last executing test programs: 9.564585581s ago: executing program 0 (id=1619): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 8.593815502s ago: executing program 0 (id=1623): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000005, 0x1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) unshare(0x30000000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000001240)=0xffffbe04) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 8.382469444s ago: executing program 0 (id=1628): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") getpid() gettid() socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/167, 0xa7, 0x0, 0x4, 0x4, 0x9, 0x1}}, 0x120) 5.31604401s ago: executing program 4 (id=1642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffddc, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x0, 0xfff1}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x7c2e5bd2, 0x4, 0xb, 0x5, 0x2, 0x5, 0x3, 0xb, 0xffff, 0x6, 0x7, 0xe, 0x6, 0xf3e8, 0x39d}}]}}]}, 0x6c}}, 0x8040) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e20, 0x0, 0x4e22, 0x3, 0x2, 0xa0, 0x80, 0x21, r6}, {0x8, 0x8, 0x3, 0x2, 0x8, 0xfffffffffffffffc, 0x80000000, 0x7}, {0x9, 0x9, 0xfffffffffffffffd, 0x10000}, 0x395f, 0x6e6bb0, 0x2, 0x0, 0x3, 0x1}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in6=@private1, 0x3500, 0x2, 0x3, 0x0, 0x9, 0x3, 0xec9e}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lseek(r8, 0x1000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000880)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000600)={0x5, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e27, @rand_addr=0x64010100}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_0\x00', {0x2}, 0x4}) 5.31526224s ago: executing program 0 (id=1643): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf38779041ee735f7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r0, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5509, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd1a, 0x5, 0x3, 0xfffffffffffffffb, 0x7ff, 0x9]}, &(0x7f0000000080)=0x78) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x2, 0x73) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 5.248891811s ago: executing program 4 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 3.55617465s ago: executing program 1 (id=1648): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0x800}, 0x19105d55dfc068f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) socket$tipc(0x1e, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.55217633s ago: executing program 3 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 3.51157033s ago: executing program 4 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r2, 0x0, 0xfdef) sendto$inet6(r2, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 3.46554168s ago: executing program 1 (id=1651): r0 = socket$kcm(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc010000000000000000000000000002fe8000000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002080090780000080a0000000900007add020400000000"], 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) lseek(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000033000b2d29493cbfbf2f9b", 0xf}, {&(0x7f0000000600)="f9124dbbf6", 0x5}], 0x2}, 0x0) 2.984225986s ago: executing program 0 (id=1652): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000005, 0x1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) unshare(0x30000000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000001240)=0xffffbe04) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2.981225326s ago: executing program 1 (id=1653): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000005, 0x1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) socket(0x1e, 0x4, 0x0) unshare(0x30000000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000001240)=0xffffbe04) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2.797280928s ago: executing program 2 (id=1654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffddc, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x0, 0xfff1}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x7c2e5bd2, 0x4, 0xb, 0x5, 0x2, 0x5, 0x3, 0xb, 0xffff, 0x6, 0x7, 0xe, 0x6, 0xf3e8, 0x39d}}]}}]}, 0x6c}}, 0x8040) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e20, 0x0, 0x4e22, 0x3, 0x2, 0xa0, 0x80, 0x21, r6}, {0x8, 0x8, 0x3, 0x2, 0x8, 0xfffffffffffffffc, 0x80000000, 0x7}, {0x9, 0x9, 0xfffffffffffffffd, 0x10000}, 0x395f, 0x6e6bb0, 0x2, 0x0, 0x3, 0x1}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in6=@private1, 0x3500, 0x2, 0x3, 0x0, 0x9, 0x3, 0xec9e}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lseek(r8, 0x1000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000880)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000600)={0x5, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e27, @rand_addr=0x64010100}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_0\x00', {0x2}, 0x4}) 2.713032179s ago: executing program 2 (id=1655): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xfffdffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') socket$netlink(0x10, 0x3, 0x14) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000540)="32bc9d44c9632e8ba128fd4b425567803dd37fc59de3014ed501d6ad3bffd6f7f0a89777de89c83f0afbb783cc924af9fc103d42a9de6d2b3450", 0x0, 0x0, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 2.66161342s ago: executing program 0 (id=1656): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") getpid() gettid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/167, 0xa7, 0x0, 0x4, 0x4, 0x9, 0x1}}, 0x120) 2.66052533s ago: executing program 3 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 2.576359301s ago: executing program 4 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 2.541203701s ago: executing program 1 (id=1659): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r3 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x80000001, 0x1, 0x1, 0x0}) 2.334499824s ago: executing program 2 (id=1660): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x80000001, 0x1, 0x1, 0x0}) 1.116550737s ago: executing program 2 (id=1661): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@cgroup, r0, 0x37, 0x203c}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@md0, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.115497707s ago: executing program 1 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r2, 0x0, 0xfdef) sendto$inet6(r2, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 1.071277388s ago: executing program 2 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$eJzs3e9rJGcdAPDvTLJ3yV1qUhWpBdtiK3dFb/fS2DYWaSuIglBQ6/szJnsh3CYbspt6CUVT/AMEERX8A3wj+MZ3gvRPEKGg70VFEc3pG0FvZHZnNcnuJmuyyV43nw9M9nnm1/f7DNnZ+fEwE8Cl9UxEvB4RExHxfETMFuPTYoi99pDP92D/7eV8SCLL3vxrEkkxrrOuvD4ZEdeLxaYi4qtfjPhG0h23sbN7b6lWq24V9UpzfbPS2Nm9tba+tFpdrW4sLMy/tPjy4ouLt7PCmdo5FxGvfv6PP/juT77w6i8/9c3f3fnzzW/laX32I+28I2L5TAH6aK+71NoWHfk22jqPYCOSt6c0MeosAAAYRH6M/8GI+Hjr+H82JlpHcwAAAMA4yV6biX8lERkAAAAwttKImIkkLRd9AWYiTcvldh/eD8e1tFZvND95t769sZJPi5iLUnp3rVa9XfQVnotSktfniz62nfoLR+oLEfF4RHx/drpVLy/XayujvvgBAAAAl8T1pw+f//9jNm2VAQAAgDEz17cCAAAAjAun/AAAADD+nP8DAADAWPvyG2/kQ9Z5j/fKWzvb9+pv3VqpNu6V17eXy8v1rc3yar2+2npm3/pJ66vV65ufjo3t+5VmtdGsNHZ276zXtzead9YOvQIbAAAAuECPP/3ub5OI2Hvln6W9V6Zb49JRJwVcmOlBZ/zD+eYBXKyJUScAjMzkqBMARqZ04hz2EDDukhOmd3feKa4a/Op88gEAAIbvxkc79/+no3P//0ox7eRrA8D7mb4+AHD5uLsHl1fptD0Anxh2JsCofKD9cbXf9L4P7xjg/n/7GkOWnSoxAABgaGZaQ5KWi+P0mUjTcjnisdZrAUrJ3bVa9XZxfvCb2dLVvD7fWjI5sc8wAAAAAAAAAAAAAAAAAAAAAAAAANCWZUlkAAAAwFiLSP+UtJ7mH3Fj9rmZw1cHjrz168dv/vD+UrO5NR9xJfnbbD7qSkQ0f1SMfyHzSgAAAAB4BLTP04vP+VFnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC4ebD/9nJnuMi4f/lcRMz1ij8ZU63PqShFxLW/JzF5YLkkIiaGEH/vnYh4olf8JB5mWTZXZNEr/vQ5x59rbZru+NnViDQirg8hPlxm7+b7n9d7ff/SeKb12fv7P1kMZ9V//5f+d/830Wf/89iRej9PvvezSt/470Q8Odl7/9OJn7TjHwqRV54dsI1f/9rubs8JB1b5YL8UR+MfjFVprm9WGju7t9bWl1arq9WNhYX5lxZfXnxx8Xbl7lqtWvztGeZ7H/vFw+Paf63n7197/3ug/V3b/7mBWp/Fv9+7v/+hdqXUK/7NZ3vE/9LPizm646fFb98ninI+/UanvNcuH/TUT3/91HHtX+nT/qkT2n9zoPbHZ57/ynd+33NK19YAAC5CY2f33lKtVt06pjA1wDwXXHjt0UhjiIV4NNIYViE/Fv1/lsq+3f5/PFv0My7eVcjOsvhkDCGNK13f04k47QqTiL18XT3nSbr+IQEAgDHzv4P+4+4gAQAAAAAAAAAAAAAAAAAAAOfplI8lm4qIgWc+GnNvNE0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjWfwIAAP//YubRcg==") 1.017885669s ago: executing program 3 (id=1664): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r1, 0x7040, 0x6) sync() sync() sync() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x1040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) 905.71812ms ago: executing program 4 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$eJzs3e9rJGcdAPDvTLJ3yV1qUhWpBdtiK3dFb/fS2DYWaSuIglBQ6/szJnsh3CYbspt6CUVT/AMEERX8A3wj+MZ3gvRPEKGg70VFEc3pG0FvZHZnNcnuJmuyyV43nw9M9nnm1/f7DNnZ+fEwE8Cl9UxEvB4RExHxfETMFuPTYoi99pDP92D/7eV8SCLL3vxrEkkxrrOuvD4ZEdeLxaYi4qtfjPhG0h23sbN7b6lWq24V9UpzfbPS2Nm9tba+tFpdrW4sLMy/tPjy4ouLt7PCmdo5FxGvfv6PP/juT77w6i8/9c3f3fnzzW/laX32I+28I2L5TAH6aK+71NoWHfk22jqPYCOSt6c0MeosAAAYRH6M/8GI+Hjr+H82JlpHcwAAAMA4yV6biX8lERkAAAAwttKImIkkLRd9AWYiTcvldh/eD8e1tFZvND95t769sZJPi5iLUnp3rVa9XfQVnotSktfniz62nfoLR+oLEfF4RHx/drpVLy/XayujvvgBAAAAl8T1pw+f//9jNm2VAQAAgDEz17cCAAAAjAun/AAAADD+nP8DAADAWPvyG2/kQ9Z5j/fKWzvb9+pv3VqpNu6V17eXy8v1rc3yar2+2npm3/pJ66vV65ufjo3t+5VmtdGsNHZ276zXtzead9YOvQIbAAAAuECPP/3ub5OI2Hvln6W9V6Zb49JRJwVcmOlBZ/zD+eYBXKyJUScAjMzkqBMARqZ04hz2EDDukhOmd3feKa4a/Op88gEAAIbvxkc79/+no3P//0ox7eRrA8D7mb4+AHD5uLsHl1fptD0Anxh2JsCofKD9cbXf9L4P7xjg/n/7GkOWnSoxAABgaGZaQ5KWi+P0mUjTcjnisdZrAUrJ3bVa9XZxfvCb2dLVvD7fWjI5sc8wAAAAAAAAAAAAAAAAAAAAAAAAANCWZUlkAAAAwFiLSP+UtJ7mH3Fj9rmZw1cHjrz168dv/vD+UrO5NR9xJfnbbD7qSkQ0f1SMfyHzSgAAAAB4BLTP04vP+VFnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC4ebD/9nJnuMi4f/lcRMz1ij8ZU63PqShFxLW/JzF5YLkkIiaGEH/vnYh4olf8JB5mWTZXZNEr/vQ5x59rbZru+NnViDQirg8hPlxm7+b7n9d7ff/SeKb12fv7P1kMZ9V//5f+d/830Wf/89iRej9PvvezSt/470Q8Odl7/9OJn7TjHwqRV54dsI1f/9rubs8JB1b5YL8UR+MfjFVprm9WGju7t9bWl1arq9WNhYX5lxZfXnxx8Xbl7lqtWvztGeZ7H/vFw+Paf63n7197/3ug/V3b/7mBWp/Fv9+7v/+hdqXUK/7NZ3vE/9LPizm646fFb98ninI+/UanvNcuH/TUT3/91HHtX+nT/qkT2n9zoPbHZ57/ynd+33NK19YAAC5CY2f33lKtVt06pjA1wDwXXHjt0UhjiIV4NNIYViE/Fv1/lsq+3f5/PFv0My7eVcjOsvhkDCGNK13f04k47QqTiL18XT3nSbr+IQEAgDHzv4P+4+4gAQAAAAAAAAAAAAAAAAAAAOfplI8lm4qIgWc+GnNvNE0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjWfwIAAP//YubRcg==") 572.690074ms ago: executing program 3 (id=1666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffddc, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x0, 0xfff1}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x7c2e5bd2, 0x4, 0xb, 0x5, 0x2, 0x5, 0x3, 0xb, 0xffff, 0x6, 0x7, 0xe, 0x6, 0xf3e8, 0x39d}}]}}]}, 0x6c}}, 0x8040) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e20, 0x0, 0x4e22, 0x3, 0x2, 0xa0, 0x80, 0x21, r6}, {0x8, 0x8, 0x3, 0x2, 0x8, 0xfffffffffffffffc, 0x80000000, 0x7}, {0x9, 0x9, 0xfffffffffffffffd, 0x10000}, 0x395f, 0x6e6bb0, 0x2, 0x0, 0x3, 0x1}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in6=@private1, 0x3500, 0x2, 0x3, 0x0, 0x9, 0x3, 0xec9e}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lseek(r8, 0x1000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000600)={0x5, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e27, @rand_addr=0x64010100}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_0\x00', {0x2}, 0x4}) 495.226005ms ago: executing program 3 (id=1667): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000005, 0x1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) unshare(0x30000000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000001240)=0xffffbe04) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 397.987826ms ago: executing program 3 (id=1668): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) socketpair(0x1, 0x803, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fc, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200"], 0x64}}, 0x0) close(r0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x8, 0x0, 0x82, 0x0, 0x0, 0x20680, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x4, 0xfffffffffffffffc, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000095000000000000000085000000130000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x40000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x9, 0x9, 0x2, 0x81}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 249.300648ms ago: executing program 1 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 213.447818ms ago: executing program 2 (id=1670): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0x800}, 0x19105d55dfc068f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) socket$tipc(0x1e, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r2, 0x0, 0xfdef) sendto$inet6(r2, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") kernel console output (not intermixed with test programs): TASK> [ 184.926570][ T7276] __dump_stack+0x1d/0x30 [ 184.926633][ T7276] dump_stack_lvl+0x95/0xd0 [ 184.926731][ T7276] dump_stack+0x15/0x1b [ 184.926756][ T7276] dump_header+0x80/0x240 [ 184.926783][ T7276] oom_kill_process+0x295/0x350 [ 184.926846][ T7276] out_of_memory+0x97d/0xb80 [ 184.926880][ T7276] try_charge_memcg+0x62f/0xa10 [ 184.926913][ T7276] ? __rcu_read_unlock+0x33/0x70 [ 184.926974][ T7276] charge_memcg+0x6d/0x120 [ 184.927005][ T7276] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 184.927041][ T7276] __swap_cache_prepare_and_add+0x69/0x4a0 [ 184.927078][ T7276] ? alloc_pages_mpol+0x217/0x260 [ 184.927124][ T7276] ? xas_load+0x413/0x430 [ 184.927157][ T7276] swap_cache_alloc_folio+0xa2/0x120 [ 184.927181][ T7276] swap_cluster_readahead+0x25f/0x3c0 [ 184.927212][ T7276] swapin_readahead+0xde/0x840 [ 184.927322][ T7276] ? _raw_spin_unlock+0x9/0x30 [ 184.927367][ T7276] ? __rcu_read_unlock+0x4e/0x70 [ 184.927404][ T7276] ? swap_cache_get_folio+0x1e0/0x1f0 [ 184.927429][ T7276] do_swap_page+0x31e/0x2180 [ 184.927462][ T7276] ? css_rstat_updated+0xbb/0x280 [ 184.927491][ T7276] ? __rcu_read_lock+0x36/0x50 [ 184.927586][ T7276] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 184.927609][ T7276] handle_mm_fault+0xb2e/0x2e70 [ 184.927733][ T7276] ? _raw_spin_lock+0x52/0xa0 [ 184.927770][ T7276] __get_user_pages+0x1290/0x1f10 [ 184.927884][ T7276] __mm_populate+0x242/0x390 [ 184.927919][ T7276] do_mlock+0x47c/0x520 [ 184.927968][ T7276] ? xfd_validate_state+0x45/0xf0 [ 184.928006][ T7276] ? restore_fpregs_from_fpstate+0x61/0x110 [ 184.928031][ T7276] __x64_sys_mlock+0x36/0x50 [ 184.928061][ T7276] x64_sys_call+0x1ab3/0x3020 [ 184.928126][ T7276] do_syscall_64+0x12c/0x3b0 [ 184.928161][ T7276] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 184.928205][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.928226][ T7276] RIP: 0033:0x7f21d757cdd9 [ 184.928251][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.928345][ T7276] RSP: 002b:00007f21d5fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 184.928381][ T7276] RAX: ffffffffffffffda RBX: 00007f21d77f6090 RCX: 00007f21d757cdd9 [ 184.928399][ T7276] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 184.928416][ T7276] RBP: 00007f21d7612d69 R08: 0000000000000000 R09: 0000000000000000 [ 184.928428][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.928440][ T7276] R13: 00007f21d77f6128 R14: 00007f21d77f6090 R15: 00007fffdbac1698 [ 184.928457][ T7276] [ 185.004122][ T7276] memory: usage 307200kB, limit 307200kB, failcnt 397 [ 185.141522][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1215'. [ 185.193592][ T7276] memory+swap: usage 311848kB, limit 9007199254740988kB, failcnt 0 [ 185.212417][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.245102][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.263705][ T7276] kmem: usage 279300kB, limit 9007199254740988kB, failcnt 0 [ 185.286548][ T7276] Memory cgroup stats for /syz1: [ 185.286943][ T7253] syz.1.1200 (7253) used greatest stack depth: 8136 bytes left [ 185.301851][ T7276] cache 532480 [ 185.305639][ T7276] rss 7467008 [ 185.309107][ T7276] shmem 0 [ 185.312147][ T7276] mapped_file 65536 [ 185.316128][ T7276] dirty 0 [ 185.319143][ T7276] writeback 0 [ 185.322559][ T7276] workingset_refault_anon 2012 [ 185.327634][ T7276] workingset_refault_file 318 [ 185.332396][ T7276] swap 4698112 [ 185.335893][ T7276] swapcached 13004800 [ 185.340103][ T7276] pgpgin 65807 [ 185.343698][ T7276] pgpgout 63842 [ 185.347249][ T7276] pgfault 82887 [ 185.350813][ T7276] pgmajfault 600 [ 185.356083][ T7276] inactive_anon 0 [ 185.359802][ T7276] active_anon 57344 [ 185.363771][ T7276] inactive_file 8192 [ 185.367580][ T7316] loop3: detected capacity change from 0 to 2048 [ 185.374264][ T7276] active_file 524288 [ 185.378305][ T7276] unevictable 7454720 [ 185.382439][ T7276] hierarchical_memory_limit 314572800 [ 185.387967][ T7276] hierarchical_memsw_limit 9223372036854771712 [ 185.394306][ T7276] total_cache 532480 [ 185.398389][ T7276] total_rss 7467008 [ 185.402253][ T7276] total_shmem 0 [ 185.405852][ T7276] total_mapped_file 65536 [ 185.410348][ T7276] total_dirty 0 [ 185.425970][ T7276] total_writeback 0 [ 185.429987][ T7276] total_workingset_refault_anon 2012 [ 185.435723][ T7276] total_workingset_refault_file 318 [ 185.440999][ T7276] total_swap 4698112 [ 185.445826][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.455736][ T7276] total_swapcached 13004800 [ 185.460322][ T7276] total_pgpgin 65807 [ 185.464517][ T7276] total_pgpgout 63842 [ 185.468566][ T7276] total_pgfault 82887 [ 185.472651][ T7276] total_pgmajfault 600 [ 185.476893][ T7276] total_inactive_anon 0 [ 185.481147][ T7276] total_active_anon 57344 [ 185.488920][ T7316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.503660][ T7316] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.514187][ T7276] total_inactive_file 8192 [ 185.522515][ T7276] total_active_file 524288 [ 185.527383][ T7276] total_unevictable 7454720 [ 185.532115][ T7276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1200,pid=7252,uid=0 [ 185.549780][ T7276] Memory cgroup out of memory: Killed process 7276 (syz.1.1200) total-vm:96348kB, anon-rss:8528kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 185.750866][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.952455][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.962818][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.023288][ T7342] loop4: detected capacity change from 0 to 128 [ 186.043977][ T7342] FAT-fs (loop4): bogus number of reserved sectors [ 186.050629][ T7342] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 186.060085][ T7342] FAT-fs (loop4): Can't find a valid FAT filesystem [ 186.171008][ T7329] loop2: detected capacity change from 0 to 2048 [ 186.275989][ T7329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.302883][ T7329] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.329455][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.920780][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1223'. [ 187.384715][ T7353] loop0: detected capacity change from 0 to 128 [ 187.740341][ T7353] FAT-fs (loop0): bogus number of reserved sectors [ 187.746986][ T7353] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 187.756408][ T7353] FAT-fs (loop0): Can't find a valid FAT filesystem [ 188.056985][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 188.076929][ T7356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.305919][ T7363] netlink: 'syz.3.1224': attribute type 10 has an invalid length. [ 188.366478][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.850724][ T7377] loop1: detected capacity change from 0 to 512 [ 188.869192][ T7377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.882163][ T7377] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.320792][ T7392] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 189.406306][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.422040][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 189.432313][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.504461][ T7395] loop3: detected capacity change from 0 to 128 [ 189.512952][ T7395] FAT-fs (loop3): bogus number of reserved sectors [ 189.519578][ T7395] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 189.529042][ T7395] FAT-fs (loop3): Can't find a valid FAT filesystem [ 189.694129][ T7382] loop0: detected capacity change from 0 to 2048 [ 189.869950][ T7382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.954730][ T7382] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.297993][ T7400] loop4: detected capacity change from 0 to 512 [ 190.365885][ T7400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.419495][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 190.599890][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.680526][ T7414] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 190.855019][ T7416] loop4: detected capacity change from 0 to 512 [ 190.875323][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.910407][ T7416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.044500][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.379089][ T7428] loop0: detected capacity change from 0 to 512 [ 191.428266][ T7428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.474058][ T7428] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.515197][ T7376] syz.1.1233 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 191.527774][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 191.613462][ T7440] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 191.629712][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.1.1233 Not tainted syzkaller #0 PREEMPT(full) [ 191.629738][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.629831][ T7376] Call Trace: [ 191.629838][ T7376] [ 191.629910][ T7376] __dump_stack+0x1d/0x30 [ 191.629981][ T7376] dump_stack_lvl+0x95/0xd0 [ 191.630004][ T7376] dump_stack+0x15/0x1b [ 191.630024][ T7376] dump_header+0x80/0x240 [ 191.630047][ T7376] oom_kill_process+0x295/0x350 [ 191.630147][ T7376] out_of_memory+0x97d/0xb80 [ 191.630180][ T7376] try_charge_memcg+0x62f/0xa10 [ 191.630210][ T7376] ? __rcu_read_unlock+0x33/0x70 [ 191.630239][ T7376] charge_memcg+0x6d/0x120 [ 191.630274][ T7376] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 191.630304][ T7376] __swap_cache_prepare_and_add+0x69/0x4a0 [ 191.630370][ T7376] ? alloc_pages_mpol+0x217/0x260 [ 191.630397][ T7376] swap_cache_alloc_folio+0xa2/0x120 [ 191.630423][ T7376] swap_cluster_readahead+0x25f/0x3c0 [ 191.630455][ T7376] swapin_readahead+0xde/0x840 [ 191.630479][ T7376] ? _raw_spin_unlock+0x9/0x30 [ 191.630578][ T7376] ? swap_put_entries_cluster+0x46c/0x490 [ 191.630604][ T7376] ? __entry_text_end+0x1d658/0x102179 [ 191.630632][ T7376] ? __rcu_read_unlock+0x4e/0x70 [ 191.630720][ T7376] ? swap_cache_get_folio+0x1e0/0x1f0 [ 191.630745][ T7376] do_swap_page+0x31e/0x2180 [ 191.630772][ T7376] ? css_rstat_updated+0xbb/0x280 [ 191.630795][ T7376] ? __rcu_read_lock+0x36/0x50 [ 191.630880][ T7376] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 191.630966][ T7376] handle_mm_fault+0xb2e/0x2e70 [ 191.630993][ T7376] ? vma_start_read+0x1c7/0x2c0 [ 191.631032][ T7376] do_user_addr_fault+0x62f/0x1050 [ 191.631080][ T7376] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 191.631134][ T7376] ? trace_page_fault_user+0x1f/0xa0 [ 191.631164][ T7376] exc_page_fault+0x62/0xa0 [ 191.631187][ T7376] asm_exc_page_fault+0x26/0x30 [ 191.631208][ T7376] RIP: 0033:0x7f21d74460f1 [ 191.631297][ T7376] Code: 00 00 00 48 83 f8 ff 75 40 be 01 00 00 00 4c 89 e7 e8 53 fe ff ff e8 2e ff ff ff 8b 05 c4 1c 3b 00 41 c6 44 24 20 00 8d 50 ff <89> 15 b5 1c 3b 00 85 d2 0f 88 0b 01 00 00 48 83 c4 18 5b 5d 41 5c [ 191.631317][ T7376] RSP: 002b:00007fffdbac17b0 EFLAGS: 00010246 [ 191.631336][ T7376] RAX: 0000000000000003 RBX: 00007f21d77f7da0 RCX: 00007f21d67d1000 [ 191.631356][ T7376] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00007f21d77f5f40 [ 191.631370][ T7376] RBP: 00007f21d77f60a0 R08: 00000000005e944c R09: 00007f21d77f6128 [ 191.631384][ T7376] R10: 0000001b32924218 R11: 000000000000000c R12: 00007f21d77f6090 [ 191.631398][ T7376] R13: 0000200000000000 R14: 00007fffdbac17b8 R15: 00007f21d77f6270 [ 191.631419][ T7376] [ 191.889799][ T7376] memory: usage 306064kB, limit 307200kB, failcnt 2298 [ 191.904974][ T7376] memory+swap: usage 309832kB, limit 9007199254740988kB, failcnt 0 [ 191.925550][ T7376] kmem: usage 291380kB, limit 9007199254740988kB, failcnt 0 [ 191.954614][ T7376] Memory cgroup stats for /syz1: [ 191.954912][ T7376] cache 8192 [ 191.976984][ T7376] rss 8392704 [ 191.986098][ T7376] shmem 0 [ 191.992121][ T7376] mapped_file 0 [ 192.000177][ T7376] dirty 0 [ 192.014121][ T7376] writeback 4096 [ 192.021369][ T7376] workingset_refault_anon 4235 [ 192.047190][ T7376] workingset_refault_file 1025 [ 192.102927][ T7376] swap 3829760 [ 192.119314][ T7376] swapcached 25849856 [ 192.160969][ T7376] pgpgin 76971 [ 192.166549][ T7376] pgpgout 74920 [ 192.174748][ T7376] pgfault 93743 [ 192.206518][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1250'. [ 192.215846][ T7376] pgmajfault 984 [ 192.252479][ T7376] inactive_anon 4096 [ 192.256960][ T7376] active_anon 0 [ 192.276975][ T7376] inactive_file 8192 [ 192.303581][ T7376] active_file 0 [ 192.318152][ T7376] unevictable 8388608 [ 192.346559][ T7376] hierarchical_memory_limit 314572800 [ 192.368601][ T7451] loop4: detected capacity change from 0 to 512 [ 192.379840][ T7376] hierarchical_memsw_limit 9223372036854771712 [ 192.420903][ T7376] total_cache 8192 [ 192.426822][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.478613][ T7376] total_rss 8392704 [ 192.497108][ T7451] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.546735][ T7376] total_shmem 0 [ 192.582758][ T7456] loop2: detected capacity change from 0 to 128 [ 192.595481][ T7456] FAT-fs (loop2): bogus number of reserved sectors [ 192.602081][ T7456] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 192.611451][ T7456] FAT-fs (loop2): Can't find a valid FAT filesystem [ 192.686437][ T7376] total_mapped_file 0 [ 192.754384][ T7376] total_dirty 0 [ 192.815821][ T7376] total_writeback 4096 [ 192.887063][ T7376] total_workingset_refault_anon 4235 [ 192.986146][ T7376] total_workingset_refault_file 1025 [ 193.061325][ T7376] total_swap 3829760 [ 193.107448][ T7376] total_swapcached 25849856 [ 193.331747][ T7376] total_pgpgin 76971 [ 193.355707][ T7376] total_pgpgout 74920 [ 193.380130][ T7376] total_pgfault 93743 [ 193.406062][ T7376] total_pgmajfault 984 [ 193.430747][ T7376] total_inactive_anon 4096 [ 193.458616][ T7376] total_active_anon 0 [ 193.482486][ T7376] total_inactive_file 8192 [ 193.509618][ T7376] total_active_file 0 [ 193.539337][ T7376] total_unevictable 8388608 [ 193.563432][ T7376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1233,pid=7376,uid=0 [ 193.640583][ T7376] Memory cgroup out of memory: Killed process 7376 (syz.1.1233) total-vm:100584kB, anon-rss:9428kB, file-rss:26468kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 194.317185][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.337616][ T7457] syz.4.1253 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 194.475225][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.4.1253 Not tainted syzkaller #0 PREEMPT(full) [ 194.475257][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.475272][ T7457] Call Trace: [ 194.475280][ T7457] [ 194.475289][ T7457] __dump_stack+0x1d/0x30 [ 194.475316][ T7457] dump_stack_lvl+0x95/0xd0 [ 194.475420][ T7457] dump_stack+0x15/0x1b [ 194.475441][ T7457] dump_header+0x80/0x240 [ 194.475465][ T7457] oom_kill_process+0x295/0x350 [ 194.475554][ T7457] out_of_memory+0x97d/0xb80 [ 194.475599][ T7457] try_charge_memcg+0x62f/0xa10 [ 194.475630][ T7457] ? __rcu_read_unlock+0x33/0x70 [ 194.475709][ T7457] charge_memcg+0x6d/0x120 [ 194.475736][ T7457] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 194.475767][ T7457] __swap_cache_prepare_and_add+0x69/0x4a0 [ 194.475796][ T7457] ? alloc_pages_mpol+0x217/0x260 [ 194.475895][ T7457] swap_cache_alloc_folio+0xa2/0x120 [ 194.475922][ T7457] swap_cluster_readahead+0x25f/0x3c0 [ 194.475955][ T7457] swapin_readahead+0xde/0x840 [ 194.475998][ T7457] ? _raw_spin_unlock+0x9/0x30 [ 194.476030][ T7457] ? __rcu_read_unlock+0x4e/0x70 [ 194.476052][ T7457] ? swap_cache_get_folio+0x1e0/0x1f0 [ 194.476129][ T7457] do_swap_page+0x31e/0x2180 [ 194.476214][ T7457] ? css_rstat_updated+0xbb/0x280 [ 194.476240][ T7457] ? css_rstat_updated+0xbb/0x280 [ 194.476263][ T7457] ? __rcu_read_lock+0x36/0x50 [ 194.476285][ T7457] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 194.476326][ T7457] handle_mm_fault+0xb2e/0x2e70 [ 194.476355][ T7457] ? _raw_spin_lock+0x52/0xa0 [ 194.476431][ T7457] __get_user_pages+0x1290/0x1f10 [ 194.476499][ T7457] __mm_populate+0x242/0x390 [ 194.476528][ T7457] do_mlock+0x47c/0x520 [ 194.476562][ T7457] ? xfd_validate_state+0x45/0xf0 [ 194.476631][ T7457] ? restore_fpregs_from_fpstate+0x61/0x110 [ 194.476657][ T7457] __x64_sys_mlock+0x36/0x50 [ 194.476751][ T7457] x64_sys_call+0x1ab3/0x3020 [ 194.476777][ T7457] do_syscall_64+0x12c/0x3b0 [ 194.476808][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.476832][ T7457] RIP: 0033:0x7f41b33fcdd9 [ 194.476926][ T7457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.476947][ T7457] RSP: 002b:00007f41b1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 194.476970][ T7457] RAX: ffffffffffffffda RBX: 00007f41b3676090 RCX: 00007f41b33fcdd9 [ 194.476986][ T7457] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 194.477001][ T7457] RBP: 00007f41b3492d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.477015][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.477028][ T7457] R13: 00007f41b3676128 R14: 00007f41b3676090 R15: 00007fff24bea928 [ 194.477113][ T7457] [ 194.480051][ T7457] memory: usage 276408kB, limit 307200kB, failcnt 608 [ 194.812420][ T7457] memory+swap: usage 232636kB, limit 9007199254740988kB, failcnt 0 [ 194.845018][ T7457] kmem: usage 214152kB, limit 9007199254740988kB, failcnt 0 [ 194.881140][ T7457] Memory cgroup stats for /syz0: [ 194.881404][ T7457] cache 16384 [ 194.971297][ T7457] rss 6320128 [ 194.989983][ T7457] shmem 4096 [ 194.999000][ T7457] mapped_file 4096 [ 195.007612][ T7457] dirty 0 [ 195.014512][ T7457] writeback 0 [ 195.019628][ T7457] workingset_refault_anon 1712 [ 195.039788][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.059956][ T7457] workingset_refault_file 1191 [ 195.077373][ T28] audit: type=1400 audit(1778408614.890:211): avc: denied { create } for pid=7474 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.107607][ T7457] swap 5820416 [ 195.113700][ T7457] swapcached 13279232 [ 195.121322][ T28] audit: type=1400 audit(1778408614.910:212): avc: denied { setopt } for pid=7474 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.152655][ T7457] pgpgin 70956 [ 195.170275][ T7457] pgpgout 69392 [ 195.171769][ T28] audit: type=1400 audit(1778408614.920:213): avc: denied { write } for pid=7474 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.207079][ T7457] pgfault 88237 [ 195.237167][ T7457] pgmajfault 403 [ 195.249813][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'. [ 195.262008][ T7482] netlink: 'syz.2.1261': attribute type 10 has an invalid length. [ 195.264166][ T7457] inactive_anon 20480 [ 195.274800][ T7457] active_anon 3452928 [ 195.278913][ T7457] inactive_file 12288 [ 195.282920][ T7457] active_file 0 [ 195.305366][ T7481] loop3: detected capacity change from 0 to 512 [ 195.317588][ T7457] unevictable 2920448 [ 195.386530][ T7457] hierarchical_memory_limit 314572800 [ 195.393924][ T7457] hierarchical_memsw_limit 9223372036854771712 [ 195.412203][ T7457] total_cache 16384 [ 195.423904][ T7457] total_rss 6320128 [ 195.437217][ T7457] total_shmem 4096 [ 195.441345][ T7457] total_mapped_file 4096 [ 195.445704][ T7457] total_dirty 0 [ 195.446544][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.449190][ T7457] total_writeback 0 [ 195.449202][ T7457] total_workingset_refault_anon 1712 [ 195.449213][ T7457] total_workingset_refault_file 1191 [ 195.482156][ T7457] total_swap 5820416 [ 195.486137][ T7457] total_swapcached 13279232 [ 195.495737][ T7457] total_pgpgin 70956 [ 195.499703][ T7457] total_pgpgout 69392 [ 195.505876][ T7481] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.544489][ T7457] total_pgfault 88237 [ 195.560330][ T7457] total_pgmajfault 403 [ 195.574051][ T7457] total_inactive_anon 20480 [ 195.608102][ T7457] total_active_anon 3452928 [ 195.624074][ T7457] total_inactive_file 12288 [ 195.643968][ T7457] total_active_file 0 [ 195.661740][ T7457] total_unevictable 2920448 [ 195.673852][ T7457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1246,pid=7427,uid=0 [ 195.707957][ T7457] Memory cgroup out of memory: OOM victim 7427 (syz.0.1246) is already exiting. Skip killing the task [ 195.855431][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.360551][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.390386][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.438981][ T7501] loop4: detected capacity change from 0 to 2048 [ 196.480526][ T7501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.523939][ T7501] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.072459][ T7493] syz.3.1262 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 197.103726][ T7493] CPU: 1 UID: 0 PID: 7493 Comm: syz.3.1262 Not tainted syzkaller #0 PREEMPT(full) [ 197.103756][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.103772][ T7493] Call Trace: [ 197.103781][ T7493] [ 197.103791][ T7493] __dump_stack+0x1d/0x30 [ 197.103863][ T7493] dump_stack_lvl+0x95/0xd0 [ 197.103884][ T7493] dump_stack+0x15/0x1b [ 197.103908][ T7493] dump_header+0x80/0x240 [ 197.103992][ T7493] oom_kill_process+0x295/0x350 [ 197.104031][ T7493] out_of_memory+0x97d/0xb80 [ 197.104066][ T7493] try_charge_memcg+0x62f/0xa10 [ 197.104166][ T7493] charge_memcg+0x6d/0x120 [ 197.104200][ T7493] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 197.104237][ T7493] __swap_cache_prepare_and_add+0x69/0x4a0 [ 197.104341][ T7493] ? alloc_pages_mpol+0x217/0x260 [ 197.104375][ T7493] swap_cache_alloc_folio+0xa2/0x120 [ 197.104426][ T7493] swap_cluster_readahead+0x25f/0x3c0 [ 197.104458][ T7493] swapin_readahead+0xde/0x840 [ 197.104491][ T7493] ? _raw_spin_unlock+0x9/0x30 [ 197.104572][ T7493] ? __rcu_read_unlock+0x4e/0x70 [ 197.104599][ T7493] ? swap_cache_get_folio+0x1e0/0x1f0 [ 197.104630][ T7493] do_swap_page+0x31e/0x2180 [ 197.104662][ T7493] ? css_rstat_updated+0xbb/0x280 [ 197.104758][ T7493] ? __rcu_read_lock+0x36/0x50 [ 197.104796][ T7493] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 197.104826][ T7493] handle_mm_fault+0xb2e/0x2e70 [ 197.104894][ T7493] ? _raw_spin_lock+0x52/0xa0 [ 197.104941][ T7493] __get_user_pages+0x1290/0x1f10 [ 197.104987][ T7493] __mm_populate+0x242/0x390 [ 197.105023][ T7493] do_mlock+0x47c/0x520 [ 197.105115][ T7493] ? xfd_validate_state+0x45/0xf0 [ 197.105149][ T7493] ? restore_fpregs_from_fpstate+0x61/0x110 [ 197.105177][ T7493] __x64_sys_mlock+0x36/0x50 [ 197.105296][ T7493] x64_sys_call+0x1ab3/0x3020 [ 197.105328][ T7493] do_syscall_64+0x12c/0x3b0 [ 197.105378][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.105406][ T7493] RIP: 0033:0x7f2bd2b7cdd9 [ 197.105427][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.105446][ T7493] RSP: 002b:00007f2bd15ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 197.105540][ T7493] RAX: ffffffffffffffda RBX: 00007f2bd2df6090 RCX: 00007f2bd2b7cdd9 [ 197.105554][ T7493] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 197.105566][ T7493] RBP: 00007f2bd2c12d69 R08: 0000000000000000 R09: 0000000000000000 [ 197.105581][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.105644][ T7493] R13: 00007f2bd2df6128 R14: 00007f2bd2df6090 R15: 00007ffc731f8148 [ 197.105665][ T7493] [ 197.110115][ T7493] memory: usage 307200kB, limit 307200kB, failcnt 480 [ 197.377680][ T7493] memory+swap: usage 308732kB, limit 9007199254740988kB, failcnt 0 [ 197.385776][ T7493] kmem: usage 295768kB, limit 9007199254740988kB, failcnt 0 [ 197.393238][ T7493] Memory cgroup stats for /syz3: [ 197.393676][ T7493] cache 8192 [ 197.397555][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.398630][ T7493] rss 2916352 [ 197.414296][ T7493] shmem 0 [ 197.417374][ T7493] mapped_file 0 [ 197.420975][ T7493] dirty 0 [ 197.423978][ T7493] writeback 0 [ 197.427282][ T7493] workingset_refault_anon 780 [ 197.432205][ T7493] workingset_refault_file 149 [ 197.437062][ T7493] swap 9297920 [ 197.440559][ T7493] swapcached 12496896 [ 197.444646][ T7493] pgpgin 59027 [ 197.448174][ T7493] pgpgout 58313 [ 197.451670][ T7493] pgfault 78875 [ 197.455171][ T7493] pgmajfault 121 [ 197.458788][ T7493] inactive_anon 0 [ 197.462446][ T7493] active_anon 0 [ 197.466011][ T7493] inactive_file 0 [ 197.469676][ T7493] active_file 8192 [ 197.473414][ T7493] unevictable 2916352 [ 197.477443][ T7493] hierarchical_memory_limit 314572800 [ 197.482827][ T7493] hierarchical_memsw_limit 9223372036854771712 [ 197.489127][ T7493] total_cache 8192 [ 197.492883][ T7493] total_rss 2916352 [ 197.496768][ T7493] total_shmem 0 [ 197.500259][ T7493] total_mapped_file 0 [ 197.504300][ T7493] total_dirty 0 [ 197.507786][ T7493] total_writeback 0 [ 197.511667][ T7493] total_workingset_refault_anon 780 [ 197.516922][ T7493] total_workingset_refault_file 149 [ 197.522138][ T7493] total_swap 9297920 [ 197.526215][ T7493] total_swapcached 12496896 [ 197.526545][ T7515] loop1: detected capacity change from 0 to 512 [ 197.530780][ T7493] total_pgpgin 59027 [ 197.530790][ T7493] total_pgpgout 58313 [ 197.530799][ T7493] total_pgfault 78875 [ 197.530809][ T7493] total_pgmajfault 121 [ 197.553135][ T7493] total_inactive_anon 0 [ 197.566689][ T7493] total_active_anon 0 [ 197.591193][ T7493] total_inactive_file 0 [ 197.610091][ T7493] total_active_file 8192 [ 197.619839][ T7515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.642743][ T7493] total_unevictable 2916352 [ 197.662311][ T7493] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1262,pid=7480,uid=0 [ 197.754307][ T7493] Memory cgroup out of memory: Killed process 7480 (syz.3.1262) total-vm:96348kB, anon-rss:4080kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 197.820162][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.988271][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.157365][ T7536] netlink: 'syz.3.1274': attribute type 10 has an invalid length. [ 198.262166][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 198.566122][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.576311][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.594889][ T7540] loop3: detected capacity change from 0 to 2048 [ 198.627626][ T7540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.640467][ T7540] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.747536][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'. [ 198.900831][ T7553] loop0: detected capacity change from 0 to 512 [ 198.916194][ T7553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.932562][ T7553] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.215288][ T7562] loop4: detected capacity change from 0 to 512 [ 199.275348][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.327171][ T3400] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 199.329623][ T28] audit: type=1400 audit(1778408619.140:214): avc: denied { read write } for pid=7568 comm="syz.3.1283" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.362443][ T3400] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.372225][ T28] audit: type=1400 audit(1778408619.140:215): avc: denied { open } for pid=7568 comm="syz.3.1283" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.403643][ T7562] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 199.423972][ T7562] EXT4-fs (loop4): mount failed [ 199.438409][ T28] audit: type=1400 audit(1778408619.250:216): avc: denied { create } for pid=7568 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.535110][ T7571] fido_id[7571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.730344][ T7579] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 199.735906][ T7566] syz.0.1279 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 199.759114][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.0.1279 Not tainted syzkaller #0 PREEMPT(full) [ 199.759218][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.759232][ T7566] Call Trace: [ 199.759241][ T7566] [ 199.759250][ T7566] __dump_stack+0x1d/0x30 [ 199.759277][ T7566] dump_stack_lvl+0x95/0xd0 [ 199.759373][ T7566] dump_stack+0x15/0x1b [ 199.759394][ T7566] dump_header+0x80/0x240 [ 199.759418][ T7566] oom_kill_process+0x295/0x350 [ 199.759454][ T7566] out_of_memory+0x97d/0xb80 [ 199.759559][ T7566] try_charge_memcg+0x62f/0xa10 [ 199.759600][ T7566] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 199.759628][ T7566] __alloc_frozen_pages_noprof+0x18a/0x350 [ 199.759657][ T7566] alloc_pages_bulk_noprof+0x4d1/0x560 [ 199.759753][ T7566] ? policy_nodemask+0x417/0x5e0 [ 199.759781][ T7566] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 199.759812][ T7566] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 199.759850][ T7566] ? alloc_pages_mpol+0x217/0x260 [ 199.759884][ T7566] __vmalloc_node_range_noprof+0x891/0x11c0 [ 199.759925][ T7566] __kvmalloc_node_noprof+0x3d4/0x640 [ 199.760012][ T7566] ? futex_hash_allocate+0x190/0x9a0 [ 199.760049][ T7566] ? futex_hash_allocate+0x190/0x9a0 [ 199.760089][ T7566] ? __rcu_read_unlock+0x4e/0x70 [ 199.760179][ T7566] futex_hash_allocate+0x190/0x9a0 [ 199.760222][ T7566] ? cap_task_prctl+0x13f/0x6b0 [ 199.760254][ T7566] futex_hash_prctl+0xd8/0xf0 [ 199.760355][ T7566] __se_sys_prctl+0x4f4/0x1400 [ 199.760393][ T7566] __x64_sys_prctl+0x67/0x80 [ 199.760499][ T7566] x64_sys_call+0x2533/0x3020 [ 199.760585][ T7566] do_syscall_64+0x12c/0x3b0 [ 199.760692][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.760721][ T7566] RIP: 0033:0x7f72451ccdd9 [ 199.760742][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.760799][ T7566] RSP: 002b:00007f7243bdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 199.760825][ T7566] RAX: ffffffffffffffda RBX: 00007f7245446180 RCX: 00007f72451ccdd9 [ 199.760891][ T7566] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 199.760908][ T7566] RBP: 00007f7245262d69 R08: 0000000000000000 R09: 0000000000000000 [ 199.760926][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.760942][ T7566] R13: 00007f7245446218 R14: 00007f7245446180 R15: 00007ffce0748168 [ 199.760975][ T7566] [ 199.761027][ T7566] memory: usage 302260kB, limit 307200kB, failcnt 2550 [ 200.016436][ T7566] memory+swap: usage 294860kB, limit 9007199254740988kB, failcnt 0 [ 200.038562][ T7582] loop4: detected capacity change from 0 to 512 [ 200.054820][ T7566] kmem: usage 276492kB, limit 9007199254740988kB, failcnt 0 [ 200.063330][ T7566] Memory cgroup stats for /syz0: [ 200.063960][ T7566] cache 335872 [ 200.072745][ T7566] rss 2879488 [ 200.096899][ T7582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.129495][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'. [ 200.146266][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1290'. [ 200.160182][ T7582] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.192093][ T7566] shmem 0 [ 200.217166][ T7566] mapped_file 4096 [ 200.257838][ T7566] dirty 0 [ 200.303627][ T7566] writeback 0 [ 200.320527][ T7566] workingset_refault_anon 2545 [ 200.365643][ T7566] workingset_refault_file 1448 [ 200.396985][ T7566] swap 9334784 [ 200.416799][ T7566] swapcached 25849856 [ 200.430999][ T7566] pgpgin 78164 [ 200.445129][ T7566] pgpgout 77379 [ 200.461677][ T7566] pgfault 95438 [ 200.478719][ T7566] pgmajfault 637 [ 200.493568][ T7566] inactive_anon 4096 [ 200.512507][ T7566] active_anon 0 [ 200.521874][ T7566] inactive_file 327680 [ 200.543577][ T7566] active_file 8192 [ 200.548793][ T7566] unevictable 2875392 [ 200.563549][ T7566] hierarchical_memory_limit 314572800 [ 200.575357][ T7566] hierarchical_memsw_limit 9223372036854771712 [ 200.595014][ T7566] total_cache 335872 [ 200.619436][ T7566] total_rss 2879488 [ 200.624081][ T7566] total_shmem 0 [ 200.630636][ T7566] total_mapped_file 4096 [ 200.645035][ T7566] total_dirty 0 [ 200.651541][ T7566] total_writeback 0 [ 200.665028][ T7566] total_workingset_refault_anon 2545 [ 200.764383][ T7566] total_workingset_refault_file 1448 [ 200.795864][ T7566] total_swap 9334784 [ 200.819989][ T7566] total_swapcached 25849856 [ 200.848425][ T7566] total_pgpgin 78164 [ 200.876409][ T7566] total_pgpgout 77379 [ 200.902028][ T7566] total_pgfault 95438 [ 200.925934][ T7566] total_pgmajfault 637 [ 200.951047][ T7566] total_inactive_anon 4096 [ 200.978666][ T7566] total_active_anon 0 [ 201.003384][ T7566] total_inactive_file 327680 [ 201.025555][ T7566] total_active_file 8192 [ 201.030094][ T7566] total_unevictable 2875392 [ 201.035157][ T7566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1279,pid=7552,uid=0 [ 201.051148][ T7566] Memory cgroup out of memory: Killed process 7552 (syz.0.1279) total-vm:96348kB, anon-rss:4040kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 201.176855][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.611110][ T7600] syz.4.1288 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 201.663626][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.4.1288 Not tainted syzkaller #0 PREEMPT(full) [ 201.663667][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.663684][ T7600] Call Trace: [ 201.663694][ T7600] [ 201.663704][ T7600] __dump_stack+0x1d/0x30 [ 201.663738][ T7600] dump_stack_lvl+0x95/0xd0 [ 201.663836][ T7600] dump_stack+0x15/0x1b [ 201.663862][ T7600] dump_header+0x80/0x240 [ 201.663914][ T7600] oom_kill_process+0x295/0x350 [ 201.663945][ T7600] out_of_memory+0x97d/0xb80 [ 201.664036][ T7600] try_charge_memcg+0x62f/0xa10 [ 201.664073][ T7600] ? __rcu_read_unlock+0x33/0x70 [ 201.664100][ T7600] charge_memcg+0x6d/0x120 [ 201.664150][ T7600] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 201.664179][ T7600] __swap_cache_prepare_and_add+0x69/0x4a0 [ 201.664204][ T7600] ? alloc_pages_mpol+0x217/0x260 [ 201.664234][ T7600] ? xas_load+0x413/0x430 [ 201.664343][ T7600] swap_cache_alloc_folio+0xa2/0x120 [ 201.664375][ T7600] swap_cluster_readahead+0x25f/0x3c0 [ 201.664413][ T7600] swapin_readahead+0xde/0x840 [ 201.664489][ T7600] ? _raw_spin_unlock+0x9/0x30 [ 201.664520][ T7600] ? __rcu_read_unlock+0x4e/0x70 [ 201.664539][ T7600] ? swap_cache_get_folio+0x1e0/0x1f0 [ 201.664565][ T7600] do_swap_page+0x31e/0x2180 [ 201.664623][ T7600] ? css_rstat_updated+0xbb/0x280 [ 201.664652][ T7600] ? __rcu_read_lock+0x36/0x50 [ 201.664676][ T7600] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 201.664697][ T7600] handle_mm_fault+0xb2e/0x2e70 [ 201.664789][ T7600] ? _raw_spin_lock+0x52/0xa0 [ 201.664874][ T7600] __get_user_pages+0x1290/0x1f10 [ 201.664939][ T7600] __mm_populate+0x242/0x390 [ 201.665040][ T7600] do_mlock+0x47c/0x520 [ 201.665070][ T7600] ? xfd_validate_state+0x45/0xf0 [ 201.665131][ T7600] ? restore_fpregs_from_fpstate+0x61/0x110 [ 201.665163][ T7600] __x64_sys_mlock+0x36/0x50 [ 201.665201][ T7600] x64_sys_call+0x1ab3/0x3020 [ 201.665225][ T7600] do_syscall_64+0x12c/0x3b0 [ 201.665289][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.665316][ T7600] RIP: 0033:0x7f41b33fcdd9 [ 201.665336][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.665357][ T7600] RSP: 002b:00007f41b1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 201.665376][ T7600] RAX: ffffffffffffffda RBX: 00007f41b3676090 RCX: 00007f41b33fcdd9 [ 201.665526][ T7600] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 201.665555][ T7600] RBP: 00007f41b3492d69 R08: 0000000000000000 R09: 0000000000000000 [ 201.665567][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.665579][ T7600] R13: 00007f41b3676128 R14: 00007f41b3676090 R15: 00007fff24bea928 [ 201.665599][ T7600] [ 201.671409][ T7600] memory: usage 307200kB, limit 307200kB, failcnt 508 [ 201.997749][ T7600] memory+swap: usage 223900kB, limit 9007199254740988kB, failcnt 0 [ 202.015631][ T7600] kmem: usage 205840kB, limit 9007199254740988kB, failcnt 0 [ 202.033709][ T7600] Memory cgroup stats for /syz4: [ 202.034040][ T7600] cache 8192 [ 202.051283][ T7600] rss 2994176 [ 202.060509][ T7600] shmem 0 [ 202.086984][ T7600] mapped_file 0 [ 202.098685][ T7600] dirty 0 [ 202.108876][ T7600] writeback 0 [ 202.116058][ T7600] workingset_refault_anon 3230 [ 202.130667][ T7600] workingset_refault_file 962 [ 202.145148][ T7600] swap 9216000 [ 202.152965][ T7600] swapcached 37543936 [ 202.175115][ T7600] pgpgin 80790 [ 202.178867][ T7627] netlink: 'syz.1.1300': attribute type 10 has an invalid length. [ 202.189855][ T7600] pgpgout 80057 [ 202.199392][ T7600] pgfault 98186 [ 202.207460][ T7600] pgmajfault 536 [ 202.225676][ T7600] inactive_anon 0 [ 202.234930][ T7600] active_anon 0 [ 202.243566][ T7600] inactive_file 8192 [ 202.254894][ T7600] active_file 0 [ 202.263568][ T7600] unevictable 2994176 [ 202.276089][ T7600] hierarchical_memory_limit 314572800 [ 202.295353][ T7600] hierarchical_memsw_limit 9223372036854771712 [ 202.314110][ T7600] total_cache 8192 [ 202.324648][ T7600] total_rss 2994176 [ 202.338548][ T7600] total_shmem 0 [ 202.351011][ T7600] total_mapped_file 0 [ 202.361826][ T7600] total_dirty 0 [ 202.371353][ T7600] total_writeback 0 [ 202.383611][ T7600] total_workingset_refault_anon 3230 [ 202.399099][ T7600] total_workingset_refault_file 962 [ 202.413396][ T7600] total_swap 9216000 [ 202.421459][ T7600] total_swapcached 37543936 [ 202.444481][ T7600] total_pgpgin 80790 [ 202.460236][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'. [ 202.461554][ T7600] total_pgpgout 80057 [ 202.494384][ T7600] total_pgfault 98186 [ 202.508834][ T7600] total_pgmajfault 536 [ 202.519920][ T7631] loop1: detected capacity change from 0 to 512 [ 202.520936][ T7600] total_inactive_anon 0 [ 202.555704][ T7631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.558478][ T7600] total_active_anon 0 [ 202.572661][ T7600] total_inactive_file 8192 [ 202.577310][ T7600] total_active_file 0 [ 202.581749][ T7600] total_unevictable 2994176 [ 202.590643][ T7600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1288,pid=7581,uid=0 [ 202.605430][ T7600] Memory cgroup out of memory: Killed process 7581 (syz.4.1288) total-vm:96348kB, anon-rss:4168kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 202.637767][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 202.719053][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.811325][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.830235][ T7646] loop2: detected capacity change from 0 to 512 [ 202.845413][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.863707][ T7646] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.117231][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.137022][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.196234][ T7642] loop4: detected capacity change from 0 to 2048 [ 203.238941][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.263719][ T7642] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.464763][ T7667] loop3: detected capacity change from 0 to 512 [ 203.500719][ T7667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.553165][ T7667] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.600782][ T7673] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 203.756311][ T3570] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.778483][ T3570] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.857468][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.952021][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 204.342890][ T7691] loop1: detected capacity change from 0 to 512 [ 204.420901][ T7691] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 204.541221][ T7691] EXT4-fs (loop1): mount failed [ 204.950490][ T3305] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 205.075102][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 205.075135][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.075151][ T3305] Call Trace: [ 205.075161][ T3305] [ 205.075171][ T3305] __dump_stack+0x1d/0x30 [ 205.075216][ T3305] dump_stack_lvl+0x95/0xd0 [ 205.075258][ T3305] dump_stack+0x15/0x1b [ 205.075283][ T3305] dump_header+0x80/0x240 [ 205.075310][ T3305] oom_kill_process+0x295/0x350 [ 205.075351][ T3305] out_of_memory+0x97d/0xb80 [ 205.075465][ T3305] try_charge_memcg+0x62f/0xa10 [ 205.075524][ T3305] charge_memcg+0x6d/0x120 [ 205.075618][ T3305] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 205.075647][ T3305] __swap_cache_prepare_and_add+0x69/0x4a0 [ 205.075672][ T3305] ? alloc_pages_mpol+0x217/0x260 [ 205.075779][ T3305] swap_cache_alloc_folio+0xa2/0x120 [ 205.075806][ T3305] swap_cluster_readahead+0x25f/0x3c0 [ 205.075835][ T3305] swapin_readahead+0xde/0x840 [ 205.075930][ T3305] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 205.075973][ T3305] ? percpu_counter_add_batch+0x11b/0x130 [ 205.076001][ T3305] ? mm_trace_rss_stat+0x1d/0xc0 [ 205.076159][ T3305] ? __rcu_read_unlock+0x33/0x70 [ 205.076180][ T3305] ? __rcu_read_unlock+0x4e/0x70 [ 205.076218][ T3305] ? swap_cache_get_folio+0x1e0/0x1f0 [ 205.076248][ T3305] do_swap_page+0x31e/0x2180 [ 205.076272][ T3305] ? filemap_fault+0x85f/0xb70 [ 205.076366][ T3305] ? css_rstat_updated+0xbb/0x280 [ 205.076392][ T3305] ? __rcu_read_lock+0x36/0x50 [ 205.076418][ T3305] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 205.076439][ T3305] handle_mm_fault+0xb2e/0x2e70 [ 205.076539][ T3305] ? vma_start_read+0x1c7/0x2c0 [ 205.076586][ T3305] do_user_addr_fault+0x62f/0x1050 [ 205.076628][ T3305] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 205.076712][ T3305] ? trace_page_fault_user+0x1f/0xa0 [ 205.076751][ T3305] exc_page_fault+0x62/0xa0 [ 205.076779][ T3305] asm_exc_page_fault+0x26/0x30 [ 205.076807][ T3305] RIP: 0033:0x7fae085badf7 [ 205.076858][ T3305] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 39 7c 24 [ 205.076876][ T3305] RSP: 002b:00007ffe28b68870 EFLAGS: 00010202 [ 205.076894][ T3305] RAX: 0000001b32a24000 RBX: 00000000000002ce RCX: 0000000000031ce0 [ 205.076912][ T3305] RDX: 000000000b4e4067 RSI: 00007ffe28b68900 RDI: 000000000000000d [ 205.076929][ T3305] RBP: 00007ffe28b688ac R08: 000000002b20b18e R09: 3fffffffffffffff [ 205.076971][ T3305] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 205.076988][ T3305] R13: 00000000000927c0 R14: 0000000000031c13 R15: 00007ffe28b68900 [ 205.077011][ T3305] [ 205.082804][ T3305] memory: usage 307200kB, limit 307200kB, failcnt 1322 [ 205.355383][ T3305] memory+swap: usage 310940kB, limit 9007199254740988kB, failcnt 0 [ 205.388243][ T3305] kmem: usage 298996kB, limit 9007199254740988kB, failcnt 0 [ 205.421679][ T3305] Memory cgroup stats for /syz2: [ 205.421939][ T3305] cache 8192 [ 205.447748][ T3305] rss 8388608 [ 205.467324][ T3305] shmem 0 [ 205.486766][ T3305] mapped_file 0 [ 205.501197][ T7702] loop1: detected capacity change from 0 to 128 [ 205.509346][ T7702] FAT-fs (loop1): bogus number of reserved sectors [ 205.516125][ T7702] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.525494][ T7702] FAT-fs (loop1): Can't find a valid FAT filesystem [ 205.586379][ T3305] dirty 0 [ 205.618714][ T3305] writeback 0 [ 205.650537][ T3305] workingset_refault_anon 2138 [ 205.695961][ T3305] workingset_refault_file 1394 [ 205.731681][ T3305] swap 3829760 [ 205.759595][ T3305] swapcached 12595200 [ 205.789844][ T3305] pgpgin 103426 [ 205.816391][ T3305] pgpgout 101375 [ 205.842776][ T3305] pgfault 122217 [ 206.047609][ T3305] pgmajfault 343 [ 206.059011][ T3305] inactive_anon 4096 [ 206.075996][ T3305] active_anon 0 [ 206.088292][ T3305] inactive_file 8192 [ 206.105644][ T3305] active_file 0 [ 206.122578][ T3305] unevictable 8388608 [ 206.136767][ T3305] hierarchical_memory_limit 314572800 [ 206.158771][ T3305] hierarchical_memsw_limit 9223372036854771712 [ 206.183591][ T3305] total_cache 8192 [ 206.201196][ T3305] total_rss 8388608 [ 206.218444][ T3305] total_shmem 0 [ 206.231192][ T3305] total_mapped_file 0 [ 206.247152][ T3305] total_dirty 0 [ 206.259489][ T3305] total_writeback 0 [ 206.269196][ T3305] total_workingset_refault_anon 2138 [ 206.286344][ T3305] total_workingset_refault_file 1394 [ 206.307419][ T3305] total_swap 3829760 [ 206.322986][ T3305] total_swapcached 12595200 [ 206.333525][ T3305] total_pgpgin 103426 [ 206.343762][ T3305] total_pgpgout 101375 [ 206.349076][ T3305] total_pgfault 122217 [ 206.358016][ T3305] total_pgmajfault 343 [ 206.368105][ T3305] total_inactive_anon 4096 [ 206.375652][ T3305] total_active_anon 0 [ 206.384345][ T3305] total_inactive_file 8192 [ 206.393665][ T3305] total_active_file 0 [ 206.411256][ T3305] total_unevictable 8388608 [ 206.425334][ T3305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1305,pid=7644,uid=0 [ 206.474422][ T3305] Memory cgroup out of memory: Killed process 7644 (syz.2.1305) total-vm:100584kB, anon-rss:9428kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 207.254994][ T7717] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 207.328294][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.344006][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.440594][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.476927][ T3400] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.595796][ T7725] loop2: detected capacity change from 0 to 512 [ 207.647289][ T7725] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 207.680712][ T7725] EXT4-fs (loop2): mount failed [ 208.039930][ T7744] loop4: detected capacity change from 0 to 512 [ 208.077399][ T7744] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.096804][ T7744] EXT4-fs (loop4): mount failed [ 208.256242][ T7753] loop2: detected capacity change from 0 to 512 [ 208.279890][ T7753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.295122][ T7753] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.406845][ T7760] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 208.602973][ T7763] loop3: detected capacity change from 0 to 512 [ 208.636419][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.707556][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.981229][ T7773] loop3: detected capacity change from 0 to 512 [ 209.051141][ T7773] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 209.069197][ T7773] EXT4-fs (loop3): mount failed [ 209.243641][ T7777] loop4: detected capacity change from 0 to 512 [ 209.353877][ T7777] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 209.390129][ T7777] EXT4-fs (loop4): mount failed [ 209.407709][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.700832][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 209.709782][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.843443][ T7799] loop1: detected capacity change from 0 to 512 [ 209.875679][ T7799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.900184][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.106550][ T7807] loop1: detected capacity change from 0 to 512 [ 210.152653][ T7810] loop4: detected capacity change from 0 to 512 [ 210.156064][ T7807] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.180174][ T7807] EXT4-fs (loop1): mount failed [ 210.247014][ T7810] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.265646][ T7810] EXT4-fs (loop4): mount failed [ 210.271553][ T7816] loop0: detected capacity change from 0 to 512 [ 210.321255][ T7816] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.340414][ T7816] EXT4-fs (loop0): mount failed [ 210.391722][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 210.399858][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.438270][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.657435][ T7830] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.676018][ T7830] EXT4-fs (loop3): mount failed [ 210.763842][ T7838] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.780707][ T7838] EXT4-fs (loop2): mount failed [ 210.804611][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 210.823301][ T7842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.237042][ T7844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.292195][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.754782][ T7863] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 211.777179][ T7863] EXT4-fs (loop2): mount failed [ 211.879571][ T7868] FAT-fs (loop1): bogus number of reserved sectors [ 211.886190][ T7868] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 211.895535][ T7868] FAT-fs (loop1): Can't find a valid FAT filesystem [ 212.175167][ T7875] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.192930][ T7875] EXT4-fs (loop0): mount failed [ 212.273680][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.283934][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.315306][ T7874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.328068][ T7874] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.413111][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 212.548052][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.561011][ T7888] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.902457][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.995071][ T7899] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 213.210831][ T7902] set_capacity_and_notify: 8 callbacks suppressed [ 213.210848][ T7902] loop3: detected capacity change from 0 to 512 [ 213.365995][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.798041][ T7909] loop1: detected capacity change from 0 to 512 [ 213.842849][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.925421][ T7909] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.968004][ T7909] EXT4-fs (loop1): mount failed [ 214.032842][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1383'. [ 214.096179][ T7913] loop4: detected capacity change from 0 to 512 [ 214.182422][ T7925] loop3: detected capacity change from 0 to 512 [ 214.182423][ T7913] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 214.197533][ T7913] EXT4-fs (loop4): mount failed [ 214.250565][ T7925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.312166][ T7925] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.713470][ T28] audit: type=1400 audit(1778408634.520:217): avc: denied { setopt } for pid=7939 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.745205][ T7935] loop0: detected capacity change from 0 to 512 [ 214.783266][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.930653][ T7935] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 215.025519][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 215.027957][ T7935] EXT4-fs (loop0): mount failed [ 216.250550][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 216.531077][ T7972] loop1: detected capacity change from 0 to 512 [ 216.588517][ T7972] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.621945][ T7969] loop2: detected capacity change from 0 to 512 [ 216.629512][ T7972] EXT4-fs (loop1): mount failed [ 216.727930][ T7969] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.755657][ T7969] EXT4-fs (loop2): mount failed [ 217.357121][ T7984] loop1: detected capacity change from 0 to 128 [ 217.364736][ T7984] FAT-fs (loop1): bogus number of reserved sectors [ 217.371301][ T7984] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 217.380650][ T7984] FAT-fs (loop1): Can't find a valid FAT filesystem [ 217.455382][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.588432][ T7985] loop2: detected capacity change from 0 to 512 [ 217.697889][ T7985] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 217.773102][ T7985] EXT4-fs (loop2): mount failed [ 217.889213][ T7991] loop3: detected capacity change from 0 to 512 [ 217.901922][ T7999] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 218.015636][ T7991] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.032825][ T7996] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.048412][ T7991] EXT4-fs (loop3): mount failed [ 218.059461][ T7996] EXT4-fs (loop1): mount failed [ 218.216692][ T8008] set_capacity_and_notify: 1 callbacks suppressed [ 218.216796][ T8008] loop2: detected capacity change from 0 to 512 [ 218.308802][ T8009] loop4: detected capacity change from 0 to 512 [ 218.383328][ T8009] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.404112][ T8009] EXT4-fs (loop4): mount failed [ 218.435114][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'. [ 218.569713][ T8008] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.659569][ T3078] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.673683][ T8008] EXT4-fs (loop2): mount failed [ 218.728020][ T3078] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.857942][ T8026] fido_id[8026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.921624][ T8023] loop3: detected capacity change from 0 to 512 [ 218.973433][ T8023] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.996249][ T8023] EXT4-fs (loop3): mount failed [ 219.127245][ T28] audit: type=1400 audit(1778408638.940:218): avc: denied { create } for pid=8032 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.152821][ T28] audit: type=1400 audit(1778408638.960:219): avc: denied { connect } for pid=8032 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.175722][ T28] audit: type=1400 audit(1778408638.960:220): avc: denied { write } for pid=8032 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.212080][ T8028] loop1: detected capacity change from 0 to 512 [ 219.238179][ T8028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.289241][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.392207][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1418'. [ 219.515544][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.543745][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.590148][ T8048] loop2: detected capacity change from 0 to 2048 [ 219.625189][ T8048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.653727][ T8048] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.671163][ T8071] loop1: detected capacity change from 0 to 128 [ 219.708702][ T8071] FAT-fs (loop1): bogus number of reserved sectors [ 219.726551][ T3078] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 219.762704][ T3078] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.778133][ T8071] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 219.832060][ T8071] FAT-fs (loop1): Can't find a valid FAT filesystem [ 219.902509][ T8076] loop0: detected capacity change from 0 to 512 [ 219.981690][ T8076] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 220.010352][ T8076] EXT4-fs (loop0): mount failed [ 220.284783][ T8089] loop4: detected capacity change from 0 to 512 [ 220.327942][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.349598][ T8089] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 220.401612][ T8089] EXT4-fs (loop4): mount failed [ 220.546864][ T8096] loop0: detected capacity change from 0 to 512 [ 220.576508][ T8096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.593838][ T8096] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.751001][ T8093] loop2: detected capacity change from 0 to 512 [ 220.776997][ T8093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.844098][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.952383][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 221.015154][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 221.308850][ T8112] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.416879][ T8112] EXT4-fs (loop2): mount failed [ 221.515427][ T8115] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.547944][ T3570] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.560694][ T3570] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.576235][ T8115] EXT4-fs (loop4): mount failed [ 221.973406][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.993773][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.067220][ T8126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.124865][ T8126] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.494159][ T8096] syz.0.1427 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 222.618553][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.0.1427 Not tainted syzkaller #0 PREEMPT(full) [ 222.618587][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.618602][ T8096] Call Trace: [ 222.618610][ T8096] [ 222.618619][ T8096] __dump_stack+0x1d/0x30 [ 222.618650][ T8096] dump_stack_lvl+0x95/0xd0 [ 222.618742][ T8096] dump_stack+0x15/0x1b [ 222.618765][ T8096] dump_header+0x80/0x240 [ 222.618801][ T8096] oom_kill_process+0x295/0x350 [ 222.618832][ T8096] out_of_memory+0x97d/0xb80 [ 222.618874][ T8096] try_charge_memcg+0x62f/0xa10 [ 222.618997][ T8096] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 222.619023][ T8096] __alloc_frozen_pages_noprof+0x18a/0x350 [ 222.619055][ T8096] alloc_pages_mpol+0xb3/0x260 [ 222.619079][ T8096] alloc_pages_noprof+0x8f/0x140 [ 222.619177][ T8096] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 222.619216][ T8096] __kvmalloc_node_noprof+0x3d4/0x640 [ 222.619242][ T8096] ? futex_hash_allocate+0x190/0x9a0 [ 222.619301][ T8096] ? futex_hash_allocate+0x190/0x9a0 [ 222.619366][ T8096] futex_hash_allocate+0x190/0x9a0 [ 222.619520][ T8096] ? cap_task_prctl+0x13f/0x6b0 [ 222.619599][ T8096] futex_hash_prctl+0xd8/0xf0 [ 222.619635][ T8096] __se_sys_prctl+0x4f4/0x1400 [ 222.619664][ T8096] __x64_sys_prctl+0x67/0x80 [ 222.619722][ T8096] x64_sys_call+0x2533/0x3020 [ 222.619746][ T8096] do_syscall_64+0x12c/0x3b0 [ 222.619775][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.619805][ T8096] RIP: 0033:0x7f72451ccdd9 [ 222.619839][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.619862][ T8096] RSP: 002b:00007f7243c1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 222.619888][ T8096] RAX: ffffffffffffffda RBX: 00007f7245445fa0 RCX: 00007f72451ccdd9 [ 222.619918][ T8096] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 222.619935][ T8096] RBP: 00007f7245262d69 R08: 0000000000000000 R09: 0000000000000000 [ 222.619951][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.619967][ T8096] R13: 00007f7245446038 R14: 00007f7245445fa0 R15: 00007ffce0748168 [ 222.619992][ T8096] [ 222.889077][ T8096] memory: usage 307200kB, limit 307200kB, failcnt 3623 [ 222.964487][ T8096] memory+swap: usage 310912kB, limit 9007199254740988kB, failcnt 0 [ 222.984246][ T8096] kmem: usage 298968kB, limit 9007199254740988kB, failcnt 0 [ 223.003394][ T8096] Memory cgroup stats for /syz0: [ 223.004169][ T8096] cache 8192 [ 223.018748][ T8137] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.043355][ T8096] rss 8396800 [ 223.058188][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.067582][ T8096] shmem 0 [ 223.071577][ T8096] mapped_file 0 [ 223.078222][ T8137] EXT4-fs (loop2): mount failed [ 223.087903][ T8096] dirty 0 [ 223.091070][ T8096] writeback 0 [ 223.098183][ T8096] workingset_refault_anon 4810 [ 223.130782][ T8096] workingset_refault_file 1893 [ 223.143861][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 223.167991][ T8096] swap 3809280 [ 223.179150][ T8096] swapcached 38887424 [ 223.196937][ T8096] pgpgin 102952 [ 223.211203][ T8096] pgpgout 100896 [ 223.227002][ T8096] pgfault 121317 [ 223.242276][ T8096] pgmajfault 1176 [ 223.258445][ T8096] inactive_anon 16384 [ 223.275908][ T8096] active_anon 8192 [ 223.303036][ T8096] inactive_file 0 [ 223.314007][ T8096] active_file 8192 [ 223.319540][ T8096] unevictable 8388608 [ 223.328185][ T8096] hierarchical_memory_limit 314572800 [ 223.336681][ T8146] set_capacity_and_notify: 4 callbacks suppressed [ 223.336731][ T8146] loop4: detected capacity change from 0 to 512 [ 223.339842][ T8096] hierarchical_memsw_limit 9223372036854771712 [ 223.370785][ T8146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.378807][ T8096] total_cache 8192 [ 223.403576][ T8096] total_rss 8396800 [ 223.413547][ T8096] total_shmem 0 [ 223.417114][ T8096] total_mapped_file 0 [ 223.421177][ T8096] total_dirty 0 [ 223.424746][ T8096] total_writeback 0 [ 223.434170][ T8096] total_workingset_refault_anon 4810 [ 223.452957][ T8096] total_workingset_refault_file 1893 [ 223.463620][ T8152] loop2: detected capacity change from 0 to 512 [ 223.470180][ T8096] total_swap 3809280 [ 223.485200][ T8096] total_swapcached 38887424 [ 223.489765][ T8096] total_pgpgin 102952 [ 223.493831][ T8096] total_pgpgout 100896 [ 223.497967][ T8096] total_pgfault 121317 [ 223.502055][ T8096] total_pgmajfault 1176 [ 223.506319][ T8096] total_inactive_anon 16384 [ 223.510860][ T8096] total_active_anon 8192 [ 223.515328][ T8096] total_inactive_file 0 [ 223.520135][ T8096] total_active_file 8192 [ 223.524507][ T8096] total_unevictable 8388608 [ 223.528884][ T8152] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.529262][ T8096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1427,pid=8095,uid=0 [ 223.573920][ T8152] EXT4-fs (loop2): mount failed [ 223.594527][ T8096] Memory cgroup out of memory: Killed process 8095 (syz.0.1427) total-vm:100584kB, anon-rss:9424kB, file-rss:26584kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 223.633945][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.929369][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 224.029221][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.096807][ T3400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 224.100715][ T8170] loop1: detected capacity change from 0 to 512 [ 224.130543][ T3400] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.160226][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.192368][ T8172] loop3: detected capacity change from 0 to 512 [ 224.202929][ T8170] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.349991][ T8172] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.385530][ T28] audit: type=1400 audit(1778408644.200:221): avc: denied { bind } for pid=8183 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.416268][ T8172] EXT4-fs (loop3): mount failed [ 224.430076][ T8179] loop2: detected capacity change from 0 to 512 [ 224.513435][ T8190] loop4: detected capacity change from 0 to 512 [ 224.541289][ T8179] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.625179][ T8179] EXT4-fs (loop2): mount failed [ 224.648486][ T8190] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.668961][ T8190] EXT4-fs (loop4): mount failed [ 224.958185][ T8198] loop0: detected capacity change from 0 to 512 [ 224.977131][ T8198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.068226][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.292308][ T8218] loop3: detected capacity change from 0 to 512 [ 225.302493][ T8217] loop2: detected capacity change from 0 to 512 [ 225.315462][ T8218] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.334618][ T8217] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.443964][ T8218] EXT4-fs (loop3): mount failed [ 225.449178][ T8217] EXT4-fs (loop2): mount failed [ 225.711124][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 226.065694][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.179063][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 226.187216][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.288266][ T8248] loop4: detected capacity change from 0 to 512 [ 226.343264][ T3400] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 226.381313][ T3400] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.443142][ T8259] fido_id[8259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.450829][ T8251] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.502499][ T8248] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.535253][ T8267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.542778][ T8251] EXT4-fs (loop1): mount failed [ 226.568393][ T8248] EXT4-fs (loop4): mount failed [ 226.616246][ T8257] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.669357][ T8257] EXT4-fs (loop2): mount failed [ 226.714818][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.818961][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 226.828942][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.070379][ T8279] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 227.103460][ T8279] EXT4-fs (loop0): mount failed [ 227.476442][ T8290] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 227.496582][ T8293] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 227.515336][ T8290] EXT4-fs (loop1): mount failed [ 227.526175][ T8293] EXT4-fs (loop2): mount failed [ 227.845113][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 227.862505][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.905561][ T8305] fido_id[8305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.202878][ T8320] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.235968][ T8320] EXT4-fs (loop4): mount failed [ 228.324872][ T8325] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.349634][ T8330] set_capacity_and_notify: 8 callbacks suppressed [ 228.349904][ T8330] loop3: detected capacity change from 0 to 512 [ 228.389227][ T8325] EXT4-fs (loop1): mount failed [ 228.461241][ T8330] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.480624][ T8330] EXT4-fs (loop3): mount failed [ 228.747374][ T8342] loop0: detected capacity change from 0 to 512 [ 228.809382][ T8342] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.828946][ T8342] EXT4-fs (loop0): mount failed [ 228.999930][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 229.019049][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.339407][ T8355] loop2: detected capacity change from 0 to 512 [ 229.438216][ T8355] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.543582][ T8355] EXT4-fs (loop2): mount failed [ 229.759240][ T8361] loop0: detected capacity change from 0 to 512 [ 229.817677][ T8361] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.843043][ T8361] EXT4-fs (loop0): mount failed [ 229.894137][ T8370] loop4: detected capacity change from 0 to 512 [ 229.971132][ T8370] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.989711][ T8370] EXT4-fs (loop4): mount failed [ 229.992706][ T8375] loop3: detected capacity change from 0 to 512 [ 230.018001][ T8375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.063432][ T8375] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.184002][ T8385] loop1: detected capacity change from 0 to 512 [ 230.278896][ T8385] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 230.298552][ T8385] EXT4-fs (loop1): mount failed [ 230.522588][ T8395] loop2: detected capacity change from 0 to 512 [ 230.578397][ T8395] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 230.609185][ T8395] EXT4-fs (loop2): mount failed [ 231.211255][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 231.212748][ T8416] loop1: detected capacity change from 0 to 512 [ 231.312321][ T8416] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 231.332404][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.372516][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.391238][ T8416] EXT4-fs (loop1): mount failed [ 231.423147][ T8425] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 231.633465][ T8375] syz.3.1496 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 231.657510][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.3.1496 Not tainted syzkaller #0 PREEMPT(full) [ 231.657595][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.657608][ T8375] Call Trace: [ 231.657615][ T8375] [ 231.657694][ T8375] __dump_stack+0x1d/0x30 [ 231.657718][ T8375] dump_stack_lvl+0x95/0xd0 [ 231.657778][ T8375] dump_stack+0x15/0x1b [ 231.657820][ T8375] dump_header+0x80/0x240 [ 231.657849][ T8375] oom_kill_process+0x295/0x350 [ 231.657960][ T8375] out_of_memory+0x97d/0xb80 [ 231.658047][ T8375] try_charge_memcg+0x62f/0xa10 [ 231.658075][ T8375] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 231.658199][ T8375] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 231.658233][ T8375] __alloc_frozen_pages_noprof+0x18a/0x350 [ 231.658281][ T8375] alloc_pages_mpol+0xb3/0x260 [ 231.658313][ T8375] alloc_pages_noprof+0x8f/0x140 [ 231.658352][ T8375] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 231.658393][ T8375] __kvmalloc_node_noprof+0x3d4/0x640 [ 231.658421][ T8375] ? futex_hash_allocate+0x190/0x9a0 [ 231.658523][ T8375] ? futex_hash_allocate+0x190/0x9a0 [ 231.658567][ T8375] futex_hash_allocate+0x190/0x9a0 [ 231.658610][ T8375] ? cap_task_prctl+0x13f/0x6b0 [ 231.658677][ T8375] futex_hash_prctl+0xd8/0xf0 [ 231.658717][ T8375] __se_sys_prctl+0x4f4/0x1400 [ 231.658754][ T8375] __x64_sys_prctl+0x67/0x80 [ 231.658853][ T8375] x64_sys_call+0x2533/0x3020 [ 231.658965][ T8375] do_syscall_64+0x12c/0x3b0 [ 231.659005][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.659035][ T8375] RIP: 0033:0x7f2bd2b7cdd9 [ 231.659109][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.659128][ T8375] RSP: 002b:00007f2bd15cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 231.659153][ T8375] RAX: ffffffffffffffda RBX: 00007f2bd2df5fa0 RCX: 00007f2bd2b7cdd9 [ 231.659172][ T8375] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 231.659189][ T8375] RBP: 00007f2bd2c12d69 R08: 0000000000000000 R09: 0000000000000000 [ 231.659206][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.659234][ T8375] R13: 00007f2bd2df6038 R14: 00007f2bd2df5fa0 R15: 00007ffc731f8148 [ 231.659256][ T8375] [ 231.659388][ T8375] memory: usage 307200kB, limit 307200kB, failcnt 3540 [ 231.711025][ T8412] loop4: detected capacity change from 0 to 2048 [ 231.780801][ T8375] memory+swap: usage 310924kB, limit 9007199254740988kB, failcnt 0 [ 231.914346][ T8375] kmem: usage 298980kB, limit 9007199254740988kB, failcnt 0 [ 231.921842][ T8375] Memory cgroup stats for /syz3: [ 231.922145][ T8375] cache 8192 [ 231.948045][ T8375] rss 8400896 [ 231.951416][ T8375] shmem 0 [ 231.955882][ T8375] mapped_file 0 [ 231.971773][ T8375] dirty 0 [ 231.979620][ T8375] writeback 0 [ 231.984383][ T8375] workingset_refault_anon 6672 [ 231.989781][ T8375] workingset_refault_file 2014 [ 231.994765][ T8375] swap 3813376 [ 231.997212][ T8412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.998250][ T8375] swapcached 50753536 [ 231.998262][ T8375] pgpgin 89891 [ 231.998271][ T8375] pgpgout 87836 [ 231.998290][ T8375] pgfault 110595 [ 231.998300][ T8375] pgmajfault 1285 [ 231.998309][ T8375] inactive_anon 20480 [ 231.998319][ T8375] active_anon 0 [ 231.998328][ T8375] inactive_file 0 [ 231.998391][ T8375] active_file 8192 [ 231.998401][ T8375] unevictable 8388608 [ 231.998471][ T8375] hierarchical_memory_limit 314572800 [ 231.998483][ T8375] hierarchical_memsw_limit 9223372036854771712 [ 231.998496][ T8375] total_cache 8192 [ 231.998504][ T8375] total_rss 8400896 [ 231.998512][ T8375] total_shmem 0 [ 231.998521][ T8375] total_mapped_file 0 [ 231.998530][ T8375] total_dirty 0 [ 231.998540][ T8375] total_writeback 0 [ 231.998549][ T8375] total_workingset_refault_anon 6672 [ 232.036021][ T8412] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.037593][ T8375] total_workingset_refault_file 2014 [ 232.123959][ T8375] total_swap 3813376 [ 232.128617][ T8375] total_swapcached 50753536 [ 232.133699][ T8375] total_pgpgin 89891 [ 232.137644][ T8375] total_pgpgout 87836 [ 232.141718][ T8375] total_pgfault 110595 [ 232.146259][ T8375] total_pgmajfault 1285 [ 232.150462][ T8375] total_inactive_anon 20480 [ 232.155479][ T8375] total_active_anon 0 [ 232.159718][ T8375] total_inactive_file 0 [ 232.164242][ T8375] total_active_file 8192 [ 232.168657][ T8375] total_unevictable 8388608 [ 232.173292][ T8375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1496,pid=8374,uid=0 [ 232.188397][ T8375] Memory cgroup out of memory: Killed process 8374 (syz.3.1496) total-vm:100584kB, anon-rss:9436kB, file-rss:26596kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 232.291662][ T8434] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 232.356324][ T8434] EXT4-fs (loop0): mount failed [ 232.410453][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.584888][ T8450] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 232.705379][ T8329] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 232.722808][ T8329] EXT4-fs (loop4): Remounting filesystem read-only [ 232.753867][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.109607][ T8459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.179656][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.286167][ T3570] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 233.310956][ T3570] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.358925][ T8471] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.381682][ T8488] fido_id[8488]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.432423][ T8471] EXT4-fs (loop3): mount failed [ 233.481693][ T8487] set_capacity_and_notify: 3 callbacks suppressed [ 233.481716][ T8487] loop4: detected capacity change from 0 to 512 [ 233.591875][ T8496] loop2: detected capacity change from 0 to 512 [ 233.620590][ T8487] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.646639][ T8487] EXT4-fs (loop4): mount failed [ 233.693706][ T8496] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.734664][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.742892][ T8496] EXT4-fs (loop2): mount failed [ 233.749546][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.783892][ T8494] loop1: detected capacity change from 0 to 2048 [ 233.808667][ T8494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.827045][ T8494] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.057596][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.067829][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.126046][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.142154][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.206569][ T8504] loop3: detected capacity change from 0 to 2048 [ 234.328279][ T8504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.345273][ T8504] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.416119][ T8517] loop4: detected capacity change from 0 to 512 [ 234.557319][ T8517] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 234.624207][ T8517] EXT4-fs (loop4): mount failed [ 234.738581][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.859626][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 234.972991][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.155189][ T8543] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 235.250433][ T8547] loop3: detected capacity change from 0 to 512 [ 235.297809][ T8547] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 235.341977][ T8547] EXT4-fs (loop3): mount failed [ 235.675543][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 235.761582][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.793037][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.876989][ T8561] loop0: detected capacity change from 0 to 2048 [ 235.975686][ T8561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.023365][ T8582] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 236.024630][ T8561] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.072527][ T8575] loop4: detected capacity change from 0 to 512 [ 236.263885][ T8575] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 236.283238][ T8575] EXT4-fs (loop4): mount failed [ 236.408981][ T8596] loop2: detected capacity change from 0 to 128 [ 236.417013][ T8596] FAT-fs (loop2): bogus number of reserved sectors [ 236.423630][ T8596] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 236.433090][ T8596] FAT-fs (loop2): Can't find a valid FAT filesystem [ 236.840549][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.300657][ T8605] loop4: detected capacity change from 0 to 512 [ 237.314164][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 237.367515][ T8605] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 237.402105][ T8605] EXT4-fs (loop4): mount failed [ 237.585570][ T8619] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 238.038537][ T8622] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.086605][ T8622] EXT4-fs (loop1): mount failed [ 238.129975][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.148407][ T8643] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.251665][ T8639] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.300092][ T8639] EXT4-fs (loop4): mount failed [ 238.310685][ T8640] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.317041][ T8641] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.343670][ T8640] EXT4-fs (loop0): mount failed [ 238.355853][ T8641] EXT4-fs (loop3): mount failed [ 238.782952][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.792920][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.812171][ T8657] set_capacity_and_notify: 5 callbacks suppressed [ 238.812191][ T8657] loop1: detected capacity change from 0 to 2048 [ 238.887080][ T8657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.907139][ T8657] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.962499][ T8642] syz.2.1567 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 238.973669][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.2.1567 Not tainted syzkaller #0 PREEMPT(full) [ 238.973704][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.973718][ T8642] Call Trace: [ 238.973725][ T8642] [ 238.973732][ T8642] __dump_stack+0x1d/0x30 [ 238.973795][ T8642] dump_stack_lvl+0x95/0xd0 [ 238.973841][ T8642] dump_stack+0x15/0x1b [ 238.973862][ T8642] dump_header+0x80/0x240 [ 238.973889][ T8642] oom_kill_process+0x295/0x350 [ 238.973929][ T8642] out_of_memory+0x97d/0xb80 [ 238.974001][ T8642] try_charge_memcg+0x62f/0xa10 [ 238.974028][ T8642] ? radix_tree_lookup+0xfa/0x140 [ 238.974055][ T8642] charge_memcg+0x6d/0x120 [ 238.974165][ T8642] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 238.974265][ T8642] __swap_cache_prepare_and_add+0x69/0x4a0 [ 238.974292][ T8642] ? alloc_pages_mpol+0x217/0x260 [ 238.974324][ T8642] swap_cache_alloc_folio+0xa2/0x120 [ 238.974355][ T8642] swap_cluster_readahead+0x35c/0x3c0 [ 238.974407][ T8642] swapin_readahead+0xde/0x840 [ 238.974438][ T8642] ? _raw_spin_unlock+0x9/0x30 [ 238.974510][ T8642] ? swap_put_entries_cluster+0x46c/0x490 [ 238.974595][ T8642] ? __entry_text_end+0x1d658/0x102179 [ 238.974623][ T8642] ? __rcu_read_unlock+0x4e/0x70 [ 238.974645][ T8642] ? swap_cache_get_folio+0x1e0/0x1f0 [ 238.974674][ T8642] do_swap_page+0x31e/0x2180 [ 238.974710][ T8642] ? css_rstat_updated+0xbb/0x280 [ 238.974743][ T8642] ? __rcu_read_lock+0x36/0x50 [ 238.974769][ T8642] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 238.974798][ T8642] handle_mm_fault+0xb2e/0x2e70 [ 238.974833][ T8642] ? vma_start_read+0x1c7/0x2c0 [ 238.974940][ T8642] do_user_addr_fault+0x62f/0x1050 [ 238.974981][ T8642] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 238.975089][ T8642] ? trace_page_fault_user+0x1f/0xa0 [ 238.975203][ T8642] exc_page_fault+0x62/0xa0 [ 238.975260][ T8642] asm_exc_page_fault+0x26/0x30 [ 238.975283][ T8642] RIP: 0033:0x7fae085ba0c0 [ 238.975341][ T8642] Code: c1 ea 12 48 8d 1c 16 48 8d b4 24 00 01 00 00 4c 8d 74 1d 00 48 89 d8 49 89 f7 eb 50 66 0f 1f 44 00 00 4c 89 e6 bf 01 00 00 00 ab ba 12 00 85 c0 0f 85 cb 09 00 00 48 b8 db 34 b6 d7 82 de 1b [ 238.975365][ T8642] RSP: 002b:00007ffe28b68670 EFLAGS: 00010246 [ 238.975384][ T8642] RAX: 0000000000000000 RBX: 000000000003a4a2 RCX: ffffffffffffffe8 [ 238.975401][ T8642] RDX: 0000000000000000 RSI: 00007ffe28b68790 RDI: 0000000000000001 [ 238.975490][ T8642] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 238.975508][ T8642] R10: 00007ffe28b68770 R11: 0000000000000246 R12: 00007ffe28b68790 [ 238.975526][ T8642] R13: 00007fae0896618c R14: 000000000003a4d4 R15: 00007ffe28b68770 [ 238.975551][ T8642] [ 238.975573][ T8642] memory: usage 307200kB, limit 307200kB, failcnt 4232 [ 239.044004][ T8666] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 239.048800][ T8642] memory+swap: usage 318264kB, limit 9007199254740988kB, failcnt 0 [ 239.100542][ T8666] EXT4-fs (loop1): Remounting filesystem read-only [ 239.264813][ T8642] kmem: usage 306328kB, limit 9007199254740988kB, failcnt 0 [ 239.304087][ T8642] Memory cgroup stats for /syz2: [ 239.304431][ T8642] cache 8192 [ 239.312785][ T8642] rss 884736 [ 239.316256][ T8642] shmem 0 [ 239.319231][ T8642] mapped_file 0 [ 239.322743][ T8642] dirty 0 [ 239.326116][ T8642] writeback 0 [ 239.329488][ T8642] workingset_refault_anon 6931 [ 239.349874][ T8642] workingset_refault_file 2609 [ 239.381462][ T8642] swap 11329536 [ 239.437458][ T8642] swapcached 50454528 [ 239.470418][ T8642] pgpgin 139031 [ 239.484982][ T8642] pgpgout 138813 [ 239.496874][ T8642] pgfault 160663 [ 239.536436][ T8642] pgmajfault 1375 [ 239.543904][ T8683] loop3: detected capacity change from 0 to 128 [ 239.599465][ T8642] inactive_anon 0 [ 239.615275][ T8683] FAT-fs (loop3): bogus number of reserved sectors [ 239.621997][ T8683] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 239.631384][ T8683] FAT-fs (loop3): Can't find a valid FAT filesystem [ 239.744459][ T8642] active_anon 0 [ 239.819114][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.860107][ T8642] inactive_file 4096 [ 239.931177][ T8642] active_file 4096 [ 239.966384][ T8642] unevictable 884736 [ 240.012449][ T8642] hierarchical_memory_limit 314572800 [ 240.091021][ T8642] hierarchical_memsw_limit 9223372036854771712 [ 240.334238][ T8642] total_cache 8192 [ 240.353552][ T8642] total_rss 884736 [ 240.367308][ T8642] total_shmem 0 [ 240.383921][ T8642] total_mapped_file 0 [ 240.411122][ T8642] total_dirty 0 [ 240.429178][ T8642] total_writeback 0 [ 240.480503][ T8642] total_workingset_refault_anon 6931 [ 240.537242][ T8642] total_workingset_refault_file 2609 [ 240.580456][ T8642] total_swap 11329536 [ 240.614780][ T8642] total_swapcached 50454528 [ 240.650467][ T8642] total_pgpgin 139031 [ 240.678295][ T8642] total_pgpgout 138813 [ 240.715898][ T8642] total_pgfault 160663 [ 240.741550][ T8642] total_pgmajfault 1375 [ 240.783814][ T8642] total_inactive_anon 0 [ 240.808345][ T8642] total_active_anon 0 [ 240.844793][ T8642] total_inactive_file 4096 [ 240.851823][ T8696] loop4: detected capacity change from 0 to 512 [ 240.879126][ T8642] total_active_file 4096 [ 240.943950][ T8642] total_unevictable 884736 [ 240.984760][ T8642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1567,pid=8642,uid=0 [ 241.008108][ T8696] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 241.060161][ T8696] EXT4-fs (loop4): mount failed [ 241.101100][ T8642] Memory cgroup out of memory: Killed process 8642 (syz.2.1567) total-vm:96348kB, anon-rss:2100kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 241.150120][ T8705] loop0: detected capacity change from 0 to 512 [ 241.290373][ T8705] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 241.328210][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.334963][ T8705] EXT4-fs (loop0): mount failed [ 241.361168][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 241.569759][ T8729] loop2: detected capacity change from 0 to 512 [ 241.648757][ T8729] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 241.666911][ T8729] EXT4-fs (loop2): mount failed [ 241.679009][ T3570] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 241.706500][ T8743] loop0: detected capacity change from 0 to 512 [ 241.707348][ T3570] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.777762][ T8744] fido_id[8744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.796863][ T8743] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 241.839658][ T8742] loop1: detected capacity change from 0 to 512 [ 241.903660][ T8743] EXT4-fs (loop0): mount failed [ 242.009279][ T8742] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.031563][ T8742] EXT4-fs (loop1): mount failed [ 242.217585][ T8756] loop3: detected capacity change from 0 to 512 [ 242.386623][ T8756] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.423877][ T8756] EXT4-fs (loop3): mount failed [ 242.664972][ T8774] loop0: detected capacity change from 0 to 512 [ 242.739267][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'. [ 242.755207][ T8774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.782442][ T8774] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.054913][ T8784] loop4: detected capacity change from 0 to 512 [ 243.159184][ T8793] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 243.258914][ T8793] EXT4-fs (loop2): mount failed [ 243.269775][ T8784] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 243.306457][ T8784] EXT4-fs (loop4): mount failed [ 243.552199][ T8803] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 243.603290][ T8803] EXT4-fs (loop2): mount failed [ 243.852843][ T8810] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 243.901159][ T8786] syz.0.1597 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 243.912378][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.0.1597 Not tainted syzkaller #0 PREEMPT(full) [ 243.912412][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.912491][ T8786] Call Trace: [ 243.912500][ T8786] [ 243.912510][ T8786] __dump_stack+0x1d/0x30 [ 243.912580][ T8786] dump_stack_lvl+0x95/0xd0 [ 243.912609][ T8786] dump_stack+0x15/0x1b [ 243.912633][ T8786] dump_header+0x80/0x240 [ 243.912655][ T8786] oom_kill_process+0x295/0x350 [ 243.912752][ T8786] out_of_memory+0x97d/0xb80 [ 243.912784][ T8786] try_charge_memcg+0x62f/0xa10 [ 243.912932][ T8786] ? __rcu_read_unlock+0x33/0x70 [ 243.912966][ T8786] charge_memcg+0x6d/0x120 [ 243.912993][ T8786] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 243.913113][ T8786] __swap_cache_prepare_and_add+0x69/0x4a0 [ 243.913149][ T8786] ? alloc_pages_mpol+0x217/0x260 [ 243.913176][ T8786] ? xas_load+0x413/0x430 [ 243.913202][ T8786] swap_cache_alloc_folio+0xa2/0x120 [ 243.913266][ T8786] swap_cluster_readahead+0x25f/0x3c0 [ 243.913307][ T8786] swapin_readahead+0xde/0x840 [ 243.913386][ T8786] ? _raw_spin_unlock+0x9/0x30 [ 243.913430][ T8786] ? __rcu_read_unlock+0x4e/0x70 [ 243.913456][ T8786] ? swap_cache_get_folio+0x1e0/0x1f0 [ 243.913566][ T8786] do_swap_page+0x31e/0x2180 [ 243.913597][ T8786] ? css_rstat_updated+0xbb/0x280 [ 243.913626][ T8786] ? kcsan_setup_watchpoint+0x404/0x410 [ 243.913683][ T8786] ? __rcu_read_lock+0x36/0x50 [ 243.913711][ T8786] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 243.913738][ T8786] handle_mm_fault+0xb2e/0x2e70 [ 243.913779][ T8786] ? _raw_spin_lock+0x52/0xa0 [ 243.913826][ T8786] __get_user_pages+0x1290/0x1f10 [ 243.913874][ T8786] __mm_populate+0x242/0x390 [ 243.913943][ T8786] do_mlock+0x47c/0x520 [ 243.913983][ T8786] __x64_sys_mlock+0x36/0x50 [ 243.914022][ T8786] x64_sys_call+0x1ab3/0x3020 [ 243.914154][ T8786] do_syscall_64+0x12c/0x3b0 [ 243.914236][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.914259][ T8786] RIP: 0033:0x7f72451ccdd9 [ 243.914274][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.914295][ T8786] RSP: 002b:00007f7243bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 243.914351][ T8786] RAX: ffffffffffffffda RBX: 00007f7245446090 RCX: 00007f72451ccdd9 [ 243.914368][ T8786] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 243.914382][ T8786] RBP: 00007f7245262d69 R08: 0000000000000000 R09: 0000000000000000 [ 243.914395][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.914418][ T8786] R13: 00007f7245446128 R14: 00007f7245446090 R15: 00007ffce0748168 [ 243.914438][ T8786] [ 243.917865][ T8810] EXT4-fs (loop4): mount failed [ 244.134995][ T8786] memory: usage 294220kB, limit 307200kB, failcnt 4505 [ 244.271114][ T8786] memory+swap: usage 279544kB, limit 9007199254740988kB, failcnt 0 [ 244.303584][ T8786] kmem: usage 240944kB, limit 9007199254740988kB, failcnt 0 [ 244.326508][ T8786] Memory cgroup stats for /syz0: [ 244.326715][ T8786] cache 8192 [ 244.377885][ T8786] rss 4898816 [ 244.381278][ T8786] shmem 0 [ 244.384498][ T8786] mapped_file 0 [ 244.388033][ T8786] dirty 0 [ 244.391017][ T8786] writeback 0 [ 244.394661][ T8786] workingset_refault_anon 6174 [ 244.399549][ T8786] workingset_refault_file 2174 [ 244.404580][ T8786] swap 7315456 [ 244.408073][ T8786] swapcached 51703808 [ 244.412130][ T8786] pgpgin 121045 [ 244.415896][ T8786] pgpgout 119847 [ 244.419536][ T8786] pgfault 141714 [ 244.423145][ T8786] pgmajfault 1526 [ 244.427115][ T8786] inactive_anon 0 [ 244.430941][ T8786] active_anon 0 [ 244.434632][ T8786] inactive_file 8192 [ 244.438594][ T8786] active_file 0 [ 244.442227][ T8786] unevictable 4898816 [ 244.446599][ T8786] hierarchical_memory_limit 314572800 [ 244.452037][ T8786] hierarchical_memsw_limit 9223372036854771712 [ 244.458669][ T8786] total_cache 8192 [ 244.462550][ T8786] total_rss 4898816 [ 244.506272][ T8786] total_shmem 0 [ 244.517345][ T8786] total_mapped_file 0 [ 244.530621][ T8786] total_dirty 0 [ 244.540718][ T8786] total_writeback 0 [ 244.552298][ T8786] total_workingset_refault_anon 6174 [ 244.596812][ T8786] total_workingset_refault_file 2174 [ 244.628625][ T8786] total_swap 7315456 [ 244.651732][ T8786] total_swapcached 51703808 [ 244.666932][ T8824] set_capacity_and_notify: 3 callbacks suppressed [ 244.667031][ T8824] loop4: detected capacity change from 0 to 512 [ 244.683912][ T8821] loop1: detected capacity change from 0 to 512 [ 244.690646][ T8786] total_pgpgin 121045 [ 244.698521][ T8786] total_pgpgout 119847 [ 244.707693][ T8786] total_pgfault 141714 [ 244.712131][ T8786] total_pgmajfault 1526 [ 244.719659][ T8786] total_inactive_anon 0 [ 244.726809][ T8786] total_active_anon 0 [ 244.731729][ T8786] total_inactive_file 8192 [ 244.738237][ T8786] total_active_file 0 [ 244.755339][ T8786] total_unevictable 4898816 [ 244.797171][ T8786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1597,pid=8773,uid=0 [ 244.823302][ T8821] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 244.852951][ T8824] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 244.879479][ T8786] Memory cgroup out of memory: Killed process 8773 (syz.0.1597) total-vm:96348kB, anon-rss:6016kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 244.910044][ T8821] EXT4-fs (loop1): mount failed [ 244.922588][ T8824] EXT4-fs (loop4): mount failed [ 245.007117][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 245.190198][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.546445][ T8858] loop4: detected capacity change from 0 to 512 [ 246.670265][ T8861] loop3: detected capacity change from 0 to 512 [ 246.942507][ T8861] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 246.942918][ T8858] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 246.980481][ T8858] EXT4-fs (loop4): mount failed [ 247.009483][ T8863] loop0: detected capacity change from 0 to 512 [ 247.148252][ T8863] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 247.176865][ T8875] loop1: detected capacity change from 0 to 512 [ 247.185961][ T8861] EXT4-fs (loop3): mount failed [ 247.248716][ T8863] EXT4-fs (loop0): mount failed [ 247.329838][ T8875] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 247.348003][ T8875] EXT4-fs (loop1): mount failed [ 247.505969][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1624'. [ 247.606473][ T8899] loop0: detected capacity change from 0 to 512 [ 247.626203][ T8899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.639282][ T8899] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.675009][ T8900] loop3: detected capacity change from 0 to 512 [ 247.715319][ T8900] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 247.750739][ T8900] EXT4-fs (loop3): mount failed [ 247.808194][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.823750][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.840930][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.865689][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.876798][ T8889] loop2: detected capacity change from 0 to 2048 [ 247.895049][ T8889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.923317][ T8886] loop4: detected capacity change from 0 to 2048 [ 247.929906][ T8889] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.955875][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.997636][ T8886] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.559877][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.695842][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.730714][ T8932] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 250.027576][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1637'. [ 250.093668][ T8898] syz.0.1628 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 250.105861][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(full) [ 250.105894][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.105911][ T8898] Call Trace: [ 250.105920][ T8898] [ 250.105930][ T8898] __dump_stack+0x1d/0x30 [ 250.105972][ T8898] dump_stack_lvl+0x95/0xd0 [ 250.105998][ T8898] dump_stack+0x15/0x1b [ 250.106021][ T8898] dump_header+0x80/0x240 [ 250.106102][ T8898] oom_kill_process+0x295/0x350 [ 250.106138][ T8898] out_of_memory+0x97d/0xb80 [ 250.106168][ T8898] try_charge_memcg+0x62f/0xa10 [ 250.106201][ T8898] ? radix_tree_lookup+0xfa/0x140 [ 250.106289][ T8898] charge_memcg+0x6d/0x120 [ 250.106319][ T8898] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 250.106357][ T8898] __swap_cache_prepare_and_add+0x69/0x4a0 [ 250.106397][ T8898] ? alloc_pages_mpol+0x217/0x260 [ 250.106561][ T8898] swap_cache_alloc_folio+0xa2/0x120 [ 250.106594][ T8898] swap_cluster_readahead+0x25f/0x3c0 [ 250.106624][ T8898] swapin_readahead+0xde/0x840 [ 250.106647][ T8898] ? _raw_spin_unlock+0x9/0x30 [ 250.106757][ T8898] ? swap_put_entries_cluster+0x46c/0x490 [ 250.106864][ T8898] ? __rcu_read_unlock+0x4e/0x70 [ 250.106892][ T8898] ? swap_cache_get_folio+0x1e0/0x1f0 [ 250.106991][ T8898] do_swap_page+0x31e/0x2180 [ 250.107024][ T8898] ? css_rstat_updated+0xbb/0x280 [ 250.107104][ T8898] ? __rcu_read_lock+0x36/0x50 [ 250.107123][ T8898] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 250.107152][ T8898] handle_mm_fault+0xb2e/0x2e70 [ 250.107275][ T8898] ? vma_start_read+0x1c7/0x2c0 [ 250.107317][ T8898] do_user_addr_fault+0x62f/0x1050 [ 250.107350][ T8898] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 250.107417][ T8898] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 250.107449][ T8898] ? trace_page_fault_user+0x1f/0xa0 [ 250.107485][ T8898] exc_page_fault+0x62/0xa0 [ 250.107578][ T8898] asm_exc_page_fault+0x26/0x30 [ 250.107604][ T8898] RIP: 0033:0x7f7245084160 [ 250.107625][ T8898] Code: e8 d5 d0 ff ff 48 8b 05 66 df 3b 00 48 89 18 48 8b 05 54 df 3b 00 c7 00 00 00 01 00 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 <80> 3d 42 3c 3c 00 00 48 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 [ 250.107648][ T8898] RSP: 002b:00007ffce07482b8 EFLAGS: 00010246 [ 250.107669][ T8898] RAX: 0000000000000000 RBX: 00007f7245445f40 RCX: 00007f72451ccdd9 [ 250.107717][ T8898] RDX: 0000000000000000 RSI: 000000000000001e RDI: 00007f7245445f40 [ 250.107807][ T8898] RBP: 00007f7245447da0 R08: 0000000000000006 R09: 0000000000000000 [ 250.107825][ T8898] R10: 00007f7245447cb0 R11: 0000000000000246 R12: 000000000003ca5c [ 250.107842][ T8898] R13: 00007f724544609c R14: 000000000003ca24 R15: 00007f7245446090 [ 250.107872][ T8898] [ 250.107898][ T8898] memory: usage 307200kB, limit 307200kB, failcnt 5471 [ 250.380499][ T8898] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 250.389000][ T8898] kmem: usage 298976kB, limit 9007199254740988kB, failcnt 0 [ 250.397048][ T8898] Memory cgroup stats for /syz0: [ 250.397255][ T8898] cache 8192 [ 250.407601][ T8952] loop1: detected capacity change from 0 to 512 [ 250.416341][ T8898] rss 8388608 [ 250.422589][ T8898] shmem 0 [ 250.432462][ T8898] mapped_file 0 [ 250.437393][ T8952] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 250.452127][ T8898] dirty 0 [ 250.455255][ T8898] writeback 0 [ 250.459193][ T8898] workingset_refault_anon 6467 [ 250.464147][ T8898] workingset_refault_file 4240 [ 250.469050][ T8898] swap 442368 [ 250.472577][ T8952] EXT4-fs (loop1): mount failed [ 250.477833][ T8898] swapcached 53293056 [ 250.481950][ T8898] pgpgin 128748 [ 250.486093][ T8898] pgpgout 126694 [ 250.490226][ T8898] pgfault 147703 [ 250.494199][ T8898] pgmajfault 1714 [ 250.497938][ T8898] inactive_anon 4096 [ 250.501954][ T8898] active_anon 12288 [ 250.506272][ T8898] inactive_file 0 [ 250.510008][ T8898] active_file 8192 [ 250.514081][ T8898] unevictable 8388608 [ 250.518157][ T8898] hierarchical_memory_limit 314572800 [ 250.524175][ T8898] hierarchical_memsw_limit 9223372036854771712 [ 250.530476][ T8898] total_cache 8192 [ 250.534499][ T8898] total_rss 8388608 [ 250.538369][ T8898] total_shmem 0 [ 250.541919][ T8898] total_mapped_file 0 [ 250.546297][ T8898] total_dirty 0 [ 250.549815][ T8898] total_writeback 0 [ 250.554127][ T8898] total_workingset_refault_anon 6467 [ 250.559590][ T8898] total_workingset_refault_file 4240 [ 250.565230][ T8898] total_swap 442368 [ 250.569087][ T8898] total_swapcached 53293056 [ 250.573859][ T8898] total_pgpgin 128748 [ 250.577971][ T8898] total_pgpgout 126694 [ 250.582242][ T8898] total_pgfault 147703 [ 250.586668][ T8898] total_pgmajfault 1714 [ 250.590888][ T8898] total_inactive_anon 4096 [ 250.595389][ T8898] total_active_anon 12288 [ 250.599735][ T8898] total_inactive_file 0 [ 250.603940][ T8898] total_active_file 8192 [ 250.608255][ T8898] total_unevictable 8388608 [ 250.612781][ T8898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1628,pid=8898,uid=0 [ 250.627607][ T8898] Memory cgroup out of memory: Killed process 8898 (syz.0.1628) total-vm:96348kB, anon-rss:9424kB, file-rss:22520kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 250.740362][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.895616][ T8972] loop4: detected capacity change from 0 to 512 [ 251.081322][ T8969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.093218][ T8969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.105056][ T8972] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 251.126999][ T8972] EXT4-fs (loop4): mount failed [ 252.119167][ T8969] loop0: detected capacity change from 0 to 2048 [ 252.282240][ T8969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.312640][ T8969] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.508505][ T3078] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 252.524165][ T3078] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.764671][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 253.030130][ T8996] fido_id[8996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.058125][ T9000] loop3: detected capacity change from 0 to 512 [ 253.074094][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.128143][ T9000] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.160589][ T9000] EXT4-fs (loop3): mount failed [ 253.175512][ T9001] loop4: detected capacity change from 0 to 512 [ 253.270006][ T9001] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.288776][ T9001] EXT4-fs (loop4): mount failed [ 253.400293][ T9025] loop0: detected capacity change from 0 to 512 [ 253.426973][ T9025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.443634][ T9025] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.613906][ T9030] loop3: detected capacity change from 0 to 512 [ 254.703660][ T9036] loop4: detected capacity change from 0 to 512 [ 254.734309][ T9030] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.815598][ T9030] EXT4-fs (loop3): mount failed [ 254.880047][ T9036] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.921985][ T9036] EXT4-fs (loop4): mount failed [ 255.062912][ T9056] loop2: detected capacity change from 0 to 512 [ 255.064562][ T9055] loop1: detected capacity change from 0 to 512 [ 255.088574][ T9056] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.173145][ T9056] EXT4-fs (loop2): mount failed [ 255.208856][ T9055] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.253711][ T9055] EXT4-fs (loop1): mount failed [ 255.280172][ T9067] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.305530][ T9067] EXT4-fs (loop4): mount failed [ 255.338097][ T9058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.439345][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.745029][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'. [ 255.889270][ T9087] set_capacity_and_notify: 2 callbacks suppressed [ 255.889288][ T9087] loop1: detected capacity change from 0 to 512 [ 255.926938][ T9087] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.966745][ T9087] EXT4-fs (loop1): mount failed [ 256.176561][ T9093] loop4: detected capacity change from 0 to 512 [ 256.293744][ T9093] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 256.311810][ T9093] EXT4-fs (loop4): mount failed [ 256.463625][ T9024] ================================================================== [ 256.471789][ T9024] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 256.481672][ T9024] [ 256.484018][ T9024] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 256.492096][ T9024] tick_do_update_jiffies64+0x113/0x1c0 [ 256.497678][ T9024] tick_nohz_handler+0x8d/0x3d0 [ 256.502557][ T9024] __hrtimer_run_queues+0x276/0x4f0 [ 256.507783][ T9024] hrtimer_interrupt+0x261/0x850 [ 256.512744][ T9024] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 256.518663][ T9024] sysvec_apic_timer_interrupt+0x6f/0x80 [ 256.524319][ T9024] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.530322][ T9024] _raw_spin_unlock_irq+0x12/0x30 [ 256.535384][ T9024] evict_folios+0x2795/0x3370 [ 256.540098][ T9024] try_to_shrink_lruvec+0x858/0xc20 [ 256.545330][ T9024] shrink_lruvec+0x256/0x1bc0 [ 256.550030][ T9024] shrink_node+0x697/0x20a0 [ 256.554565][ T9024] do_try_to_free_pages+0x408/0xc90 [ 256.559789][ T9024] try_to_free_mem_cgroup_pages+0x201/0x420 [ 256.565705][ T9024] try_charge_memcg+0x373/0xa10 [ 256.570668][ T9024] charge_memcg+0x6d/0x120 [ 256.575109][ T9024] __mem_cgroup_charge+0x28/0xb0 [ 256.580069][ T9024] filemap_add_folio+0x110/0x350 [ 256.585037][ T9024] page_cache_ra_unbounded+0x20e/0x420 [ 256.590526][ T9024] page_cache_ra_order+0x153/0x220 [ 256.595667][ T9024] do_sync_mmap_readahead+0x33d/0x350 [ 256.601081][ T9024] filemap_fault+0x369/0xb70 [ 256.605703][ T9024] handle_mm_fault+0x16cb/0x2e70 [ 256.610668][ T9024] do_user_addr_fault+0x62f/0x1050 [ 256.615807][ T9024] exc_page_fault+0x62/0xa0 [ 256.620332][ T9024] asm_exc_page_fault+0x26/0x30 [ 256.625205][ T9024] [ 256.627543][ T9024] read to 0xffffffff86c07a00 of 8 bytes by task 9024 on cpu 0: [ 256.635103][ T9024] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 256.641395][ T9024] count_shadow_nodes+0x6a/0x250 [ 256.646382][ T9024] do_shrink_slab+0x63/0x660 [ 256.651011][ T9024] shrink_slab+0x545/0x8f0 [ 256.655460][ T9024] shrink_node+0x6d4/0x20a0 [ 256.659996][ T9024] do_try_to_free_pages+0x408/0xc90 [ 256.665219][ T9024] try_to_free_mem_cgroup_pages+0x201/0x420 [ 256.671145][ T9024] try_charge_memcg+0x373/0xa10 [ 256.676028][ T9024] charge_memcg+0x6d/0x120 [ 256.680465][ T9024] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 256.686475][ T9024] __swap_cache_prepare_and_add+0x69/0x4a0 [ 256.692308][ T9024] swap_cache_alloc_folio+0xa2/0x120 [ 256.697629][ T9024] swap_cluster_readahead+0x25f/0x3c0 [ 256.703040][ T9024] swapin_readahead+0xde/0x840 [ 256.707844][ T9024] do_swap_page+0x31e/0x2180 [ 256.712469][ T9024] handle_mm_fault+0xb2e/0x2e70 [ 256.717349][ T9024] do_user_addr_fault+0x62f/0x1050 [ 256.722503][ T9024] exc_page_fault+0x62/0xa0 [ 256.727035][ T9024] asm_exc_page_fault+0x26/0x30 [ 256.731908][ T9024] [ 256.734247][ T9024] value changed: 0x00000000ffffeec3 -> 0x00000000ffffeec4 [ 256.741369][ T9024] [ 256.743704][ T9024] Reported by Kernel Concurrency Sanitizer on: [ 256.749867][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.0.1656 Not tainted syzkaller #0 PREEMPT(full) [ 256.759174][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.769251][ T9024] ================================================================== [ 256.799924][ T9025] syz.0.1656 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 256.815969][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.0.1656 Not tainted syzkaller #0 PREEMPT(full) [ 256.816003][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.816019][ T9025] Call Trace: [ 256.816031][ T9025] [ 256.816083][ T9025] __dump_stack+0x1d/0x30 [ 256.816119][ T9025] dump_stack_lvl+0x95/0xd0 [ 256.816143][ T9025] dump_stack+0x15/0x1b [ 256.816165][ T9025] dump_header+0x80/0x240 [ 256.816190][ T9025] oom_kill_process+0x295/0x350 [ 256.816338][ T9025] out_of_memory+0x97d/0xb80 [ 256.816374][ T9025] try_charge_memcg+0x62f/0xa10 [ 256.816416][ T9025] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 256.816514][ T9025] __alloc_frozen_pages_noprof+0x18a/0x350 [ 256.816544][ T9025] alloc_pages_mpol+0xb3/0x260 [ 256.816574][ T9025] alloc_pages_noprof+0x8f/0x140 [ 256.816616][ T9025] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 256.816661][ T9025] __kvmalloc_node_noprof+0x3d4/0x640 [ 256.816688][ T9025] ? futex_hash_allocate+0x190/0x9a0 [ 256.816774][ T9025] ? futex_hash_allocate+0x190/0x9a0 [ 256.816819][ T9025] futex_hash_allocate+0x190/0x9a0 [ 256.816944][ T9025] ? cap_task_prctl+0x13f/0x6b0 [ 256.817014][ T9025] futex_hash_prctl+0xd8/0xf0 [ 256.817051][ T9025] __se_sys_prctl+0x4f4/0x1400 [ 256.817088][ T9025] __x64_sys_prctl+0x67/0x80 [ 256.817120][ T9025] x64_sys_call+0x2533/0x3020 [ 256.817200][ T9025] do_syscall_64+0x12c/0x3b0 [ 256.817231][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.817328][ T9025] RIP: 0033:0x7f72451ccdd9 [ 256.817345][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.817364][ T9025] RSP: 002b:00007f7243c1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 256.817452][ T9025] RAX: ffffffffffffffda RBX: 00007f7245445fa0 RCX: 00007f72451ccdd9 [ 256.817466][ T9025] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 256.817496][ T9025] RBP: 00007f7245262d69 R08: 0000000000000000 R09: 0000000000000000 [ 256.817513][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.817529][ T9025] R13: 00007f7245446038 R14: 00007f7245445fa0 R15: 00007ffce0748168 [ 256.817555][ T9025] [ 256.817640][ T9025] memory: usage 307200kB, limit 307200kB, failcnt 8126 [ 257.051176][ T9025] memory+swap: usage 310944kB, limit 9007199254740988kB, failcnt 0 [ 257.061479][ T9025] kmem: usage 299000kB, limit 9007199254740988kB, failcnt 0 [ 257.069845][ T9025] Memory cgroup stats for /syz0: [ 257.070074][ T9025] cache 8192 [ 257.078485][ T9025] rss 8388608 [ 257.081913][ T9025] shmem 0 [ 257.084955][ T9025] mapped_file 0 [ 257.088454][ T9025] dirty 0 [ 257.091425][ T9025] writeback 0 [ 257.094774][ T9025] workingset_refault_anon 8684 [ 257.099608][ T9025] workingset_refault_file 5154 [ 257.104457][ T9025] swap 3833856 [ 257.107882][ T9025] swapcached 66134016 [ 257.111894][ T9025] pgpgin 135331 [ 257.115416][ T9025] pgpgout 133281 [ 257.118975][ T9025] pgfault 153564 [ 257.122541][ T9025] pgmajfault 2104 [ 257.126219][ T9025] inactive_anon 0 [ 257.129955][ T9025] active_anon 0 [ 257.133418][ T9025] inactive_file 8192 [ 257.137429][ T9025] active_file 0 [ 257.140907][ T9025] unevictable 8388608 [ 257.144967][ T9025] hierarchical_memory_limit 314572800 [ 257.150370][ T9025] hierarchical_memsw_limit 9223372036854771712 [ 257.156565][ T9025] total_cache 8192 [ 257.160346][ T9025] total_rss 8388608 [ 257.164188][ T9025] total_shmem 0 [ 257.167665][ T9025] total_mapped_file 0 [ 257.171645][ T9025] total_dirty 0 [ 257.175165][ T9025] total_writeback 0 [ 257.178985][ T9025] total_workingset_refault_anon 8684 [ 257.184308][ T9025] total_workingset_refault_file 5154 [ 257.189629][ T9025] total_swap 3833856 [ 257.193559][ T9025] total_swapcached 66134016 [ 257.198085][ T9025] total_pgpgin 135331 [ 257.202066][ T9025] total_pgpgout 133281 [ 257.206181][ T9025] total_pgfault 153564 [ 257.210356][ T9025] total_pgmajfault 2104 [ 257.214561][ T9025] total_inactive_anon 0 [ 257.218735][ T9025] total_active_anon 0 [ 257.222712][ T9025] total_inactive_file 8192 [ 257.227217][ T9025] total_active_file 0 [ 257.231215][ T9025] total_unevictable 8388608 [ 257.235761][ T9025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1656,pid=9024,uid=0 [ 257.250536][ T9025] Memory cgroup out of memory: Killed process 9024 (syz.0.1656) total-vm:100584kB, anon-rss:9424kB, file-rss:26624kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 257.328315][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.