last executing test programs: 3.283739978s ago: executing program 1 (id=1173): gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1a2) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 3.155772623s ago: executing program 1 (id=1176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r4 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x15, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x4, 0x1, 0x6, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000001180)=[{0x0, 0x2, 0xf, 0x6}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x790}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 3.151895053s ago: executing program 2 (id=1177): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x33503, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {0xa}, {0x0, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xcf}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, 0x0) sendmsg$can_bcm(r11, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20010814) 2.785206549s ago: executing program 2 (id=1183): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000005000000000500"}}}]}, 0x48}}, 0x0) 2.712973922s ago: executing program 2 (id=1186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r4 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x15, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x4, 0x1, 0x6, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000001180)=[{0x0, 0x2, 0xf, 0x6}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x790}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 2.559544069s ago: executing program 1 (id=1188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/22], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 2.527878911s ago: executing program 0 (id=1189): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/119, 0x77, 0x0, &(0x7f0000000c80)=""/66, 0x42}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$rds(0x15, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 2.279433281s ago: executing program 0 (id=1190): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="2f45aa0c26f511f8ae8f07000000000000009ec32c32eded4880a59062c197142abcfb3e685c6ec928162cbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000080)='./file0\x00') openat(r4, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) fcntl$dupfd(r5, 0x406, r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x11, 0x2, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a42, 0x0) dup(r6) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.914021317s ago: executing program 3 (id=1193): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000c40)=0x4) 1.887774738s ago: executing program 2 (id=1194): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="2f45aa0c26f511f8ae8f07000000000000009ec32c32eded4880a59062c197142abcfb3e685c6ec928162cbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000080)='./file0\x00') openat(r5, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) fcntl$dupfd(r6, 0x406, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x11, 0x2, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a42, 0x0) dup(r7) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.886781798s ago: executing program 3 (id=1195): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.862907929s ago: executing program 1 (id=1196): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061120100000000009500000035da9b74"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d800500010002000000050004000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r6}, 0x18) brk(0x20ffc004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.548077472s ago: executing program 4 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@random="776ddb0de373", @random="81a24e18783a", @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@generic={0x892f, "ce200c5abcfe799bb57af1308afb000000"}}}}, 0x23) 1.506108244s ago: executing program 3 (id=1199): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.435753907s ago: executing program 1 (id=1200): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) read(r0, &(0x7f0000000280)=""/226, 0xe2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nombcache}, {@resgid}, {@minixdf}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xfe, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) unshare(0x20040600) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x5, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000002480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) setpgid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x8, 0xc, 0x0) 1.421619568s ago: executing program 3 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) 1.412681768s ago: executing program 0 (id=1202): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x48) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf) 1.352064501s ago: executing program 4 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 1.349989651s ago: executing program 4 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8", 0xc6}, {&(0x7f0000000340)="306a50be5c210e457d43", 0xa}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c98777", 0x68}], 0x4}], 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x15, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x4, 0x1, 0x6, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, r5, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000001180)=[{0x0, 0x2, 0xf, 0x6}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x790}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 1.245660976s ago: executing program 0 (id=1205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r4 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x15, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x4, 0x1, 0x6, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000001180)=[{0x0, 0x2, 0xf, 0x6}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x790}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 1.116229521s ago: executing program 2 (id=1206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/24], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x314}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 758.525027ms ago: executing program 1 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x3}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0000008000001a7b656abefc9d539c59a9d14b5dd9e1c9000100000000000000d99bb2442228f98c7bfb023d9dd814b4601dbc31d55675d6bf054cd7287ec82d778c121c345dae3b758f211b45db7087ed0943bcbebac3e293948e003c1947b2e410374d900d1c27c41e532a03f84a76acd12ed5b139c653fdebb152cd5452e9ef51f7c11dc86460eb6b48f4f3c5d8cb9776c9566e7a0dd122a06a6318fab226a556f360f33af5eefc875187a518a622e1b8dfd45990639c6acbd52eb5868b2025e3c3dcee798c5d6a447e202aebe1266cdad5eef22e27e93d55cd4f9f6f4904"], 0x0, 0x400000, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) inotify_init1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 758.052137ms ago: executing program 0 (id=1208): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2241], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/119, 0x77, 0x0, &(0x7f0000000c80)=""/66, 0x42}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 556.167535ms ago: executing program 0 (id=1209): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000da0200000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) fsopen(&(0x7f00000000c0)='ext2\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000000a000004ff040000000010000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES8=r8, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES32=r4, @ANYRESHEX=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffea5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRES16=r12], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r13}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0x10000000, 0x5b66, 0x4}, 0x3, r15}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x98}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 520.116327ms ago: executing program 3 (id=1210): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2241], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/119, 0x77, 0x0, &(0x7f0000000c80)=""/66, 0x42}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 460.657049ms ago: executing program 2 (id=1211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='host1x_channel_submitted\x00', r0, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10800, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000f6ffffffff1effff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 240.232599ms ago: executing program 4 (id=1212): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 226.20023ms ago: executing program 3 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x1e}, @generic={0x1, 0x2, 0xf, 0x8001, 0x2}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @loopback, 0xa}}, 0x24) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0400002b6a3991bc4e584922e372520b857d92f7e5b2113da289010c9caad267db5278884db42ada9a9acd7bb324d66130ad8433cb3999fb1001f67c0efa318c80e0e79450158ba898d9b1da269178", @ANYRES16=r3, @ANYBLOB="0507ffdf3f000400000001000000180001801400020076657468315f766c616e000000000000"], 0x2c}}, 0x0) 92.377735ms ago: executing program 4 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 0s ago: executing program 4 (id=1215): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x48) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf) kernel console output (not intermixed with test programs): 0003e syscall=202 compat=0 ip=0x7ffa878af749 code=0x7ffc0000 [ 68.603506][ T29] audit: type=1326 audit(1764478719.849:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa878af749 code=0x7ffc0000 [ 68.626847][ T5688] loop2: detected capacity change from 0 to 512 [ 68.683593][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.709113][ T5688] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.695: bad orphan inode 11862016 [ 68.727016][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.737754][ T5688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.784222][ T5688] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.818163][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.926350][ T5718] loop0: detected capacity change from 0 to 2048 [ 68.947142][ T5718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.971416][ T5718] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.983218][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.140538][ T5728] loop2: detected capacity change from 0 to 128 [ 69.168075][ T5728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 69.190355][ T5728] System zones: 1-3, 19-19, 35-36 [ 69.200597][ T5728] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.232111][ T5728] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.251111][ T5719] loop1: detected capacity change from 0 to 512 [ 69.264066][ T5728] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted [ 69.295394][ T5719] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.703: bad orphan inode 11862016 [ 69.315711][ T5728] xt_hashlimit: max too large, truncated to 1048576 [ 69.316551][ T5719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.335984][ T5728] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.355490][ T5719] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.367348][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.419766][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.443459][ T5735] loop0: detected capacity change from 0 to 512 [ 69.478728][ T5735] EXT4-fs: dax option not supported [ 69.553294][ T5735] loop0: detected capacity change from 0 to 2048 [ 69.577882][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.602740][ T5735] loop0: p1 p3 [ 69.617211][ T5735] loop0: p3 start 8388352 is beyond EOD, truncated [ 69.683968][ T5739] loop3: detected capacity change from 0 to 512 [ 69.686928][ T5750] loop2: detected capacity change from 0 to 512 [ 69.708707][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 69.710650][ T5754] loop1: detected capacity change from 0 to 512 [ 69.725611][ T5754] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.738696][ T5754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.749448][ T5757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.716'. [ 69.759276][ T5739] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.710: bad orphan inode 11862016 [ 69.770330][ T5750] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.711: bad orphan inode 11862016 [ 69.793174][ T5754] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.811009][ T5739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.824090][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.844850][ T5754] EXT4-fs (loop1): 1 truncate cleaned up [ 69.845735][ T5765] loop4: detected capacity change from 0 to 2048 [ 69.857170][ T5739] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.859694][ T5750] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.868117][ T5754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.894683][ T5766] loop0: detected capacity change from 0 to 128 [ 69.908571][ T5765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.929318][ T5765] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.006978][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.007254][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.140546][ T5780] netlink: 'wޣ': attribute type 27 has an invalid length. [ 70.161487][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.296140][ T5794] loop0: detected capacity change from 0 to 2048 [ 70.315605][ T5794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.337315][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.356000][ T5794] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.415071][ T5775] loop1: detected capacity change from 0 to 512 [ 70.452932][ T5775] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.720: bad orphan inode 11862016 [ 70.489570][ T5775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.533641][ T5775] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.580588][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.620610][ T5802] loop4: detected capacity change from 0 to 512 [ 70.638179][ T5802] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.729: bad orphan inode 11862016 [ 70.690305][ T5802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.733613][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.754699][ T5802] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.812241][ T5816] netlink: 'wޣ': attribute type 27 has an invalid length. [ 70.822789][ T5817] loop0: detected capacity change from 0 to 512 [ 70.844495][ T5817] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.730: bad orphan inode 11862016 [ 70.863028][ T5817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.887038][ T5817] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.909607][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.990777][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.130028][ T5831] loop3: detected capacity change from 0 to 2048 [ 71.214049][ T5831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.226847][ T5831] FAULT_INJECTION: forcing a failure. [ 71.226847][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 71.239521][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: wޣ Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.239544][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.239610][ T5831] Call Trace: [ 71.239671][ T5831] [ 71.239678][ T5831] __dump_stack+0x1d/0x30 [ 71.239696][ T5831] dump_stack_lvl+0xe8/0x140 [ 71.239715][ T5831] dump_stack+0x15/0x1b [ 71.239732][ T5831] should_fail_ex+0x265/0x280 [ 71.239752][ T5831] should_failslab+0x8c/0xb0 [ 71.239797][ T5831] kmem_cache_alloc_noprof+0x50/0x480 [ 71.239820][ T5831] ? getname_flags+0x80/0x3b0 [ 71.239843][ T5831] getname_flags+0x80/0x3b0 [ 71.239870][ T5831] __x64_sys_link+0x40/0x70 [ 71.240041][ T5831] x64_sys_call+0x12a7/0x3000 [ 71.240125][ T5831] do_syscall_64+0xd2/0x200 [ 71.240143][ T5831] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.240164][ T5831] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.240191][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.240212][ T5831] RIP: 0033:0x7fc30402f749 [ 71.240239][ T5831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.240252][ T5831] RSP: 002b:00007fc302a55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 71.240268][ T5831] RAX: ffffffffffffffda RBX: 00007fc304286180 RCX: 00007fc30402f749 [ 71.240278][ T5831] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000001c0 [ 71.240289][ T5831] RBP: 00007fc302a55090 R08: 0000000000000000 R09: 0000000000000000 [ 71.240302][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.240340][ T5831] R13: 00007fc304286218 R14: 00007fc304286180 R15: 00007ffd2d4e1f58 [ 71.240355][ T5831] [ 71.510294][ T5841] loop0: detected capacity change from 0 to 2048 [ 71.553622][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.569158][ T5828] loop1: detected capacity change from 0 to 512 [ 71.575911][ T5841] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.586560][ T5830] loop4: detected capacity change from 0 to 512 [ 71.603878][ T5830] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.732: bad orphan inode 11862016 [ 71.615725][ T5828] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.736: bad orphan inode 11862016 [ 71.616873][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.626885][ T5828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.651353][ T5828] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.662001][ T5830] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.734785][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.810152][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.833095][ T5852] loop1: detected capacity change from 0 to 2048 [ 71.845403][ T5852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.887355][ T5852] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.902664][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.945156][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.990944][ T5862] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 72.197010][ T5855] loop3: detected capacity change from 0 to 512 [ 72.233561][ T5855] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.741: bad orphan inode 11862016 [ 72.245492][ T5870] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 72.256362][ T5855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.282811][ T5855] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.330670][ T5861] loop0: detected capacity change from 0 to 512 [ 72.344352][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.373785][ T5877] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 72.381493][ T5877] netlink: 176 bytes leftover after parsing attributes in process `syz.2.746'. [ 72.402007][ T5861] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.743: bad orphan inode 11862016 [ 72.419138][ T5861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.439308][ T5861] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.584102][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.604930][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.682997][ T5892] loop2: detected capacity change from 0 to 164 [ 72.708553][ T5892] process 'syz.2.751' launched '/dev/fd/3' with NULL argv: empty string added [ 72.737093][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 72.748110][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.748285][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.748297][ T3313] Call Trace: [ 72.748304][ T3313] [ 72.748313][ T3313] __dump_stack+0x1d/0x30 [ 72.748333][ T3313] dump_stack_lvl+0xe8/0x140 [ 72.748348][ T3313] dump_stack+0x15/0x1b [ 72.748363][ T3313] dump_header+0x81/0x220 [ 72.748442][ T3313] oom_kill_process+0x342/0x400 [ 72.748466][ T3313] out_of_memory+0x979/0xb80 [ 72.748494][ T3313] try_charge_memcg+0x610/0xa10 [ 72.748575][ T3313] charge_memcg+0x51/0xc0 [ 72.748596][ T3313] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 72.748679][ T3313] __read_swap_cache_async+0x17b/0x2d0 [ 72.748703][ T3313] swap_cluster_readahead+0x362/0x3c0 [ 72.748862][ T3313] swapin_readahead+0xde/0x800 [ 72.748950][ T3313] ? css_rstat_updated+0xb7/0x240 [ 72.748967][ T3313] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 72.748992][ T3313] ? __rcu_read_unlock+0x4f/0x70 [ 72.749095][ T3313] ? swap_cache_get_folio+0x277/0x280 [ 72.749112][ T3313] do_swap_page+0x2ae/0x2370 [ 72.749130][ T3313] ? __set_next_task_fair+0x5b/0x150 [ 72.749205][ T3313] ? _raw_spin_unlock+0x26/0x50 [ 72.749238][ T3313] ? finish_task_switch+0xad/0x2b0 [ 72.749267][ T3313] ? __pfx_default_wake_function+0x10/0x10 [ 72.749293][ T3313] handle_mm_fault+0x9a5/0x2be0 [ 72.749319][ T3313] ? vma_start_read+0x141/0x1f0 [ 72.749416][ T3313] do_user_addr_fault+0x630/0x1080 [ 72.749491][ T3313] ? fpregs_restore_userregs+0xe2/0x1d0 [ 72.749531][ T3313] ? switch_fpu_return+0xe/0x20 [ 72.749553][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.749574][ T3313] exc_page_fault+0x62/0xa0 [ 72.749637][ T3313] asm_exc_page_fault+0x26/0x30 [ 72.749652][ T3313] RIP: 0033:0x7f87bf801fc5 [ 72.749665][ T3313] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 72.749725][ T3313] RSP: 002b:00007ffd1e744838 EFLAGS: 00010246 [ 72.749741][ T3313] RAX: 0000000000000000 RBX: 0000000000000187 RCX: 00007f87bf801fc3 [ 72.749754][ T3313] RDX: 00007ffd1e744850 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.749767][ T3313] RBP: 00007ffd1e7448bc R08: 00000000285bba61 R09: 0000000000000000 [ 72.749779][ T3313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 72.749789][ T3313] R13: 00000000000927c0 R14: 0000000000011970 R15: 00007ffd1e744910 [ 72.749804][ T3313] [ 72.749810][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 439 [ 72.871293][ T5882] loop1: detected capacity change from 0 to 512 [ 72.874628][ T3313] memory+swap: usage 260232kB, limit 9007199254740988kB, failcnt 0 [ 72.874643][ T3313] kmem: usage 259400kB, limit 9007199254740988kB, failcnt 0 [ 73.022388][ T3313] Memory cgroup stats for /syz4: [ 73.023497][ T3313] cache 524288 [ 73.031779][ T3313] rss 98304 [ 73.034910][ T3313] shmem 0 [ 73.037831][ T3313] mapped_file 4096 [ 73.041529][ T3313] dirty 4096 [ 73.044759][ T3313] writeback 0 [ 73.048030][ T3313] workingset_refault_anon 42 [ 73.052622][ T3313] workingset_refault_file 114 [ 73.057295][ T3313] swap 86016 [ 73.060478][ T3313] swapcached 118784 [ 73.064325][ T3313] pgpgin 124170 [ 73.067766][ T3313] pgpgout 124012 [ 73.071343][ T3313] pgfault 142733 [ 73.074964][ T3313] pgmajfault 23 [ 73.078422][ T3313] inactive_anon 0 [ 73.082051][ T3313] active_anon 122880 [ 73.085978][ T3313] inactive_file 0 [ 73.089599][ T3313] active_file 524288 [ 73.093517][ T3313] unevictable 0 [ 73.096960][ T3313] hierarchical_memory_limit 314572800 [ 73.102437][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 73.108618][ T3313] total_cache 524288 [ 73.112610][ T3313] total_rss 98304 [ 73.116238][ T3313] total_shmem 0 [ 73.119760][ T3313] total_mapped_file 4096 [ 73.124037][ T3313] total_dirty 4096 [ 73.125579][ T5890] loop0: detected capacity change from 0 to 512 [ 73.127828][ T3313] total_writeback 0 [ 73.127836][ T3313] total_workingset_refault_anon 42 [ 73.127843][ T3313] total_workingset_refault_file 114 [ 73.127850][ T3313] total_swap 86016 [ 73.127857][ T3313] total_swapcached 118784 [ 73.156265][ T3313] total_pgpgin 124170 [ 73.160282][ T3313] total_pgpgout 124012 [ 73.164397][ T3313] total_pgfault 142733 [ 73.168556][ T3313] total_pgmajfault 23 [ 73.172554][ T3313] total_inactive_anon 0 [ 73.173522][ T5890] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.750: bad orphan inode 11862016 [ 73.176691][ T3313] total_active_anon 122880 [ 73.176700][ T3313] total_inactive_file 0 [ 73.176707][ T3313] total_active_file 524288 [ 73.176713][ T3313] total_unevictable 0 [ 73.194967][ T5895] loop3: detected capacity change from 0 to 512 [ 73.195807][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.742,pid=5858,uid=0 [ 73.225060][ T3313] Memory cgroup out of memory: Killed process 5858 (syz.4.742) total-vm:96148kB, anon-rss:1136kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 73.242352][ T5859] syz.4.742 (5859) used greatest stack depth: 9784 bytes left [ 73.250609][ T5890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.263473][ T5882] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.747: bad orphan inode 11862016 [ 73.274450][ T5882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.288347][ T5895] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.749: bad orphan inode 11862016 [ 73.288919][ T5890] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.299675][ T5895] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.347011][ T5882] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.413215][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 73.413227][ T29] audit: type=1400 audit(1764478724.909:5927): avc: denied { setopt } for pid=5908 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.598505][ T5916] loop1: detected capacity change from 0 to 8192 [ 73.650486][ T5922] xt_hashlimit: max too large, truncated to 1048576 [ 73.667423][ T29] audit: type=1400 audit(1764478725.149:5928): avc: denied { write } for pid=5915 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.689986][ T5920] loop0: detected capacity change from 0 to 2048 [ 73.697731][ T5922] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.734862][ T5920] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.784221][ T29] audit: type=1326 audit(1764478725.279:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.807633][ T29] audit: type=1326 audit(1764478725.279:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.847556][ T29] audit: type=1400 audit(1764478725.309:5931): avc: denied { write } for pid=5908 comm="syz.4.754" name="ip_vs" dev="proc" ino=4026532685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.870195][ T29] audit: type=1326 audit(1764478725.319:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.893573][ T29] audit: type=1326 audit(1764478725.319:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.906078][ T5917] loop4: detected capacity change from 0 to 32768 [ 73.916861][ T29] audit: type=1326 audit(1764478725.319:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.946576][ T29] audit: type=1326 audit(1764478725.329:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 73.969868][ T29] audit: type=1326 audit(1764478725.329:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 74.037787][ T3300] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 74.043142][ T3300] loop4: p1 start 460800 is beyond EOD, truncated [ 74.049619][ T3300] loop4: p2 size 83886080 extends beyond EOD, truncated [ 74.061833][ T3300] loop4: p5 start 460800 is beyond EOD, truncated [ 74.068306][ T3300] loop4: p6 size 83886080 extends beyond EOD, truncated [ 74.110198][ T5917] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 74.130331][ T5917] loop4: p1 start 460800 is beyond EOD, truncated [ 74.136843][ T5917] loop4: p2 size 83886080 extends beyond EOD, truncated [ 74.144213][ T5942] loop5: detected capacity change from 0 to 7 [ 74.145850][ T5917] loop4: p5 start 460800 is beyond EOD, truncated [ 74.150557][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.156873][ T5917] loop4: p6 size 83886080 extends beyond EOD, truncated [ 74.179549][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.187396][ T5942] loop5: unable to read partition table [ 74.194582][ T5942] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 74.194582][ T5942] ) failed (rc=-5) [ 74.208663][ T3880] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.218416][ T3880] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.234999][ T3880] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.252568][ T3880] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.296384][ T3880] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.411805][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 74.413534][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 74.426028][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 74.458007][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 74.478056][ T5938] loop1: detected capacity change from 0 to 512 [ 74.504321][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 74.504682][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 74.525231][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 74.536761][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 74.548125][ T5938] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.761: bad orphan inode 11862016 [ 74.559795][ T5962] xt_hashlimit: max too large, truncated to 1048576 [ 74.568178][ T5962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.588101][ T5938] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.610387][ T5946] loop4: detected capacity change from 0 to 512 [ 74.636217][ T5946] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.765: bad orphan inode 11862016 [ 74.648571][ T5946] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.987170][ T5978] loop2: detected capacity change from 0 to 512 [ 75.009283][ T5978] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.773: bad orphan inode 11862016 [ 75.030546][ T5978] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.087560][ T5979] loop0: detected capacity change from 0 to 512 [ 75.097585][ T6004] openvswitch: netlink: Missing key (keys=40, expected=80) [ 75.133382][ T5979] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.774: bad orphan inode 11862016 [ 75.160709][ T5979] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.258832][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.277151][ T6015] netlink: 96 bytes leftover after parsing attributes in process `syz.2.786'. [ 75.503426][ T6027] loop3: detected capacity change from 0 to 2048 [ 75.515106][ T6031] loop0: detected capacity change from 0 to 128 [ 75.543997][ T6031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 75.544778][ T6029] netlink: 'wޣ': attribute type 27 has an invalid length. [ 75.560710][ T6031] System zones: 1-3, 19-19, 35-36 [ 75.571377][ T6027] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.586681][ T6031] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.607788][ T6031] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 75.623364][ T6031] xt_hashlimit: max too large, truncated to 1048576 [ 75.630804][ T6031] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.696075][ T6017] loop2: detected capacity change from 0 to 512 [ 75.723920][ T6017] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.787: bad orphan inode 11862016 [ 75.793463][ T6017] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.844644][ T6043] netlink: 'wޣ': attribute type 27 has an invalid length. [ 76.372693][ T6050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.798'. [ 76.414781][ T6048] loop4: detected capacity change from 0 to 512 [ 76.420283][ T6054] netlink: 'wޣ': attribute type 27 has an invalid length. [ 76.455842][ T6048] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.797: bad orphan inode 11862016 [ 76.485849][ T6048] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.044687][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 77.677323][ T6078] loop4: detected capacity change from 0 to 512 [ 77.726980][ T6078] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.806: bad orphan inode 11862016 [ 77.762134][ T6078] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.878548][ T6082] loop3: detected capacity change from 0 to 512 [ 77.952566][ T6082] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.808: bad orphan inode 11862016 [ 77.983847][ T6082] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.997607][ T6093] FAULT_INJECTION: forcing a failure. [ 77.997607][ T6093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.010939][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.0.809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.010967][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.010979][ T6093] Call Trace: [ 78.010986][ T6093] [ 78.010995][ T6093] __dump_stack+0x1d/0x30 [ 78.011017][ T6093] dump_stack_lvl+0xe8/0x140 [ 78.011037][ T6093] dump_stack+0x15/0x1b [ 78.011054][ T6093] should_fail_ex+0x265/0x280 [ 78.011115][ T6093] should_fail_alloc_page+0xf2/0x100 [ 78.011143][ T6093] __alloc_frozen_pages_noprof+0xff/0x360 [ 78.011185][ T6093] alloc_pages_mpol+0xb3/0x260 [ 78.011207][ T6093] alloc_migration_target_by_mpol+0x11b/0x280 [ 78.011233][ T6093] migrate_pages_batch+0x349/0x1b60 [ 78.011259][ T6093] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 78.011324][ T6093] ? __walk_page_range+0x324/0x340 [ 78.011353][ T6093] migrate_pages+0xf55/0x1760 [ 78.011381][ T6093] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 78.011413][ T6093] __se_sys_mbind+0x975/0xac0 [ 78.011452][ T6093] __x64_sys_mbind+0x78/0x90 [ 78.011513][ T6093] x64_sys_call+0x2936/0x3000 [ 78.011597][ T6093] do_syscall_64+0xd2/0x200 [ 78.011618][ T6093] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.011644][ T6093] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.011675][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.011708][ T6093] RIP: 0033:0x7efdd960f749 [ 78.011725][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.011741][ T6093] RSP: 002b:00007efdd804e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 78.011757][ T6093] RAX: ffffffffffffffda RBX: 00007efdd9866090 RCX: 00007efdd960f749 [ 78.011768][ T6093] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 78.011780][ T6093] RBP: 00007efdd804e090 R08: 0000000000000000 R09: 0000000000000002 [ 78.011792][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.011815][ T6093] R13: 00007efdd9866128 R14: 00007efdd9866090 R15: 00007fff0724ed58 [ 78.011834][ T6093] [ 78.375335][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'. [ 78.388342][ T6098] FAULT_INJECTION: forcing a failure. [ 78.388342][ T6098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.401460][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.0.812 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.401555][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.401565][ T6098] Call Trace: [ 78.401571][ T6098] [ 78.401578][ T6098] __dump_stack+0x1d/0x30 [ 78.401597][ T6098] dump_stack_lvl+0xe8/0x140 [ 78.401613][ T6098] dump_stack+0x15/0x1b [ 78.401627][ T6098] should_fail_ex+0x265/0x280 [ 78.401698][ T6098] should_fail+0xb/0x20 [ 78.401713][ T6098] should_fail_usercopy+0x1a/0x20 [ 78.401732][ T6098] _copy_to_user+0x20/0xa0 [ 78.401753][ T6098] simple_read_from_buffer+0xb5/0x130 [ 78.401775][ T6098] proc_fail_nth_read+0x10e/0x150 [ 78.401803][ T6098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.401860][ T6098] vfs_read+0x1a8/0x770 [ 78.401879][ T6098] ? __rcu_read_unlock+0x4f/0x70 [ 78.401979][ T6098] ? __fget_files+0x184/0x1c0 [ 78.402020][ T6098] ksys_read+0xda/0x1a0 [ 78.402043][ T6098] __x64_sys_read+0x40/0x50 [ 78.402073][ T6098] x64_sys_call+0x27c0/0x3000 [ 78.402094][ T6098] do_syscall_64+0xd2/0x200 [ 78.402157][ T6098] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.402183][ T6098] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.402218][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.402238][ T6098] RIP: 0033:0x7efdd960e15c [ 78.402253][ T6098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.402307][ T6098] RSP: 002b:00007efdd806f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.402329][ T6098] RAX: ffffffffffffffda RBX: 00007efdd9865fa0 RCX: 00007efdd960e15c [ 78.402409][ T6098] RDX: 000000000000000f RSI: 00007efdd806f0a0 RDI: 0000000000000008 [ 78.402419][ T6098] RBP: 00007efdd806f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.402429][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.402490][ T6098] R13: 00007efdd9866038 R14: 00007efdd9865fa0 R15: 00007fff0724ed58 [ 78.402505][ T6098] [ 78.608589][ T6104] netlink: 'wޣ': attribute type 27 has an invalid length. [ 78.622480][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 78.622491][ T29] audit: type=1326 audit(1764478730.099:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.652008][ T29] audit: type=1326 audit(1764478730.099:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.675374][ T29] audit: type=1326 audit(1764478730.099:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.698657][ T29] audit: type=1326 audit(1764478730.099:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.725642][ T29] audit: type=1326 audit(1764478730.099:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.749028][ T29] audit: type=1326 audit(1764478730.099:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.772408][ T29] audit: type=1326 audit(1764478730.099:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.795811][ T29] audit: type=1326 audit(1764478730.099:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.819182][ T29] audit: type=1326 audit(1764478730.099:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.842537][ T29] audit: type=1326 audit(1764478730.099:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6102 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 78.962972][ T6117] netlink: 76 bytes leftover after parsing attributes in process `syz.0.818'. [ 79.162280][ T6135] loop1: detected capacity change from 0 to 512 [ 79.183047][ T6135] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.815: bad orphan inode 11862016 [ 79.213009][ T6139] loop2: detected capacity change from 0 to 128 [ 79.223064][ T6141] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 79.231368][ T6135] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.245679][ T6139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 79.250686][ T6141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.268459][ T6139] System zones: 1-3, 19-19, 35-36 [ 79.279101][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 79.279823][ T6131] loop0: detected capacity change from 0 to 512 [ 79.293137][ T6139] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.307687][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 79.318049][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 79.326888][ T6139] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted [ 79.340238][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 79.344444][ T6139] xt_hashlimit: max too large, truncated to 1048576 [ 79.349862][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 79.356927][ T6131] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.821: bad orphan inode 11862016 [ 79.387933][ T6131] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.400458][ T6139] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.400678][ T6149] FAULT_INJECTION: forcing a failure. [ 79.400678][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.423805][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.4.825 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.423833][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.423845][ T6149] Call Trace: [ 79.423852][ T6149] [ 79.423860][ T6149] __dump_stack+0x1d/0x30 [ 79.423882][ T6149] dump_stack_lvl+0xe8/0x140 [ 79.423998][ T6149] dump_stack+0x15/0x1b [ 79.424016][ T6149] should_fail_ex+0x265/0x280 [ 79.424092][ T6149] should_fail+0xb/0x20 [ 79.424108][ T6149] should_fail_usercopy+0x1a/0x20 [ 79.424128][ T6149] _copy_from_iter+0xd2/0xe80 [ 79.424151][ T6149] ? alloc_pages_mpol+0x217/0x260 [ 79.424175][ T6149] copy_page_from_iter+0x178/0x2a0 [ 79.424245][ T6149] tun_get_user+0x679/0x26e0 [ 79.424273][ T6149] ? ref_tracker_alloc+0x1f2/0x2f0 [ 79.424312][ T6149] tun_chr_write_iter+0x15e/0x210 [ 79.424336][ T6149] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 79.424358][ T6149] vfs_write+0x52a/0x960 [ 79.424416][ T6149] ksys_write+0xda/0x1a0 [ 79.424440][ T6149] __x64_sys_write+0x40/0x50 [ 79.424500][ T6149] x64_sys_call+0x2802/0x3000 [ 79.424521][ T6149] do_syscall_64+0xd2/0x200 [ 79.424540][ T6149] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.424592][ T6149] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.424758][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.424776][ T6149] RIP: 0033:0x7f87bf7ce1ff [ 79.424790][ T6149] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 79.424806][ T6149] RSP: 002b:00007f87be22f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.424825][ T6149] RAX: ffffffffffffffda RBX: 00007f87bfa25fa0 RCX: 00007f87bf7ce1ff [ 79.424836][ T6149] RDX: 000000000000004e RSI: 0000200000000680 RDI: 00000000000000c8 [ 79.424926][ T6149] RBP: 00007f87be22f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.424936][ T6149] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 79.424955][ T6149] R13: 00007f87bfa26038 R14: 00007f87bfa25fa0 R15: 00007ffd1e7444f8 [ 79.424971][ T6149] [ 79.784330][ T6166] loop0: detected capacity change from 0 to 512 [ 79.801083][ T6166] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.832: inode has both inline data and extents flags [ 79.820374][ T6166] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.832: couldn't read orphan inode 15 (err -117) [ 80.144344][ T6178] loop4: detected capacity change from 0 to 512 [ 80.179617][ T6178] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.836: bad orphan inode 11862016 [ 80.207657][ T6178] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.270947][ T6194] loop0: detected capacity change from 0 to 128 [ 80.294051][ T6194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 80.314835][ T6188] loop3: detected capacity change from 0 to 512 [ 80.321192][ T6194] System zones: 1-3, 19-19, 35-36 [ 80.329804][ T6194] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.341045][ T6194] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 80.352528][ T6194] xt_hashlimit: max too large, truncated to 1048576 [ 80.359917][ T6194] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.372583][ T6188] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.839: bad orphan inode 11862016 [ 80.389721][ T6188] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.401145][ T6203] FAULT_INJECTION: forcing a failure. [ 80.401145][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 80.413844][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.1.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.413868][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.413879][ T6203] Call Trace: [ 80.413891][ T6203] [ 80.413898][ T6203] __dump_stack+0x1d/0x30 [ 80.413918][ T6203] dump_stack_lvl+0xe8/0x140 [ 80.413973][ T6203] dump_stack+0x15/0x1b [ 80.413988][ T6203] should_fail_ex+0x265/0x280 [ 80.414005][ T6203] should_failslab+0x8c/0xb0 [ 80.414095][ T6203] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 80.414122][ T6203] ? __alloc_skb+0x101/0x320 [ 80.414164][ T6203] __alloc_skb+0x101/0x320 [ 80.414219][ T6203] netlink_alloc_large_skb+0xbf/0xf0 [ 80.414288][ T6203] netlink_sendmsg+0x3cf/0x6b0 [ 80.414305][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.414322][ T6203] __sock_sendmsg+0x145/0x180 [ 80.414344][ T6203] ____sys_sendmsg+0x345/0x4e0 [ 80.414367][ T6203] ___sys_sendmsg+0x17b/0x1d0 [ 80.414405][ T6203] __sys_sendmmsg+0x178/0x300 [ 80.414431][ T6203] __x64_sys_sendmmsg+0x57/0x70 [ 80.414447][ T6203] x64_sys_call+0x1c4a/0x3000 [ 80.414523][ T6203] do_syscall_64+0xd2/0x200 [ 80.414543][ T6203] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.414568][ T6203] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.414649][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.414668][ T6203] RIP: 0033:0x7ffa878af749 [ 80.414682][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.414698][ T6203] RSP: 002b:00007ffa8630f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.414768][ T6203] RAX: ffffffffffffffda RBX: 00007ffa87b05fa0 RCX: 00007ffa878af749 [ 80.414778][ T6203] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 80.414788][ T6203] RBP: 00007ffa8630f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.414804][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.414815][ T6203] R13: 00007ffa87b06038 R14: 00007ffa87b05fa0 R15: 00007ffd7bd98748 [ 80.414866][ T6203] [ 80.707333][ T6214] loop1: detected capacity change from 0 to 512 [ 80.723411][ T6214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.749767][ T6214] EXT4-fs (loop1): 1 truncate cleaned up [ 80.766580][ T6217] loop0: detected capacity change from 0 to 128 [ 80.779227][ T6219] loop2: detected capacity change from 0 to 2048 [ 80.801957][ T6217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 80.827916][ T6219] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.838517][ T6217] System zones: 1-3, 19-19, 35-36 [ 80.850153][ T6217] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.886260][ T6217] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 80.919345][ T6217] xt_hashlimit: max too large, truncated to 1048576 [ 80.952887][ T6217] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.162248][ T6239] loop1: detected capacity change from 0 to 512 [ 81.201314][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 81.216801][ T6239] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.232100][ T3375] IPVS: starting estimator thread 0... [ 81.293496][ T6239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.856'. [ 81.312796][ T6239] xt_socket: unknown flags 0x50 [ 81.332560][ T6248] IPVS: using max 2640 ests per chain, 132000 per kthread [ 81.473070][ T6241] syz.3.857 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.521080][ T6264] FAULT_INJECTION: forcing a failure. [ 81.521080][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 81.533757][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.2.864 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.533805][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.533845][ T6264] Call Trace: [ 81.533853][ T6264] [ 81.533861][ T6264] __dump_stack+0x1d/0x30 [ 81.533884][ T6264] dump_stack_lvl+0xe8/0x140 [ 81.533904][ T6264] dump_stack+0x15/0x1b [ 81.533918][ T6264] should_fail_ex+0x265/0x280 [ 81.533986][ T6264] should_failslab+0x8c/0xb0 [ 81.534013][ T6264] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 81.534041][ T6264] ? __alloc_skb+0x101/0x320 [ 81.534065][ T6264] __alloc_skb+0x101/0x320 [ 81.534097][ T6264] netlink_alloc_large_skb+0xbf/0xf0 [ 81.534125][ T6264] netlink_sendmsg+0x3cf/0x6b0 [ 81.534142][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.534158][ T6264] __sock_sendmsg+0x145/0x180 [ 81.534262][ T6264] ____sys_sendmsg+0x345/0x4e0 [ 81.534284][ T6264] ___sys_sendmsg+0x17b/0x1d0 [ 81.534314][ T6264] __sys_sendmmsg+0x178/0x300 [ 81.534411][ T6264] __x64_sys_sendmmsg+0x57/0x70 [ 81.534429][ T6264] x64_sys_call+0x1c4a/0x3000 [ 81.534449][ T6264] do_syscall_64+0xd2/0x200 [ 81.534545][ T6264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.534572][ T6264] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.534644][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.534669][ T6264] RIP: 0033:0x7f874676f749 [ 81.534685][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.534771][ T6264] RSP: 002b:00007f87451cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.534790][ T6264] RAX: ffffffffffffffda RBX: 00007f87469c5fa0 RCX: 00007f874676f749 [ 81.534801][ T6264] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 81.534812][ T6264] RBP: 00007f87451cf090 R08: 0000000000000000 R09: 0000000000000000 [ 81.534822][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.534846][ T6264] R13: 00007f87469c6038 R14: 00007f87469c5fa0 R15: 00007ffc943cabf8 [ 81.534863][ T6264] [ 81.776384][ T6256] loop1: detected capacity change from 0 to 512 [ 81.802568][ T6261] loop4: detected capacity change from 0 to 512 [ 81.829816][ T6256] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.861: bad orphan inode 11862016 [ 81.849490][ T6261] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.863: bad orphan inode 11862016 [ 81.849640][ T6237] loop0: detected capacity change from 0 to 512 [ 81.861072][ T6256] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.883358][ T6261] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.935100][ T6237] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.855: bad orphan inode 11862016 [ 81.979791][ T6237] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.025363][ T6276] loop2: detected capacity change from 0 to 512 [ 82.054173][ T6276] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.866: bad orphan inode 11862016 [ 82.078239][ T6276] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.234915][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 82.244831][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 82.268458][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 82.286667][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 82.444018][ T6308] netlink: 'wޣ': attribute type 27 has an invalid length. [ 82.556503][ T6310] loop4: detected capacity change from 0 to 512 [ 82.605246][ T6310] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.875: bad orphan inode 11862016 [ 82.633145][ T6310] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.821931][ T6316] loop2: detected capacity change from 0 to 512 [ 82.878965][ T6316] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.878: bad orphan inode 11862016 [ 82.906275][ T6316] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.927097][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 82.943550][ T6332] FAULT_INJECTION: forcing a failure. [ 82.943550][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 82.956188][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.1.883 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.956274][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.956285][ T6332] Call Trace: [ 82.956291][ T6332] [ 82.956297][ T6332] __dump_stack+0x1d/0x30 [ 82.956316][ T6332] dump_stack_lvl+0xe8/0x140 [ 82.956365][ T6332] dump_stack+0x15/0x1b [ 82.956381][ T6332] should_fail_ex+0x265/0x280 [ 82.956400][ T6332] should_failslab+0x8c/0xb0 [ 82.956426][ T6332] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 82.956496][ T6332] ? __alloc_skb+0x101/0x320 [ 82.956550][ T6332] __alloc_skb+0x101/0x320 [ 82.956575][ T6332] netlink_dump+0x10d/0x8a0 [ 82.956614][ T6332] netlink_recvmsg+0x420/0x550 [ 82.956634][ T6332] ? __pfx_netlink_recvmsg+0x10/0x10 [ 82.956650][ T6332] sock_recvmsg+0x139/0x170 [ 82.956707][ T6332] ____sys_recvmsg+0xf5/0x280 [ 82.956777][ T6332] ___sys_recvmsg+0x11f/0x370 [ 82.956801][ T6332] do_recvmmsg+0x1ef/0x540 [ 82.956825][ T6332] ? fput+0x8f/0xc0 [ 82.956895][ T6332] __x64_sys_recvmmsg+0xe5/0x170 [ 82.956913][ T6332] x64_sys_call+0x27aa/0x3000 [ 82.956930][ T6332] do_syscall_64+0xd2/0x200 [ 82.957022][ T6332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.957143][ T6332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.957172][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.957189][ T6332] RIP: 0033:0x7ffa878af749 [ 82.957203][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.957286][ T6332] RSP: 002b:00007ffa8630f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 82.957303][ T6332] RAX: ffffffffffffffda RBX: 00007ffa87b05fa0 RCX: 00007ffa878af749 [ 82.957315][ T6332] RDX: 0000000004000267 RSI: 0000200000007700 RDI: 0000000000000006 [ 82.957382][ T6332] RBP: 00007ffa8630f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.957395][ T6332] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 82.957408][ T6332] R13: 00007ffa87b06038 R14: 00007ffa87b05fa0 R15: 00007ffd7bd98748 [ 82.957426][ T6332] [ 83.309286][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.885'. [ 83.421501][ T6331] loop3: detected capacity change from 0 to 512 [ 83.421883][ T6343] netlink: 'wޣ': attribute type 27 has an invalid length. [ 83.435431][ T6347] xt_hashlimit: max too large, truncated to 1048576 [ 83.443199][ T6347] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.456801][ T6331] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.884: bad orphan inode 11862016 [ 83.480405][ T6331] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.633555][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 83.633570][ T29] audit: type=1326 audit(1764478735.129:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.652822][ T6358] netlink: 'wޣ': attribute type 27 has an invalid length. [ 83.703344][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 83.722394][ T29] audit: type=1326 audit(1764478735.129:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.745856][ T29] audit: type=1326 audit(1764478735.129:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.769192][ T29] audit: type=1326 audit(1764478735.129:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.792494][ T29] audit: type=1326 audit(1764478735.129:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.815881][ T29] audit: type=1326 audit(1764478735.129:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.815930][ T29] audit: type=1326 audit(1764478735.139:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.815951][ T29] audit: type=1326 audit(1764478735.139:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.816068][ T29] audit: type=1326 audit(1764478735.139:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.816088][ T29] audit: type=1326 audit(1764478735.139:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30402f749 code=0x7ffc0000 [ 83.921291][ T6352] loop2: detected capacity change from 0 to 512 [ 83.938878][ T6352] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.890: bad orphan inode 11862016 [ 83.981463][ T6352] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.124870][ T6374] loop1: detected capacity change from 0 to 4096 [ 84.154541][ T6376] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 84.215568][ T6381] syzkaller0: entered promiscuous mode [ 84.221103][ T6381] syzkaller0: entered allmulticast mode [ 84.242026][ T6381] FAULT_INJECTION: forcing a failure. [ 84.242026][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.255195][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.2.899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.255277][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.255289][ T6381] Call Trace: [ 84.255324][ T6381] [ 84.255330][ T6381] __dump_stack+0x1d/0x30 [ 84.255352][ T6381] dump_stack_lvl+0xe8/0x140 [ 84.255372][ T6381] dump_stack+0x15/0x1b [ 84.255388][ T6381] should_fail_ex+0x265/0x280 [ 84.255405][ T6381] should_fail+0xb/0x20 [ 84.255420][ T6381] should_fail_usercopy+0x1a/0x20 [ 84.255459][ T6381] _copy_from_user+0x1c/0xb0 [ 84.255553][ T6381] ___sys_sendmsg+0xc1/0x1d0 [ 84.255583][ T6381] __x64_sys_sendmsg+0xd4/0x160 [ 84.255607][ T6381] x64_sys_call+0x191e/0x3000 [ 84.255708][ T6381] do_syscall_64+0xd2/0x200 [ 84.255733][ T6381] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.255759][ T6381] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.255811][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.255873][ T6381] RIP: 0033:0x7f874676f749 [ 84.255889][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.255907][ T6381] RSP: 002b:00007f87451cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.255927][ T6381] RAX: ffffffffffffffda RBX: 00007f87469c5fa0 RCX: 00007f874676f749 [ 84.255939][ T6381] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000007 [ 84.255967][ T6381] RBP: 00007f87451cf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.255984][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.255995][ T6381] R13: 00007f87469c6038 R14: 00007f87469c5fa0 R15: 00007ffc943cabf8 [ 84.256012][ T6381] [ 84.680725][ T6392] xt_hashlimit: max too large, truncated to 1048576 [ 84.699413][ T6392] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.711295][ T6378] loop3: detected capacity change from 0 to 512 [ 84.741314][ T6378] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.898: bad orphan inode 11862016 [ 84.761371][ T6378] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.913895][ T6373] syz.1.896 (6373) used greatest stack depth: 7232 bytes left [ 84.996738][ T6405] netlink: 'wޣ': attribute type 27 has an invalid length. [ 85.147770][ T6420] loop3: detected capacity change from 0 to 512 [ 85.171768][ T6420] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.202625][ T6418] loop1: detected capacity change from 0 to 2048 [ 85.209190][ T6398] loop4: detected capacity change from 0 to 512 [ 85.243682][ T6418] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.264999][ T6398] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.903: bad orphan inode 11862016 [ 85.292801][ T6398] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.414677][ T6411] lo speed is unknown, defaulting to 1000 [ 85.420762][ T6411] lo speed is unknown, defaulting to 1000 [ 85.427075][ T6411] lo speed is unknown, defaulting to 1000 [ 85.433213][ T6411] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.441035][ T6411] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.451452][ T6411] lo speed is unknown, defaulting to 1000 [ 85.457763][ T6411] lo speed is unknown, defaulting to 1000 [ 85.464024][ T6411] lo speed is unknown, defaulting to 1000 [ 85.476643][ T6411] lo speed is unknown, defaulting to 1000 [ 85.482815][ T6411] lo speed is unknown, defaulting to 1000 [ 85.555021][ T6422] loop3: detected capacity change from 0 to 512 [ 85.588533][ T6434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.914'. [ 85.599226][ T6422] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.912: bad orphan inode 11862016 [ 85.621738][ T6422] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.690838][ T6449] netlink: 'wޣ': attribute type 27 has an invalid length. [ 85.700626][ T6447] tipc: Started in network mode [ 85.705580][ T6447] tipc: Node identity 92d2428af759, cluster identity 4711 [ 85.712877][ T6447] tipc: Enabled bearer , priority 0 [ 85.758452][ T6452] tipc: Disabling bearer [ 85.885130][ T6459] netlink: 'syz.1.923': attribute type 29 has an invalid length. [ 85.894038][ T6459] netlink: 'syz.1.923': attribute type 29 has an invalid length. [ 85.917017][ T6459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.009074][ T6467] Cannot find add_set index 0 as target [ 86.028451][ T6469] bridge0: port 3(macsec1) entered blocking state [ 86.034964][ T6469] bridge0: port 3(macsec1) entered disabled state [ 86.041537][ T6469] macsec1: entered allmulticast mode [ 86.041690][ T6461] loop2: detected capacity change from 0 to 512 [ 86.046882][ T6469] bridge0: entered allmulticast mode [ 86.058643][ T6469] macsec1: left allmulticast mode [ 86.063820][ T6469] bridge0: left allmulticast mode [ 86.073971][ T6467] bridge0: port 3(macsec1) entered blocking state [ 86.080435][ T6467] bridge0: port 3(macsec1) entered disabled state [ 86.087153][ T6467] macsec1: entered allmulticast mode [ 86.092468][ T6467] bridge0: entered allmulticast mode [ 86.093186][ T6461] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.924: bad orphan inode 11862016 [ 86.108534][ T6467] macsec1: left allmulticast mode [ 86.113625][ T6467] bridge0: left allmulticast mode [ 86.123997][ T6461] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.236088][ T6479] __nla_validate_parse: 1 callbacks suppressed [ 86.236102][ T6479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.927'. [ 86.288328][ T6482] loop2: detected capacity change from 0 to 2048 [ 86.311444][ T6482] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.398492][ T6494] loop2: detected capacity change from 0 to 2048 [ 86.424014][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 86.442777][ T6494] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.476522][ T6490] loop3: detected capacity change from 0 to 512 [ 86.495231][ T6502] netlink: 'wޣ': attribute type 27 has an invalid length. [ 86.513678][ T6490] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.931: bad orphan inode 11862016 [ 86.535083][ T6490] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.572972][ T6492] loop1: detected capacity change from 0 to 512 [ 86.617515][ T6492] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.932: bad orphan inode 11862016 [ 86.636409][ T6492] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.690313][ T6521] loop4: detected capacity change from 0 to 128 [ 86.712496][ T6521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 86.740863][ T6521] System zones: 1-3, 19-19, 35-36 [ 86.755555][ T6521] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.776971][ T6521] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 86.810379][ T6521] xt_hashlimit: max too large, truncated to 1048576 [ 86.833552][ T6520] loop0: detected capacity change from 0 to 512 [ 86.837201][ T6533] loop1: detected capacity change from 0 to 2048 [ 86.840818][ T6521] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.867553][ T6533] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.879468][ T6520] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.939: bad orphan inode 11862016 [ 86.892290][ T6520] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.079766][ T6550] loop0: detected capacity change from 0 to 2048 [ 87.107194][ T6550] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.216177][ T6547] loop2: detected capacity change from 0 to 512 [ 87.255506][ T6547] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.948: bad orphan inode 11862016 [ 87.261125][ T6543] loop4: detected capacity change from 0 to 512 [ 87.276943][ T6547] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.303479][ T6543] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.947: bad orphan inode 11862016 [ 87.641678][ T6543] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.671545][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 87.680515][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 87.707355][ T6574] loop2: detected capacity change from 0 to 128 [ 87.775892][ T6579] FAULT_INJECTION: forcing a failure. [ 87.775892][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.789054][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.789120][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.789132][ T6579] Call Trace: [ 87.789140][ T6579] [ 87.789148][ T6579] __dump_stack+0x1d/0x30 [ 87.789170][ T6579] dump_stack_lvl+0xe8/0x140 [ 87.789190][ T6579] dump_stack+0x15/0x1b [ 87.789206][ T6579] should_fail_ex+0x265/0x280 [ 87.789284][ T6579] should_fail+0xb/0x20 [ 87.789297][ T6579] should_fail_usercopy+0x1a/0x20 [ 87.789313][ T6579] _copy_from_user+0x1c/0xb0 [ 87.789331][ T6579] memdup_user+0x5e/0xd0 [ 87.789355][ T6579] strndup_user+0x68/0xb0 [ 87.789374][ T6579] __se_sys_mount+0x4d/0x2e0 [ 87.789392][ T6579] ? fput+0x8f/0xc0 [ 87.789406][ T6579] ? ksys_write+0x192/0x1a0 [ 87.789466][ T6579] __x64_sys_mount+0x67/0x80 [ 87.789485][ T6579] x64_sys_call+0x2b51/0x3000 [ 87.789501][ T6579] do_syscall_64+0xd2/0x200 [ 87.789597][ T6579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.789618][ T6579] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.789641][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.789722][ T6579] RIP: 0033:0x7efdd960f749 [ 87.789734][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.789814][ T6579] RSP: 002b:00007efdd802d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.789829][ T6579] RAX: ffffffffffffffda RBX: 00007efdd9866180 RCX: 00007efdd960f749 [ 87.789839][ T6579] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 87.789849][ T6579] RBP: 00007efdd802d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.789866][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.789876][ T6579] R13: 00007efdd9866218 R14: 00007efdd9866180 R15: 00007fff0724ed58 [ 87.789891][ T6579] [ 88.193502][ T6581] lo speed is unknown, defaulting to 1000 [ 88.221930][ T6586] loop1: detected capacity change from 0 to 2048 [ 88.264143][ T6586] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.293826][ T6569] loop3: detected capacity change from 0 to 512 [ 88.301743][ T6591] loop4: detected capacity change from 0 to 128 [ 88.324292][ T6569] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.953: bad orphan inode 11862016 [ 88.324930][ T6591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 88.343522][ T6591] System zones: 1-3, 19-19, 35-36 [ 88.344077][ T6569] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.349473][ T6591] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.382317][ T6591] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 88.406085][ T6591] xt_hashlimit: max too large, truncated to 1048576 [ 88.426127][ T6591] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.582616][ T6607] loop5: detected capacity change from 0 to 7 [ 88.594504][ T6607] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.605910][ T6607] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.613839][ T6607] loop5: unable to read partition table [ 88.635156][ T6608] lo speed is unknown, defaulting to 1000 [ 88.644458][ T6598] loop1: detected capacity change from 0 to 512 [ 88.650983][ T6607] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 88.650983][ T6607] ) failed (rc=-5) [ 88.653398][ T29] kauditd_printk_skb: 1039 callbacks suppressed [ 88.653411][ T29] audit: type=1400 audit(1764478740.149:8248): avc: denied { ioctl } for pid=6610 comm="syz.3.965" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.716161][ T6598] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.960: bad orphan inode 11862016 [ 88.722417][ T6613] netlink: 'syz.4.966': attribute type 39 has an invalid length. [ 88.728532][ T6598] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.743359][ T29] audit: type=1326 audit(1764478740.229:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.0.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdd960f749 code=0x0 [ 88.771287][ T6617] loop3: detected capacity change from 0 to 512 [ 88.821584][ T6617] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.838680][ T6611] FAULT_INJECTION: forcing a failure. [ 88.838680][ T6611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 88.851970][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.3.965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.851999][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.852009][ T6611] Call Trace: [ 88.852015][ T6611] [ 88.852023][ T6611] __dump_stack+0x1d/0x30 [ 88.852041][ T6611] dump_stack_lvl+0xe8/0x140 [ 88.852109][ T6611] dump_stack+0x15/0x1b [ 88.852122][ T6611] should_fail_ex+0x265/0x280 [ 88.852140][ T6611] should_fail_alloc_page+0xf2/0x100 [ 88.852231][ T6611] alloc_pages_bulk_noprof+0xef/0x530 [ 88.852277][ T6611] copy_splice_read+0xf3/0x660 [ 88.852380][ T6611] sock_splice_read+0xa5/0xb0 [ 88.852401][ T6611] ? __pfx_sock_splice_read+0x10/0x10 [ 88.852421][ T6611] splice_file_to_pipe+0x238/0x390 [ 88.852467][ T6611] do_splice+0xc48/0x10b0 [ 88.852489][ T6611] ? proc_fail_nth_write+0x13b/0x160 [ 88.852514][ T6611] ? bloom_map_push_elem+0x30/0xd0 [ 88.852606][ T6611] ? __rcu_read_unlock+0x4f/0x70 [ 88.852626][ T6611] ? __fget_files+0x184/0x1c0 [ 88.852651][ T6611] __se_sys_splice+0x26c/0x3a0 [ 88.852671][ T6611] __x64_sys_splice+0x78/0x90 [ 88.852745][ T6611] x64_sys_call+0x28a7/0x3000 [ 88.852834][ T6611] do_syscall_64+0xd2/0x200 [ 88.852854][ T6611] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.852881][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.852899][ T6611] RIP: 0033:0x7fc30402f749 [ 88.852912][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.853024][ T6611] RSP: 002b:00007fc302a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 88.853043][ T6611] RAX: ffffffffffffffda RBX: 00007fc304285fa0 RCX: 00007fc30402f749 [ 88.853106][ T6611] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000008 [ 88.853119][ T6611] RBP: 00007fc302a97090 R08: 0000000008000f28 R09: 0000000000000000 [ 88.853132][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.853145][ T6611] R13: 00007fc304286038 R14: 00007fc304285fa0 R15: 00007ffd2d4e1f58 [ 88.853161][ T6611] [ 89.032379][ T29] audit: type=1326 audit(1764478740.299:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.080613][ T29] audit: type=1326 audit(1764478740.299:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.103933][ T29] audit: type=1326 audit(1764478740.309:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.127260][ T29] audit: type=1326 audit(1764478740.309:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.150553][ T29] audit: type=1326 audit(1764478740.309:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.173849][ T29] audit: type=1326 audit(1764478740.329:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.0.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdd960f749 code=0x0 [ 89.196567][ T29] audit: type=1400 audit(1764478740.329:8256): avc: denied { setattr } for pid=6610 comm="syz.3.965" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.222457][ T29] audit: type=1326 audit(1764478740.529:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bf7cf749 code=0x7ffc0000 [ 89.303864][ T6624] netlink: 96 bytes leftover after parsing attributes in process `syz.1.967'. [ 89.614280][ T6628] loop1: detected capacity change from 0 to 512 [ 89.634340][ T6628] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.969: bad orphan inode 11862016 [ 89.657986][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.672103][ T6654] netlink: 96 bytes leftover after parsing attributes in process `syz.3.979'. [ 89.681715][ T6628] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.682423][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.753464][ T6658] loop3: detected capacity change from 0 to 128 [ 89.770180][ T6658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 89.779175][ T6658] System zones: 1-3, 19-19, 35-36 [ 89.785030][ T6658] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.796530][ T6658] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted [ 89.808241][ T6658] xt_hashlimit: max too large, truncated to 1048576 [ 89.812527][ T6646] loop4: detected capacity change from 0 to 512 [ 89.815823][ T6658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.835186][ T6646] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.977: bad orphan inode 11862016 [ 89.847130][ T6646] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.869188][ T6664] netlink: 'syz.1.982': attribute type 30 has an invalid length. [ 89.894235][ T6667] loop3: detected capacity change from 0 to 2048 [ 89.904887][ T6667] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.950108][ T6671] loop5: detected capacity change from 0 to 7 [ 89.956405][ T6671] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.964486][ T6671] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.972391][ T6671] loop5: unable to read partition table [ 89.978138][ T6671] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 89.978138][ T6671] ) failed (rc=-5) [ 90.008252][ T6673] loop4: detected capacity change from 0 to 512 [ 90.016692][ T6673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.033429][ T6673] EXT4-fs (loop4): 1 truncate cleaned up [ 90.099004][ T6684] netlink: 'wޣ': attribute type 27 has an invalid length. [ 90.109566][ T6687] netlink: 'wޣ': attribute type 27 has an invalid length. [ 90.165815][ T6697] netlink: 256 bytes leftover after parsing attributes in process `syz.1.993'. [ 90.174900][ T6697] netlink: 64 bytes leftover after parsing attributes in process `syz.1.993'. [ 90.272752][ T6709] loop1: detected capacity change from 0 to 512 [ 90.279677][ T6708] loop2: detected capacity change from 0 to 2048 [ 90.286138][ T6709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.307770][ T6708] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.319077][ T6709] EXT4-fs (loop1): 1 truncate cleaned up [ 90.348425][ T6693] loop4: detected capacity change from 0 to 512 [ 90.368164][ T6693] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.992: bad orphan inode 11862016 [ 90.418832][ T6693] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.460118][ T6722] netlink: 'wޣ': attribute type 27 has an invalid length. [ 90.474042][ T6703] loop3: detected capacity change from 0 to 512 [ 90.506054][ T6703] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.996: bad orphan inode 11862016 [ 90.529732][ T6703] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.715398][ T6744] FAULT_INJECTION: forcing a failure. [ 90.715398][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.728587][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.2.1009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.728616][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.728628][ T6744] Call Trace: [ 90.728636][ T6744] [ 90.728721][ T6744] __dump_stack+0x1d/0x30 [ 90.728742][ T6744] dump_stack_lvl+0xe8/0x140 [ 90.728761][ T6744] dump_stack+0x15/0x1b [ 90.728778][ T6744] should_fail_ex+0x265/0x280 [ 90.728798][ T6744] should_fail+0xb/0x20 [ 90.728814][ T6744] should_fail_usercopy+0x1a/0x20 [ 90.728927][ T6744] _copy_from_user+0x1c/0xb0 [ 90.729013][ T6744] ___sys_sendmsg+0xc1/0x1d0 [ 90.729098][ T6744] __sys_sendmmsg+0x178/0x300 [ 90.729169][ T6744] __x64_sys_sendmmsg+0x57/0x70 [ 90.729189][ T6744] x64_sys_call+0x1c4a/0x3000 [ 90.729210][ T6744] do_syscall_64+0xd2/0x200 [ 90.729295][ T6744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.729316][ T6744] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.729345][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.729375][ T6744] RIP: 0033:0x7f874676f749 [ 90.729391][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.729408][ T6744] RSP: 002b:00007f87451cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.729504][ T6744] RAX: ffffffffffffffda RBX: 00007f87469c5fa0 RCX: 00007f874676f749 [ 90.729593][ T6744] RDX: 0000000000000001 RSI: 0000200000006780 RDI: 0000000000000003 [ 90.729668][ T6744] RBP: 00007f87451cf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.729678][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.729689][ T6744] R13: 00007f87469c6038 R14: 00007f87469c5fa0 R15: 00007ffc943cabf8 [ 90.729704][ T6744] [ 90.913271][ T6751] FAULT_INJECTION: forcing a failure. [ 90.913271][ T6751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.926376][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.4.1013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.926400][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.926410][ T6751] Call Trace: [ 90.926416][ T6751] [ 90.926422][ T6751] __dump_stack+0x1d/0x30 [ 90.926478][ T6751] dump_stack_lvl+0xe8/0x140 [ 90.926495][ T6751] dump_stack+0x15/0x1b [ 90.926510][ T6751] should_fail_ex+0x265/0x280 [ 90.926525][ T6751] should_fail+0xb/0x20 [ 90.926539][ T6751] should_fail_usercopy+0x1a/0x20 [ 90.926569][ T6751] _copy_from_iter+0xd2/0xe80 [ 90.926614][ T6751] ? __build_skb_around+0x1ab/0x200 [ 90.926646][ T6751] ? __alloc_skb+0x223/0x320 [ 90.926670][ T6751] netlink_sendmsg+0x471/0x6b0 [ 90.926688][ T6751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.926765][ T6751] __sock_sendmsg+0x145/0x180 [ 90.926784][ T6751] ____sys_sendmsg+0x31e/0x4e0 [ 90.926801][ T6751] ___sys_sendmsg+0x17b/0x1d0 [ 90.926824][ T6751] __x64_sys_sendmsg+0xd4/0x160 [ 90.926860][ T6751] x64_sys_call+0x191e/0x3000 [ 90.926877][ T6751] do_syscall_64+0xd2/0x200 [ 90.926894][ T6751] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.926924][ T6751] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.926948][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.926979][ T6751] RIP: 0033:0x7f87bf7cf749 [ 90.926991][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.927005][ T6751] RSP: 002b:00007f87be22f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.927021][ T6751] RAX: ffffffffffffffda RBX: 00007f87bfa25fa0 RCX: 00007f87bf7cf749 [ 90.927031][ T6751] RDX: 0000000000008804 RSI: 00002000000002c0 RDI: 0000000000000009 [ 90.927041][ T6751] RBP: 00007f87be22f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.927051][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.927098][ T6751] R13: 00007f87bfa26038 R14: 00007f87bfa25fa0 R15: 00007ffd1e7444f8 [ 90.927112][ T6751] [ 91.219098][ T6761] loop4: detected capacity change from 0 to 2048 [ 91.241139][ T6763] loop3: detected capacity change from 0 to 128 [ 91.254378][ T6761] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.311114][ T6763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 91.330308][ T6763] System zones: 1-3, 19-19, 35-36 [ 91.343583][ T6763] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.365351][ T6763] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted [ 91.377396][ T6763] xt_hashlimit: max too large, truncated to 1048576 [ 91.400151][ T6763] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.500604][ T6781] syzkaller1: entered promiscuous mode [ 91.506261][ T6781] syzkaller1: entered allmulticast mode [ 91.705273][ T6796] syzkaller1: entered promiscuous mode [ 91.710790][ T6796] syzkaller1: entered allmulticast mode [ 91.757639][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 91.774813][ T6782] loop2: detected capacity change from 0 to 512 [ 91.783910][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 91.799239][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 91.824627][ T6782] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1022: bad orphan inode 11862016 [ 91.835860][ T6782] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.872668][ T6811] loop5: detected capacity change from 0 to 7 [ 91.884594][ T6811] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.892628][ T6811] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.900471][ T6811] loop5: unable to read partition table [ 91.906217][ T6811] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 91.906217][ T6811] ) failed (rc=-5) [ 91.944777][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 91.969826][ T6819] rdma_op ffff88811ae0bd80 conn xmit_rdma 0000000000000000 [ 92.000979][ T6814] lo speed is unknown, defaulting to 1000 [ 92.023652][ T6821] loop3: detected capacity change from 0 to 128 [ 92.038005][ T6821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 92.046056][ T6821] System zones: 1-3, 19-19, 35-36 [ 92.051860][ T6821] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.063064][ T6821] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted [ 92.076284][ T6821] xt_hashlimit: max too large, truncated to 1048576 [ 92.084042][ T6821] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.236512][ T6835] loop1: detected capacity change from 0 to 4096 [ 92.366731][ T6845] loop5: detected capacity change from 0 to 7 [ 92.404352][ T6845] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.412266][ T6845] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.420220][ T6845] loop5: unable to read partition table [ 92.421299][ T6828] loop2: detected capacity change from 0 to 512 [ 92.462137][ T6845] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 92.462137][ T6845] ) failed (rc=-5) [ 92.499067][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1034: bad orphan inode 11862016 [ 92.566031][ T6862] loop3: detected capacity change from 0 to 512 [ 92.573488][ T6828] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.613295][ T6862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.660057][ T6862] EXT4-fs (loop3): 1 truncate cleaned up [ 92.689957][ T6832] loop4: detected capacity change from 0 to 512 [ 92.737147][ T6832] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1036: bad orphan inode 11862016 [ 92.777369][ T6832] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.777814][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 92.822626][ T6867] team0 (unregistering): Port device team_slave_0 removed [ 92.855753][ T6867] team0 (unregistering): Port device team_slave_1 removed [ 92.924817][ T6873] netlink: 'wޣ': attribute type 27 has an invalid length. [ 93.003444][ T6875] loop5: detected capacity change from 0 to 7 [ 93.009620][ T6875] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.017648][ T6875] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.025607][ T6875] loop5: unable to read partition table [ 93.035961][ T6875] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 93.035961][ T6875] ) failed (rc=-5) [ 93.122973][ T6885] loop5: detected capacity change from 0 to 7 [ 93.129719][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1055'. [ 93.138862][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1055'. [ 93.142457][ T6885] loop5: unable to read partition table [ 93.150155][ T6887] netlink: 'syz.4.1055': attribute type 12 has an invalid length. [ 93.163058][ T6885] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 93.163058][ T6885] ) failed (rc=-5) [ 93.185713][ T6889] loop2: detected capacity change from 0 to 2048 [ 93.205526][ T6830] syz.1.1035 (6830) used greatest stack depth: 6184 bytes left [ 93.215072][ T6889] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.312976][ T6904] loop1: detected capacity change from 0 to 2048 [ 93.351229][ T6904] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.393926][ T6877] loop3: detected capacity change from 0 to 512 [ 93.405085][ T6877] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1050: bad orphan inode 11862016 [ 93.435000][ T6877] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.528854][ T6913] loop9: detected capacity change from 0 to 7 [ 93.598118][ T6906] loop4: detected capacity change from 0 to 512 [ 93.624842][ T6906] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1060: bad orphan inode 11862016 [ 93.670874][ T6906] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.756452][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 93.756465][ T29] audit: type=1326 audit(1764478745.249:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.797894][ T6927] netlink: 'wޣ': attribute type 27 has an invalid length. [ 93.803304][ T29] audit: type=1326 audit(1764478745.249:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.825779][ T6923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.828784][ T29] audit: type=1326 audit(1764478745.249:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.835403][ T6923] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 93.858856][ T29] audit: type=1326 audit(1764478745.249:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.866409][ T6923] audit: backlog limit exceeded [ 93.887260][ T6923] loop1: detected capacity change from 0 to 512 [ 93.889928][ T29] audit: type=1326 audit(1764478745.249:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.901990][ T6923] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.924433][ T29] audit: type=1326 audit(1764478745.249:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 93.956893][ T29] audit: type=1326 audit(1764478745.249:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 94.028158][ T6935] loop5: detected capacity change from 0 to 7 [ 94.034433][ T6935] buffer_io_error: 2 callbacks suppressed [ 94.034445][ T6935] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.048472][ T6935] Buffer I/O error on dev loop5, logical block 0, async page read [ 94.056400][ T6935] loop5: unable to read partition table [ 94.062097][ T6935] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 94.062097][ T6935] ) failed (rc=-5) [ 94.101348][ T6939] loop1: detected capacity change from 0 to 2048 [ 94.115646][ T6939] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.165889][ T6952] loop2: detected capacity change from 0 to 2048 [ 94.186381][ T6954] netlink: 'syz.4.1075': attribute type 30 has an invalid length. [ 94.207258][ T6952] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.591971][ T6977] netlink: 'wޣ': attribute type 27 has an invalid length. [ 94.660073][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.669785][ T6981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.694319][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 94.700297][ T6983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6983 comm=syz.2.1087 [ 94.735315][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 94.744459][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 94.753464][ T6983] netlink: 'syz.2.1087': attribute type 4 has an invalid length. [ 94.761177][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 94.773371][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 94.773765][ T6986] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 94.799535][ T6983] macvtap1: entered promiscuous mode [ 94.804982][ T6983] erspan0: entered promiscuous mode [ 94.810261][ T6983] macvtap1: entered allmulticast mode [ 94.815746][ T6983] erspan0: entered allmulticast mode [ 94.835481][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.849358][ T6992] bond1 (unregistering): Released all slaves [ 94.881737][ T6994] loop2: detected capacity change from 0 to 2048 [ 94.894090][ T6994] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.225182][ T7011] loop2: detected capacity change from 0 to 512 [ 95.252623][ T7011] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1092: bad orphan inode 11862016 [ 95.272979][ T7011] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.382145][ T3326] EXT4-fs unmount: 157 callbacks suppressed [ 95.382163][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.513972][ T7040] loop4: detected capacity change from 0 to 2048 [ 95.518774][ T7043] loop2: detected capacity change from 0 to 512 [ 95.544815][ T7040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.557824][ T7043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.570401][ T7040] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.751593][ T7055] xt_hashlimit: max too large, truncated to 1048576 [ 95.783159][ T7055] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.929529][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.985926][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.036332][ T7072] loop2: detected capacity change from 0 to 2048 [ 96.063691][ T7072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.099745][ T7072] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.115900][ T7081] pim6reg: entered allmulticast mode [ 96.129020][ T7081] pim6reg: left allmulticast mode [ 96.143624][ T7083] bond1: ARP target 9.0.0.0 is already present [ 96.149883][ T7083] bond1: option arp_ip_target: invalid value (9) [ 96.164747][ T7044] syz.0.1103 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.179020][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.0.1103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.179047][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.179059][ T7044] Call Trace: [ 96.179066][ T7044] [ 96.179072][ T7044] __dump_stack+0x1d/0x30 [ 96.179150][ T7044] dump_stack_lvl+0xe8/0x140 [ 96.179167][ T7044] dump_stack+0x15/0x1b [ 96.179204][ T7044] dump_header+0x81/0x220 [ 96.179220][ T7044] oom_kill_process+0x342/0x400 [ 96.179248][ T7044] out_of_memory+0x979/0xb80 [ 96.179276][ T7044] try_charge_memcg+0x610/0xa10 [ 96.179328][ T7044] obj_cgroup_charge_pages+0xa6/0x150 [ 96.179350][ T7044] __memcg_kmem_charge_page+0x9f/0x170 [ 96.179421][ T7044] __alloc_frozen_pages_noprof+0x188/0x360 [ 96.179448][ T7044] alloc_pages_mpol+0xb3/0x260 [ 96.179464][ T7044] ? alloc_pages_noprof+0x61/0x130 [ 96.179481][ T7044] alloc_pages_noprof+0x90/0x130 [ 96.179543][ T7044] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 96.179602][ T7044] __kvmalloc_node_noprof+0x483/0x670 [ 96.179700][ T7044] ? ip_set_alloc+0x24/0x30 [ 96.179722][ T7044] ? ip_set_alloc+0x24/0x30 [ 96.179750][ T7044] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 96.179773][ T7044] ip_set_alloc+0x24/0x30 [ 96.179832][ T7044] hash_netiface_create+0x282/0x740 [ 96.179910][ T7044] ? __pfx_hash_netiface_create+0x10/0x10 [ 96.179933][ T7044] ip_set_create+0x3cc/0x970 [ 96.179955][ T7044] ? __nla_parse+0x40/0x60 [ 96.179972][ T7044] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.180026][ T7044] netlink_rcv_skb+0x123/0x220 [ 96.180049][ T7044] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.180133][ T7044] nfnetlink_rcv+0x167/0x16c0 [ 96.180152][ T7044] ? insn_get_prefixes+0xa72/0xca0 [ 96.180169][ T7044] ? inat_get_opcode_attribute+0xc/0x20 [ 96.180206][ T7044] ? insn_get_opcode+0x7dd/0x890 [ 96.180251][ T7044] ? insn_get_modrm+0x367/0x390 [ 96.180323][ T7044] ? insn_get_modrm+0x367/0x390 [ 96.180337][ T7044] ? __rcu_read_lock+0x37/0x50 [ 96.180356][ T7044] ? trace_sys_enter+0xa/0xf0 [ 96.180447][ T7044] ? __pte_offset_map_lock+0x1d4/0x230 [ 96.180472][ T7044] ? do_sync_core+0x39/0x60 [ 96.180493][ T7044] ? smp_call_function_many_cond+0x7f8/0xc60 [ 96.180584][ T7044] ? ___slab_alloc+0x31d/0xb60 [ 96.180598][ T7044] ? xas_load+0x211/0x430 [ 96.180612][ T7044] ? should_fail_ex+0x30/0x280 [ 96.180627][ T7044] ? selinux_nlmsg_lookup+0x99/0x890 [ 96.180650][ T7044] ? __rcu_read_unlock+0x34/0x70 [ 96.180668][ T7044] ? __netlink_lookup+0x266/0x2a0 [ 96.180686][ T7044] netlink_unicast+0x5c0/0x690 [ 96.180775][ T7044] netlink_sendmsg+0x58b/0x6b0 [ 96.180792][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.180808][ T7044] __sock_sendmsg+0x145/0x180 [ 96.180828][ T7044] ____sys_sendmsg+0x31e/0x4e0 [ 96.180893][ T7044] ___sys_sendmsg+0x17b/0x1d0 [ 96.180916][ T7044] __x64_sys_sendmsg+0xd4/0x160 [ 96.180933][ T7044] x64_sys_call+0x191e/0x3000 [ 96.180951][ T7044] do_syscall_64+0xd2/0x200 [ 96.181034][ T7044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.181054][ T7044] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.181144][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.181161][ T7044] RIP: 0033:0x7efdd960f749 [ 96.181174][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.181263][ T7044] RSP: 002b:00007efdd806f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.181351][ T7044] RAX: ffffffffffffffda RBX: 00007efdd9865fa0 RCX: 00007efdd960f749 [ 96.181361][ T7044] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 96.181372][ T7044] RBP: 00007efdd9693f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.181383][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.181411][ T7044] R13: 00007efdd9866038 R14: 00007efdd9865fa0 R15: 00007fff0724ed58 [ 96.181425][ T7044] [ 96.181567][ T7044] memory: usage 307200kB, limit 307200kB, failcnt 1984 [ 96.563278][ T7044] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 96.563294][ T7044] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 96.563306][ T7044] Memory cgroup stats for /syz0: [ 96.563480][ T7044] cache 0 [ 96.586345][ T7044] rss 0 [ 96.589094][ T7044] shmem 0 [ 96.592046][ T7044] mapped_file 0 [ 96.595517][ T7044] dirty 0 [ 96.598437][ T7044] writeback 0 [ 96.601705][ T7044] workingset_refault_anon 81 [ 96.606304][ T7044] workingset_refault_file 699 [ 96.611005][ T7044] swap 372736 [ 96.614426][ T7044] swapcached 8192 [ 96.618190][ T7044] pgpgin 212108 [ 96.620728][ T7087] loop4: detected capacity change from 0 to 1024 [ 96.621649][ T7044] pgpgout 212106 [ 96.621658][ T7044] pgfault 256562 [ 96.621665][ T7044] pgmajfault 33 [ 96.638512][ T7044] inactive_anon 8192 [ 96.642419][ T7044] active_anon 0 [ 96.645892][ T7044] inactive_file 0 [ 96.649515][ T7044] active_file 0 [ 96.652979][ T7044] unevictable 0 [ 96.656418][ T7044] hierarchical_memory_limit 314572800 [ 96.661795][ T7044] hierarchical_memsw_limit 9223372036854771712 [ 96.667976][ T7044] total_cache 0 [ 96.671406][ T7044] total_rss 0 [ 96.674678][ T7044] total_shmem 0 [ 96.678153][ T7044] total_mapped_file 0 [ 96.682104][ T7044] total_dirty 0 [ 96.685562][ T7044] total_writeback 0 [ 96.689347][ T7044] total_workingset_refault_anon 81 [ 96.694443][ T7044] total_workingset_refault_file 699 [ 96.699610][ T7044] total_swap 372736 [ 96.703469][ T7044] total_swapcached 8192 [ 96.707595][ T7044] total_pgpgin 212108 [ 96.711641][ T7044] total_pgpgout 212106 [ 96.715716][ T7044] total_pgfault 256562 [ 96.719798][ T7044] total_pgmajfault 33 [ 96.723776][ T7044] total_inactive_anon 8192 [ 96.728258][ T7044] total_active_anon 0 [ 96.732214][ T7044] total_inactive_file 0 [ 96.736354][ T7044] total_active_file 0 [ 96.740377][ T7044] total_unevictable 0 [ 96.744350][ T7044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1103,pid=7042,uid=0 [ 96.758934][ T7044] Memory cgroup out of memory: Killed process 7042 (syz.0.1103) total-vm:96016kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 96.777347][ T7083] bond1 (unregistering): Released all slaves [ 96.786137][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.892114][ T7098] __nla_validate_parse: 5 callbacks suppressed [ 96.892129][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 96.940901][ T7103] FAULT_INJECTION: forcing a failure. [ 96.940901][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 96.953676][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.0.1125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.953701][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.953709][ T7103] Call Trace: [ 96.953715][ T7103] [ 96.953723][ T7103] __dump_stack+0x1d/0x30 [ 96.953805][ T7103] dump_stack_lvl+0xe8/0x140 [ 96.953821][ T7103] dump_stack+0x15/0x1b [ 96.953834][ T7103] should_fail_ex+0x265/0x280 [ 96.953849][ T7103] should_failslab+0x8c/0xb0 [ 96.953900][ T7103] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 96.953922][ T7103] ? __alloc_skb+0x101/0x320 [ 96.953944][ T7103] __alloc_skb+0x101/0x320 [ 96.953977][ T7103] netlink_alloc_large_skb+0xbf/0xf0 [ 96.954010][ T7103] netlink_sendmsg+0x3cf/0x6b0 [ 96.954027][ T7103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.954042][ T7103] __sock_sendmsg+0x145/0x180 [ 96.954117][ T7103] ____sys_sendmsg+0x31e/0x4e0 [ 96.954134][ T7103] ___sys_sendmsg+0x17b/0x1d0 [ 96.954157][ T7103] __x64_sys_sendmsg+0xd4/0x160 [ 96.954174][ T7103] x64_sys_call+0x191e/0x3000 [ 96.954196][ T7103] do_syscall_64+0xd2/0x200 [ 96.954213][ T7103] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.954233][ T7103] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.954261][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.954277][ T7103] RIP: 0033:0x7efdd960f749 [ 96.954292][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.954305][ T7103] RSP: 002b:00007efdd806f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.954322][ T7103] RAX: ffffffffffffffda RBX: 00007efdd9865fa0 RCX: 00007efdd960f749 [ 96.954331][ T7103] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 96.954357][ T7103] RBP: 00007efdd806f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.954367][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.954376][ T7103] R13: 00007efdd9866038 R14: 00007efdd9865fa0 R15: 00007fff0724ed58 [ 96.954391][ T7103] [ 97.243840][ T7107] loop2: detected capacity change from 0 to 2048 [ 97.273410][ T7107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.302548][ T7107] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.382713][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.394609][ T7125] openvswitch: netlink: Missing key (keys=40, expected=80) [ 97.413153][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 97.448206][ T7127] team0 (unregistering): Port device team_slave_0 removed [ 97.479854][ T7127] team0 (unregistering): Port device team_slave_1 removed [ 97.508917][ T7142] loop2: detected capacity change from 0 to 128 [ 97.528942][ T7142] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 97.536817][ T7142] FAT-fs (loop2): Filesystem has been set read-only [ 97.603152][ T7100] loop4: detected capacity change from 0 to 512 [ 97.626257][ T7100] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1124: bad orphan inode 11862016 [ 97.655554][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.681429][ T7100] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.804941][ T7152] loop2: detected capacity change from 0 to 4096 [ 97.837445][ T7151] loop1: detected capacity change from 0 to 4096 [ 97.849207][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.881644][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.058435][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.309049][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 98.545004][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.574782][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.631649][ T7181] loop5: detected capacity change from 0 to 7 [ 98.641411][ T7181] Buffer I/O error on dev loop5, logical block 0, async page read [ 98.650036][ T7181] Buffer I/O error on dev loop5, logical block 0, async page read [ 98.657925][ T7181] loop5: unable to read partition table [ 98.667212][ T7181] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 98.667212][ T7181] ) failed (rc=-5) [ 98.805236][ T7177] loop1: detected capacity change from 0 to 512 [ 98.823814][ T7177] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1143: bad orphan inode 11862016 [ 98.834949][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.847729][ T7177] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.926107][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 98.926123][ T29] audit: type=1326 audit(1764478750.419:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.016262][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.032991][ T29] audit: type=1326 audit(1764478750.419:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.056503][ T29] audit: type=1326 audit(1764478750.459:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.080208][ T29] audit: type=1326 audit(1764478750.459:9962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.103676][ T29] audit: type=1326 audit(1764478750.459:9963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.127104][ T29] audit: type=1326 audit(1764478750.459:9964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.127553][ T7224] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1158'. [ 99.150504][ T29] audit: type=1326 audit(1764478750.459:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.150532][ T29] audit: type=1326 audit(1764478750.459:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.150554][ T29] audit: type=1326 audit(1764478750.459:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.229831][ T29] audit: type=1326 audit(1764478750.459:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874676f749 code=0x7ffc0000 [ 99.262554][ T7224] hsr_slave_0: left promiscuous mode [ 99.268506][ T7224] hsr_slave_1: left promiscuous mode [ 99.344419][ T7216] loop2: detected capacity change from 0 to 4096 [ 99.345896][ T7228] loop1: detected capacity change from 0 to 1024 [ 99.375163][ T7229] loop4: detected capacity change from 0 to 512 [ 99.400308][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.424471][ T7229] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1159: bad orphan inode 11862016 [ 99.466473][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.515937][ T7229] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.666171][ T7213] syz.2.1154 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 99.680343][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.2.1154 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.680461][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.680472][ T7213] Call Trace: [ 99.680478][ T7213] [ 99.680542][ T7213] __dump_stack+0x1d/0x30 [ 99.680566][ T7213] dump_stack_lvl+0xe8/0x140 [ 99.680648][ T7213] dump_stack+0x15/0x1b [ 99.680662][ T7213] dump_header+0x81/0x220 [ 99.680680][ T7213] oom_kill_process+0x342/0x400 [ 99.680714][ T7213] out_of_memory+0x979/0xb80 [ 99.680807][ T7213] try_charge_memcg+0x610/0xa10 [ 99.680836][ T7213] obj_cgroup_charge_pages+0xa6/0x150 [ 99.680858][ T7213] __memcg_kmem_charge_page+0x9f/0x170 [ 99.680950][ T7213] __alloc_frozen_pages_noprof+0x188/0x360 [ 99.680986][ T7213] alloc_pages_mpol+0xb3/0x260 [ 99.681038][ T7213] alloc_pages_noprof+0x90/0x130 [ 99.681056][ T7213] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 99.681101][ T7213] __kvmalloc_node_noprof+0x483/0x670 [ 99.681183][ T7213] ? ip_set_alloc+0x24/0x30 [ 99.681211][ T7213] ? ip_set_alloc+0x24/0x30 [ 99.681259][ T7213] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 99.681291][ T7213] ip_set_alloc+0x24/0x30 [ 99.681319][ T7213] hash_netiface_create+0x282/0x740 [ 99.681420][ T7213] ? __pfx_hash_netiface_create+0x10/0x10 [ 99.681447][ T7213] ip_set_create+0x3cc/0x970 [ 99.681475][ T7213] ? __nla_parse+0x40/0x60 [ 99.681499][ T7213] nfnetlink_rcv_msg+0x4c6/0x590 [ 99.681593][ T7213] netlink_rcv_skb+0x123/0x220 [ 99.681675][ T7213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.681710][ T7213] nfnetlink_rcv+0x167/0x16c0 [ 99.681734][ T7213] ? insn_get_prefixes+0xa72/0xca0 [ 99.681812][ T7213] ? inat_get_opcode_attribute+0xc/0x20 [ 99.681838][ T7213] ? insn_get_opcode+0x7dd/0x890 [ 99.681857][ T7213] ? insn_get_modrm+0x367/0x390 [ 99.681875][ T7213] ? insn_get_modrm+0x367/0x390 [ 99.681908][ T7213] ? __rcu_read_lock+0x37/0x50 [ 99.681929][ T7213] ? trace_sys_enter+0xa/0xf0 [ 99.681987][ T7213] ? __pte_offset_map_lock+0x1d4/0x230 [ 99.682018][ T7213] ? do_sync_core+0x39/0x60 [ 99.682057][ T7213] ? smp_call_function_many_cond+0x7f8/0xc60 [ 99.682163][ T7213] ? __pfx_do_sync_core+0x10/0x10 [ 99.682315][ T7213] ? should_fail_ex+0x30/0x280 [ 99.682335][ T7213] ? selinux_nlmsg_lookup+0x99/0x890 [ 99.682425][ T7213] ? __rcu_read_unlock+0x34/0x70 [ 99.682532][ T7213] ? __netlink_lookup+0x266/0x2a0 [ 99.682552][ T7213] netlink_unicast+0x5c0/0x690 [ 99.682585][ T7213] netlink_sendmsg+0x58b/0x6b0 [ 99.682606][ T7213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.682659][ T7213] __sock_sendmsg+0x145/0x180 [ 99.682685][ T7213] ____sys_sendmsg+0x31e/0x4e0 [ 99.682707][ T7213] ___sys_sendmsg+0x17b/0x1d0 [ 99.682738][ T7213] __x64_sys_sendmsg+0xd4/0x160 [ 99.682789][ T7213] x64_sys_call+0x191e/0x3000 [ 99.682810][ T7213] do_syscall_64+0xd2/0x200 [ 99.682831][ T7213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.682858][ T7213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.683017][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.683040][ T7213] RIP: 0033:0x7f874676f749 [ 99.683057][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.683082][ T7213] RSP: 002b:00007f87451cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.683103][ T7213] RAX: ffffffffffffffda RBX: 00007f87469c5fa0 RCX: 00007f874676f749 [ 99.683116][ T7213] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 99.683129][ T7213] RBP: 00007f87467f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.683142][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.683156][ T7213] R13: 00007f87469c6038 R14: 00007f87469c5fa0 R15: 00007ffc943cabf8 [ 99.683178][ T7213] [ 100.047470][ T7213] memory: usage 307200kB, limit 307200kB, failcnt 854 [ 100.047486][ T7213] memory+swap: usage 309632kB, limit 9007199254740988kB, failcnt 0 [ 100.047498][ T7213] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 100.047508][ T7213] Memory cgroup stats for /syz2: [ 100.052549][ T7213] cache 53248 [ 100.055050][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.062455][ T7213] rss 0 [ 100.080151][ T7244] loop1: detected capacity change from 0 to 512 [ 100.086858][ T7213] shmem 0 [ 100.086869][ T7213] mapped_file 0 [ 100.086876][ T7213] dirty 0 [ 100.086883][ T7213] writeback 40960 [ 100.104348][ T7244] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1164: bad orphan inode 11862016 [ 100.105230][ T7213] workingset_refault_anon 284 [ 100.109335][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.119359][ T7213] workingset_refault_file 968 [ 100.119371][ T7213] swap 2490368 [ 100.119377][ T7213] swapcached 28672 [ 100.119384][ T7213] pgpgin 239455 [ 100.124421][ T7244] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.136498][ T7213] pgpgout 239435 [ 100.136508][ T7213] pgfault 292731 [ 100.136515][ T7213] pgmajfault 67 [ 100.172739][ T7213] inactive_anon 8192 [ 100.172750][ T7213] active_anon 20480 [ 100.172758][ T7213] inactive_file 0 [ 100.172766][ T7213] active_file 53248 [ 100.172772][ T7213] unevictable 0 [ 100.172780][ T7213] hierarchical_memory_limit 314572800 [ 100.172801][ T7213] hierarchical_memsw_limit 9223372036854771712 [ 100.172810][ T7213] total_cache 53248 [ 100.172817][ T7213] total_rss 0 [ 100.172823][ T7213] total_shmem 0 [ 100.172829][ T7213] total_mapped_file 0 [ 100.172835][ T7213] total_dirty 0 [ 100.172841][ T7213] total_writeback 40960 [ 100.172847][ T7213] total_workingset_refault_anon 284 [ 100.172854][ T7213] total_workingset_refault_file 968 [ 100.172911][ T7213] total_swap 2490368 [ 100.172919][ T7213] total_swapcached 28672 [ 100.172926][ T7213] total_pgpgin 239455 [ 100.172941][ T7213] total_pgpgout 239435 [ 100.172948][ T7213] total_pgfault 292731 [ 100.172956][ T7213] total_pgmajfault 67 [ 100.172964][ T7213] total_inactive_anon 8192 [ 100.172971][ T7213] total_active_anon 20480 [ 100.172980][ T7213] total_inactive_file 0 [ 100.172987][ T7213] total_active_file 53248 [ 100.172995][ T7213] total_unevictable 0 [ 100.173033][ T7213] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1154,pid=7211,uid=0 [ 100.173163][ T7213] Memory cgroup out of memory: Killed process 7211 (syz.2.1154) total-vm:98336kB, anon-rss:1136kB, file-rss:26532kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 100.435817][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.510677][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.562621][ T7270] loop5: detected capacity change from 0 to 7 [ 100.578874][ T7272] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.596953][ T7272] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.604837][ T7272] loop5: unable to read partition table [ 100.621534][ T7270] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.633640][ T7252] loop4: detected capacity change from 0 to 512 [ 100.640897][ T7270] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.648757][ T7270] loop5: unable to read partition table [ 100.654618][ T7270] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 100.654618][ T7270] ) failed (rc=-5) [ 100.672872][ T7252] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1165: bad orphan inode 11862016 [ 100.690411][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.703182][ T7252] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.883913][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.910735][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 100.939206][ T7281] loop1: detected capacity change from 0 to 512 [ 100.956643][ T7281] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1176: bad orphan inode 11862016 [ 100.957918][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1180'. [ 100.995031][ T7281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.042815][ T7281] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.193868][ T7304] loop4: detected capacity change from 0 to 4096 [ 101.242512][ T7304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.278288][ T7315] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1187'. [ 101.317133][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.413204][ T7318] netlink: 'wޣ': attribute type 27 has an invalid length. [ 101.617006][ T7312] loop2: detected capacity change from 0 to 512 [ 101.641522][ T7312] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1186: bad orphan inode 11862016 [ 101.663785][ T7312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.710587][ T7321] loop1: detected capacity change from 0 to 512 [ 101.720505][ T7312] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.754269][ T7321] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1188: bad orphan inode 11862016 [ 101.782814][ T7321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.835863][ T7321] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.883685][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 102.000386][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.024224][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.037976][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.103303][ T7346] netlink: 'wޣ': attribute type 27 has an invalid length. [ 102.146782][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 102.405105][ T7356] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1199'. [ 102.516891][ T7358] loop1: detected capacity change from 0 to 2048 [ 102.556214][ T7358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.629521][ T7358] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.084823][ T7374] loop2: detected capacity change from 0 to 512 [ 103.100429][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.132866][ T7367] loop4: detected capacity change from 0 to 512 [ 103.143684][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1204: bad orphan inode 11862016 [ 103.156126][ T7374] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1206: bad orphan inode 11862016 [ 103.172097][ T7380] netlink: 'wޣ': attribute type 27 has an invalid length. [ 103.175302][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.199353][ T7374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.211961][ T7367] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.227336][ T7374] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.337732][ T7387] loop1: detected capacity change from 0 to 4096 [ 103.384347][ T7391] netlink: 'wޣ': attribute type 27 has an invalid length. [ 103.384989][ T7387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.429375][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.573164][ T7389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7389 comm=syz.0.1209 [ 103.645938][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.716259][ T7403] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1212'. [ 103.936433][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 103.936448][ T29] audit: type=1326 audit(1764478755.429:10692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa878af749 code=0x7ffc0000 [ 103.966254][ T29] audit: type=1326 audit(1764478755.429:10693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa878af749 code=0x7ffc0000 [ 104.022150][ T7386] ================================================================== [ 104.030235][ T7386] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 104.038057][ T7386] [ 104.040357][ T7386] write to 0xffffea0004b59118 of 8 bytes by task 7351 on cpu 0: [ 104.047958][ T7386] __filemap_remove_folio+0x1a5/0x2a0 [ 104.053308][ T7386] filemap_remove_folio+0x6d/0x1d0 [ 104.058396][ T7386] truncate_inode_folio+0x42/0x50 [ 104.063395][ T7386] shmem_undo_range+0x244/0xa80 [ 104.068233][ T7386] shmem_evict_inode+0x134/0x520 [ 104.073155][ T7386] evict+0x2e3/0x550 [ 104.077029][ T7386] iput+0x4ed/0x650 [ 104.080818][ T7386] dentry_unlink_inode+0x24f/0x260 [ 104.085904][ T7386] __dentry_kill+0x18d/0x4b0 [ 104.090472][ T7386] dput+0x5e/0xd0 [ 104.094083][ T7386] __fput+0x444/0x650 [ 104.098038][ T7386] ____fput+0x1c/0x30 [ 104.101994][ T7386] task_work_run+0x131/0x1a0 [ 104.106557][ T7386] do_exit+0x483/0x15c0 [ 104.110780][ T7386] do_group_exit+0xff/0x140 [ 104.115257][ T7386] get_signal+0xe58/0xf70 [ 104.119561][ T7386] arch_do_signal_or_restart+0x96/0x440 [ 104.125081][ T7386] irqentry_exit_to_user_mode+0x5b/0xa0 [ 104.130616][ T7386] irqentry_exit+0x12/0x50 [ 104.135009][ T7386] asm_exc_page_fault+0x26/0x30 [ 104.139858][ T7386] [ 104.142159][ T7386] read to 0xffffea0004b59118 of 8 bytes by task 7386 on cpu 1: [ 104.149673][ T7386] folio_mapping+0xa1/0xe0 [ 104.154066][ T7386] move_folios_to_lru+0x128/0x6c0 [ 104.159067][ T7386] evict_folios+0x31d0/0x3590 [ 104.163719][ T7386] try_to_shrink_lruvec+0x5b5/0x950 [ 104.168896][ T7386] shrink_lruvec+0x22e/0x1b50 [ 104.173545][ T7386] shrink_node+0x686/0x2120 [ 104.178021][ T7386] do_try_to_free_pages+0x3f6/0xcd0 [ 104.183188][ T7386] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 104.189055][ T7386] try_charge_memcg+0x383/0xa10 [ 104.193879][ T7386] obj_cgroup_charge_pages+0xa6/0x150 [ 104.199220][ T7386] __memcg_kmem_charge_page+0x9f/0x170 [ 104.204734][ T7386] __alloc_frozen_pages_noprof+0x188/0x360 [ 104.210519][ T7386] alloc_pages_mpol+0xb3/0x260 [ 104.215255][ T7386] alloc_pages_noprof+0x90/0x130 [ 104.220166][ T7386] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 104.225949][ T7386] __kvmalloc_node_noprof+0x483/0x670 [ 104.231304][ T7386] ip_set_alloc+0x24/0x30 [ 104.235615][ T7386] hash_netiface_create+0x282/0x740 [ 104.240789][ T7386] ip_set_create+0x3cc/0x970 [ 104.245350][ T7386] nfnetlink_rcv_msg+0x4c6/0x590 [ 104.250262][ T7386] netlink_rcv_skb+0x123/0x220 [ 104.255005][ T7386] nfnetlink_rcv+0x167/0x16c0 [ 104.259656][ T7386] netlink_unicast+0x5c0/0x690 [ 104.264393][ T7386] netlink_sendmsg+0x58b/0x6b0 [ 104.269128][ T7386] __sock_sendmsg+0x145/0x180 [ 104.273779][ T7386] ____sys_sendmsg+0x31e/0x4e0 [ 104.278512][ T7386] ___sys_sendmsg+0x17b/0x1d0 [ 104.283160][ T7386] __x64_sys_sendmsg+0xd4/0x160 [ 104.287980][ T7386] x64_sys_call+0x191e/0x3000 [ 104.292629][ T7386] do_syscall_64+0xd2/0x200 [ 104.297105][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.302967][ T7386] [ 104.305261][ T7386] value changed: 0xffff88811ae25648 -> 0x0000000000000000 [ 104.312335][ T7386] [ 104.314630][ T7386] Reported by Kernel Concurrency Sanitizer on: [ 104.320751][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.1.1207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.330441][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.340471][ T7386] ================================================================== [ 104.514662][ T7386] syz.1.1207 (7386) used greatest stack depth: 6008 bytes left [ 104.524047][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.