812156dc2ddc7722f9d983da543cc54d08825965dccc254c6eea80512b678b87f115e1a4cc2bf009d46f919e2526f0db4e5c172049380e7e41b21dd64919929cec9f09b21661590e2ba825f4573af2c8eb93fe6e9c399a3394ba109652c339cd0cedb31241edf60c7a5f7dbece683319caf38adc94ed31b886c35656871944407dd37bab37452ad6efccd01840552d29a8a99aa75297e8ddf3d413b3357544184d701d70e95e50184a233e8a22bca44e74a68d531a189f121cbc6a648bc0c4ec291499a638a7b175e340a20b086c40b21173b80fef9a5d0e29019d3221abf1703f126185f21d1036c1c0b412a3a2d3c8f3a62e0fdd6c2c892fc3b326c8b43a4419fd6f63497342cc82cc177439fe0b5690148aa11636ca320943d0613142e1a208e131f3a02de8c762d13ae908502a9f5d507eebe5ae9bda70677e84293476d1c34f340b393bbae41102563172e1612e28140574a3c9632578aaaf3f8ffa4936c185d4a90f31ef34b71bfea33584937c36e825f90f778b3bbd32a197eff046482efc90c2054af5d7e12ac27edcf8a45aa8b43e95802af5d16dcd64e3fb65b47dfcbc905aaab7dc1a365c5c902b39fb3e5a6f07426bcae94b818b2dd5483acf04667f1458aa650534abfc3c96e2c4b7f4f3a37237e4ffdca69f30312ffb3564b51f039cdde7e127b1e47bd182ac8fcc53985691156b009f327f4832483e139c107cd143528e657854138b5e338482fcdead8ae01c861cbdb49766da411862bd711378d061e3c6ceb3031fe8b7d94669d2899c9dc85a7fb510df4ba912254c0df76c020c40e86db70f329487531628681e225f551ced62d54312e6c8872bba1ae25f7ef033411aec5cff0c84f37c454751c92aeba165247e5e2f477d2a1ac10c8482288cf224ff716f9b4ec0d6bee0cb8494462cda0a13b94799fef11b886f8580f9b26644f6e929117983b1cc1efe2e9001eb2b3c9444fb70c446f2af5354f7081c0d81493051d753aaff39fc4d8b548a07e15bb935dc1d9bf7f252b3a0271535c86f4eb97d1fd6bc736f487175285f1d6ea9aaef75c0cf1b85f82f16f7e0a809d3b5c78a63cb28d955add25504e26210b70a345d6b1d7785008dffda04597f15f3372128c4478290f53961e2bd6914def4db78c00c40c4e7b490520a63cac698f4eb228fe56aa686e1936e5cc4f904f19d8a01d9bd04e6e6d2f5bb5017406c821b91c2ae90303f681f2a6af2752710aaf6da20066a1b5ce5a0cf7db6466df74032fb1e8bcf5dfbe13f6a20757a455069e501047290b0d9e1c719c2fa1b35b29ed3d8415605c4f7ca59f020740ce99dbda50f270a0e5a0ea1cc28b341b66824f015d6942a7e8379a28cc2fa2833f6d13de0420680b0cb8d84864c8729ec83c3737698b360f43bb40eb6ca612fbc4481bde9f6f4ded462e13489d84343d729965bca0f0455a751eb0577e"}, @NFTA_TARGET_INFO={0xf3, 0x3, "278db0833455d06aa6473831a9fc3e6c89fdb62dec2705223814d14d2aebc4e62b9756f161890ee11d136596d18122e23d281a950b12402b9539622fe9a302e6eef86008d80749d25df13ebac70510981d2d0dc904f25590a7221394fe3042f0a0cfbbe48bb4de4d6cee97b835522a83413d74c03dd38ce50059987470ca03070ecc0c378fb846ecb2cd87c55b1783cbc6be141fcd057c01c764e6ce9127353e4fe38f53ec8db080ab112775c2e17cbed2c95327814eab70dae412c2f86fdc9ee2b0178095efcd1a8ea09ed04e9307b63567d343b80322b28d35723461ab81867c9a362cd74bd834dfda7e5f99f41d"}]}}}, {0x11e8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x11d8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}, @NFTA_MATCH_INFO={0x21, 0x3, "bbf480b4afffa2438852ca0a199ae7fd0a5e44dfeb9eb84a8aae01c5a1"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x103, 0x3, "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"}, @NFTA_MATCH_INFO={0x84, 0x3, "56ee73bd50a7ac7815707e441418cc94269f625ed6198796ecccd3f61b2c9914fedba6ade858862c6b748414b2f9df0fd021d986b7623d9f925ad304647fd13f59a195bca75bbf16f15825d492287af7af78121cfdcad4d707f973ad5a733e0136155931c5491563477e6c98f9bb091c818413c1acb08d495d054bd1956bb152"}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xd8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "13932f8041"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x400005}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2898, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2860, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x13a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "199f40a2fe94bdeb18acee41b25240ee31e8c61ce151956fc0d671cf06de78e80caf1021c807a0264c3b41a696a34cacf37e085d8f4a1d6ca830ae43708133ff5765b72a942d0cd7f91e8aa4bd0772763dd9da009b17b0dc190d2817612920c8c4aeef2a7e85a76095422645e8959b1208e561a959887d010d635088121fc878b0fce933d8d68542a207d31f9adbcd"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x800000000}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x121c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "88efa786b88e881b6bb8a09e7471765b6e1d3622ab399e7b982442875e74912bda9de6be19e5169930059bd782cf99af917bdee2523c777aed263a3f049026f0e0fd965081cc249b62faa8322193e920817361dbd0f4508805b0583d3fee93edb6a1cec32aa53d94091f80274eaf6b05bb90940c6ce89631604968c058839267e3a6333b4ba0a114705d940ccb066b8593747f5c565d77c1fe3bb9008582e5016d518d41c1f81dd10223a10faed49bc256103c4982"}, @NFTA_DATA_VALUE={0x95, 0x1, "76344d90405a91448611f791f185307d4d3a91440154ad42e9de1d27ee4ee2ada8da412b609fd7a4e165aac659ac757985141ad943b781a2a539e073914cfc477c5cd14398cdef96bfe8fab911d33e57c86e6b25748e5e75e928bf62a8b64785cca8ecbc35334b036813494fc24754019bf280f76603dc6f7d6ccfb785abe4ed72efdf29793bf70cd11ffbf64bb70752f5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, {0x1218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_KEY_END={0xd0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, '8B|'}, @NFTA_DATA_VALUE={0x2d, 0x1, "9472d588f09e483b036cca6e1abe5339d8c370e340d74ca6dc88da45f34d89c8e9a188b5a3f74ba1cb"}, @NFTA_DATA_VALUE={0x94, 0x1, "d46f2e965e0131f49513b544298d593e9086d806af85f45f7329abf42034e17eb5c2d892ca0b513dbda18da5a3537780e5070a444cdeb4b0eb272eb3ea159e3fb92b4c3196ac086a73ddf4d2b9878a5b4f94b34e829fa96b06fa987007cfd92668ea72288c3c8464bfeaa68387f719b91faa32fbd1639d7a18b4fa847693ae99999d430d5331eca3cd580ac691cc83f2"}]}, @NFTA_SET_ELEM_DATA={0x1130, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x52, 0x1, "3d73317b3fe1551474712cc2d7f85741f9bdb91e3a6a917ce4db25e69d2899af88d28ec92250c1ae9d14176540f81550ecd058a80ade7b99dc44f09b0b4109e5147ef2add3f70ee1a68c551312dd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "deb57f0e3a0b91012cfeab5ffaeba4c279ca8934ebe05a859b823ca13d726b133f335fe26eb7a97a24ec8477569eafad5758"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x14, 0x1, "0c134a96b56ab88acd0cf4e4c9e3d456"}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "8fc102397bb5e0d1952343073da61753b72bd9e051cfe23510ffe86cc66bd4c8184e22c7fc52fe7dc8e6211bf1877d920d7d4d1bf0a1374318cb73cbbe719f1b37cbd801d827f9d7dd1acaa7cd16634e4ecf71e4ce24624720ffc3212694fb8bd0dc337f61053903818a43c5d301d4ca707f6b33b71c3eb4421dfd0012ecc22f0148835750987139c4916d8fa30ef1c157c950055d7b4f4aacec6c1c6f98483012362a461cd00c0d4837e2cb322df37e"}, @NFTA_DATA_VALUE={0x80, 0x1, "f8e627f82f0a98cb4fab79f547a0fcf716d215c6c485848e6c068785d35e97b010c0e7c5d16fec7132c2a6d3d9db35847891275338ff93964e8b4b82fc8d27c08b97524a940af180d7662099d54a1e611050cfc362bde56672f960420709deae192f0f0955be461ffb2cc828579bb74a26242fcdb806a631fc50adf3"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x73, 0x6, 0x1, 0x0, "7bc52445f5db2485f7acbffecbc86659ce89c5d8d0dd15ae610d03f22c0126d124366407a826ff7a6dc2ae40e141c85dfafe9184a9ccd2b84231f2f7d447cd0ecd157904018b2832741425c96e9970e4730d47f6886b369cf80224af6d72c4dbb6381cfd008392e410351ed3f6601a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3f38}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1f8, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0xfa, 0x7, 0x1, 0x0, "c9dc7838c45f42ff42976395817650db76b88ff516f9b6e0d10951b1a59ecf442ee79942396524b7b029e6a7840d48a699d46534d6408b881cfbdc3f787dd14736af449f512110d5925f6456fcc945cbfd1462b02a51eb181013232d9c45541fc4b42213dbc4f81aa37c038ba6684b32374077d4fba0a241c728fa6c11610dc265f62e85950b78981499882fd81f4ccfca2b736e4c2747f61e3e965f4b108319eaadbeb9f33ea6eefeb368b157a8add5ba72058eab7d640411075484873f0757ae1b092fb607d50d8d47af3548f52cfd084138db64ab318b647433128a098e594ce9368b40d9331e60810c41d06dcbb43d2882679fcc"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4eb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x406, r7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) 1m40.123750748s ago: executing program 3 (id=3044): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2400, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000001b00ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$caif_stream(0x25, 0x1, 0x4) flistxattr(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.907142267s ago: executing program 32 (id=3044): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2400, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000001b00ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$caif_stream(0x25, 0x1, 0x4) flistxattr(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.681309901s ago: executing program 2 (id=4282): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.369735722s ago: executing program 2 (id=4283): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 3.076610192s ago: executing program 2 (id=4289): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xffffffffffffff02, 0x28, 0x1, 0x4, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x26d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700000080004f86262a0f9793eb00000001140003000000000000fa534db81f1a83d6c868048006a7cfb4000000000000000000"], 0x50}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 1.872894542s ago: executing program 5 (id=4309): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 1.838426496s ago: executing program 5 (id=4311): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42181, 0x4f) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast1}}}}) 1.837639186s ago: executing program 0 (id=4312): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @initdev}, &(0x7f0000000800)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000000900000000025f37d298c9c9a5f0af1cd2c2d51118ced6c0891d7c4fbaed072e4f35122a1d45737f5657b418c10425fd24a6683ad8350fff959f90ce61052f9197255ebc0fe63c464cd1c66cdb7a0d42e6012b740c631e03ba52a1ea28649fd0a89da3e55c7e07239a2ec143fba0d9f9086fbf147c3aa034e0422be781a8057eaf720fe73a89d0bc28b9e9e84c0e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r1}, 0x94) syz_usb_connect(0x0, 0x6dd, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x7c, 0x8c, 0xa, 0x40, 0xcf3, 0x3, 0xbdca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cb, 0x3, 0x31, 0x0, 0x20, 0xf8, [{{0x9, 0x4, 0x15, 0x2, 0xc, 0x6a, 0x48, 0xdd, 0xa, [], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x0, 0x9, 0x9, [@generic={0x21, 0x5, "6c1ccfe4c1b1e779d8adaeb3a7949365a6e01407ac85abf4fa56c52c9995b1"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xb7, 0xb4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x80, 0x5, 0xd8, [@generic={0xf0, 0x4, "61f36020f0ab2d137c1668a3189922a3acd25708594780d3291c5634e9226c86f6c839c50b80da2e056ed1c23fe6ace524381596ea957be4c796fbe32e8407e368a91ca7b04eb38abd2a526865003ec0f9a5eae941b5fafce9a83bb8e0f016bf6b3cc52de8c8e9d19931ee3f5cb1bc5bff94998048c9abb9fd476246632a52f159b82b5a48b8e9880d0a4842c53d5606b3ae7bedf974c9f6e7a07ba1202b22b67c53d74c54ee7fe3c4ca3fbe2f87b63b764abe3a4d16a33b4170314d72c0bf6d8da4b97f31ef5bc777dfd5ff800ccda062a7239ce15050ab2826c1de46024a0612adb537a0464eb36b69bd916a64"}, @generic={0x6, 0x5, "b7b7d95e"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xa7, 0x0, 0x7}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0xb, 0x4, 0x7, [@generic={0xaf, 0xf, "187f87a86fd7f967b2ec0f96e3c4f2037ecda914452a9becf6e37845c2a6593280a79068d4160f923f1ceddb3ee172db6675a3bee26049be375ecd8dfeea04e29916d24f8265b46dc54414df83887b186ed1bbb791db276a933b2763026ec1f8247d1f99db2fc26df4f9b29ae964d16c7ad9116ffaa9466022e7050b723475cd5e2672f9c96bc2593637953dcc7882a1e0fd654bdbfb6cd0673ccb8ded4a6bbc132d5b38cb50c986206144a855"}, @generic={0x8e, 0x21, "9c81f9da52739acf445e69c3a46e5d83ec72cfbfd3424077c49c609ec421d6ac8ae6c6b24c614769cfd2f2bcf37a75b75e5527edf0609c189057f92db8770cb3182347cc8d740b3231a267917a2492f3b5a373a5f391c970b13a45ff889a278c0543f3ac573895a75010bb910789985ea71dfc0ce68ea6593ebcc2d69940b30b80e8669b98646eae68fec90f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0x8, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x7f, 0xb5, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x97, 0x4e, 0x1, [@generic={0x4, 0x9, "0baa"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x5, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x8d, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x6}, @generic={0x8e, 0x24, "e6f7dae0e457f235b53193236fb486c75bc872a93467caa5cdfc0757efe964ae38c3198081f6809f423cec4ff694560a438dd810d09d71552c816c562f0f4fb71346bd54b74e9c44a5b09bed36e67a278a884c8147f319bbf1f25275686714c94511ee8e08af7482c819ad8878231d695c98aed9e2eeff7adf0a5a930936c6a0ed5e84c972e22fb6a3fbb994"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x0, 0xf9, 0x0, [@generic={0x75, 0xd, "689f49b65ffe5a16cc145b60ddb00a96db11722908799dc1d54d75cb99dfa027da08779611fdc3ce912ccaea5d94bfa02bf207a4071c075d04675a617b33af988d5f4a070d1eabad672ca04c1fc23ffb81fa2d61a9b3d613e6b02be8f17897a17628f7e103002e95821ddaaf207a36b5f22343"}]}}]}}, {{0x9, 0x4, 0x78, 0xfe, 0x6, 0xb9, 0xfd, 0xe, 0x40, [], [{{0x9, 0x5, 0x8, 0x8, 0x10, 0x0, 0xa, 0x81}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xc, 0x4, 0xe, [@generic={0xcd, 0x1, "0231d33a767a7d22d0e7e9ddcb0b6696b418a9af8b5c2e01b8bbeb5404ae7dcb1ab6ae432aeed34a92807ccfd5d55dd703065d991df13a17bf8d576f289bc840bd91b72ced69e0408020e3415af4cd999591473546d0c788245d2c9c9a3f00b44a98241441af1716d4122ee80735a3d6944ded05cf6ce5853815ba2f502f8cf25bb365b9a47746c7c043ec59bdec0de4864f6185dfbdb83b42585ac951e6f84102f7f15b71b7d93f22b91905093edeec75e653b522c6e50294e482e184d852950f7aad8644dae48e4899ec"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x9, 0x7, 0x7f}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x3, 0xf, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0x2, 0x8, [@generic={0xc4, 0x10, "c7f6b5a014faad8cd14f33f65b49f458581a4beeaab2624f99e555ae61fd33d91a885ac8eb5f17d85dbb0b85e1b6378c623bf56e8b867e8c381eafd3c428a0602e5109200c799a837ec93b251d4eae21cd59ee2da6c51b59b86d194ceb9490e63d9751e7c0b4df1a3017c6b29220a31ecb64e94deb3de688aa31d3283c8034877ea82a6aec1f9b418648df3acec9be133be68ee1f2adf347534b08e5a5f2c7b550b6cf00743ca9793e58c0be53d916980823460b2cda45878bcc715e22782372b4a1"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3d, 0x9, 0x80, [@generic={0xd1, 0xd, "8578a53cfb33ef2501b918704c08964ccf830ffa0a5345b2416549ad73f88c1d2ecfd2986ebe919c401ba54beb627aa7e36477b75c80a74a6bdc0b38d7a098647bb6510f40010b024e610e7b86d7ca863a7d1f8c21df99d009ac1a917ce2af06db0f373a2eadc6a95db3ad3ab3e17cdcc52c0e5fd90b1ee17cb46f177bfd2a44b8607b7bff21fd6bce8fe0d4a9bd896e3956eb8db0a302dacb92b6d5d295812e78b8b22c55a235994d054059ec6bf4534d950e6e0a42cc9772ca255102c14bcb710abffc862de5f34a90c9ab5ed409"}]}}]}}, {{0x9, 0x4, 0xf1, 0x7, 0x0, 0xa5, 0x2c, 0x7c, 0x54, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x6, 0x9, 0x5, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x3, 0x2, 0x3}]}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x4, 0xa2, 0x1, 0xff, 0x4}, 0x47, &(0x7f00000008c0)={0x5, 0xf, 0x47, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0xfffa}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0xfffc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb9a76f3ede570641, 0x9, 0x5, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x2, 0xf00f, 0xe009, [0xc0, 0xc000, 0x3f00, 0x3f0f, 0x0, 0xff0030]}]}, 0x1, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x862e}}]}) 1.757324484s ago: executing program 2 (id=4313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) sync() r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300), 0x0, 0xbe}) syz_open_procfs(0x0, 0x0) sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x100c084, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") 1.69885139s ago: executing program 1 (id=4315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.69815587s ago: executing program 1 (id=4316): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.651954164s ago: executing program 4 (id=4317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x2, 0x2, 0x0, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 1.651245724s ago: executing program 4 (id=4318): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.591338371s ago: executing program 1 (id=4319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42181, 0x4f) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x807f, 0x10001000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b51"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast1}}}}) 1.557392514s ago: executing program 5 (id=4320): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.436052216s ago: executing program 1 (id=4321): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) 1.433815756s ago: executing program 5 (id=4322): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 1.417114718s ago: executing program 4 (id=4323): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.365615323s ago: executing program 5 (id=4324): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xffffffffffffff02, 0x28, 0x1, 0x4, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x26d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700000080004f86262a0f9793eb00000001140003000000000000fa534db81f1a83d6c868048006a7cfb4000000000000000000"], 0x50}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") 1.272734452s ago: executing program 1 (id=4325): socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x20, 0x3, 0x6, 0x7, 0x0, 0xffffffff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) 1.269910402s ago: executing program 0 (id=4326): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.242065035s ago: executing program 4 (id=4327): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0], 0xb1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x60780, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="b40200000000000061174c0000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000062e55a9c68dde68ceabf04e97124209e2a786447a26bc2f3da76108f10d6c7c1836575876c6ef19d757958241e280647710e25af3a34947dd7ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000540)) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 1.173817922s ago: executing program 2 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.173606952s ago: executing program 4 (id=4329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x2, 0x2, 0x0, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 1.170062752s ago: executing program 0 (id=4330): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.169345033s ago: executing program 4 (id=4331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.106665329s ago: executing program 0 (id=4332): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.089233181s ago: executing program 0 (id=4333): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.860339][T15461] RSP: 002b:00007f0554697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.860363][T15461] RAX: ffffffffffffffda RBX: 00007f0555e85fa0 RCX: 00007f0555c2f6c9 [ 354.860379][T15461] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 354.860395][T15461] RBP: 00007f0555cb1f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.860408][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.860421][T15461] R13: 00007f0555e86038 R14: 00007f0555e85fa0 R15: 00007fff111ca868 [ 354.860439][T15461] [ 354.860446][T15461] memory: usage 307200kB, limit 307200kB, failcnt 798 [ 355.223340][T15461] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0 [ 355.231319][T15461] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 355.238643][T15461] Memory cgroup stats for /syz2: [ 355.240677][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.255544][T15461] cache 4096 [ 355.258754][T15461] rss 4096 [ 355.261848][T15461] shmem 0 [ 355.264877][T15461] mapped_file 4096 [ 355.266335][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.268594][T15461] dirty 0 [ 355.268604][T15461] writeback 28672 [ 355.284397][T15461] workingset_refault_anon 1209 [ 355.289211][T15461] workingset_refault_file 688 [ 355.293928][T15461] swap 167936 [ 355.297217][T15461] swapcached 45056 [ 355.301002][T15461] pgpgin 400682 [ 355.304480][T15461] pgpgout 400669 [ 355.308025][T15461] pgfault 419318 [ 355.311584][T15461] pgmajfault 248 [ 355.315180][T15461] inactive_anon 16384 [ 355.319238][T15461] active_anon 28672 [ 355.323047][T15461] inactive_file 0 [ 355.326720][T15461] active_file 8192 [ 355.330471][T15461] unevictable 0 [ 355.333955][T15461] hierarchical_memory_limit 314572800 [ 355.339408][T15461] hierarchical_memsw_limit 9223372036854771712 [ 355.345671][T15461] total_cache 4096 [ 355.349567][T15461] total_rss 4096 [ 355.349595][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.353222][T15461] total_shmem 0 [ 355.353233][T15461] total_mapped_file 4096 [ 355.353240][T15461] total_dirty 0 [ 355.353247][T15461] total_writeback 28672 [ 355.353255][T15461] total_workingset_refault_anon 1209 [ 355.353301][T15461] total_workingset_refault_file 688 [ 355.387475][T15461] total_swap 167936 [ 355.391281][T15461] total_swapcached 45056 [ 355.395555][T15461] total_pgpgin 400682 [ 355.399541][T15461] total_pgpgout 400669 [ 355.403630][T15461] total_pgfault 419318 [ 355.407768][T15461] total_pgmajfault 248 [ 355.411828][T15461] total_inactive_anon 16384 [ 355.416363][T15461] total_active_anon 28672 [ 355.420678][T15461] total_inactive_file 0 [ 355.424887][T15461] total_active_file 8192 [ 355.429153][T15461] total_unevictable 0 [ 355.433254][T15461] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3907,pid=15460,uid=0 [ 355.448207][T15461] Memory cgroup out of memory: Killed process 15460 (syz.2.3907) total-vm:94092kB, anon-rss:1264kB, file-rss:22564kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 355.466249][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.563010][T15487] loop1: detected capacity change from 0 to 4096 [ 355.570555][T15487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.581275][T15487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.622447][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.694344][T15492] FAULT_INJECTION: forcing a failure. [ 355.694344][T15492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.707704][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.1.3914 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.707742][T15492] Tainted: [W]=WARN [ 355.707749][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.707764][T15492] Call Trace: [ 355.707772][T15492] [ 355.707782][T15492] __dump_stack+0x1d/0x30 [ 355.707863][T15492] dump_stack_lvl+0xe8/0x140 [ 355.707935][T15492] dump_stack+0x15/0x1b [ 355.707989][T15492] should_fail_ex+0x265/0x280 [ 355.708037][T15492] should_fail+0xb/0x20 [ 355.708057][T15492] should_fail_usercopy+0x1a/0x20 [ 355.708084][T15492] _copy_from_user+0x1c/0xb0 [ 355.708123][T15492] ___sys_sendmsg+0xc1/0x1d0 [ 355.708169][T15492] __x64_sys_sendmsg+0xd4/0x160 [ 355.708191][T15492] x64_sys_call+0x191e/0x3000 [ 355.708215][T15492] do_syscall_64+0xd2/0x200 [ 355.708247][T15492] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 355.708283][T15492] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 355.708393][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.708417][T15492] RIP: 0033:0x7ff54193f6c9 [ 355.708513][T15492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.708581][T15492] RSP: 002b:00007ff5403a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.708716][T15492] RAX: ffffffffffffffda RBX: 00007ff541b95fa0 RCX: 00007ff54193f6c9 [ 355.708730][T15492] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 355.708742][T15492] RBP: 00007ff5403a7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.708760][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.708820][T15492] R13: 00007ff541b96038 R14: 00007ff541b95fa0 R15: 00007fff598846c8 [ 355.708839][T15492] [ 355.995325][T15500] loop2: detected capacity change from 0 to 2048 [ 356.029170][T15500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.042901][T15504] loop1: detected capacity change from 0 to 512 [ 356.059664][T15504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 356.116689][T15504] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3918: inode has both inline data and extents flags [ 356.142253][T15504] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3918: couldn't read orphan inode 15 (err -117) [ 356.161836][T15507] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3919'. [ 356.170938][T15507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3919'. [ 356.174192][T15504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.205415][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.232230][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.267358][T15509] loop4: detected capacity change from 0 to 2048 [ 356.284888][T15509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.312569][T15509] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.338800][T15519] tmpfs: Bad value for 'mpol' [ 356.480101][T15518] loop2: detected capacity change from 0 to 512 [ 356.505938][T15518] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3920: error while reading EA inode 32 err=-116 [ 356.543440][T15518] EXT4-fs (loop2): Remounting filesystem read-only [ 356.558801][T15518] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 356.569099][T15518] EXT4-fs (loop2): 1 orphan inode deleted [ 356.575603][T15518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.588547][T15518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.639712][ T3915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 345: padding at end of block bitmap is not set [ 356.674944][T15534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.684198][ T3915] EXT4-fs (loop4): Remounting filesystem read-only [ 356.686387][T15537] netlink: 'syz.1.3931': attribute type 1 has an invalid length. [ 356.698816][T15534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.699107][T15535] macvtap11: entered allmulticast mode [ 356.729171][T15535] batman_adv: batadv0: Adding interface: macvtap11 [ 356.735763][T15535] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.757296][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.775132][T15535] batman_adv: batadv0: Interface activated: macvtap11 [ 356.790673][T15537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.802085][T15539] bond2 (unregistering): Released all slaves [ 356.828469][T15535] hub 1-0:1.0: USB hub found [ 356.843380][T15535] hub 1-0:1.0: 8 ports detected [ 356.860551][T15543] macvtap5: entered allmulticast mode [ 356.908925][T15543] batman_adv: batadv0: Adding interface: macvtap5 [ 356.915437][T15543] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.966898][T15545] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 356.971794][T15547] hub 1-0:1.0: USB hub found [ 356.988115][T15547] hub 1-0:1.0: 8 ports detected [ 356.996891][T15543] batman_adv: batadv0: Interface activated: macvtap5 [ 357.017567][T15548] FAULT_INJECTION: forcing a failure. [ 357.017567][T15548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.030905][T15548] CPU: 1 UID: 0 PID: 15548 Comm: syz.1.3932 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 357.030938][T15548] Tainted: [W]=WARN [ 357.030945][T15548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.030960][T15548] Call Trace: [ 357.030969][T15548] [ 357.031030][T15548] __dump_stack+0x1d/0x30 [ 357.031056][T15548] dump_stack_lvl+0xe8/0x140 [ 357.031078][T15548] dump_stack+0x15/0x1b [ 357.031100][T15548] should_fail_ex+0x265/0x280 [ 357.031193][T15548] should_fail+0xb/0x20 [ 357.031209][T15548] should_fail_usercopy+0x1a/0x20 [ 357.031232][T15548] _copy_from_user+0x1c/0xb0 [ 357.031264][T15548] ___sys_sendmsg+0xc1/0x1d0 [ 357.031305][T15548] __x64_sys_sendmsg+0xd4/0x160 [ 357.031363][T15548] x64_sys_call+0x191e/0x3000 [ 357.031389][T15548] do_syscall_64+0xd2/0x200 [ 357.031411][T15548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 357.031442][T15548] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 357.031575][T15548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.031603][T15548] RIP: 0033:0x7ff54193f6c9 [ 357.031622][T15548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.031644][T15548] RSP: 002b:00007ff540386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.031663][T15548] RAX: ffffffffffffffda RBX: 00007ff541b96090 RCX: 00007ff54193f6c9 [ 357.031701][T15548] RDX: 00000000040cc040 RSI: 0000200000000600 RDI: 0000000000000004 [ 357.031718][T15548] RBP: 00007ff540386090 R08: 0000000000000000 R09: 0000000000000000 [ 357.031733][T15548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.031749][T15548] R13: 00007ff541b96128 R14: 00007ff541b96090 R15: 00007fff598846c8 [ 357.031771][T15548] [ 357.190960][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 357.190974][ T29] audit: type=1326 audit(1763064713.873:34360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0555c26567 code=0x7ffc0000 [ 357.201317][T15545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.394729][T15556] macvtap6: entered allmulticast mode [ 357.433502][ T29] audit: type=1400 audit(1763064714.103:34361): avc: denied { execute } for pid=15559 comm="syz.2.3937" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 357.507344][T15556] hub 1-0:1.0: USB hub found [ 357.530736][T15556] hub 1-0:1.0: 8 ports detected [ 357.671383][T15570] atomic_op ffff88811a286d28 conn xmit_atomic 0000000000000000 [ 357.783535][T15574] netlink: 'syz.0.3944': attribute type 10 has an invalid length. [ 357.806235][T15574] bond0: (slave dummy0): Releasing backup interface [ 357.818329][T15574] netlink: 'syz.0.3944': attribute type 10 has an invalid length. [ 357.831288][T15574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 357.888235][T15576] loop2: detected capacity change from 0 to 4096 [ 357.905338][T15576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.923877][T15576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.949558][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.011740][T15585] Cannot find add_set index 0 as target [ 358.046289][T15590] loop4: detected capacity change from 0 to 512 [ 358.048850][T15591] macvtap12: entered allmulticast mode [ 358.063779][T15590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 358.064623][T15591] batman_adv: batadv0: Adding interface: macvtap12 [ 358.080275][T15591] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.084298][T15590] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3950: inode has both inline data and extents flags [ 358.125000][T15588] loop2: detected capacity change from 0 to 4096 [ 358.133738][T15590] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3950: couldn't read orphan inode 15 (err -117) [ 358.142244][T15591] batman_adv: batadv0: Interface activated: macvtap12 [ 358.152733][T15588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.164026][T15590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.178532][T15588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.211732][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.253936][T15591] hub 1-0:1.0: USB hub found [ 358.261083][T15591] hub 1-0:1.0: 8 ports detected [ 358.267732][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'. [ 358.309458][T15600] netlink: 'syz.4.3951': attribute type 10 has an invalid length. [ 358.333678][T15600] bond0: (slave dummy0): Releasing backup interface [ 358.342944][T15600] netlink: 'syz.4.3951': attribute type 10 has an invalid length. [ 358.362724][T15600] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.375925][T15600] Cannot find add_set index 0 as target [ 358.437308][T15611] loop4: detected capacity change from 0 to 4096 [ 358.445768][T15611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.471137][T15621] loop2: detected capacity change from 0 to 512 [ 358.495750][T15621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.524382][T15621] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3962: inode has both inline data and extents flags [ 358.543749][T15621] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3962: couldn't read orphan inode 15 (err -117) [ 358.564623][T15627] macvtap7: entered allmulticast mode [ 358.627925][T15629] loop4: detected capacity change from 0 to 1024 [ 358.654905][T15627] hub 1-0:1.0: USB hub found [ 358.670931][T15629] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3965: bg 0: block 88: padding at end of block bitmap is not set [ 358.694198][T15627] hub 1-0:1.0: 8 ports detected [ 358.772701][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3968'. [ 358.819340][T15640] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 358.829262][T15640] bond0: (slave dummy0): Releasing backup interface [ 358.837676][T15640] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 358.847794][T15640] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.873572][T15640] Cannot find add_set index 0 as target [ 358.938998][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3974'. [ 358.988526][T15658] loop4: detected capacity change from 0 to 512 [ 358.996935][T15658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.034388][T15658] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3977: inode has both inline data and extents flags [ 359.059915][T15658] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3977: couldn't read orphan inode 15 (err -117) [ 359.080566][ T29] audit: type=1400 audit(1763064715.763:34362): avc: denied { ioctl } for pid=15662 comm="syz.0.3979" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 359.137049][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3981'. [ 359.208899][T15673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3981'. [ 359.209026][T15672] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 359.254680][T15672] bond0: (slave dummy0): Releasing backup interface [ 359.268742][T15674] macvtap3: entered allmulticast mode [ 359.283520][T15674] batman_adv: batadv0: Adding interface: macvtap3 [ 359.289989][T15674] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.324060][T15674] batman_adv: batadv0: Interface activated: macvtap3 [ 359.360727][T15674] hub 1-0:1.0: USB hub found [ 359.371103][T15677] netlink: 'syz.0.3984': attribute type 10 has an invalid length. [ 359.379181][T15674] hub 1-0:1.0: 8 ports detected [ 359.386842][T15677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.402590][T15679] bond0: (slave dummy0): Releasing backup interface [ 359.425496][T15679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.461318][T15685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3988'. [ 359.522531][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3988'. [ 359.605446][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 359.656782][T15693] Cannot find add_set index 0 as target [ 359.695790][ T29] audit: type=1326 audit(1763064716.383:34363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.719524][ T29] audit: type=1326 audit(1763064716.383:34364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.754914][ T29] audit: type=1326 audit(1763064716.433:34365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.778688][ T29] audit: type=1326 audit(1763064716.433:34366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.802367][ T29] audit: type=1326 audit(1763064716.433:34367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.826147][ T29] audit: type=1326 audit(1763064716.433:34368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.849871][ T29] audit: type=1326 audit(1763064716.433:34369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15694 comm="syz.0.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 359.992312][T15710] bond0: (slave dummy0): Releasing backup interface [ 360.003221][T15710] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.019084][T15710] Cannot find add_set index 0 as target [ 360.107161][T15723] Cannot find add_set index 0 as target [ 360.123858][T15721] loop4: detected capacity change from 0 to 4096 [ 360.130557][T15721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.141201][ T3970] Bluetooth: hci0: Frame reassembly failed (-84) [ 360.175449][T15728] loop4: detected capacity change from 0 to 2048 [ 360.184446][T15728] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.370487][T15735] bond0: (slave dummy0): Releasing backup interface [ 360.388376][T15735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.431276][ T3916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 345: padding at end of block bitmap is not set [ 360.446343][ T3916] EXT4-fs (loop4): Remounting filesystem read-only [ 360.565483][T15742] loop1: detected capacity change from 0 to 512 [ 360.586991][T15742] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.4006: inode #0: comm syz.1.4006: iget: illegal inode # [ 360.601691][T15742] EXT4-fs (loop1): get orphan inode failed [ 360.609814][T15745] bond0: (slave dummy0): Releasing backup interface [ 360.613696][T15742] EXT4-fs (loop1): mount failed [ 360.626980][T15745] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.822364][T15755] loop4: detected capacity change from 0 to 512 [ 360.851922][T15755] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.866150][T15755] EXT4-fs (loop4): 1 truncate cleaned up [ 361.412960][T15735] Cannot find add_set index 0 as target [ 361.915045][T15770] loop5: detected capacity change from 0 to 4096 [ 361.941938][T15770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.962130][T15774] validate_nla: 9 callbacks suppressed [ 361.962149][T15774] netlink: 'syz.0.4020': attribute type 10 has an invalid length. [ 362.012941][T15779] netlink: 'syz.0.4020': attribute type 10 has an invalid length. [ 362.025416][T15774] bond0: (slave dummy0): Releasing backup interface [ 362.034792][T15778] netlink: 'syz.5.4021': attribute type 10 has an invalid length. [ 362.045781][T15779] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.056662][T15778] bond0: (slave dummy0): Releasing backup interface [ 362.072587][T15778] netlink: 'syz.5.4021': attribute type 10 has an invalid length. [ 362.080842][T15774] Cannot find add_set index 0 as target [ 362.094214][T15778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.114952][T15778] Cannot find add_set index 0 as target [ 362.154238][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.184360][T15785] loop5: detected capacity change from 0 to 2048 [ 362.221774][T15785] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.292272][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.310149][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.331267][T15793] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 362.351485][T15793] bond0: (slave dummy0): Releasing backup interface [ 362.362789][T15793] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 362.374591][T15793] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.384040][T15796] netlink: 'syz.4.4026': attribute type 10 has an invalid length. [ 362.402081][T15796] bond0: (slave dummy0): Releasing backup interface [ 362.412766][T15796] netlink: 'syz.4.4026': attribute type 10 has an invalid length. [ 362.427052][T15796] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.445724][T15791] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4023: bg 0: block 345: padding at end of block bitmap is not set [ 362.461225][T15791] EXT4-fs (loop5): Remounting filesystem read-only [ 362.586119][T15809] netlink: 'syz.0.4031': attribute type 10 has an invalid length. [ 362.597873][T15809] bond0: (slave dummy0): Releasing backup interface [ 362.614176][T15809] netlink: 'syz.0.4031': attribute type 10 has an invalid length. [ 362.623806][T15809] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.717113][T15814] loop4: detected capacity change from 0 to 512 [ 362.735699][T15814] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.4030: inode #0: comm syz.4.4030: iget: illegal inode # [ 362.773192][T15814] EXT4-fs (loop4): get orphan inode failed [ 362.787159][T15814] EXT4-fs (loop4): mount failed [ 363.082089][T15806] syz.4.4030 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 363.096227][T15806] CPU: 0 UID: 0 PID: 15806 Comm: syz.4.4030 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 363.096249][T15806] Tainted: [W]=WARN [ 363.096254][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.096262][T15806] Call Trace: [ 363.096267][T15806] [ 363.096273][T15806] __dump_stack+0x1d/0x30 [ 363.096289][T15806] dump_stack_lvl+0xe8/0x140 [ 363.096331][T15806] dump_stack+0x15/0x1b [ 363.096342][T15806] dump_header+0x81/0x220 [ 363.096354][T15806] oom_kill_process+0x342/0x400 [ 363.096431][T15806] out_of_memory+0x979/0xb80 [ 363.096492][T15806] try_charge_memcg+0x610/0xa10 [ 363.096513][T15806] obj_cgroup_charge_pages+0xa6/0x150 [ 363.096526][T15806] __memcg_kmem_charge_page+0x9f/0x170 [ 363.096540][T15806] __alloc_frozen_pages_noprof+0x188/0x360 [ 363.096554][T15806] alloc_pages_mpol+0xb3/0x260 [ 363.096599][T15806] alloc_pages_noprof+0x90/0x130 [ 363.096613][T15806] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 363.096661][T15806] __kvmalloc_node_noprof+0x483/0x670 [ 363.096682][T15806] ? ip_set_alloc+0x24/0x30 [ 363.096751][T15806] ? ip_set_alloc+0x24/0x30 [ 363.096769][T15806] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 363.096789][T15806] ip_set_alloc+0x24/0x30 [ 363.096809][T15806] hash_netiface_create+0x282/0x740 [ 363.096869][T15806] ? __pfx_hash_netiface_create+0x10/0x10 [ 363.096907][T15806] ip_set_create+0x3cc/0x970 [ 363.096929][T15806] ? __nla_parse+0x40/0x60 [ 363.097017][T15806] nfnetlink_rcv_msg+0x4c6/0x590 [ 363.097049][T15806] netlink_rcv_skb+0x123/0x220 [ 363.097069][T15806] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.097098][T15806] nfnetlink_rcv+0x167/0x16c0 [ 363.097194][T15806] ? kmem_cache_free+0xe4/0x3d0 [ 363.097250][T15806] ? __kfree_skb+0x109/0x150 [ 363.097269][T15806] ? nlmon_xmit+0x4f/0x60 [ 363.097344][T15806] ? consume_skb+0x49/0x150 [ 363.097362][T15806] ? nlmon_xmit+0x4f/0x60 [ 363.097376][T15806] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 363.097447][T15806] ? __dev_queue_xmit+0x1200/0x2000 [ 363.097459][T15806] ? __dev_queue_xmit+0x182/0x2000 [ 363.097470][T15806] ? kmem_cache_free+0x286/0x3d0 [ 363.097512][T15806] ? ref_tracker_free+0x37d/0x3e0 [ 363.097597][T15806] ? __netlink_deliver_tap+0x4dc/0x500 [ 363.097671][T15806] netlink_unicast+0x5c0/0x690 [ 363.097690][T15806] netlink_sendmsg+0x58b/0x6b0 [ 363.097709][T15806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.097763][T15806] __sock_sendmsg+0x145/0x180 [ 363.097795][T15806] ____sys_sendmsg+0x31e/0x4e0 [ 363.097817][T15806] ___sys_sendmsg+0x17b/0x1d0 [ 363.097835][T15806] __x64_sys_sendmsg+0xd4/0x160 [ 363.097919][T15806] x64_sys_call+0x191e/0x3000 [ 363.097933][T15806] do_syscall_64+0xd2/0x200 [ 363.098008][T15806] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 363.098027][T15806] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 363.098053][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.098142][T15806] RIP: 0033:0x7f27626ef6c9 [ 363.098154][T15806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.098165][T15806] RSP: 002b:00007f276114f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.098178][T15806] RAX: ffffffffffffffda RBX: 00007f2762945fa0 RCX: 00007f27626ef6c9 [ 363.098186][T15806] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 363.098195][T15806] RBP: 00007f2762771f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.098203][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.098266][T15806] R13: 00007f2762946038 R14: 00007f2762945fa0 R15: 00007ffde12de8f8 [ 363.098277][T15806] [ 363.098282][T15806] memory: usage 307192kB, limit 307200kB, failcnt 1663 [ 363.455178][T15806] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 363.463044][T15806] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 363.470337][T15806] Memory cgroup stats for /syz4: [ 363.471012][T15806] cache 4096 [ 363.479208][T15806] rss 4096 [ 363.482221][T15806] shmem 0 [ 363.485228][T15806] mapped_file 4096 [ 363.488961][T15806] dirty 0 [ 363.491912][T15806] writeback 0 [ 363.495212][T15806] workingset_refault_anon 568 [ 363.499972][T15806] workingset_refault_file 4333 [ 363.504867][T15806] swap 569344 [ 363.508151][T15806] swapcached 4096 [ 363.511857][T15806] pgpgin 382102 [ 363.515411][T15806] pgpgout 382100 [ 363.516916][T15825] loop2: detected capacity change from 0 to 512 [ 363.518955][T15806] pgfault 442661 [ 363.518965][T15806] pgmajfault 376 [ 363.518974][T15806] inactive_anon 4096 [ 363.530274][T15825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.532312][T15806] active_anon 0 [ 363.532323][T15806] inactive_file 0 [ 363.553112][T15806] active_file 4096 [ 363.556854][T15806] unevictable 0 [ 363.560333][T15806] hierarchical_memory_limit 314572800 [ 363.565743][T15806] hierarchical_memsw_limit 9223372036854771712 [ 363.566608][T15825] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4036: inode has both inline data and extents flags [ 363.571887][T15806] total_cache 4096 [ 363.571898][T15806] total_rss 4096 [ 363.571966][T15806] total_shmem 0 [ 363.586964][T15825] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4036: couldn't read orphan inode 15 (err -117) [ 363.588855][T15806] total_mapped_file 4096 [ 363.588865][T15806] total_dirty 0 [ 363.615715][T15806] total_writeback 0 [ 363.619510][T15806] total_workingset_refault_anon 568 [ 363.624733][T15806] total_workingset_refault_file 4333 [ 363.630022][T15806] total_swap 569344 [ 363.633845][T15806] total_swapcached 4096 [ 363.638079][T15806] total_pgpgin 382102 [ 363.642035][T15806] total_pgpgout 382100 [ 363.646104][T15806] total_pgfault 442661 [ 363.650145][T15806] total_pgmajfault 376 [ 363.654205][T15806] total_inactive_anon 4096 [ 363.658599][T15806] total_active_anon 0 [ 363.662576][T15806] total_inactive_file 0 [ 363.666766][T15806] total_active_file 4096 [ 363.670989][T15806] total_unevictable 0 [ 363.675135][T15806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4030,pid=15805,uid=0 [ 363.690156][T15806] Memory cgroup out of memory: Killed process 15805 (syz.4.4030) total-vm:96140kB, anon-rss:1264kB, file-rss:22648kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 363.861482][T15836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.870894][T15836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.909129][T15841] loop2: detected capacity change from 0 to 2048 [ 363.924713][T15841] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.988005][T15846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.996835][T15846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.015719][T15846] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4042: bg 0: block 345: padding at end of block bitmap is not set [ 364.030265][T15846] EXT4-fs (loop2): Remounting filesystem read-only [ 364.403719][T15848] bond0: (slave dummy0): Releasing backup interface [ 364.426332][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 364.426410][ T29] audit: type=1326 audit(1763064721.113:34372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.456197][ T29] audit: type=1326 audit(1763064721.113:34373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.479936][ T29] audit: type=1326 audit(1763064721.113:34374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.503644][ T29] audit: type=1326 audit(1763064721.113:34375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.527217][ T29] audit: type=1326 audit(1763064721.113:34376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.551117][ T29] audit: type=1326 audit(1763064721.113:34377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.574784][ T29] audit: type=1326 audit(1763064721.113:34378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c3d571f85 code=0x7ffc0000 [ 364.598356][ T29] audit: type=1326 audit(1763064721.113:34379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.621986][ T29] audit: type=1326 audit(1763064721.113:34380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.645602][ T29] audit: type=1326 audit(1763064721.113:34381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15851 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 364.683033][T15858] Cannot find add_set index 0 as target [ 364.706864][T15862] loop2: detected capacity change from 0 to 512 [ 364.722804][T15862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 364.740099][T15862] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4048: inode has both inline data and extents flags [ 364.746859][T15865] loop4: detected capacity change from 0 to 128 [ 364.753489][T15862] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4048: couldn't read orphan inode 15 (err -117) [ 364.762836][T15865] msdos: Unknown parameter 'SSh>r^- AC 1Ǚ;$g' [ 364.871198][T15876] bond0: (slave dummy0): Releasing backup interface [ 364.889186][T15877] macvtap13: entered allmulticast mode [ 364.896761][T15877] batman_adv: batadv0: Adding interface: macvtap13 [ 364.903378][T15877] batman_adv: batadv0: The MTU of interface macvtap13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.929378][T15878] __nla_validate_parse: 3 callbacks suppressed [ 364.929394][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 364.930130][T15877] batman_adv: batadv0: Interface activated: macvtap13 [ 364.960618][T15881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.002747][T15886] bond0: (slave dummy0): Releasing backup interface [ 365.011468][T15877] hub 1-0:1.0: USB hub found [ 365.021906][T15877] hub 1-0:1.0: 8 ports detected [ 365.047060][T15886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.077020][T15887] loop1: detected capacity change from 0 to 512 [ 365.104153][T15887] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4058: error while reading EA inode 32 err=-116 [ 365.123490][T15887] EXT4-fs (loop1): Remounting filesystem read-only [ 365.130025][T15887] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 365.150347][T15895] loop4: detected capacity change from 0 to 4096 [ 365.157205][T15895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.164043][T15887] EXT4-fs (loop1): 1 orphan inode deleted [ 365.419939][T15914] loop2: detected capacity change from 0 to 512 [ 365.476153][T15914] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4064: error while reading EA inode 32 err=-116 [ 365.500103][T15914] EXT4-fs (loop2): Remounting filesystem read-only [ 365.516287][T15914] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 365.535377][T15914] EXT4-fs (loop2): 1 orphan inode deleted [ 365.541408][T15916] loop5: detected capacity change from 0 to 512 [ 365.608370][T15916] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4066: inode #0: comm syz.5.4066: iget: illegal inode # [ 365.689092][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4068'. [ 365.703728][T15916] EXT4-fs (loop5): get orphan inode failed [ 365.721068][T15925] loop1: detected capacity change from 0 to 512 [ 365.730297][T15916] EXT4-fs (loop5): mount failed [ 365.767976][T15929] loop4: detected capacity change from 0 to 512 [ 365.771429][T15925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.774663][T15929] EXT4-fs: Ignoring removed i_version option [ 365.790256][T15929] EXT4-fs: Ignoring removed bh option [ 365.796962][T15925] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4069: inode has both inline data and extents flags [ 365.824847][T15925] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4069: couldn't read orphan inode 15 (err -117) [ 365.847612][T15929] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.014912][T15937] loop1: detected capacity change from 0 to 128 [ 366.024582][T15937] msdos: Unknown parameter 'SSh>r^- AC 1Ǚ;$g' [ 366.052422][ T3913] Bluetooth: hci0: Frame reassembly failed (-84) [ 366.147627][T13311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 366.158599][T13311] CPU: 1 UID: 0 PID: 13311 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.158634][T13311] Tainted: [W]=WARN [ 366.158641][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.158653][T13311] Call Trace: [ 366.158718][T13311] [ 366.158726][T13311] __dump_stack+0x1d/0x30 [ 366.158753][T13311] dump_stack_lvl+0xe8/0x140 [ 366.158786][T13311] dump_stack+0x15/0x1b [ 366.158885][T13311] dump_header+0x81/0x220 [ 366.158908][T13311] oom_kill_process+0x342/0x400 [ 366.158948][T13311] out_of_memory+0x979/0xb80 [ 366.159038][T13311] try_charge_memcg+0x610/0xa10 [ 366.159077][T13311] charge_memcg+0x51/0xc0 [ 366.159160][T13311] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 366.159189][T13311] __read_swap_cache_async+0x17b/0x2d0 [ 366.159248][T13311] swap_cluster_readahead+0x262/0x3c0 [ 366.159281][T13311] swapin_readahead+0xde/0x6f0 [ 366.159306][T13311] ? __rb_erase_color+0x28e/0x490 [ 366.159347][T13311] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 366.159451][T13311] ? css_rstat_updated+0xb7/0x240 [ 366.159471][T13311] ? __rb_insert_augmented+0x76/0x2c0 [ 366.159507][T13311] ? __rcu_read_unlock+0x34/0x70 [ 366.159613][T13311] ? __rcu_read_unlock+0x4f/0x70 [ 366.159638][T13311] ? __rcu_read_unlock+0x4f/0x70 [ 366.159745][T13311] ? swap_cache_get_folio+0x277/0x280 [ 366.159769][T13311] do_swap_page+0x2ae/0x2370 [ 366.159803][T13311] ? _raw_spin_unlock+0x26/0x50 [ 366.159832][T13311] ? finish_task_switch+0xad/0x2b0 [ 366.159944][T13311] ? __pfx_default_wake_function+0x10/0x10 [ 366.159977][T13311] handle_mm_fault+0x9a5/0x2be0 [ 366.160008][T13311] ? vma_start_read+0x141/0x1f0 [ 366.160048][T13311] do_user_addr_fault+0x630/0x1080 [ 366.160115][T13311] ? fpregs_restore_userregs+0xe2/0x1d0 [ 366.160155][T13311] ? switch_fpu_return+0xe/0x20 [ 366.160187][T13311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 366.160291][T13311] exc_page_fault+0x62/0xa0 [ 366.160325][T13311] asm_exc_page_fault+0x26/0x30 [ 366.160349][T13311] RIP: 0033:0x7f9dec8f1f45 [ 366.160445][T13311] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 366.160464][T13311] RSP: 002b:00007fff7ae7a7b8 EFLAGS: 00010246 [ 366.160480][T13311] RAX: 0000000000000000 RBX: 000000000000016c RCX: 00007f9dec8f1f43 [ 366.160497][T13311] RDX: 00007fff7ae7a7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.160512][T13311] RBP: 00007fff7ae7a83c R08: 0000000003b8ef4e R09: 0000000000000000 [ 366.160527][T13311] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 366.160543][T13311] R13: 00000000000927c0 R14: 0000000000059516 R15: 00007fff7ae7a890 [ 366.160584][T13311] [ 366.160591][T13311] memory: usage 307200kB, limit 307200kB, failcnt 400 [ 366.433190][T13311] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 366.441224][T13311] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 366.448582][T13311] Memory cgroup stats for /syz5: [ 366.448945][T13311] cache 0 [ 366.456889][T13311] rss 0 [ 366.459640][T13311] shmem 0 [ 366.462553][T13311] mapped_file 0 [ 366.466131][T13311] dirty 0 [ 366.469044][T13311] writeback 0 [ 366.472382][T13311] workingset_refault_anon 235 [ 366.477429][T13311] workingset_refault_file 0 [ 366.482071][T13311] swap 385024 [ 366.485394][T13311] swapcached 12288 [ 366.489106][T13311] pgpgin 67939 [ 366.492516][T13311] pgpgout 67936 [ 366.495974][T13311] pgfault 84604 [ 366.499499][T13311] pgmajfault 125 [ 366.503030][T13311] inactive_anon 4096 [ 366.506984][T13311] active_anon 8192 [ 366.510700][T13311] inactive_file 0 [ 366.514554][T13311] active_file 0 [ 366.518011][T13311] unevictable 0 [ 366.521465][T13311] hierarchical_memory_limit 314572800 [ 366.526875][T13311] hierarchical_memsw_limit 9223372036854771712 [ 366.533023][T13311] total_cache 0 [ 366.536564][T13311] total_rss 0 [ 366.539843][T13311] total_shmem 0 [ 366.543336][T13311] total_mapped_file 0 [ 366.547323][T13311] total_dirty 0 [ 366.550777][T13311] total_writeback 0 [ 366.554775][T13311] total_workingset_refault_anon 235 [ 366.560062][T13311] total_workingset_refault_file 0 [ 366.565114][T13311] total_swap 385024 [ 366.568937][T13311] total_swapcached 12288 [ 366.573297][T13311] total_pgpgin 67939 [ 366.577274][T13311] total_pgpgout 67936 [ 366.581237][T13311] total_pgfault 84604 [ 366.585320][T13311] total_pgmajfault 125 [ 366.589400][T13311] total_inactive_anon 4096 [ 366.593911][T13311] total_active_anon 8192 [ 366.598172][T13311] total_inactive_file 0 [ 366.602328][T13311] total_active_file 0 [ 366.606423][T13311] total_unevictable 0 [ 366.610399][T13311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4066,pid=15907,uid=0 [ 366.625198][T13311] Memory cgroup out of memory: Killed process 15907 (syz.5.4066) total-vm:98328kB, anon-rss:1264kB, file-rss:26688kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 366.870801][T15954] loop2: detected capacity change from 0 to 512 [ 366.908779][T15963] macvtap6: entered allmulticast mode [ 366.918660][T15963] batman_adv: batadv0: Adding interface: macvtap6 [ 366.918732][T15954] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4079: error while reading EA inode 32 err=-116 [ 366.925200][T15963] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.925316][T15963] batman_adv: batadv0: Interface activated: macvtap6 [ 366.943299][T15954] EXT4-fs (loop2): Remounting filesystem read-only [ 366.976848][T15954] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 366.987235][T15954] EXT4-fs (loop2): 1 orphan inode deleted [ 367.006210][T15970] loop5: detected capacity change from 0 to 512 [ 367.014170][T15970] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 367.044252][T15970] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4083: inode has both inline data and extents flags [ 367.073414][T15970] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4083: couldn't read orphan inode 15 (err -117) [ 367.118600][T15968] hub 1-0:1.0: USB hub found [ 367.123494][T15968] hub 1-0:1.0: 8 ports detected [ 367.219073][T15983] validate_nla: 5 callbacks suppressed [ 367.219092][T15983] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 367.234551][T15983] bond0: (slave dummy0): Releasing backup interface [ 367.243822][T15983] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 367.255052][T15983] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 367.273492][T15983] Cannot find add_set index 0 as target [ 367.329584][T15988] loop2: detected capacity change from 0 to 4096 [ 367.336656][T15988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.413545][T15993] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 367.421632][T15995] loop5: detected capacity change from 0 to 512 [ 367.428380][T15993] bond0: (slave dummy0): Releasing backup interface [ 367.428787][T15995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 367.446847][T15995] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4093: inode has both inline data and extents flags [ 367.460221][T15995] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4093: couldn't read orphan inode 15 (err -117) [ 367.475400][T15993] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 367.485127][T15993] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 367.549167][T16000] netlink: 'syz.5.4094': attribute type 10 has an invalid length. [ 367.583692][T16000] bond0: (slave dummy0): Releasing backup interface [ 367.592903][T16000] netlink: 'syz.5.4094': attribute type 10 has an invalid length. [ 367.603476][T16000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 367.614085][T16000] Cannot find add_set index 0 as target [ 367.687330][T16004] loop2: detected capacity change from 0 to 512 [ 367.696187][T16004] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4095: error while reading EA inode 32 err=-116 [ 367.710151][T16004] EXT4-fs (loop2): Remounting filesystem read-only [ 367.716877][T16004] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 367.727949][T16004] EXT4-fs (loop2): 1 orphan inode deleted [ 367.740883][T16013] FAULT_INJECTION: forcing a failure. [ 367.740883][T16013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.754274][T16013] CPU: 1 UID: 0 PID: 16013 Comm: syz.0.4099 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.754331][T16013] Tainted: [W]=WARN [ 367.754338][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.754350][T16013] Call Trace: [ 367.754358][T16013] [ 367.754368][T16013] __dump_stack+0x1d/0x30 [ 367.754392][T16013] dump_stack_lvl+0xe8/0x140 [ 367.754454][T16013] dump_stack+0x15/0x1b [ 367.754543][T16013] should_fail_ex+0x265/0x280 [ 367.754563][T16013] should_fail+0xb/0x20 [ 367.754580][T16013] should_fail_usercopy+0x1a/0x20 [ 367.754602][T16013] _copy_from_user+0x1c/0xb0 [ 367.754628][T16013] ucma_write+0xd9/0x250 [ 367.754724][T16013] vfs_writev+0x406/0x8b0 [ 367.754757][T16013] ? __pfx_ucma_write+0x10/0x10 [ 367.754816][T16013] do_writev+0xe7/0x210 [ 367.754849][T16013] __x64_sys_writev+0x45/0x50 [ 367.754877][T16013] x64_sys_call+0x1e9a/0x3000 [ 367.754902][T16013] do_syscall_64+0xd2/0x200 [ 367.754924][T16013] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 367.754961][T16013] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 367.754995][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.755018][T16013] RIP: 0033:0x7f5c3d53f6c9 [ 367.755033][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.755181][T16013] RSP: 002b:00007f5c3bfa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 367.755201][T16013] RAX: ffffffffffffffda RBX: 00007f5c3d795fa0 RCX: 00007f5c3d53f6c9 [ 367.755214][T16013] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 367.755227][T16013] RBP: 00007f5c3bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 367.755240][T16013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.755278][T16013] R13: 00007f5c3d796038 R14: 00007f5c3d795fa0 R15: 00007ffec4e695a8 [ 367.755327][T16013] [ 367.805253][T16021] loop5: detected capacity change from 0 to 512 [ 367.958245][T16021] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 367.969145][T16021] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4103: inode has both inline data and extents flags [ 367.975890][T16024] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.982807][T16021] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4103: couldn't read orphan inode 15 (err -117) [ 367.994775][T16024] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 368.017091][T16024] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 368.045702][T16029] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 368.047945][T16031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.062137][T16031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.070222][T16029] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 368.079974][T16029] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.090738][ T9486] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 368.096850][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 368.124986][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 368.125121][T16033] netlink: 'syz.0.4108': attribute type 10 has an invalid length. [ 368.144584][T16033] bond0: (slave dummy0): Releasing backup interface [ 368.156608][T16033] netlink: 'syz.0.4108': attribute type 10 has an invalid length. [ 368.163721][T16037] loop1: detected capacity change from 0 to 2048 [ 368.166538][T16033] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.181418][T16033] Cannot find add_set index 0 as target [ 368.193791][T16037] loop1: p1 < > p4 < > [ 368.291456][T16049] macvtap4: entered allmulticast mode [ 368.311062][T16049] batman_adv: batadv0: Adding interface: macvtap4 [ 368.317780][T16049] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.347033][T16049] batman_adv: batadv0: Interface activated: macvtap4 [ 368.465048][T16055] loop2: detected capacity change from 0 to 512 [ 368.472104][T16055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.484738][T16052] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4111' sets config #1 [ 368.485888][T16055] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4116: inode has both inline data and extents flags [ 368.507483][T16055] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4116: couldn't read orphan inode 15 (err -117) [ 368.628227][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4119'. [ 368.655802][T16065] bond0: (slave dummy0): Releasing backup interface [ 368.688163][T16065] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.701604][T16067] bond0: (slave dummy0): Releasing backup interface [ 368.725541][T16067] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.738279][T16065] Cannot find add_set index 0 as target [ 368.869742][T16085] loop2: detected capacity change from 0 to 2048 [ 368.878922][T16090] loop5: detected capacity change from 0 to 512 [ 368.886884][T16090] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 368.931390][T16090] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4129: inode has both inline data and extents flags [ 368.934419][T16091] loop4: detected capacity change from 0 to 512 [ 368.947345][T16085] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.962541][T16090] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4129: couldn't read orphan inode 15 (err -117) [ 368.987264][T16091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4126: error while reading EA inode 32 err=-116 [ 369.018808][T16091] EXT4-fs (loop4): Remounting filesystem read-only [ 369.026167][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.034605][T16091] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 369.034643][T16091] EXT4-fs (loop4): 1 orphan inode deleted [ 369.044887][T16099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.060729][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.074925][T16100] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4127: bg 0: block 345: padding at end of block bitmap is not set [ 369.085861][T16099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.091516][T16100] EXT4-fs (loop2): Remounting filesystem read-only [ 369.209211][T16105] loop1: detected capacity change from 0 to 512 [ 369.218761][ T3916] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.239965][T16105] EXT4-fs: Ignoring removed i_version option [ 369.246089][T16105] EXT4-fs: Ignoring removed bh option [ 369.265628][T16105] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.779733][T16115] bond0: (slave dummy0): Releasing backup interface [ 369.790632][T16115] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 369.818641][T16116] loop4: detected capacity change from 0 to 512 [ 369.825840][T16116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.844004][T16116] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 369.852009][T16116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 369.877965][T16116] System zones: 0-1, 15-15, 18-18, 34-34 [ 369.884152][T16116] EXT4-fs (loop4): orphan cleanup on readonly fs [ 369.890622][T16116] __quota_error: 428 callbacks suppressed [ 369.890638][T16116] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 369.905811][T16116] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 369.920388][T16116] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 370.023006][T16116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4134: bg 0: block 40: padding at end of block bitmap is not set [ 370.053363][T16116] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 370.092004][T16116] EXT4-fs (loop4): 1 truncate cleaned up [ 370.191205][T16138] macvtap5: entered allmulticast mode [ 370.211365][T16130] loop5: detected capacity change from 0 to 512 [ 370.235327][T16130] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4140: inode #0: comm syz.5.4140: iget: illegal inode # [ 370.267340][T16138] batman_adv: batadv0: Adding interface: macvtap5 [ 370.273869][T16138] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.312740][T16130] EXT4-fs (loop5): get orphan inode failed [ 370.338089][T16138] batman_adv: batadv0: Interface activated: macvtap5 [ 370.345791][T16130] EXT4-fs (loop5): mount failed [ 370.357089][T16140] loop2: detected capacity change from 0 to 512 [ 370.384795][T16140] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.4142: inode #0: comm syz.2.4142: iget: illegal inode # [ 370.404789][T16138] hub 1-0:1.0: USB hub found [ 370.416463][T16140] EXT4-fs (loop2): get orphan inode failed [ 370.428379][T16140] EXT4-fs (loop2): mount failed [ 370.436647][T16138] hub 1-0:1.0: 8 ports detected [ 370.447916][T16147] loop4: detected capacity change from 0 to 512 [ 370.464795][T16147] EXT4-fs: Ignoring removed i_version option [ 370.470920][T16147] EXT4-fs: Ignoring removed bh option [ 370.513728][T16147] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.992032][T16156] loop5: detected capacity change from 0 to 2048 [ 371.005013][ T29] audit: type=1400 audit(1763064727.693:34810): avc: denied { mounton } for pid=16157 comm="syz.1.4145" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 371.035522][ T29] audit: type=1326 audit(1763064727.723:34811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.089711][ T29] audit: type=1326 audit(1763064727.743:34812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.113524][ T29] audit: type=1326 audit(1763064727.743:34813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.137145][ T29] audit: type=1326 audit(1763064727.743:34814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.160963][ T29] audit: type=1326 audit(1763064727.743:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.184717][ T29] audit: type=1326 audit(1763064727.743:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.208540][ T29] audit: type=1326 audit(1763064727.743:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.232210][ T29] audit: type=1326 audit(1763064727.743:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 371.273206][ T9486] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.273863][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 371.358152][T16167] bond0: (slave dummy0): Releasing backup interface [ 371.405457][T16167] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 371.427253][T16177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'. [ 371.442780][T16179] loop5: detected capacity change from 0 to 512 [ 371.449782][T16179] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 371.467046][T16179] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4153: inode has both inline data and extents flags [ 371.481722][T16179] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4153: couldn't read orphan inode 15 (err -117) [ 371.489327][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4152'. [ 371.502992][T16181] bond0: (slave dummy0): Releasing backup interface [ 371.513560][T16181] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 371.525027][T16184] atomic_op ffff88810e77c928 conn xmit_atomic 0000000000000000 [ 371.525145][T16181] Cannot find add_set index 0 as target [ 371.545907][T16177] veth3: entered allmulticast mode [ 371.577979][T16189] loop2: detected capacity change from 0 to 512 [ 371.594758][T16189] EXT4-fs: Ignoring removed i_version option [ 371.601031][T16189] EXT4-fs: Ignoring removed bh option [ 371.634841][T16189] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.769633][T16197] loop5: detected capacity change from 0 to 512 [ 371.812785][T16197] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4156: inode #0: comm syz.5.4156: iget: illegal inode # [ 371.826971][T16197] EXT4-fs (loop5): get orphan inode failed [ 371.833360][T16197] EXT4-fs (loop5): mount failed [ 372.004745][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4156'. [ 372.013987][T16197] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4156'. [ 372.269816][T16191] syz.5.4156 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 372.283966][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.5.4156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.284021][T16191] Tainted: [W]=WARN [ 372.284028][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.284041][T16191] Call Trace: [ 372.284049][T16191] [ 372.284058][T16191] __dump_stack+0x1d/0x30 [ 372.284085][T16191] dump_stack_lvl+0xe8/0x140 [ 372.284111][T16191] dump_stack+0x15/0x1b [ 372.284140][T16191] dump_header+0x81/0x220 [ 372.284220][T16191] oom_kill_process+0x342/0x400 [ 372.284271][T16191] out_of_memory+0x979/0xb80 [ 372.284307][T16191] try_charge_memcg+0x610/0xa10 [ 372.284371][T16191] obj_cgroup_charge_pages+0xa6/0x150 [ 372.284394][T16191] __memcg_kmem_charge_page+0x9f/0x170 [ 372.284499][T16191] __alloc_frozen_pages_noprof+0x188/0x360 [ 372.284621][T16191] alloc_pages_mpol+0xb3/0x260 [ 372.284646][T16191] ? alloc_pages_noprof+0xf4/0x130 [ 372.284684][T16191] alloc_pages_noprof+0x90/0x130 [ 372.284742][T16191] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 372.284772][T16191] __kvmalloc_node_noprof+0x483/0x670 [ 372.284793][T16191] ? ip_set_alloc+0x24/0x30 [ 372.284877][T16191] ? ip_set_alloc+0x24/0x30 [ 372.284895][T16191] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 372.284915][T16191] ip_set_alloc+0x24/0x30 [ 372.285018][T16191] hash_netiface_create+0x282/0x740 [ 372.285039][T16191] ? __pfx_hash_netiface_create+0x10/0x10 [ 372.285127][T16191] ip_set_create+0x3cc/0x970 [ 372.285149][T16191] ? __nla_parse+0x40/0x60 [ 372.285189][T16191] nfnetlink_rcv_msg+0x4c6/0x590 [ 372.285218][T16191] netlink_rcv_skb+0x123/0x220 [ 372.285238][T16191] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 372.285322][T16191] nfnetlink_rcv+0x167/0x16c0 [ 372.285339][T16191] ? kmem_cache_free+0xe4/0x3d0 [ 372.285359][T16191] ? __kfree_skb+0x109/0x150 [ 372.285431][T16191] ? nlmon_xmit+0x4f/0x60 [ 372.285522][T16191] ? consume_skb+0x49/0x150 [ 372.285540][T16191] ? nlmon_xmit+0x4f/0x60 [ 372.285572][T16191] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 372.285595][T16191] ? __dev_queue_xmit+0x1200/0x2000 [ 372.285606][T16191] ? __dev_queue_xmit+0x182/0x2000 [ 372.285617][T16191] ? kmem_cache_free+0x286/0x3d0 [ 372.285660][T16191] ? ref_tracker_free+0x37d/0x3e0 [ 372.285685][T16191] ? __netlink_deliver_tap+0x4dc/0x500 [ 372.285758][T16191] netlink_unicast+0x5c0/0x690 [ 372.285833][T16191] netlink_sendmsg+0x58b/0x6b0 [ 372.285847][T16191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.285859][T16191] __sock_sendmsg+0x145/0x180 [ 372.285901][T16191] ____sys_sendmsg+0x31e/0x4e0 [ 372.285924][T16191] ___sys_sendmsg+0x17b/0x1d0 [ 372.285943][T16191] __x64_sys_sendmsg+0xd4/0x160 [ 372.285957][T16191] x64_sys_call+0x191e/0x3000 [ 372.286019][T16191] do_syscall_64+0xd2/0x200 [ 372.286032][T16191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 372.286072][T16191] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 372.286120][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.286141][T16191] RIP: 0033:0x7f9dec8bf6c9 [ 372.286152][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.286164][T16191] RSP: 002b:00007f9deb327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.286177][T16191] RAX: ffffffffffffffda RBX: 00007f9decb15fa0 RCX: 00007f9dec8bf6c9 [ 372.286185][T16191] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 372.286248][T16191] RBP: 00007f9dec941f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.286257][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.286264][T16191] R13: 00007f9decb16038 R14: 00007f9decb15fa0 R15: 00007fff7ae7a478 [ 372.286276][T16191] [ 372.286280][T16191] memory: usage 307200kB, limit 307200kB, failcnt 668 [ 372.648930][T16191] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 372.656831][T16191] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 372.664184][T16191] Memory cgroup stats for /syz5: [ 372.664843][T16191] cache 0 [ 372.672811][T16191] rss 0 [ 372.675645][T16191] shmem 0 [ 372.678578][T16191] mapped_file 0 [ 372.682041][T16191] dirty 0 [ 372.685004][T16191] writeback 0 [ 372.688649][T16191] workingset_refault_anon 366 [ 372.693344][T16191] workingset_refault_file 0 [ 372.697844][T16191] swap 389120 [ 372.701118][T16191] swapcached 0 [ 372.704755][T16191] pgpgin 70297 [ 372.708124][T16191] pgpgout 70297 [ 372.711628][T16191] pgfault 88229 [ 372.715249][T16191] pgmajfault 214 [ 372.718787][T16191] inactive_anon 0 [ 372.722416][T16191] active_anon 0 [ 372.725980][T16191] inactive_file 0 [ 372.729645][T16191] active_file 0 [ 372.733098][T16191] unevictable 0 [ 372.736577][T16191] hierarchical_memory_limit 314572800 [ 372.742058][T16191] hierarchical_memsw_limit 9223372036854771712 [ 372.748239][T16191] total_cache 0 [ 372.751692][T16191] total_rss 0 [ 372.753093][T16220] loop4: detected capacity change from 0 to 512 [ 372.755104][T16191] total_shmem 0 [ 372.755115][T16191] total_mapped_file 0 [ 372.763723][T16220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.764806][T16191] total_dirty 0 [ 372.769813][T16220] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4166: inode has both inline data and extents flags [ 372.778556][T16191] total_writeback 0 [ 372.778569][T16191] total_workingset_refault_anon 366 [ 372.778578][T16191] total_workingset_refault_file 0 [ 372.782242][T16220] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4166: couldn't read orphan inode 15 (err -117) [ 372.795488][T16191] total_swap 389120 [ 372.800438][T16220] EXT4-fs mount: 66 callbacks suppressed [ 372.800461][T16220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.804590][T16191] total_swapcached 0 [ 372.846986][T16191] total_pgpgin 70297 [ 372.850880][T16191] total_pgpgout 70297 [ 372.854865][T16191] total_pgfault 88229 [ 372.858816][T16191] total_pgmajfault 214 [ 372.862853][T16191] total_inactive_anon 0 [ 372.866996][T16191] total_active_anon 0 [ 372.870949][T16191] total_inactive_file 0 [ 372.875167][T16191] total_active_file 0 [ 372.879175][T16191] total_unevictable 0 [ 372.883127][T16191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4156,pid=16190,uid=0 [ 372.884429][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.897974][T16191] Memory cgroup out of memory: Killed process 16190 (syz.5.4156) total-vm:96140kB, anon-rss:1136kB, file-rss:22632kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 372.975536][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.032374][T16238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.102293][T16246] validate_nla: 10 callbacks suppressed [ 373.102350][T16246] netlink: 'syz.4.4176': attribute type 10 has an invalid length. [ 373.120770][T16238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.151460][T16246] bond0: (slave dummy0): Releasing backup interface [ 373.158496][T16249] netlink: 'syz.4.4176': attribute type 10 has an invalid length. [ 373.165498][T16251] loop2: detected capacity change from 0 to 512 [ 373.173522][T16251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 373.175990][T16249] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.193641][T16251] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4178: inode has both inline data and extents flags [ 373.207162][T16251] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4178: couldn't read orphan inode 15 (err -117) [ 373.220923][T16251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.245265][T16238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.267479][T16240] Cannot find add_set index 0 as target [ 373.285287][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.307402][T16257] netlink: 'syz.4.4180': attribute type 10 has an invalid length. [ 373.317705][T16257] bond0: (slave dummy0): Releasing backup interface [ 373.328713][T16257] netlink: 'syz.4.4180': attribute type 10 has an invalid length. [ 373.330503][T16260] loop2: detected capacity change from 0 to 512 [ 373.340242][T16257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.343885][T16260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 373.364575][T16260] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4181: inode has both inline data and extents flags [ 373.378434][T16260] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4181: couldn't read orphan inode 15 (err -117) [ 373.391547][T16238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.395208][T16260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.449902][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.483380][T16272] loop4: detected capacity change from 0 to 4096 [ 373.490277][T16272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.516294][ T3970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.520183][T16278] loop2: detected capacity change from 0 to 2048 [ 373.534108][ T3970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.542510][ T3970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.554400][T16272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.556994][ T3970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.576372][T16278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.663907][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.678123][T16286] loop1: detected capacity change from 0 to 2048 [ 373.687491][T16288] netlink: 'syz.0.4193': attribute type 10 has an invalid length. [ 373.697368][T16288] bond0: (slave dummy0): Releasing backup interface [ 373.699106][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.714645][T16286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.727710][T16286] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.738542][T16294] netlink: 'syz.0.4193': attribute type 10 has an invalid length. [ 373.754382][T16294] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.802566][T16300] atomic_op ffff88812858c928 conn xmit_atomic 0000000000000000 [ 373.804783][T16290] loop5: detected capacity change from 0 to 2048 [ 373.848823][T16303] macvtap7: entered allmulticast mode [ 373.854670][T16301] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 373.864095][T16303] batman_adv: batadv0: Adding interface: macvtap7 [ 373.870521][T16303] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.905498][T16307] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 373.913778][T16305] netlink: 'syz.0.4199': attribute type 10 has an invalid length. [ 373.923888][T16303] batman_adv: batadv0: Interface activated: macvtap7 [ 373.924661][T16290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.943544][T16301] bond0: (slave dummy0): Releasing backup interface [ 373.952953][T16307] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.964288][T16306] netlink: 'syz.0.4199': attribute type 10 has an invalid length. [ 373.987285][T16290] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.002035][T16305] bond0: (slave dummy0): Releasing backup interface [ 374.027173][T16310] hub 1-0:1.0: USB hub found [ 374.040323][T16306] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.049343][T16310] hub 1-0:1.0: 8 ports detected [ 374.082085][T16313] loop2: detected capacity change from 0 to 4096 [ 374.107188][ T3913] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set [ 374.132216][T16313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.133791][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.149078][T16313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.161753][ T3913] EXT4-fs (loop1): Remounting filesystem read-only [ 374.218643][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.228449][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.341057][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.370788][T16314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4194: bg 0: block 345: padding at end of block bitmap is not set [ 374.385857][T16314] EXT4-fs (loop5): Remounting filesystem read-only [ 374.593701][T16323] bond0: (slave dummy0): Releasing backup interface [ 374.614121][T16323] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.692297][T16329] loop4: detected capacity change from 0 to 4096 [ 374.708219][T16331] loop1: detected capacity change from 0 to 512 [ 374.714049][T16329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.723365][T16329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.755776][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.755838][T16331] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.4201: inode #0: comm syz.1.4201: iget: illegal inode # [ 374.792424][T16336] loop4: detected capacity change from 0 to 512 [ 374.800941][T16336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.811544][T16331] EXT4-fs (loop1): get orphan inode failed [ 374.812881][T16336] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4205: inode has both inline data and extents flags [ 374.831094][T16336] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4205: couldn't read orphan inode 15 (err -117) [ 374.837804][T16331] EXT4-fs (loop1): mount failed [ 374.843875][T16336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.883013][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.920569][T16339] loop4: detected capacity change from 0 to 4096 [ 374.927541][T16339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.948464][T16339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.978985][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.067582][T13311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.120307][T16344] bond0: (slave dummy0): Releasing backup interface [ 375.137222][T16344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.184042][T16354] loop4: detected capacity change from 0 to 1024 [ 375.206889][T16354] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 375.223421][T16358] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4215'. [ 375.224241][T16354] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 375.246087][T16354] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #5: comm syz.4.4213: unexpected bad inode w/o EXT4_IGET_BAD [ 375.273030][T16354] EXT4-fs (loop4): Remounting filesystem read-only [ 375.280090][T16354] EXT4-fs (loop4): no journal found [ 375.285385][T16354] EXT4-fs (loop4): can't get journal size [ 375.294447][T16354] EXT4-fs (loop4): failed to initialize system zone (-117) [ 375.301864][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.301977][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.318169][T16354] EXT4-fs (loop4): mount failed [ 375.341046][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 375.341063][ T29] audit: type=1326 audit(1763064732.023:34986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.374420][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 375.386605][ T29] audit: type=1326 audit(1763064732.023:34987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.410244][ T29] audit: type=1326 audit(1763064732.023:34988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.433911][ T29] audit: type=1326 audit(1763064732.023:34989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.457473][ T29] audit: type=1326 audit(1763064732.023:34990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.481107][ T29] audit: type=1326 audit(1763064732.023:34991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.482220][T16324] syz.1.4201 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 375.504734][ T29] audit: type=1326 audit(1763064732.023:34992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.504762][ T29] audit: type=1326 audit(1763064732.023:34993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dec8f1f85 code=0x7ffc0000 [ 375.504816][ T29] audit: type=1326 audit(1763064732.023:34994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.519022][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.1.4201 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.519059][T16324] Tainted: [W]=WARN [ 375.519067][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.519081][T16324] Call Trace: [ 375.519089][T16324] [ 375.519098][T16324] __dump_stack+0x1d/0x30 [ 375.519129][T16324] dump_stack_lvl+0xe8/0x140 [ 375.519183][T16324] dump_stack+0x15/0x1b [ 375.519204][T16324] dump_header+0x81/0x220 [ 375.519225][T16324] oom_kill_process+0x342/0x400 [ 375.519262][T16324] out_of_memory+0x979/0xb80 [ 375.519328][T16324] try_charge_memcg+0x610/0xa10 [ 375.519365][T16324] obj_cgroup_charge_pages+0xa6/0x150 [ 375.519441][T16324] __memcg_kmem_charge_page+0x9f/0x170 [ 375.519506][T16324] __alloc_frozen_pages_noprof+0x188/0x360 [ 375.519533][T16324] alloc_pages_mpol+0xb3/0x260 [ 375.519558][T16324] alloc_pages_noprof+0x90/0x130 [ 375.519606][T16324] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 375.519655][T16324] __kvmalloc_node_noprof+0x483/0x670 [ 375.519730][T16324] ? ip_set_alloc+0x24/0x30 [ 375.519765][T16324] ? ip_set_alloc+0x24/0x30 [ 375.519882][T16324] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 375.519919][T16324] ip_set_alloc+0x24/0x30 [ 375.519954][T16324] hash_netiface_create+0x282/0x740 [ 375.520041][T16324] ? __pfx_hash_netiface_create+0x10/0x10 [ 375.520151][T16324] ip_set_create+0x3cc/0x970 [ 375.520181][T16324] ? __nla_parse+0x40/0x60 [ 375.520207][T16324] nfnetlink_rcv_msg+0x4c6/0x590 [ 375.520400][T16324] netlink_rcv_skb+0x123/0x220 [ 375.520441][T16324] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 375.520501][T16324] nfnetlink_rcv+0x167/0x16c0 [ 375.520531][T16324] ? kmem_cache_free+0xe4/0x3d0 [ 375.520570][T16324] ? __kfree_skb+0x109/0x150 [ 375.520605][T16324] ? nlmon_xmit+0x4f/0x60 [ 375.520741][T16324] ? consume_skb+0x49/0x150 [ 375.520775][T16324] ? nlmon_xmit+0x4f/0x60 [ 375.520802][T16324] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 375.520844][T16324] ? __dev_queue_xmit+0x1200/0x2000 [ 375.520925][T16324] ? __dev_queue_xmit+0x182/0x2000 [ 375.520945][T16324] ? kmem_cache_free+0x286/0x3d0 [ 375.520993][T16324] ? ref_tracker_free+0x37d/0x3e0 [ 375.521078][T16324] ? __netlink_deliver_tap+0x4dc/0x500 [ 375.521138][T16324] netlink_unicast+0x5c0/0x690 [ 375.521198][T16324] netlink_sendmsg+0x58b/0x6b0 [ 375.521233][T16324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.521256][T16324] __sock_sendmsg+0x145/0x180 [ 375.521285][T16324] ____sys_sendmsg+0x31e/0x4e0 [ 375.521335][T16324] ___sys_sendmsg+0x17b/0x1d0 [ 375.521380][T16324] __x64_sys_sendmsg+0xd4/0x160 [ 375.521440][T16324] x64_sys_call+0x191e/0x3000 [ 375.521548][T16324] do_syscall_64+0xd2/0x200 [ 375.521577][T16324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 375.521665][T16324] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 375.521705][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.521807][T16324] RIP: 0033:0x7ff54193f6c9 [ 375.521825][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.521847][T16324] RSP: 002b:00007ff5403a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.522054][T16324] RAX: ffffffffffffffda RBX: 00007ff541b95fa0 RCX: 00007ff54193f6c9 [ 375.522069][T16324] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 375.522083][T16324] RBP: 00007ff5419c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.522103][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.522153][T16324] R13: 00007ff541b96038 R14: 00007ff541b95fa0 R15: 00007fff598846c8 [ 375.522174][T16324] [ 375.522186][T16324] memory: usage 307200kB, limit 307200kB, failcnt 1727 [ 375.542413][ T29] audit: type=1326 audit(1763064732.023:34995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.5.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dec8bf6c9 code=0x7ffc0000 [ 375.565985][T16324] memory+swap: usage 308124kB, limit 9007199254740988kB, failcnt 0 [ 375.658349][T16366] loop5: detected capacity change from 0 to 512 [ 375.663568][T16324] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 375.663586][T16324] Memory cgroup stats for /syz1: [ 375.663934][T16324] cache 0 [ 375.680883][T16366] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4217: error while reading EA inode 32 err=-116 [ 375.684981][T16324] rss 0 [ 375.684993][T16324] shmem 0 [ 375.691172][T16366] EXT4-fs (loop5): Remounting filesystem read-only [ 375.694902][T16324] mapped_file 0 [ 375.694913][T16324] dirty 0 [ 375.694920][T16324] writeback 0 [ 375.694928][T16324] workingset_refault_anon 357 [ 375.694936][T16324] workingset_refault_file 2147 [ 375.694944][T16324] swap 946176 [ 375.694951][T16324] swapcached 0 [ 375.694958][T16324] pgpgin 432755 [ 375.694965][T16324] pgpgout 432755 [ 375.694972][T16324] pgfault 480917 [ 375.699502][T16366] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 375.705091][T16324] pgmajfault 205 [ 375.705102][T16324] inactive_anon 0 [ 375.705111][T16324] active_anon 0 [ 375.709972][T16366] EXT4-fs (loop5): 1 orphan inode deleted [ 375.714641][T16324] inactive_file 0 [ 375.721173][T16366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.724967][T16324] active_file 0 [ 375.724976][T16324] unevictable 0 [ 375.724984][T16324] hierarchical_memory_limit 314572800 [ 375.724992][T16324] hierarchical_memsw_limit 9223372036854771712 [ 375.725002][T16324] total_cache 0 [ 375.725009][T16324] total_rss 0 [ 375.725016][T16324] total_shmem 0 [ 375.725023][T16324] total_mapped_file 0 [ 375.725030][T16324] total_dirty 0 [ 376.138303][T16324] total_writeback 0 [ 376.142098][T16324] total_workingset_refault_anon 357 [ 376.147296][T16324] total_workingset_refault_file 2147 [ 376.152561][T16324] total_swap 946176 [ 376.156392][T16324] total_swapcached 0 [ 376.160273][T16324] total_pgpgin 432755 [ 376.164254][T16324] total_pgpgout 432755 [ 376.168308][T16324] total_pgfault 480917 [ 376.172407][T16324] total_pgmajfault 205 [ 376.176515][T16324] total_inactive_anon 0 [ 376.180662][T16324] total_active_anon 0 [ 376.184720][T16324] total_inactive_file 0 [ 376.188931][T16324] total_active_file 0 [ 376.192905][T16324] total_unevictable 0 [ 376.196915][T16324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4201,pid=16322,uid=0 [ 376.211768][T16324] Memory cgroup out of memory: Killed process 16322 (syz.1.4201) total-vm:94092kB, anon-rss:1136kB, file-rss:22584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 376.232839][T16372] bond0: (slave dummy0): Releasing backup interface [ 376.257988][T16373] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.282145][T13311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.392519][T16385] loop4: detected capacity change from 0 to 1024 [ 376.414606][T16385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.416288][T16323] Cannot find add_set index 0 as target [ 376.428526][T16385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4222: bg 0: block 88: padding at end of block bitmap is not set [ 376.470173][T16389] bond0: (slave dummy0): Releasing backup interface [ 376.498381][T16389] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.507538][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.568105][T16400] bond0: (slave dummy0): Releasing backup interface [ 376.582560][T16406] bond0: (slave dummy0): Releasing backup interface [ 376.592278][T16400] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.602886][T16406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.617230][T16405] loop4: detected capacity change from 0 to 4096 [ 376.625108][T16405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.642233][T16411] bond0: (slave dummy0): Releasing backup interface [ 376.650412][T16405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.667888][T16411] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.678330][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.678950][T16411] SET target dimension over the limit! [ 376.695889][T16414] bond0: (slave dummy0): Releasing backup interface [ 376.706078][T16414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 376.718125][T16414] Cannot find add_set index 0 as target [ 376.767063][T16420] loop1: detected capacity change from 0 to 2048 [ 376.790727][T16415] loop2: detected capacity change from 0 to 512 [ 376.798508][T16420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.804903][T16422] loop4: detected capacity change from 0 to 4096 [ 376.817735][T16422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.827101][T16415] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4232: error while reading EA inode 32 err=-116 [ 376.842439][T16415] EXT4-fs (loop2): Remounting filesystem read-only [ 376.849173][T16415] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 376.849643][T16422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.859436][T16415] EXT4-fs (loop2): 1 orphan inode deleted [ 376.878235][T16415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.954740][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.972695][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.023009][T16428] loop5: detected capacity change from 0 to 512 [ 377.026391][T16435] loop4: detected capacity change from 0 to 2048 [ 377.040825][T16428] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4238: inode #0: comm syz.5.4238: iget: illegal inode # [ 377.055748][T16435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.069643][T16435] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.081064][T16428] EXT4-fs (loop5): get orphan inode failed [ 377.094780][T16428] EXT4-fs (loop5): mount failed [ 377.136229][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.204777][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.221292][T16451] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4244'. [ 377.342856][T16445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4239: bg 0: block 345: padding at end of block bitmap is not set [ 377.380315][T16445] EXT4-fs (loop4): Remounting filesystem read-only [ 377.395276][T16458] bond0: (slave dummy0): Releasing backup interface [ 377.410348][T16458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.486004][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.510507][T16460] bond0: (slave dummy0): Releasing backup interface [ 377.521158][T16460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.592127][T16424] syz.5.4238 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 377.606833][T16424] CPU: 1 UID: 0 PID: 16424 Comm: syz.5.4238 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.606868][T16424] Tainted: [W]=WARN [ 377.606876][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.606891][T16424] Call Trace: [ 377.606897][T16424] [ 377.606903][T16424] __dump_stack+0x1d/0x30 [ 377.606952][T16424] dump_stack_lvl+0xe8/0x140 [ 377.606968][T16424] dump_stack+0x15/0x1b [ 377.607004][T16424] dump_header+0x81/0x220 [ 377.607026][T16424] oom_kill_process+0x342/0x400 [ 377.607066][T16424] out_of_memory+0x979/0xb80 [ 377.607088][T16424] try_charge_memcg+0x610/0xa10 [ 377.607159][T16424] obj_cgroup_charge_pages+0xa6/0x150 [ 377.607200][T16424] __memcg_kmem_charge_page+0x9f/0x170 [ 377.607239][T16424] __alloc_frozen_pages_noprof+0x188/0x360 [ 377.607254][T16424] alloc_pages_mpol+0xb3/0x260 [ 377.607267][T16424] ? alloc_pages_noprof+0x61/0x130 [ 377.607344][T16424] alloc_pages_noprof+0x90/0x130 [ 377.607358][T16424] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 377.607385][T16424] __kvmalloc_node_noprof+0x483/0x670 [ 377.607406][T16424] ? ip_set_alloc+0x24/0x30 [ 377.607463][T16424] ? ip_set_alloc+0x24/0x30 [ 377.607481][T16424] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 377.607544][T16424] ip_set_alloc+0x24/0x30 [ 377.607564][T16424] hash_netiface_create+0x282/0x740 [ 377.607586][T16424] ? __pfx_hash_netiface_create+0x10/0x10 [ 377.607614][T16424] ip_set_create+0x3cc/0x970 [ 377.607631][T16424] ? __nla_parse+0x40/0x60 [ 377.607646][T16424] nfnetlink_rcv_msg+0x4c6/0x590 [ 377.607737][T16424] netlink_rcv_skb+0x123/0x220 [ 377.607757][T16424] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 377.607813][T16424] nfnetlink_rcv+0x167/0x16c0 [ 377.607830][T16424] ? kmem_cache_free+0xe4/0x3d0 [ 377.607850][T16424] ? __kfree_skb+0x109/0x150 [ 377.607894][T16424] ? nlmon_xmit+0x4f/0x60 [ 377.607957][T16424] ? consume_skb+0x49/0x150 [ 377.607977][T16424] ? nlmon_xmit+0x4f/0x60 [ 377.608045][T16424] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 377.608078][T16424] ? __dev_queue_xmit+0x1200/0x2000 [ 377.608095][T16424] ? __dev_queue_xmit+0x182/0x2000 [ 377.608115][T16424] ? kmem_cache_free+0x286/0x3d0 [ 377.608142][T16424] ? ref_tracker_free+0x37d/0x3e0 [ 377.608169][T16424] ? __netlink_deliver_tap+0x4dc/0x500 [ 377.608214][T16424] netlink_unicast+0x5c0/0x690 [ 377.608284][T16424] netlink_sendmsg+0x58b/0x6b0 [ 377.608300][T16424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.608312][T16424] __sock_sendmsg+0x145/0x180 [ 377.608329][T16424] ____sys_sendmsg+0x31e/0x4e0 [ 377.608399][T16424] ___sys_sendmsg+0x17b/0x1d0 [ 377.608419][T16424] __x64_sys_sendmsg+0xd4/0x160 [ 377.608434][T16424] x64_sys_call+0x191e/0x3000 [ 377.608449][T16424] do_syscall_64+0xd2/0x200 [ 377.608533][T16424] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 377.608552][T16424] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 377.608618][T16424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.608634][T16424] RIP: 0033:0x7f9dec8bf6c9 [ 377.608648][T16424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.608661][T16424] RSP: 002b:00007f9deb327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.608674][T16424] RAX: ffffffffffffffda RBX: 00007f9decb15fa0 RCX: 00007f9dec8bf6c9 [ 377.608682][T16424] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 377.608690][T16424] RBP: 00007f9dec941f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.608730][T16424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.608738][T16424] R13: 00007f9decb16038 R14: 00007f9decb15fa0 R15: 00007fff7ae7a478 [ 377.608753][T16424] [ 377.608758][T16424] memory: usage 307200kB, limit 307200kB, failcnt 908 [ 377.969999][T16424] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 377.970018][T16424] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 377.985202][T16424] Memory cgroup stats for /syz5: [ 377.985396][T16424] cache 0 [ 377.993295][T16424] rss 4096 [ 377.996316][T16424] shmem 0 [ 377.999225][T16424] mapped_file 0 [ 378.002656][T16424] dirty 0 [ 378.005604][T16424] writeback 0 [ 378.008928][T16424] workingset_refault_anon 433 [ 378.013626][T16424] workingset_refault_file 0 [ 378.018137][T16424] swap 528384 [ 378.021423][T16424] swapcached 28672 [ 378.025194][T16424] pgpgin 76219 [ 378.028599][T16424] pgpgout 76212 [ 378.032055][T16424] pgfault 94950 [ 378.035528][T16424] pgmajfault 258 [ 378.039081][T16424] inactive_anon 8192 [ 378.042951][T16424] active_anon 20480 [ 378.046772][T16424] inactive_file 0 [ 378.050441][T16424] active_file 0 [ 378.053893][T16424] unevictable 0 [ 378.057391][T16424] hierarchical_memory_limit 314572800 [ 378.062760][T16424] hierarchical_memsw_limit 9223372036854771712 [ 378.068920][T16424] total_cache 0 [ 378.072356][T16424] total_rss 4096 [ 378.075930][T16424] total_shmem 0 [ 378.079370][T16424] total_mapped_file 0 [ 378.083401][T16424] total_dirty 0 [ 378.086915][T16424] total_writeback 0 [ 378.090704][T16424] total_workingset_refault_anon 433 [ 378.095912][T16424] total_workingset_refault_file 0 [ 378.100967][T16424] total_swap 528384 [ 378.104795][T16424] total_swapcached 28672 [ 378.109039][T16424] total_pgpgin 76219 [ 378.112907][T16424] total_pgpgout 76212 [ 378.116899][T16424] total_pgfault 94950 [ 378.120956][T16424] total_pgmajfault 258 [ 378.125026][T16424] total_inactive_anon 8192 [ 378.129420][T16424] total_active_anon 20480 [ 378.133763][T16424] total_inactive_file 0 [ 378.137907][T16424] total_active_file 0 [ 378.141864][T16424] total_unevictable 0 [ 378.145836][T16424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4238,pid=16423,uid=0 [ 378.160503][T16424] Memory cgroup out of memory: Killed process 16423 (syz.5.4238) total-vm:93960kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 378.179412][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.221002][T16463] loop4: detected capacity change from 0 to 4096 [ 378.227798][T16463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.237743][T16463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.262791][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.301899][T16458] SET target dimension over the limit! [ 378.301899][T16460] Cannot find add_set index 0 as target [ 378.350084][T16466] loop4: detected capacity change from 0 to 2048 [ 378.378162][T16466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.385422][T16480] loop2: detected capacity change from 0 to 128 [ 378.397350][T16480] msdos: Unknown parameter 'SSh>r^- AC 1Ǚ;$g' [ 378.405838][T16479] validate_nla: 20 callbacks suppressed [ 378.405853][T16479] netlink: 'syz.5.4253': attribute type 10 has an invalid length. [ 378.413256][T16466] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.443533][T16479] bond0: (slave dummy0): Releasing backup interface [ 378.476804][T16484] loop1: detected capacity change from 0 to 512 [ 378.501896][T16484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 378.514143][T16484] EXT4-fs (loop1): 1 truncate cleaned up [ 378.520704][T16484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.581127][T16489] netlink: 'syz.5.4253': attribute type 10 has an invalid length. [ 378.603244][T16482] netlink: 'syz.0.4257': attribute type 10 has an invalid length. [ 378.628483][T16491] netlink: 'syz.0.4257': attribute type 10 has an invalid length. [ 378.641789][T16488] macvtap4: entered allmulticast mode [ 378.678224][T16492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.709226][T16488] batman_adv: batadv0: Adding interface: macvtap4 [ 378.715725][T16488] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.764575][T16492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.868332][T16490] hub 1-0:1.0: USB hub found [ 378.907266][T16490] hub 1-0:1.0: 8 ports detected [ 379.054254][T16488] batman_adv: batadv0: Interface activated: macvtap4 [ 379.130700][T16489] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.154444][T16482] bond0: (slave dummy0): Releasing backup interface [ 379.224713][T16492] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4250: bg 0: block 345: padding at end of block bitmap is not set [ 379.239209][T16491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.308735][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'. [ 379.325354][T16498] netlink: 'syz.5.4259': attribute type 10 has an invalid length. [ 379.376222][T16498] bond0: (slave dummy0): Releasing backup interface [ 379.383216][T16492] EXT4-fs (loop4): Remounting filesystem read-only [ 379.393253][T16501] netlink: 'syz.5.4259': attribute type 10 has an invalid length. [ 379.405937][T16501] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.501374][T16508] atomic_op ffff88812858c528 conn xmit_atomic 0000000000000000 [ 379.697130][T16520] loop5: detected capacity change from 0 to 512 [ 379.719336][T16522] loop2: detected capacity change from 0 to 512 [ 379.730974][T16522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.754558][T16522] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4268: inode has both inline data and extents flags [ 379.874810][T16522] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4268: couldn't read orphan inode 15 (err -117) [ 379.893454][T16520] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4264: inode #0: comm syz.5.4264: iget: illegal inode # [ 379.908436][T16522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.908732][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.940828][T16520] EXT4-fs (loop5): get orphan inode failed [ 379.953503][T16528] hub 1-0:1.0: USB hub found [ 379.958250][T16528] hub 1-0:1.0: 8 ports detected [ 379.971404][T16520] EXT4-fs (loop5): mount failed [ 379.989438][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.035138][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.056299][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.147954][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.268671][T16542] macvtap8: entered allmulticast mode [ 380.290537][T16542] batman_adv: batadv0: Adding interface: macvtap8 [ 380.297064][T16542] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.324334][T16542] batman_adv: batadv0: Interface activated: macvtap8 [ 380.428541][T16543] hub 1-0:1.0: USB hub found [ 380.444899][T16545] loop1: detected capacity change from 0 to 512 [ 380.446695][T16543] hub 1-0:1.0: 8 ports detected [ 380.451851][T16545] EXT4-fs: Ignoring removed i_version option [ 380.462397][T16545] EXT4-fs: Ignoring removed bh option [ 380.493268][T16545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.527480][T16545] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.702062][T16558] loop5: detected capacity change from 0 to 128 [ 380.708660][T16558] msdos: Unknown parameter 'SSh>r^- AC 1Ǚ;$g' [ 381.155567][T16563] loop5: detected capacity change from 0 to 4096 [ 381.173195][T16563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.192396][T16565] loop2: detected capacity change from 0 to 4096 [ 381.203605][T16565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.211475][T16563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.231492][T16565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.272268][T16571] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 381.284033][T16571] bond0: (slave dummy0): Releasing backup interface [ 381.293728][T13311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.317168][T16571] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 381.334511][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.344370][T16573] netlink: 'syz.0.4287': attribute type 10 has an invalid length. [ 381.352823][T13542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.370280][T16571] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 381.380512][T16573] bond0: (slave dummy0): Releasing backup interface [ 381.389088][T16571] Cannot find add_set index 0 as target [ 381.403291][T16578] netlink: 'syz.0.4287': attribute type 10 has an invalid length. [ 381.411085][T16577] loop1: detected capacity change from 0 to 4096 [ 381.419892][T16577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.434922][T16577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.450657][T16578] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 381.485135][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.496777][T16575] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.509433][T16575] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 381.525365][T16575] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 381.538125][T16586] loop4: detected capacity change from 0 to 1024 [ 381.600677][T16586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.652341][T16586] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4291: bg 0: block 88: padding at end of block bitmap is not set [ 381.670520][T16601] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4295'. [ 381.715491][T16587] loop2: detected capacity change from 0 to 512 [ 381.738007][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.763313][T16603] loop1: detected capacity change from 0 to 4096 [ 381.770202][T16603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.779215][T16610] loop4: detected capacity change from 0 to 512 [ 381.788229][T16603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.802337][T16587] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.4289: inode #0: comm syz.2.4289: iget: illegal inode # [ 381.815785][T16607] bond0: (slave dummy0): Releasing backup interface [ 381.823624][T16610] EXT4-fs: Ignoring removed i_version option [ 381.829762][T16610] EXT4-fs: Ignoring removed bh option [ 381.849880][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.859794][T16610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.873994][T16612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 381.893209][T16610] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.929000][T16617] bond0: (slave dummy0): Releasing backup interface [ 381.939420][T16617] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 381.948451][T16587] EXT4-fs (loop2): get orphan inode failed [ 381.988600][T16587] EXT4-fs (loop2): mount failed [ 382.516884][T16636] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4308'. [ 382.585272][T16644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.604129][T16644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.615165][T16642] loop5: detected capacity change from 0 to 2048 [ 382.643184][T16617] Cannot find add_set index 0 as target [ 382.663890][T12880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.680548][T16642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.699156][T16642] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.742914][T16654] loop1: detected capacity change from 0 to 4096 [ 382.750153][T16654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.769631][T16654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.782370][ T3970] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 382.798480][ T3970] EXT4-fs (loop5): Remounting filesystem read-only [ 382.809567][T16660] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 382.817506][T12290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.828641][T16662] loop2: detected capacity change from 0 to 512 [ 382.842601][T13311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.862884][T16662] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4313: couldn't read orphan inode 26 (err -116) [ 382.879629][T16662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.914497][T16668] loop5: detected capacity change from 0 to 4096 [ 382.921199][T16668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.925408][T16662] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.997777][T16672] loop1: detected capacity change from 0 to 2048 [ 383.167071][T16686] loop5: detected capacity change from 0 to 512 [ 383.191354][T16688] bond0: (slave dummy0): Releasing backup interface [ 383.201886][T16688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.232386][T16686] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4324: inode #0: comm syz.5.4324: iget: illegal inode # [ 383.253194][T16686] EXT4-fs (loop5): get orphan inode failed [ 383.261847][ T3916] Bluetooth: hci0: Frame reassembly failed (-84) [ 383.261927][T16686] EXT4-fs (loop5): mount failed [ 383.324940][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 383.324954][ T29] audit: type=1326 audit(1763064740.013:35452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.361844][ T29] audit: type=1326 audit(1763064740.053:35453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.385630][ T29] audit: type=1326 audit(1763064740.053:35454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.409327][ T29] audit: type=1326 audit(1763064740.053:35455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.432990][ T29] audit: type=1326 audit(1763064740.053:35456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.456624][ T29] audit: type=1326 audit(1763064740.053:35457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.480280][ T29] audit: type=1326 audit(1763064740.053:35458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.504099][ T29] audit: type=1326 audit(1763064740.053:35459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.527642][ T29] audit: type=1326 audit(1763064740.053:35460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16707 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c3d571f85 code=0x7ffc0000 [ 383.551256][ T29] audit: type=1326 audit(1763064740.053:35461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3d53f6c9 code=0x7ffc0000 [ 383.700033][T16676] syz.5.4324 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 383.714197][T16676] CPU: 1 UID: 0 PID: 16676 Comm: syz.5.4324 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 383.714231][T16676] Tainted: [W]=WARN [ 383.714238][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.714307][T16676] Call Trace: [ 383.714316][T16676] [ 383.714329][T16676] __dump_stack+0x1d/0x30 [ 383.714353][T16676] dump_stack_lvl+0xe8/0x140 [ 383.714375][T16676] dump_stack+0x15/0x1b [ 383.714394][T16676] dump_header+0x81/0x220 [ 383.714465][T16676] oom_kill_process+0x342/0x400 [ 383.714499][T16676] out_of_memory+0x979/0xb80 [ 383.714538][T16676] try_charge_memcg+0x610/0xa10 [ 383.714655][T16676] obj_cgroup_charge_pages+0xa6/0x150 [ 383.714677][T16676] __memcg_kmem_charge_page+0x9f/0x170 [ 383.714700][T16676] __alloc_frozen_pages_noprof+0x188/0x360 [ 383.714768][T16676] alloc_pages_mpol+0xb3/0x260 [ 383.714795][T16676] alloc_pages_noprof+0x90/0x130 [ 383.714823][T16676] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 383.714875][T16676] __kvmalloc_node_noprof+0x483/0x670 [ 383.715026][T16676] ? ip_set_alloc+0x24/0x30 [ 383.715103][T16676] ? ip_set_alloc+0x24/0x30 [ 383.715138][T16676] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 383.715177][T16676] ip_set_alloc+0x24/0x30 [ 383.715266][T16676] hash_netiface_create+0x282/0x740 [ 383.715311][T16676] ? __pfx_hash_netiface_create+0x10/0x10 [ 383.715388][T16676] ip_set_create+0x3cc/0x970 [ 383.715432][T16676] ? __nla_parse+0x40/0x60 [ 383.715471][T16676] nfnetlink_rcv_msg+0x4c6/0x590 [ 383.715525][T16676] netlink_rcv_skb+0x123/0x220 [ 383.715575][T16676] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 383.715638][T16676] nfnetlink_rcv+0x167/0x16c0 [ 383.715777][T16676] ? kmem_cache_free+0xe4/0x3d0 [ 383.715815][T16676] ? __kfree_skb+0x109/0x150 [ 383.715851][T16676] ? nlmon_xmit+0x4f/0x60 [ 383.715914][T16676] ? consume_skb+0x49/0x150 [ 383.715945][T16676] ? nlmon_xmit+0x4f/0x60 [ 383.715975][T16676] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 383.716022][T16676] ? __dev_queue_xmit+0x1200/0x2000 [ 383.716044][T16676] ? __dev_queue_xmit+0x182/0x2000 [ 383.716062][T16676] ? kmem_cache_free+0x286/0x3d0 [ 383.716177][T16676] ? ref_tracker_free+0x37d/0x3e0 [ 383.716225][T16676] ? __netlink_deliver_tap+0x4dc/0x500 [ 383.716266][T16676] netlink_unicast+0x5c0/0x690 [ 383.716443][T16676] netlink_sendmsg+0x58b/0x6b0 [ 383.716469][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.716494][T16676] __sock_sendmsg+0x145/0x180 [ 383.716596][T16676] ____sys_sendmsg+0x31e/0x4e0 [ 383.716641][T16676] ___sys_sendmsg+0x17b/0x1d0 [ 383.716674][T16676] __x64_sys_sendmsg+0xd4/0x160 [ 383.716698][T16676] x64_sys_call+0x191e/0x3000 [ 383.716727][T16676] do_syscall_64+0xd2/0x200 [ 383.716776][T16676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 383.716812][T16676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 383.716851][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.716877][T16676] RIP: 0033:0x7f9dec8bf6c9 [ 383.716966][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.716988][T16676] RSP: 002b:00007f9deb327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.717076][T16676] RAX: ffffffffffffffda RBX: 00007f9decb15fa0 RCX: 00007f9dec8bf6c9 [ 383.717089][T16676] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 383.717102][T16676] RBP: 00007f9dec941f91 R08: 0000000000000000 R09: 0000000000000000 [ 383.717114][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.717127][T16676] R13: 00007f9decb16038 R14: 00007f9decb15fa0 R15: 00007fff7ae7a478 [ 383.717148][T16676] [ 383.717174][T16676] memory: usage 307200kB, limit 307200kB, failcnt 1085 [ 384.072809][T16676] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 384.080791][T16676] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 384.088115][T16676] Memory cgroup stats for /syz5: [ 384.088403][T16676] cache 0 [ 384.096399][T16676] rss 16384 [ 384.099584][T16676] shmem 0 [ 384.102573][T16676] mapped_file 0 [ 384.106112][T16676] dirty 0 [ 384.109025][T16676] writeback 0 [ 384.112285][T16676] workingset_refault_anon 518 [ 384.116966][T16676] workingset_refault_file 0 [ 384.121472][T16676] swap 507904 [ 384.124788][T16676] swapcached 57344 [ 384.128486][T16676] pgpgin 79083 [ 384.131835][T16676] pgpgout 79069 [ 384.135338][T16676] pgfault 98843 [ 384.138782][T16676] pgmajfault 306 [ 384.142324][T16676] inactive_anon 57344 [ 384.146324][T16676] active_anon 0 [ 384.149759][T16676] inactive_file 0 [ 384.153526][T16676] active_file 0 [ 384.156977][T16676] unevictable 0 [ 384.160421][T16676] hierarchical_memory_limit 314572800 [ 384.165832][T16676] hierarchical_memsw_limit 9223372036854771712 [ 384.172004][T16676] total_cache 0 [ 384.175470][T16676] total_rss 16384 [ 384.179074][T16676] total_shmem 0 [ 384.182505][T16676] total_mapped_file 0 [ 384.186556][T16676] total_dirty 0 [ 384.190004][T16676] total_writeback 0 [ 384.193809][T16676] total_workingset_refault_anon 518 [ 384.199039][T16676] total_workingset_refault_file 0 [ 384.204070][T16676] total_swap 507904 [ 384.207850][T16676] total_swapcached 57344 [ 384.212131][T16676] total_pgpgin 79083 [ 384.216047][T16676] total_pgpgout 79069 [ 384.219997][T16676] total_pgfault 98843 [ 384.223964][T16676] total_pgmajfault 306 [ 384.228003][T16676] total_inactive_anon 57344 [ 384.232546][T16676] total_active_anon 0 [ 384.236542][T16676] total_inactive_file 0 [ 384.240707][T16676] total_active_file 0 [ 384.244690][T16676] total_unevictable 0 [ 384.248659][T16676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4324,pid=16675,uid=0 [ 384.263334][T16676] Memory cgroup out of memory: Killed process 16675 (syz.5.4324) total-vm:94092kB, anon-rss:1136kB, file-rss:22588kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 384.311605][T16712] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.382337][T16688] Cannot find add_set index 0 as target [ 384.406140][T16712] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.421548][T16714] validate_nla: 6 callbacks suppressed [ 384.421548][T16716] netlink: 'syz.2.4337': attribute type 10 has an invalid length. [ 384.421563][T16714] netlink: 'syz.1.4335': attribute type 10 has an invalid length. [ 384.421661][T16716] ================================================================== [ 384.427076][T16716] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 384.427113][T16716] [ 384.427121][T16716] write to 0xffffffff88e50fd0 of 12 bytes by task 16714 on cpu 1: [ 384.427140][T16716] vsnprintf+0x2ce/0x890 [ 384.427167][T16716] vscnprintf+0x41/0x90 [ 384.427194][T16716] printk_sprint+0x30/0x2d0 [ 384.427217][T16716] vprintk_store+0x599/0x860 [ 384.427244][T16716] vprintk_emit+0x10d/0x580 [ 384.427274][T16716] vprintk_default+0x26/0x30 [ 384.427298][T16716] vprintk+0x1d/0x30 [ 384.427328][T16716] _printk+0x79/0xa0 [ 384.427361][T16716] __nla_validate_parse+0x1227/0x1d00 [ 384.427390][T16716] __nla_parse+0x40/0x60 [ 384.427411][T16716] rtnl_newlink+0xf1/0x12d0 [ 384.427436][T16716] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 384.427460][T16716] netlink_rcv_skb+0x123/0x220 [ 384.427494][T16716] rtnetlink_rcv+0x1c/0x30 [ 384.427516][T16716] netlink_unicast+0x5c0/0x690 [ 384.427546][T16716] netlink_sendmsg+0x58b/0x6b0 [ 384.427568][T16716] __sock_sendmsg+0x145/0x180 [ 384.427596][T16716] ____sys_sendmsg+0x31e/0x4e0 [ 384.427634][T16716] ___sys_sendmsg+0x17b/0x1d0 [ 384.427655][T16716] __x64_sys_sendmsg+0xd4/0x160 [ 384.427676][T16716] x64_sys_call+0x191e/0x3000 [ 384.427706][T16716] do_syscall_64+0xd2/0x200 [ 384.427731][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.427758][T16716] [ 384.427766][T16716] read to 0xffffffff88e50fd8 of 8 bytes by task 16716 on cpu 0: [ 384.427787][T16716] data_push_tail+0xfd/0x420 [ 384.427814][T16716] data_alloc+0xfb/0x2e0 [ 384.427833][T16716] prb_reserve+0x807/0xaf0 [ 384.427852][T16716] vprintk_store+0x56d/0x860 [ 384.427874][T16716] vprintk_emit+0x10d/0x580 [ 384.427896][T16716] vprintk_default+0x26/0x30 [ 384.427924][T16716] vprintk+0x1d/0x30 [ 384.427959][T16716] _printk+0x79/0xa0 [ 384.427996][T16716] __nla_validate_parse+0x1227/0x1d00 [ 384.428021][T16716] __nla_parse+0x40/0x60 [ 384.428041][T16716] rtnl_newlink+0xf1/0x12d0 [ 384.428065][T16716] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 384.428089][T16716] netlink_rcv_skb+0x123/0x220 [ 384.428123][T16716] rtnetlink_rcv+0x1c/0x30 [ 384.428148][T16716] netlink_unicast+0x5c0/0x690 [ 384.428181][T16716] netlink_sendmsg+0x58b/0x6b0 [ 384.428202][T16716] __sock_sendmsg+0x145/0x180 [ 384.428230][T16716] ____sys_sendmsg+0x31e/0x4e0 [ 384.428276][T16716] ___sys_sendmsg+0x17b/0x1d0 [ 384.428299][T16716] __x64_sys_sendmsg+0xd4/0x160 [ 384.428322][T16716] x64_sys_call+0x191e/0x3000 [ 384.428351][T16716] do_syscall_64+0xd2/0x200 [ 384.428377][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.428403][T16716] [ 384.428410][T16716] value changed: 0x00000001000005bd -> 0x2e312e7a79732720 [ 384.428426][T16716] [ 384.428432][T16716] Reported by Kernel Concurrency Sanitizer on: [ 384.428451][T16716] CPU: 0 UID: 0 PID: 16716 Comm: syz.2.4337 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.428490][T16716] Tainted: [W]=WARN [ 384.428500][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.428516][T16716] ================================================================== [ 384.446665][T16718] loop5: detected capacity change from 0 to 2048 [ 384.477636][T16719] netlink: 'syz.2.4337': attribute type 10 has an invalid length. [ 384.479005][T16720] netlink: 'syz.1.4335': attribute type 10 has an invalid length. [ 384.488430][T16714] bond0: (slave dummy0): Releasing backup interface [ 384.779284][T16716] bond0: (slave dummy0): Releasing backup interface [ 384.791011][T16719] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 384.801587][T16720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 384.821136][T16712] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.884614][T16712] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.939116][ T3970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.950274][ T3970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.961053][ T3970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.972107][ T3970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.273206][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 385.273204][ T9486] Bluetooth: hci0: Opcode 0x1003 failed: -110