last executing test programs: 25.56838129s ago: executing program 2 (id=803): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 24.474863778s ago: executing program 2 (id=828): wait4(0x0, &(0x7f0000000240), 0x40000000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x2, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x5, 0x200000d1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x60, 0x20005, 0x202b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = syz_io_uring_setup(0x198f, &(0x7f0000000000)={0x0, 0x3f08, 0x1000, 0x1, 0x167, 0x0, r3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/127, 0x7f}], 0x8) 24.012634625s ago: executing program 2 (id=833): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000000540)={0x200, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23.932092972s ago: executing program 2 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nogrpid}, {@noinit_itable}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc00000}, {0x6, 0x11, 0x7fff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000ac0)=[{0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) (async) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x1, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3000) recvmsg$kcm(r5, 0x0, 0x12160) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003c) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x3114}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xee}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x58}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08", @ANYRES32=r11, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 23.743867718s ago: executing program 2 (id=839): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000", @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="5c4702a1500b6d3ea74ad91d91a082ffbbdab86c705550cf047daf785ce14e83f156fe3c73f0eaa9ddea6c68b5f152115acede20dc5892cc333c34bbd408136774d68d115a14acae5ff7fda81e86c5ca41740e0eb77e43", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="1b54aab46819ad9635e7b95c35985708daefb89801095d95c45792435e4791d8435d7bc65cab357f552a72464a7d3cd51b4a269677488020008d1f9a50bd1c8f666ed4cb78469111f3c923b323bda4fc6936bb03724db3bfef19030f6395b3b50b3ae55d78ec506dbc599fda68ab87758faa32223e880635a997645934551fc2e7a954b5777827191a1ce9f4c234162c4be53ec880327565d058c77c5c1f94b9ca09b075bd531b966f977f7659bae21b74f33a9731b07f46664c102cfdcde893c78fe6971bfc3d297a8d9378ef072d3b8a1741a23c557b", @ANYRES64=0x0], 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000300)='percpu_create_chunk\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_mkdir\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r9, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 23.495980238s ago: executing program 2 (id=845): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x1, &(0x7f0000000180)) 23.495670877s ago: executing program 32 (id=845): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x1, &(0x7f0000000180)) 9.834923383s ago: executing program 0 (id=1037): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 9.730196222s ago: executing program 0 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x80, 0x124}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xfd, 0x23, 0x400, 0x20, @loopback, @empty, 0x1, 0x80, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x3ff, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x0, 0x81}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'pim6reg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x44) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xb0000014}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 9.62713751s ago: executing program 0 (id=1044): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x1, &(0x7f0000000180)) 9.549635386s ago: executing program 0 (id=1046): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES16=r2], 0x48) accept4(r1, &(0x7f0000000280)=@alg, &(0x7f0000000300)=0x80, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYRES16], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001340)='./file0\x00', 0x2804812, &(0x7f0000001100)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@utf8}, {@mode={'mode', 0x3d, 0x5d8}}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x4}}, {}, {@showassoc}, {@nocompress}, {@cruft}, {@nocompress}, {@overriderock}, {@check_relaxed}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@map_off}]}, 0x3, 0xa4d, &(0x7f0000001380)="$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") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xd5) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(r0, r1, 0x80000) 9.377353211s ago: executing program 0 (id=1048): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000540)='./file1\x00', 0x8900, 0xed) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x22040000}, 0x4044) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14140d", @ANYRES32=r2, @ANYBLOB="0000000024000000000000002900000032000000fc02000000000000000000000000000b", @ANYRES32=r2, @ANYBLOB="17000000"], 0x50}}], 0x1, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040000a03b19f9dd405d7e7fdbe06b4a5a059a8e411c647f517c35d75b9667"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r5, 0xffffffffffffffff, 0x34}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='ext4_discard_preallocations\x00', r5, 0x0, 0x7fff}, 0xffffff42) memfd_secret(0x0) 9.308077556s ago: executing program 0 (id=1050): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x108412, 0x0, 0x800000, 0x1, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ff", 0x3, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000005c0)={0x3, 0x10, 0x9, 0x3, 0x0, 0x100, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES8=r5], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d8067e26fa8b99fd6a7e0f780b5d70189f9c871eba648b314a31f5eaab4dd278a924f10a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.506163266s ago: executing program 4 (id=1129): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x800, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 3.505697666s ago: executing program 4 (id=1130): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x2, 0x80000000}) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) 3.486710818s ago: executing program 4 (id=1131): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 3.419969893s ago: executing program 4 (id=1133): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) 3.378742156s ago: executing program 4 (id=1134): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="d7921b9e26b6b4ad941e8a2f2fb63db984d78962c4727739d3bbcc270eb4e65b3e7bbeb55b65397ebb74c76a31a03957a50a51ea5eb66f21cfaa01e9328cd01abb07a3c712", 0x45}], 0x1, &(0x7f0000000c00)=ANY=[], 0xe0}}], 0x400000000000184, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1f, 0x1a, 0xdc, &(0x7f0000001440)="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"}) splice(r5, 0x0, r1, 0x0, 0x7ffff000, 0x6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80), 0x2, 0x9}}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffff, 0x2}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) 1.892710547s ago: executing program 3 (id=1156): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000", @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="5c4702a1500b6d3ea74ad91d91a082ffbbdab86c705550cf047daf785ce14e83f156fe3c73f0eaa9ddea6c68b5f152115acede20dc5892cc333c34bbd408136774d68d115a14acae5ff7fda81e86c5ca41740e0eb77e43", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="1b54aab46819ad9635e7b95c35985708daefb89801095d95c45792435e4791d8435d7bc65cab357f552a72464a7d3cd51b4a269677488020008d1f9a50bd1c8f666ed4cb78469111f3c923b323bda4fc6936bb03724db3bfef19030f6395b3b50b3ae55d78ec506dbc599fda68ab87758faa32223e880635a997645934551fc2e7a954b5777827191a1ce9f4c234162c4be53ec880327565d058c77c5c1f94b9ca09b075bd531b966f977f7659bae21b74f33a9731b07f46664c102cfdcde893c78fe6971bfc3d297a8d9378ef072d3b8a1741a23c557b", @ANYRES64=0x0], 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_mkdir\x00', r1, 0x0, 0x4}, 0x18) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r10, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, r8, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 1.677392074s ago: executing program 1 (id=1158): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x2, 0x80000000}) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) 1.659448646s ago: executing program 1 (id=1159): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 1.562084063s ago: executing program 3 (id=1160): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000", @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="5c4702a1500b6d3ea74ad91d91a082ffbbdab86c705550cf047daf785ce14e83f156fe3c73f0eaa9ddea6c68b5f152115acede20dc5892cc333c34bbd408136774d68d115a14acae5ff7fda81e86c5ca41740e0eb77e43", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="1b54aab46819ad9635e7b95c35985708daefb89801095d95c45792435e4791d8435d7bc65cab357f552a72464a7d3cd51b4a269677488020008d1f9a50bd1c8f666ed4cb78469111f3c923b323bda4fc6936bb03724db3bfef19030f6395b3b50b3ae55d78ec506dbc599fda", @ANYRES64=0x0], 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000300)='percpu_create_chunk\x00', r1, 0x0, 0x5}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_mkdir\x00', r1, 0x0, 0x4}, 0x18) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r10, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, r8, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 1.201148273s ago: executing program 3 (id=1162): socket(0x10, 0x803, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) futex_waitv(&(0x7f0000001a00)=[{0x4, &(0x7f0000000840)=0xf, 0x2, 0x2000000}, {0x2, &(0x7f0000000880)=0x101, 0x82}, {0x0, &(0x7f00000008c0)=0xa, 0x82}, {0x4, &(0x7f0000000900)=0x9, 0x82}, {0x4, 0x0, 0x82}, {0xffffffff00000001, &(0x7f0000000a40)=0x7, 0x2}, {0x3, &(0x7f0000000ac0)=0x9, 0x82}, {0x7ff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xa42, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0xfffffffffffffff7, &(0x7f0000000c80)=0x1ff, 0x82}, {0x7, &(0x7f0000000cc0)=0x4948, 0x2}, {0xfffffffffffffff0, &(0x7f0000000d00)=0xf6, 0x2}, {0x4, &(0x7f0000000d40)=0xd, 0x82}, {0xffffffffffffffff, &(0x7f0000000d80)=0x10000, 0x2}, {0xfb5, 0x0, 0x82}, {0xc, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xb2, 0x0, 0x82}, {0xfffffffffffffffb, 0x0, 0x82}, {0x80000000, 0x0, 0x80}, {0x579, 0x0, 0x2}, {0x1, 0x0}, {0x9, 0x0, 0x2}, {0x392e, 0x0, 0x2}, {0x1af4, 0x0, 0x82}, {0xba6, 0x0, 0x82}, {0x400, 0x0}, {0x1, 0x0, 0x82}], 0x1e, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 987.64349ms ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 916.595456ms ago: executing program 3 (id=1167): wait4(0x0, &(0x7f0000000240), 0x40000000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x2, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x5, 0x200000d1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x60, 0x20005, 0x202b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = syz_io_uring_setup(0x198f, &(0x7f0000000000)={0x0, 0x3f08, 0x1000, 0x1, 0x167, 0x0, r3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/127, 0x7f}], 0x8) 810.264854ms ago: executing program 1 (id=1170): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x1, 0x2, 0x80000000}) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(0xffffffffffffffff, r4, 0x0, 0x8) 724.038482ms ago: executing program 1 (id=1171): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) 723.609431ms ago: executing program 5 (id=1172): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="7e0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000009db7dd00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="de73d81ea1cac1b8ef4e02490dc60c627a0d11420500000001b9ac66079548ad0496d696ed05085a624bd80fa857dd9f34b83c00defccdff07d3857d2725585b6d19892fe7638f3238d134b83cb3ee316f691415cafb8577931fd583b90d1e7a217126c4dfec37eefd5fddacceb6c474532b0f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd8e3113b4068ac97) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 697.477163ms ago: executing program 1 (id=1173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="dc685ce7d7858e77395454e3f996f8577dbdbed56fda6c645e77f4fecda63c684ec180a605416f5ea9c57d2be882c93acd804484c2b0a4740006edb6a2d9ed449b33fe2c8cc8cf4517ac520b12a5e2ef49f2e121717b83e2e0110534c6aa7ab9b23ce12cc19d513843cfcc062b3703f5907babae3a105fbc7c2916473792e3969534f932971307d309dc501898afcd331a963b181f398af4748f02f93fd3c169368dee7a859cd1a13d585615d73eb5a4d8d9c90b026c0379ec1a51d5f14e", 0xfffffffffffffe96}], 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) syz_clone3(&(0x7f0000000e00)={0xa204000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0xd, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000000)='syzkaller\x00', 0x5e, 0x92, &(0x7f00000003c0)=""/146, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2e, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x1, 0x401, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000ac0)=[{0x1, 0x2, 0xe, 0xa}, {0x4, 0x1, 0x10, 0xc}, {0x5, 0x1, 0x9}], 0x10, 0x1}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX], 0x10c}, 0x1, 0x0, 0x0, 0x24000000}, 0x840) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000bc0)={[{@errors_remount}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff60) 661.201486ms ago: executing program 5 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) clock_settime(0x1, &(0x7f0000000180)) 644.729798ms ago: executing program 5 (id=1175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0xf5) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r3}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x3a, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000400)}, 0x10) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 590.546972ms ago: executing program 3 (id=1176): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 418.361086ms ago: executing program 5 (id=1177): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 230.376101ms ago: executing program 5 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="195e7ec4fd9e4de5ea8e67c6d3caace3fde1513cd7e2c206d031", @ANYRES64], 0x0) 229.871562ms ago: executing program 5 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="7e0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000009db7dd00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="de73d81ea1cac1b8ef4e02490dc60c627a0d11420500000001b9ac66079548ad0496d696ed05085a624bd80fa857dd9f34b83c00defccdff07d3857d2725585b6d19892fe7638f3238d134b83cb3ee316f691415cafb8577931fd583b90d1e7a217126c4dfec37eefd5fddacceb6c474532b0f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd8e3113b4068ac97) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 76.752264ms ago: executing program 1 (id=1180): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 0s ago: executing program 4 (id=1181): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000700)="dc", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) kernel console output (not intermixed with test programs): 8 comm="syz.1.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a9b4ebe9 code=0x7ffc0000 [ 64.779660][ T29] audit: type=1326 audit(1754946224.713:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5398 comm="syz.1.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a9b4ebe9 code=0x7ffc0000 [ 64.785890][ T5408] sd 0:0:1:0: device reset [ 64.803296][ T29] audit: type=1326 audit(1754946224.723:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5398 comm="syz.1.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f68a9b4ebe9 code=0x7ffc0000 [ 64.831337][ T29] audit: type=1326 audit(1754946224.723:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5398 comm="syz.1.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a9b4ec23 code=0x7ffc0000 [ 64.855285][ T29] audit: type=1326 audit(1754946224.723:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5398 comm="syz.1.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a9b4ec23 code=0x7ffc0000 [ 64.855303][ T5409] loop0: detected capacity change from 0 to 512 [ 64.983566][ T5417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.691'. [ 64.993135][ T5409] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.088580][ C0] hrtimer: interrupt took 56884 ns [ 65.135444][ T5424] sd 0:0:1:0: device reset [ 65.159048][ T5424] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 65.167732][ T5424] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 65.197802][ T5429] loop2: detected capacity change from 0 to 512 [ 65.244448][ T5429] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.275138][ T5435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 65.288044][ T5436] loop0: detected capacity change from 0 to 512 [ 65.334091][ T5436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.346324][ T5436] EXT4-fs (loop0): 1 truncate cleaned up [ 65.359757][ T5436] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 65.602018][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 65.732368][ T5457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.703'. [ 65.842141][ T5465] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 65.912026][ T5465] loop4: detected capacity change from 0 to 512 [ 65.918794][ T5465] EXT4-fs: inline encryption not supported [ 65.931576][ T5465] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.706: error while reading EA inode 32 err=-116 [ 65.944700][ T5465] EXT4-fs (loop4): Remounting filesystem read-only [ 65.951327][ T5465] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 65.962171][ T5465] EXT4-fs (loop4): 1 orphan inode deleted [ 66.002699][ T5469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 66.046917][ T5473] loop2: detected capacity change from 0 to 512 [ 66.056350][ T5473] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 66.064212][ T5473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.709'. [ 66.116733][ T5479] sd 0:0:1:0: device reset [ 66.195009][ T5488] loop1: detected capacity change from 0 to 128 [ 66.226392][ T5485] 0: renamed from 71 (while UP) [ 66.239098][ T5485] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 66.278046][ T5492] loop3: detected capacity change from 0 to 8192 [ 66.301325][ T5488] bio_check_eod: 26315 callbacks suppressed [ 66.301396][ T5488] syz.1.715: attempt to access beyond end of device [ 66.301396][ T5488] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 66.352053][ T5492] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 66.360104][ T5492] FAT-fs (loop3): Filesystem has been set read-only [ 66.395580][ T5500] sd 0:0:1:0: device reset [ 66.505971][ T5511] loop1: detected capacity change from 0 to 512 [ 66.528058][ T5511] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 66.572906][ T5513] loop3: detected capacity change from 0 to 512 [ 66.591388][ T5513] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.600583][ T5513] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 66.611538][ T5513] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 66.621288][ T5513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 66.630683][ T5513] System zones: 0-2, 18-18, 34-35 [ 66.640954][ T5527] sd 0:0:1:0: device reset [ 66.644928][ T5528] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 66.682578][ T5533] hub 6-0:1.0: USB hub found [ 66.687490][ T5533] hub 6-0:1.0: 8 ports detected [ 66.721802][ T5533] 1: renamed from 70 (while UP) [ 66.728314][ T5535] loop1: detected capacity change from 0 to 512 [ 66.737044][ T5533] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 66.746865][ T5535] EXT4-fs: inline encryption not supported [ 66.781062][ T5535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.727: error while reading EA inode 32 err=-116 [ 66.799445][ T5544] loop4: detected capacity change from 0 to 1024 [ 66.812310][ T5535] EXT4-fs (loop1): Remounting filesystem read-only [ 66.818943][ T5535] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 66.829715][ T5535] EXT4-fs (loop1): 1 orphan inode deleted [ 66.870861][ T5551] FAULT_INJECTION: forcing a failure. [ 66.870861][ T5551] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.884121][ T5551] CPU: 1 UID: 0 PID: 5551 Comm: syz.3.734 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 66.884232][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.884245][ T5551] Call Trace: [ 66.884252][ T5551] [ 66.884260][ T5551] __dump_stack+0x1d/0x30 [ 66.884283][ T5551] dump_stack_lvl+0xe8/0x140 [ 66.884317][ T5551] dump_stack+0x15/0x1b [ 66.884334][ T5551] should_fail_ex+0x265/0x280 [ 66.884356][ T5551] should_fail+0xb/0x20 [ 66.884376][ T5551] should_fail_usercopy+0x1a/0x20 [ 66.884416][ T5551] _copy_from_user+0x1c/0xb0 [ 66.884516][ T5551] ___sys_sendmsg+0xc1/0x1d0 [ 66.884562][ T5551] __x64_sys_sendmsg+0xd4/0x160 [ 66.884591][ T5551] x64_sys_call+0x191e/0x2ff0 [ 66.884623][ T5551] do_syscall_64+0xd2/0x200 [ 66.884652][ T5551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.884787][ T5551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.884855][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.884881][ T5551] RIP: 0033:0x7fa4d1bdebe9 [ 66.884952][ T5551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.884972][ T5551] RSP: 002b:00007fa4d0647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.884993][ T5551] RAX: ffffffffffffffda RBX: 00007fa4d1e05fa0 RCX: 00007fa4d1bdebe9 [ 66.885004][ T5551] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.885166][ T5551] RBP: 00007fa4d0647090 R08: 0000000000000000 R09: 0000000000000000 [ 66.885180][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.885192][ T5551] R13: 00007fa4d1e06038 R14: 00007fa4d1e05fa0 R15: 00007ffe4c35e9d8 [ 66.885219][ T5551] [ 67.063316][ T5553] loop4: detected capacity change from 0 to 512 [ 67.088852][ T5556] mmap: syz.3.737 (5556) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.093557][ T5553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.107807][ T5556] loop3: detected capacity change from 0 to 512 [ 67.124545][ T5557] loop2: detected capacity change from 0 to 512 [ 67.139656][ T5553] EXT4-fs (loop4): 1 truncate cleaned up [ 67.145995][ T5553] EXT4-fs mount: 58 callbacks suppressed [ 67.146012][ T5553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.166202][ T5557] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 67.185996][ T5563] futex_wake_op: syz.1.740 tries to shift op by -1; fix this program [ 67.210568][ T5553] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 67.368553][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.421964][ T5575] FAULT_INJECTION: forcing a failure. [ 67.421964][ T5575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.436207][ T5575] CPU: 1 UID: 0 PID: 5575 Comm: syz.1.746 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 67.436236][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.436248][ T5575] Call Trace: [ 67.436256][ T5575] [ 67.436299][ T5575] __dump_stack+0x1d/0x30 [ 67.436325][ T5575] dump_stack_lvl+0xe8/0x140 [ 67.436464][ T5575] dump_stack+0x15/0x1b [ 67.436484][ T5575] should_fail_ex+0x265/0x280 [ 67.436529][ T5575] should_fail+0xb/0x20 [ 67.436622][ T5575] should_fail_usercopy+0x1a/0x20 [ 67.436648][ T5575] _copy_from_user+0x1c/0xb0 [ 67.436752][ T5575] ___sys_sendmsg+0xc1/0x1d0 [ 67.436793][ T5575] __x64_sys_sendmsg+0xd4/0x160 [ 67.436822][ T5575] x64_sys_call+0x191e/0x2ff0 [ 67.436847][ T5575] do_syscall_64+0xd2/0x200 [ 67.436942][ T5575] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.436989][ T5575] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.437018][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.437043][ T5575] RIP: 0033:0x7f68a9b4ebe9 [ 67.437058][ T5575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.437080][ T5575] RSP: 002b:00007f68a85b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.437104][ T5575] RAX: ffffffffffffffda RBX: 00007f68a9d75fa0 RCX: 00007f68a9b4ebe9 [ 67.437119][ T5575] RDX: 0000000000000095 RSI: 0000200000000140 RDI: 0000000000000004 [ 67.437134][ T5575] RBP: 00007f68a85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.437199][ T5575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.437213][ T5575] R13: 00007f68a9d76038 R14: 00007f68a9d75fa0 R15: 00007ffe9b89b5a8 [ 67.437232][ T5575] [ 67.829879][ T5600] loop3: detected capacity change from 0 to 512 [ 67.842572][ T5602] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 67.868636][ T5600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.881653][ T5600] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.930292][ T5602] loop2: detected capacity change from 0 to 512 [ 67.937559][ T5602] EXT4-fs: inline encryption not supported [ 67.948317][ T5602] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.751: error while reading EA inode 32 err=-116 [ 67.961345][ T5602] EXT4-fs (loop2): Remounting filesystem read-only [ 67.967883][ T5602] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 67.978412][ T5602] EXT4-fs (loop2): 1 orphan inode deleted [ 67.984795][ T5602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.997540][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.033996][ T5608] loop4: detected capacity change from 0 to 1024 [ 68.045438][ T5608] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.056720][ T5608] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.065201][ T5608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.072675][ T5608] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.753: Failed to acquire dquot type 0 [ 68.090686][ T5608] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.753: Failed to acquire dquot type 0 [ 68.102716][ T5608] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.753: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.114481][ T5616] futex_wake_op: syz.2.754 tries to shift op by -1; fix this program [ 68.116874][ T5608] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.753: Failed to acquire dquot type 0 [ 68.136368][ T5608] EXT4-fs (loop4): 1 orphan inode deleted [ 68.143014][ T5608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.153409][ T5618] loop2: detected capacity change from 0 to 512 [ 68.162602][ T5618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.174626][ T5618] EXT4-fs (loop2): 1 truncate cleaned up [ 68.175356][ T5608] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.753: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 68.180807][ T5618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.235135][ T5618] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 68.243250][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.270621][ T5621] sd 0:0:1:0: device reset [ 68.339821][ T5631] loop4: detected capacity change from 0 to 1764 [ 68.353324][ T5631] ISOFS: Bad logical zone size 2051 [ 68.364729][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.392475][ T5631] loop4: detected capacity change from 0 to 1764 [ 68.424224][ T5634] loop2: detected capacity change from 0 to 512 [ 68.436209][ T5634] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 68.670059][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.702768][ T5655] loop1: detected capacity change from 0 to 512 [ 68.725681][ T5655] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.751022][ T5655] EXT4-fs (loop1): 1 truncate cleaned up [ 68.771805][ T5655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.790506][ T5655] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 68.816533][ T5669] FAULT_INJECTION: forcing a failure. [ 68.816533][ T5669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.829816][ T5669] CPU: 1 UID: 0 PID: 5669 Comm: syz.0.772 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 68.829844][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.829855][ T5669] Call Trace: [ 68.829863][ T5669] [ 68.829905][ T5669] __dump_stack+0x1d/0x30 [ 68.829931][ T5669] dump_stack_lvl+0xe8/0x140 [ 68.829949][ T5669] dump_stack+0x15/0x1b [ 68.829972][ T5669] should_fail_ex+0x265/0x280 [ 68.829997][ T5669] should_fail+0xb/0x20 [ 68.830071][ T5669] should_fail_usercopy+0x1a/0x20 [ 68.830137][ T5669] _copy_from_user+0x1c/0xb0 [ 68.830189][ T5669] __sys_sendto+0x19e/0x330 [ 68.830292][ T5669] __x64_sys_sendto+0x76/0x90 [ 68.830446][ T5669] x64_sys_call+0x2d05/0x2ff0 [ 68.830513][ T5669] do_syscall_64+0xd2/0x200 [ 68.830541][ T5669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.830567][ T5669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.830633][ T5669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.830657][ T5669] RIP: 0033:0x7f0e96d7ebe9 [ 68.830674][ T5669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.830739][ T5669] RSP: 002b:00007f0e957df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.830762][ T5669] RAX: ffffffffffffffda RBX: 00007f0e96fa5fa0 RCX: 00007f0e96d7ebe9 [ 68.830775][ T5669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.830788][ T5669] RBP: 00007f0e957df090 R08: 0000200000b63fe4 R09: 000000000000001c [ 68.830801][ T5669] R10: 0000000020004002 R11: 0000000000000246 R12: 0000000000000001 [ 68.830814][ T5669] R13: 00007f0e96fa6038 R14: 00007f0e96fa5fa0 R15: 00007fff368442b8 [ 68.830903][ T5669] [ 68.831667][ T5667] 0: renamed from 71 (while UP) [ 69.021408][ T5667] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 69.080537][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.113018][ T5687] loop0: detected capacity change from 0 to 512 [ 69.151017][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.183966][ T5687] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.231152][ T5696] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 69.322392][ T5698] loop2: detected capacity change from 0 to 512 [ 69.377520][ T5698] EXT4-fs: inline encryption not supported [ 69.419541][ T5698] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.780: error while reading EA inode 32 err=-116 [ 69.438717][ T5698] EXT4-fs (loop2): Remounting filesystem read-only [ 69.445409][ T5698] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 69.460640][ T5698] EXT4-fs (loop2): 1 orphan inode deleted [ 69.467505][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.480762][ T5698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.547860][ T5706] loop1: detected capacity change from 0 to 8192 [ 69.606964][ T5706] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 69.615027][ T5706] FAT-fs (loop1): Filesystem has been set read-only [ 69.721967][ T5711] veth0_to_team: entered promiscuous mode [ 69.781100][ T5711] loop1: detected capacity change from 0 to 512 [ 69.792288][ T5711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.805182][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 69.805200][ T29] audit: type=1326 audit(1754946229.893:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.838732][ T29] audit: type=1326 audit(1754946229.893:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.863248][ T29] audit: type=1326 audit(1754946229.933:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.886811][ T29] audit: type=1326 audit(1754946229.933:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.910339][ T29] audit: type=1326 audit(1754946229.933:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.934031][ T29] audit: type=1326 audit(1754946229.933:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 69.957448][ T29] audit: type=1326 audit(1754946229.933:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 69.980920][ T29] audit: type=1326 audit(1754946229.933:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 70.004890][ T29] audit: type=1326 audit(1754946229.933:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 70.016279][ T5720] capability: warning: `syz.4.786' uses deprecated v2 capabilities in a way that may be insecure [ 70.029776][ T29] audit: type=1326 audit(1754946229.933:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13e2eebe9 code=0x7ffc0000 [ 70.083887][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.088134][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.096870][ T5711] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.210768][ T5726] loop4: detected capacity change from 0 to 512 [ 70.230584][ T5726] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.269877][ T5726] EXT4-fs (loop4): 1 truncate cleaned up [ 70.276335][ T5726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.287961][ T5732] sd 0:0:1:0: device reset [ 70.302143][ T5734] __nla_validate_parse: 25 callbacks suppressed [ 70.302160][ T5734] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 70.317350][ T5734] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 70.324660][ T5726] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 70.338845][ T5732] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 70.347631][ T5732] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 70.388529][ T5746] sd 0:0:1:0: device reset [ 70.400753][ T5746] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 70.409495][ T5746] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 70.455855][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.481183][ T5752] loop2: detected capacity change from 0 to 128 [ 70.566385][ T5757] SELinux: policydb version 280 does not match my version range 15-35 [ 70.572210][ T5754] loop0: detected capacity change from 0 to 8192 [ 70.575114][ T5757] SELinux: failed to load policy [ 70.587921][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.617337][ T5754] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 70.625538][ T5754] FAT-fs (loop0): Filesystem has been set read-only [ 70.642584][ T5761] loop1: detected capacity change from 0 to 512 [ 70.681753][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.704299][ T5761] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.733310][ T5761] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.798'. [ 70.780481][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.815042][ T5777] sd 0:0:1:0: device reset [ 70.833080][ T5777] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 70.841736][ T5777] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 70.883371][ T5785] loop1: detected capacity change from 0 to 512 [ 70.899276][ T5785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.918430][ T5785] EXT4-fs (loop1): 1 truncate cleaned up [ 70.930498][ T5785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.974571][ T5785] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 70.989104][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 71.038695][ T5790] loop0: detected capacity change from 0 to 512 [ 71.055399][ T5790] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 71.113219][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.172082][ T5798] loop0: detected capacity change from 0 to 256 [ 71.181807][ T5800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5800 comm=syz.1.811 [ 71.213988][ T5798] FAT-fs (loop0): Directory bread(block 64) failed [ 71.226176][ T5798] FAT-fs (loop0): Directory bread(block 65) failed [ 71.238692][ T5798] FAT-fs (loop0): Directory bread(block 66) failed [ 71.252274][ T5798] FAT-fs (loop0): Directory bread(block 67) failed [ 71.268969][ T5798] FAT-fs (loop0): Directory bread(block 68) failed [ 71.285462][ T5808] loop1: detected capacity change from 0 to 128 [ 71.292000][ T5798] FAT-fs (loop0): Directory bread(block 69) failed [ 71.298636][ T5798] FAT-fs (loop0): Directory bread(block 70) failed [ 71.306228][ T5798] FAT-fs (loop0): Directory bread(block 71) failed [ 71.313158][ T5798] FAT-fs (loop0): Directory bread(block 72) failed [ 71.321150][ T5798] FAT-fs (loop0): Directory bread(block 73) failed [ 71.333895][ T5808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.354652][ T5798] process 'syz.0.812' launched '/dev/fd/9' with NULL argv: empty string added [ 71.681247][ T5836] sd 0:0:1:0: device reset [ 72.203438][ T5851] loop1: detected capacity change from 0 to 1764 [ 72.221618][ T5851] ISOFS: Bad logical zone size 2051 [ 72.407859][ T5866] loop2: detected capacity change from 0 to 512 [ 72.436083][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.437876][ T5868] sd 0:0:1:0: device reset [ 72.464532][ T5872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.474625][ T5866] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.532646][ T3306] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 72.545714][ T3306] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 72.623364][ T5884] loop4: detected capacity change from 0 to 512 [ 72.639592][ T5884] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 72.685804][ T5886] 1: renamed from 70 (while UP) [ 72.692557][ T5886] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 72.752776][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.783447][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.795825][ T5893] loop4: detected capacity change from 0 to 1764 [ 72.808229][ T5893] ISOFS: Bad logical zone size 2051 [ 72.843741][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.865475][ T5898] loop4: detected capacity change from 0 to 1024 [ 72.972511][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.091405][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.163585][ T5910] loop4: detected capacity change from 0 to 512 [ 73.185553][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 73.216506][ T5910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.229292][ T5910] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.472807][ T5923] loop0: detected capacity change from 0 to 128 [ 73.497470][ T5919] loop1: detected capacity change from 0 to 1024 [ 73.518455][ T12] bridge_slave_1: left allmulticast mode [ 73.524214][ T12] bridge_slave_1: left promiscuous mode [ 73.530092][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.540731][ T12] bridge_slave_0: left allmulticast mode [ 73.546443][ T12] bridge_slave_0: left promiscuous mode [ 73.552247][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.562888][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.592714][ T5919] FAULT_INJECTION: forcing a failure. [ 73.592714][ T5919] name failslab, interval 1, probability 0, space 0, times 0 [ 73.605616][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.1.850 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 73.605663][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.605674][ T5919] Call Trace: [ 73.605681][ T5919] [ 73.605713][ T5919] __dump_stack+0x1d/0x30 [ 73.605739][ T5919] dump_stack_lvl+0xe8/0x140 [ 73.605758][ T5919] dump_stack+0x15/0x1b [ 73.605774][ T5919] should_fail_ex+0x265/0x280 [ 73.605794][ T5919] should_failslab+0x8c/0xb0 [ 73.605822][ T5919] kmem_cache_alloc_noprof+0x50/0x310 [ 73.605884][ T5919] ? audit_log_start+0x365/0x6c0 [ 73.605922][ T5919] audit_log_start+0x365/0x6c0 [ 73.605951][ T5919] audit_seccomp+0x48/0x100 [ 73.605978][ T5919] ? __seccomp_filter+0x68c/0x10d0 [ 73.606087][ T5919] __seccomp_filter+0x69d/0x10d0 [ 73.606133][ T5919] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.606204][ T5919] ? vfs_write+0x7e8/0x960 [ 73.606235][ T5919] __secure_computing+0x82/0x150 [ 73.606260][ T5919] syscall_trace_enter+0xcf/0x1e0 [ 73.606353][ T5919] do_syscall_64+0xac/0x200 [ 73.606383][ T5919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.606406][ T5919] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.606454][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.606479][ T5919] RIP: 0033:0x7f68a9b4ebe9 [ 73.606495][ T5919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.606515][ T5919] RSP: 002b:00007f68a85b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 73.606538][ T5919] RAX: ffffffffffffffda RBX: 00007f68a9d75fa0 RCX: 00007f68a9b4ebe9 [ 73.606581][ T5919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 73.606592][ T5919] RBP: 00007f68a85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.606603][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.606616][ T5919] R13: 00007f68a9d76038 R14: 00007f68a9d75fa0 R15: 00007ffe9b89b5a8 [ 73.606637][ T5919] [ 73.831481][ T5919] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.850: missing EA_INODE flag [ 73.856889][ T5923] syz.0.851: attempt to access beyond end of device [ 73.856889][ T5923] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 73.874745][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.894348][ T5919] EXT4-fs (loop1): Remounting filesystem read-only [ 73.927851][ T5923] syz.0.851: attempt to access beyond end of device [ 73.927851][ T5923] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 73.935670][ T5943] loop4: detected capacity change from 0 to 1024 [ 73.962290][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.974097][ T5943] EXT4-fs: quotafile must be on filesystem root [ 73.980940][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.985191][ T5948] loop3: detected capacity change from 0 to 512 [ 73.996684][ T5923] syz.0.851: attempt to access beyond end of device [ 73.996684][ T5923] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 74.014477][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.022696][ T5923] syz.0.851: attempt to access beyond end of device [ 74.022696][ T5923] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 74.054204][ T12] bond0 (unregistering): Released all slaves [ 74.076730][ T5948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.079057][ T12] bond1 (unregistering): Released all slaves [ 74.098185][ T5923] syz.0.851: attempt to access beyond end of device [ 74.098185][ T5923] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 74.112468][ T5923] syz.0.851: attempt to access beyond end of device [ 74.112468][ T5923] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 74.125561][ T5948] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.126050][ T5923] syz.0.851: attempt to access beyond end of device [ 74.126050][ T5923] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 74.151387][ T5923] syz.0.851: attempt to access beyond end of device [ 74.151387][ T5923] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 74.152093][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.164836][ T5923] syz.0.851: attempt to access beyond end of device [ 74.164836][ T5923] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 74.171836][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.185248][ T5923] syz.0.851: attempt to access beyond end of device [ 74.185248][ T5923] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 74.207082][ T5960] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 74.219092][ T5896] bridge_slave_0: entered allmulticast mode [ 74.226363][ T5896] bridge_slave_0: entered promiscuous mode [ 74.237941][ T5949] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 74.257770][ T12] hsr_slave_0: left promiscuous mode [ 74.270126][ T12] hsr_slave_1: left promiscuous mode [ 74.273609][ T5964] loop1: detected capacity change from 0 to 512 [ 74.289629][ T5964] EXT4-fs: inline encryption not supported [ 74.295816][ T12] dummy0: left allmulticast mode [ 74.304461][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.313771][ T12] veth1_macvtap: left promiscuous mode [ 74.319413][ T12] veth0_macvtap: left promiscuous mode [ 74.325436][ T12] veth1_vlan: left promiscuous mode [ 74.330712][ T12] veth0_vlan: left promiscuous mode [ 74.338212][ T5964] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.856: error while reading EA inode 32 err=-116 [ 74.352844][ T5964] EXT4-fs (loop1): Remounting filesystem read-only [ 74.359435][ T5964] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 74.410995][ T5964] EXT4-fs (loop1): 1 orphan inode deleted [ 74.425408][ T5964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.447406][ T5964] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.523931][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.535266][ T5973] loop4: detected capacity change from 0 to 128 [ 74.552602][ T12] team0 (unregistering): Port device team_slave_0 removed [ 74.606755][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.614015][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.621226][ T5896] bridge_slave_1: entered allmulticast mode [ 74.627711][ T5896] bridge_slave_1: entered promiscuous mode [ 74.636954][ T5968] vlan2: entered allmulticast mode [ 74.652523][ T5969] 1: renamed from 70 (while UP) [ 74.660881][ T5969] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 74.725061][ T5975] sd 0:0:1:0: device reset [ 74.737282][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.769621][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.783242][ T5981] sd 0:0:1:0: device reset [ 74.813003][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 74.813018][ T29] audit: type=1326 audit(1754946234.903:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4d1bdebe9 code=0x7ffc0000 [ 74.851183][ T29] audit: type=1326 audit(1754946234.943:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 74.876903][ T5896] team0: Port device team_slave_0 added [ 74.878449][ T29] audit: type=1326 audit(1754946234.973:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 74.884746][ T5896] team0: Port device team_slave_1 added [ 74.907458][ T29] audit: type=1326 audit(1754946234.973:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 74.936841][ T29] audit: type=1326 audit(1754946234.973:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 75.002124][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.009127][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.009689][ T29] audit: type=1326 audit(1754946235.053:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1bdebe9 code=0x7ffc0000 [ 75.035326][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.058719][ T29] audit: type=1326 audit(1754946235.063:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d1bdebe9 code=0x7ffc0000 [ 75.075975][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.092998][ T29] audit: type=1326 audit(1754946235.063:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa4d1bdebe9 code=0x7ffc0000 [ 75.100039][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.124249][ T29] audit: type=1326 audit(1754946235.063:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e96d7ebe9 code=0x7ffc0000 [ 75.150231][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.184601][ T29] audit: type=1326 audit(1754946235.063:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0e96d7ebe9 code=0x7ffc0000 [ 75.227814][ T6002] loop4: detected capacity change from 0 to 512 [ 75.235249][ T6003] loop3: detected capacity change from 0 to 512 [ 75.236182][ T12] IPVS: stop unused estimator thread 0... [ 75.249814][ T6002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.281317][ T5896] hsr_slave_0: entered promiscuous mode [ 75.303569][ T6003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.303637][ T5896] hsr_slave_1: entered promiscuous mode [ 75.317157][ T6002] EXT4-fs (loop4): 1 truncate cleaned up [ 75.330523][ T6002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.348129][ T6003] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.364869][ T6018] sd 0:0:1:0: device reset [ 75.381320][ T6002] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 75.385305][ T6021] loop1: detected capacity change from 0 to 512 [ 75.431120][ T6018] __nla_validate_parse: 26 callbacks suppressed [ 75.431137][ T6018] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 75.435684][ T6021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.437430][ T6018] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 75.467659][ T6021] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.530978][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540328][ T6021] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.871'. [ 75.572776][ T6036] netlink: 'syz.0.873': attribute type 10 has an invalid length. [ 75.593283][ T6036] team0: Port device dummy0 added [ 75.605078][ T6036] netlink: 'syz.0.873': attribute type 10 has an invalid length. [ 75.617123][ T6036] team0: Port device dummy0 removed [ 75.626683][ T6036] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.638332][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.649470][ T6047] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 75.669280][ T6051] sd 0:0:1:0: device reset [ 75.687444][ T6051] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 75.696094][ T6051] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 75.714780][ T6056] loop4: detected capacity change from 0 to 512 [ 75.742581][ T5896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.750195][ T6056] EXT4-fs: inline encryption not supported [ 75.764792][ T5896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.784374][ T5896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.800671][ T6056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.872: error while reading EA inode 32 err=-116 [ 75.818752][ T6056] EXT4-fs (loop4): Remounting filesystem read-only [ 75.824575][ T6061] loop0: detected capacity change from 0 to 512 [ 75.825440][ T6056] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 75.834784][ T6061] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 75.849536][ T6061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.875'. [ 75.850049][ T6056] EXT4-fs (loop4): 1 orphan inode deleted [ 75.871105][ T6063] sd 0:0:1:0: device reset [ 75.881877][ T6056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.897845][ T6063] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 75.906473][ T6063] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 75.915326][ T5896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.975684][ T6074] loop1: detected capacity change from 0 to 512 [ 75.980234][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 75.990962][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 76.009653][ T6074] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 76.022207][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.032439][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.046924][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.063340][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.079554][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.086703][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.169398][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.169431][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.217088][ T6100] loop0: detected capacity change from 0 to 512 [ 76.253108][ T6100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.253336][ T6100] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.314970][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.333715][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.383439][ T6117] loop0: detected capacity change from 0 to 1764 [ 76.413908][ T6117] ISOFS: Bad logical zone size 2051 [ 76.428329][ T6120] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 76.566348][ T6136] loop3: detected capacity change from 0 to 512 [ 76.582605][ T6113] loop1: detected capacity change from 0 to 512 [ 76.612145][ T6113] EXT4-fs: inline encryption not supported [ 76.612764][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.645792][ T6113] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.886: error while reading EA inode 32 err=-116 [ 76.661689][ T6129] loop0: detected capacity change from 0 to 8192 [ 76.679379][ T6136] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.690977][ T6129] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 76.698859][ T6129] FAT-fs (loop0): Filesystem has been set read-only [ 76.705674][ T6113] EXT4-fs (loop1): Remounting filesystem read-only [ 76.712262][ T6113] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 76.729640][ T6113] EXT4-fs (loop1): 1 orphan inode deleted [ 76.736707][ T6113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.770074][ T6113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.800545][ T5896] veth0_vlan: entered promiscuous mode [ 76.822578][ T5896] veth1_vlan: entered promiscuous mode [ 76.857906][ T5896] veth0_macvtap: entered promiscuous mode [ 76.866867][ T5896] veth1_macvtap: entered promiscuous mode [ 76.879605][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.891718][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.903373][ T1022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.913043][ T1022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.928598][ T1022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.952492][ T1022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989508][ T6176] FAULT_INJECTION: forcing a failure. [ 76.989508][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 77.005223][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.5.846 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 77.005254][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.005265][ T6176] Call Trace: [ 77.005272][ T6176] [ 77.005280][ T6176] __dump_stack+0x1d/0x30 [ 77.005365][ T6176] dump_stack_lvl+0xe8/0x140 [ 77.005382][ T6176] dump_stack+0x15/0x1b [ 77.005402][ T6176] should_fail_ex+0x265/0x280 [ 77.005488][ T6176] should_failslab+0x8c/0xb0 [ 77.005514][ T6176] __kmalloc_node_noprof+0xa9/0x410 [ 77.005627][ T6176] ? __kmalloc_noprof+0x1dd/0x3e0 [ 77.005658][ T6176] ? tcp_sigpool_alloc_ahash+0x172/0x660 [ 77.005712][ T6176] tcp_sigpool_alloc_ahash+0x172/0x660 [ 77.005749][ T6176] tcp_md5_alloc_sigpool+0x1b/0x60 [ 77.005768][ T6176] tcp_md5_do_add+0x7f/0x1c0 [ 77.005870][ T6176] tcp_v6_parse_md5_keys+0x429/0x450 [ 77.005901][ T6176] do_tcp_setsockopt+0xf24/0x1670 [ 77.005936][ T6176] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 77.006034][ T6176] tcp_setsockopt+0x51/0xb0 [ 77.006110][ T6176] sock_common_setsockopt+0x69/0x80 [ 77.006150][ T6176] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.006251][ T6176] __sys_setsockopt+0x184/0x200 [ 77.006273][ T6176] __x64_sys_setsockopt+0x64/0x80 [ 77.006294][ T6176] x64_sys_call+0x20ec/0x2ff0 [ 77.006316][ T6176] do_syscall_64+0xd2/0x200 [ 77.006376][ T6176] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.006400][ T6176] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.006425][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.006450][ T6176] RIP: 0033:0x7f0c5cc9ebe9 [ 77.006497][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.006527][ T6176] RSP: 002b:00007f0c5b6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.006550][ T6176] RAX: ffffffffffffffda RBX: 00007f0c5cec5fa0 RCX: 00007f0c5cc9ebe9 [ 77.006565][ T6176] RDX: 0000000000000020 RSI: 0000000000000006 RDI: 0000000000000005 [ 77.006579][ T6176] RBP: 00007f0c5b6ff090 R08: 00000000000000d8 R09: 0000000000000000 [ 77.006652][ T6176] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 77.006663][ T6176] R13: 00007f0c5cec6038 R14: 00007f0c5cec5fa0 R15: 00007ffd1ca64998 [ 77.006682][ T6176] [ 77.055717][ T6181] loop4: detected capacity change from 0 to 512 [ 77.131318][ T6186] loop1: detected capacity change from 0 to 512 [ 77.149790][ T6181] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.227567][ T6184] loop5: detected capacity change from 0 to 512 [ 77.268076][ T6186] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.286543][ T6186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.294790][ T6181] EXT4-fs (loop4): 1 truncate cleaned up [ 77.300204][ T6186] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.894: Block bitmap for bg 0 marked uninitialized [ 77.301094][ T6181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.316391][ T6184] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.895: error while reading EA inode 32 err=-116 [ 77.346303][ T6181] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 77.354042][ T6186] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.363228][ T6184] EXT4-fs (loop5): Remounting filesystem read-only [ 77.369880][ T6184] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 77.382205][ T6186] EXT4-fs (loop1): 1 orphan inode deleted [ 77.388800][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.390014][ T6184] EXT4-fs (loop5): 1 orphan inode deleted [ 77.425717][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.440534][ T6184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.495853][ T6184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.539786][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.561792][ T6208] sd 0:0:1:0: device reset [ 77.954166][ T6226] loop0: detected capacity change from 0 to 512 [ 78.045078][ T6226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.068467][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.106350][ T6226] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.140529][ T6236] loop4: detected capacity change from 0 to 1764 [ 78.167560][ T6236] ISOFS: Bad logical zone size 2051 [ 78.229024][ T6244] loop5: detected capacity change from 0 to 512 [ 78.253033][ T6251] loop3: detected capacity change from 0 to 512 [ 78.262449][ T6244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.264466][ T6245] loop1: detected capacity change from 0 to 8192 [ 78.281166][ T6251] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 78.294925][ T6245] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 78.296244][ T6244] EXT4-fs (loop5): 1 truncate cleaned up [ 78.302852][ T6245] FAT-fs (loop1): Filesystem has been set read-only [ 78.310407][ T6244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.340275][ T6251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.346764][ T6251] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 78.360963][ T6251] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.370902][ T6251] EXT4-fs (loop3): 1 orphan inode deleted [ 78.377209][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.392888][ T6244] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 78.491556][ T5896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.526089][ T6270] loop5: detected capacity change from 0 to 512 [ 78.544979][ T6270] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.912: error while reading EA inode 32 err=-116 [ 78.545219][ T6270] EXT4-fs (loop5): Remounting filesystem read-only [ 78.545238][ T6270] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 78.545262][ T6270] EXT4-fs (loop5): 1 orphan inode deleted [ 78.545641][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.546135][ T6270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.637865][ T6281] veth0_to_team: entered promiscuous mode [ 78.692194][ T6281] loop5: detected capacity change from 0 to 512 [ 78.698356][ T6281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.727208][ T6281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.727345][ T6281] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.773711][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.802932][ T6307] 0: renamed from 71 (while UP) [ 78.807598][ T6307] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 78.879152][ T6311] loop4: detected capacity change from 0 to 512 [ 78.887432][ T6311] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 79.130810][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.183023][ T6322] bond0: (slave bond_slave_1): Releasing backup interface [ 79.348414][ T6331] loop0: detected capacity change from 0 to 512 [ 79.368966][ T6331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.926: error while reading EA inode 32 err=-116 [ 79.594460][ T6341] sd 0:0:1:0: device reset [ 79.651062][ T6331] EXT4-fs (loop0): Remounting filesystem read-only [ 79.651696][ T5896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.657636][ T6331] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.670091][ T6346] 0: renamed from 71 (while UP) [ 79.690165][ T6331] EXT4-fs (loop0): 1 orphan inode deleted [ 79.700208][ T6346] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 79.785623][ T6351] loop0: detected capacity change from 0 to 512 [ 79.815432][ T6351] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.833509][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 79.833526][ T29] audit: type=1400 audit(1754946239.923:4831): avc: denied { create } for pid=6350 comm="syz.0.933" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.867687][ T6301] syz.1.918 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.878821][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.918 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 79.878928][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.878970][ T6301] Call Trace: [ 79.878976][ T6301] [ 79.878985][ T6301] __dump_stack+0x1d/0x30 [ 79.879008][ T6301] dump_stack_lvl+0xe8/0x140 [ 79.879105][ T6301] dump_stack+0x15/0x1b [ 79.879124][ T6301] dump_header+0x81/0x220 [ 79.879157][ T6301] oom_kill_process+0x342/0x400 [ 79.879192][ T6301] out_of_memory+0x979/0xb80 [ 79.879267][ T6301] try_charge_memcg+0x5e6/0x9e0 [ 79.879298][ T6301] charge_memcg+0x51/0xc0 [ 79.879319][ T6301] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 79.879342][ T6301] __read_swap_cache_async+0x1df/0x350 [ 79.879377][ T6301] swap_cluster_readahead+0x376/0x3e0 [ 79.879467][ T6301] swapin_readahead+0xde/0x6f0 [ 79.879520][ T6301] ? __filemap_get_folio+0x4f7/0x6b0 [ 79.879554][ T6301] ? __rcu_read_unlock+0x34/0x70 [ 79.879578][ T6301] ? swap_cache_get_folio+0x77/0x200 [ 79.879648][ T6301] do_swap_page+0x301/0x2430 [ 79.879675][ T6301] ? css_rstat_updated+0xb7/0x240 [ 79.879708][ T6301] ? __pfx_default_wake_function+0x10/0x10 [ 79.879799][ T6301] handle_mm_fault+0x9a5/0x2c20 [ 79.879992][ T6301] do_user_addr_fault+0x636/0x1090 [ 79.880070][ T6301] exc_page_fault+0x62/0xa0 [ 79.880090][ T6301] asm_exc_page_fault+0x26/0x30 [ 79.880186][ T6301] RIP: 0033:0x7f68a9a0da30 [ 79.880203][ T6301] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 18 48 89 [ 79.880393][ T6301] RSP: 002b:00007ffe9b89b628 EFLAGS: 00010246 [ 79.880414][ T6301] RAX: 0000000000000000 RBX: 00007f68aa8a5720 RCX: ffffffff819837c9 [ 79.880426][ T6301] RDX: 00000000000017c9 RSI: ffffffff819837c9 RDI: 0000000000000016 [ 79.880438][ T6301] RBP: ffffffff819837c9 R08: 00007f68a9d60000 R09: 00007f68a9d62000 [ 79.880450][ T6301] R10: 00000000819837cd R11: 0000000000000016 R12: 0000000000000016 [ 79.880531][ T6301] R13: 0000000000000001 R14: ffffffff81983f12 R15: 0000000000000001 [ 79.880545][ T6301] ? fdget+0x12/0x110 [ 79.880571][ T6301] ? fget_task+0x89/0x1c0 [ 79.880596][ T6301] ? fget_task+0x89/0x1c0 [ 79.880638][ T6301] ? fget_task+0x89/0x1c0 [ 79.880663][ T6301] [ 80.109680][ T6301] memory: usage 307200kB, limit 307200kB, failcnt 329 [ 80.116640][ T6301] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 80.124737][ T6301] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 80.132110][ T6301] Memory cgroup stats for /syz1: [ 80.132652][ T29] audit: type=1400 audit(1754946239.923:4832): avc: denied { write open } for pid=6350 comm="syz.0.933" path="/197/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.133801][ T6301] cache 0 [ 80.137854][ T29] audit: type=1400 audit(1754946239.923:4833): avc: denied { read write } for pid=6350 comm="syz.0.933" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.160844][ T6301] rss 0 [ 80.163742][ T29] audit: type=1400 audit(1754946239.923:4834): avc: denied { open } for pid=6350 comm="syz.0.933" path="/197/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.186322][ T6301] shmem 0 [ 80.186333][ T6301] mapped_file 0 [ 80.186342][ T6301] dirty 0 [ 80.186350][ T6301] writeback 0 [ 80.186371][ T6301] workingset_refault_anon 31 [ 80.186381][ T6301] workingset_refault_file 653 [ 80.186389][ T6301] swap 200704 [ 80.186396][ T6301] swapcached 0 [ 80.186402][ T6301] pgpgin 63076 [ 80.186410][ T6301] pgpgout 63072 [ 80.186417][ T6301] pgfault 72362 [ 80.186425][ T6301] pgmajfault 30 [ 80.186433][ T6301] inactive_anon 0 [ 80.186444][ T6301] active_anon 0 [ 80.186452][ T6301] inactive_file 0 [ 80.189223][ T29] audit: type=1400 audit(1754946239.973:4835): avc: denied { ioctl } for pid=6350 comm="syz.0.933" path="/197/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.212121][ T6301] active_file 12288 [ 80.212133][ T6301] unevictable 0 [ 80.212140][ T6301] hierarchical_memory_limit 314572800 [ 80.212150][ T6301] hierarchical_memsw_limit 9223372036854771712 [ 80.212160][ T6301] total_cache 0 [ 80.313235][ T6301] total_rss 0 [ 80.316542][ T6301] total_shmem 0 [ 80.320129][ T6301] total_mapped_file 0 [ 80.324154][ T6301] total_dirty 0 [ 80.327637][ T6301] total_writeback 0 [ 80.331484][ T6301] total_workingset_refault_anon 31 [ 80.336695][ T6301] total_workingset_refault_file 653 [ 80.341928][ T6301] total_swap 200704 [ 80.345756][ T6301] total_swapcached 0 [ 80.349570][ T6361] loop3: detected capacity change from 0 to 8192 [ 80.349663][ T6301] total_pgpgin 63076 [ 80.349675][ T6301] total_pgpgout 63072 [ 80.364070][ T6301] total_pgfault 72362 [ 80.368247][ T6301] total_pgmajfault 30 [ 80.371395][ T6361] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 80.372301][ T6301] total_inactive_anon 0 [ 80.380164][ T6361] FAT-fs (loop3): Filesystem has been set read-only [ 80.384528][ T6301] total_active_anon 0 [ 80.395285][ T6301] total_inactive_file 0 [ 80.399459][ T6301] total_active_file 12288 [ 80.403999][ T6301] total_unevictable 0 [ 80.408073][ T6301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.918,pid=6301,uid=0 [ 80.422967][ T6301] Memory cgroup out of memory: Killed process 6301 (syz.1.918) total-vm:93764kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 80.670237][ T29] audit: type=1400 audit(1754946240.753:4836): avc: denied { ioctl } for pid=6368 comm="syz.1.938" path="socket:[15409]" dev="sockfs" ino=15409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.703357][ T6374] __nla_validate_parse: 15 callbacks suppressed [ 80.703376][ T6374] netlink: 64 bytes leftover after parsing attributes in process `syz.3.940'. [ 80.748316][ T29] audit: type=1326 audit(1754946240.833:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 80.779123][ T6378] loop3: detected capacity change from 0 to 512 [ 80.799609][ T6378] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 80.807382][ T6378] netlink: 224 bytes leftover after parsing attributes in process `syz.3.942'. [ 80.828246][ T6386] loop5: detected capacity change from 0 to 512 [ 80.841107][ T6386] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.944: error while reading EA inode 32 err=-116 [ 80.885171][ T29] audit: type=1326 audit(1754946240.833:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 80.889129][ T6389] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 80.909052][ T29] audit: type=1326 audit(1754946240.833:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 80.921908][ T6386] EXT4-fs (loop5): Remounting filesystem read-only [ 80.942622][ T29] audit: type=1326 audit(1754946240.833:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 80.949237][ T6386] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.992982][ T6386] EXT4-fs (loop5): 1 orphan inode deleted [ 81.019526][ T6394] sd 0:0:1:0: device reset [ 81.091880][ T6394] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 81.100640][ T6394] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 81.136966][ T6402] loop5: detected capacity change from 0 to 512 [ 81.177671][ T6402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.201326][ T6406] loop1: detected capacity change from 0 to 512 [ 81.213052][ T6404] loop4: detected capacity change from 0 to 512 [ 81.229979][ T6402] EXT4-fs (loop5): 1 truncate cleaned up [ 81.242276][ T6406] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.262292][ T6404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.276004][ T6402] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 81.284715][ T6406] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.951'. [ 81.310731][ T6404] EXT4-fs (loop4): 1 truncate cleaned up [ 81.331095][ T6414] netlink: 64 bytes leftover after parsing attributes in process `syz.3.953'. [ 81.368865][ T6404] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 81.432596][ T6419] loop5: detected capacity change from 0 to 512 [ 81.453460][ T6419] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.467809][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 81.477270][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 81.486259][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 81.500329][ T6419] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.955'. [ 81.575311][ T6429] loop5: detected capacity change from 0 to 512 [ 81.611942][ T6429] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.959: error while reading EA inode 32 err=-116 [ 81.625761][ T6431] sd 0:0:1:0: device reset [ 81.635269][ T6429] EXT4-fs (loop5): Remounting filesystem read-only [ 81.641694][ T6434] loop3: detected capacity change from 0 to 1764 [ 81.642027][ T6429] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.648924][ T6434] iso9660: Bad value for 'uid' [ 81.663485][ T6434] iso9660: Bad value for 'uid' [ 81.693073][ T6429] EXT4-fs (loop5): 1 orphan inode deleted [ 81.767333][ T6449] FAULT_INJECTION: forcing a failure. [ 81.767333][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.780784][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.4.964 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 81.780851][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.780865][ T6449] Call Trace: [ 81.780873][ T6449] [ 81.780882][ T6449] __dump_stack+0x1d/0x30 [ 81.780907][ T6449] dump_stack_lvl+0xe8/0x140 [ 81.780949][ T6449] dump_stack+0x15/0x1b [ 81.780967][ T6449] should_fail_ex+0x265/0x280 [ 81.781016][ T6449] should_fail+0xb/0x20 [ 81.781034][ T6449] should_fail_usercopy+0x1a/0x20 [ 81.781105][ T6449] _copy_from_iter+0xcf/0xe40 [ 81.781129][ T6449] ? __build_skb_around+0x1a0/0x200 [ 81.781160][ T6449] ? __alloc_skb+0x223/0x320 [ 81.781287][ T6449] netlink_sendmsg+0x471/0x6b0 [ 81.781313][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.781334][ T6449] __sock_sendmsg+0x145/0x180 [ 81.781408][ T6449] ____sys_sendmsg+0x31e/0x4e0 [ 81.781429][ T6449] ___sys_sendmsg+0x17b/0x1d0 [ 81.781461][ T6449] __x64_sys_sendmsg+0xd4/0x160 [ 81.781483][ T6449] x64_sys_call+0x191e/0x2ff0 [ 81.781502][ T6449] do_syscall_64+0xd2/0x200 [ 81.781610][ T6449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.781634][ T6449] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.781735][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.781755][ T6449] RIP: 0033:0x7f806e79ebe9 [ 81.781770][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.781786][ T6449] RSP: 002b:00007f806d1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.781840][ T6449] RAX: ffffffffffffffda RBX: 00007f806e9c5fa0 RCX: 00007f806e79ebe9 [ 81.781852][ T6449] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 81.781863][ T6449] RBP: 00007f806d1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 81.781874][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.781895][ T6449] R13: 00007f806e9c6038 R14: 00007f806e9c5fa0 R15: 00007fffd785d5d8 [ 81.781912][ T6449] [ 82.033074][ T6453] loop5: detected capacity change from 0 to 512 [ 82.049131][ T6453] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.054621][ T6455] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 82.119593][ T6459] FAULT_INJECTION: forcing a failure. [ 82.119593][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 82.131199][ T6453] EXT4-fs (loop5): 1 truncate cleaned up [ 82.132507][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.1.969 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 82.132536][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.132548][ T6459] Call Trace: [ 82.132555][ T6459] [ 82.132637][ T6459] __dump_stack+0x1d/0x30 [ 82.132739][ T6459] dump_stack_lvl+0xe8/0x140 [ 82.132758][ T6459] dump_stack+0x15/0x1b [ 82.132775][ T6459] should_fail_ex+0x265/0x280 [ 82.132867][ T6459] should_failslab+0x8c/0xb0 [ 82.132892][ T6459] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 82.132920][ T6459] ? shmem_alloc_inode+0x34/0x50 [ 82.132943][ T6459] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 82.133008][ T6459] shmem_alloc_inode+0x34/0x50 [ 82.133028][ T6459] alloc_inode+0x3d/0x170 [ 82.133051][ T6459] new_inode+0x1d/0xe0 [ 82.133074][ T6459] shmem_get_inode+0x244/0x750 [ 82.133094][ T6459] ? __se_sys_memfd_create+0x1cc/0x590 [ 82.133166][ T6459] __shmem_file_setup+0x113/0x210 [ 82.133199][ T6459] shmem_file_setup+0x3b/0x50 [ 82.133229][ T6459] __se_sys_memfd_create+0x2c3/0x590 [ 82.133259][ T6459] __x64_sys_memfd_create+0x31/0x40 [ 82.133279][ T6459] x64_sys_call+0x2abe/0x2ff0 [ 82.133346][ T6459] do_syscall_64+0xd2/0x200 [ 82.133373][ T6459] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.133397][ T6459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.133421][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.133447][ T6459] RIP: 0033:0x7f68a9b4ebe9 [ 82.133463][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.133481][ T6459] RSP: 002b:00007f68a85b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 82.133501][ T6459] RAX: ffffffffffffffda RBX: 0000000000000a2f RCX: 00007f68a9b4ebe9 [ 82.133514][ T6459] RDX: 00007f68a85b6ef0 RSI: 0000000000000000 RDI: 00007f68a9bd27e8 [ 82.133601][ T6459] RBP: 0000200000001580 R08: 00007f68a85b6bb7 R09: 00007f68a85b6e40 [ 82.133613][ T6459] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 82.133625][ T6459] R13: 00007f68a85b6ef0 R14: 00007f68a85b6eb0 R15: 0000200000000140 [ 82.133707][ T6459] [ 82.204939][ T6462] 1: renamed from 70 (while UP) [ 82.265045][ T6468] loop4: detected capacity change from 0 to 512 [ 82.319564][ T6469] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 82.373859][ T6468] EXT4-fs: inline encryption not supported [ 82.381243][ T6471] sd 0:0:1:0: device reset [ 82.384028][ T6462] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 82.428886][ T6468] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.967: error while reading EA inode 32 err=-116 [ 82.442537][ T6468] EXT4-fs (loop4): Remounting filesystem read-only [ 82.449163][ T6468] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 82.459825][ T6468] EXT4-fs (loop4): 1 orphan inode deleted [ 82.525176][ T6481] FAULT_INJECTION: forcing a failure. [ 82.525176][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 82.537984][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.5.973 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 82.538068][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.538079][ T6481] Call Trace: [ 82.538086][ T6481] [ 82.538146][ T6481] __dump_stack+0x1d/0x30 [ 82.538234][ T6481] dump_stack_lvl+0xe8/0x140 [ 82.538252][ T6481] dump_stack+0x15/0x1b [ 82.538283][ T6481] should_fail_ex+0x265/0x280 [ 82.538380][ T6481] should_failslab+0x8c/0xb0 [ 82.538402][ T6481] kmem_cache_alloc_noprof+0x50/0x310 [ 82.538427][ T6481] ? getname_flags+0x80/0x3b0 [ 82.538496][ T6481] getname_flags+0x80/0x3b0 [ 82.538520][ T6481] user_path_at+0x28/0x130 [ 82.538547][ T6481] __se_sys_quotactl+0xb6/0x670 [ 82.538594][ T6481] __x64_sys_quotactl+0x55/0x70 [ 82.538611][ T6481] x64_sys_call+0x15d6/0x2ff0 [ 82.538631][ T6481] do_syscall_64+0xd2/0x200 [ 82.538711][ T6481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.538740][ T6481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.538761][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.538780][ T6481] RIP: 0033:0x7f0c5cc9ebe9 [ 82.538832][ T6481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.538848][ T6481] RSP: 002b:00007f0c5b6ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 82.538868][ T6481] RAX: ffffffffffffffda RBX: 00007f0c5cec5fa0 RCX: 00007f0c5cc9ebe9 [ 82.538880][ T6481] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 82.538891][ T6481] RBP: 00007f0c5b6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 82.538903][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.538914][ T6481] R13: 00007f0c5cec6038 R14: 00007f0c5cec5fa0 R15: 00007ffd1ca64998 [ 82.538932][ T6481] [ 82.814670][ T6492] loop5: detected capacity change from 0 to 512 [ 82.825052][ T6492] netlink: 'syz.5.978': attribute type 1 has an invalid length. [ 82.861760][ T6490] loop3: detected capacity change from 0 to 1764 [ 82.892131][ T6490] ISOFS: Bad logical zone size 2051 [ 82.981901][ T6504] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 83.012629][ T6496] loop5: detected capacity change from 0 to 8192 [ 83.043074][ T6511] loop1: detected capacity change from 0 to 512 [ 83.055688][ T6513] sd 0:0:1:0: device reset [ 83.060242][ T6496] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 83.068190][ T6496] FAT-fs (loop5): Filesystem has been set read-only [ 83.093245][ T6511] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.113065][ T6516] ALSA: seq fatal error: cannot create timer (-22) [ 83.247419][ T6527] loop5: detected capacity change from 0 to 2048 [ 83.280886][ T6511] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.986: iget: bogus i_mode (5) [ 83.299505][ T6511] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.986: couldn't read orphan inode 15 (err -117) [ 83.355627][ T6511] ext2 filesystem being mounted at /187/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.430738][ T6549] syzkaller1: entered promiscuous mode [ 83.436309][ T6549] syzkaller1: entered allmulticast mode [ 83.471896][ T6552] syzkaller1: entered promiscuous mode [ 83.477426][ T6552] syzkaller1: entered allmulticast mode [ 83.488427][ T6552] FAULT_INJECTION: forcing a failure. [ 83.488427][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.501716][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.1.1001 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 83.501817][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.501828][ T6552] Call Trace: [ 83.501836][ T6552] [ 83.501844][ T6552] __dump_stack+0x1d/0x30 [ 83.501865][ T6552] dump_stack_lvl+0xe8/0x140 [ 83.501883][ T6552] dump_stack+0x15/0x1b [ 83.501899][ T6552] should_fail_ex+0x265/0x280 [ 83.501954][ T6552] should_fail+0xb/0x20 [ 83.501973][ T6552] should_fail_usercopy+0x1a/0x20 [ 83.502006][ T6552] _copy_from_iter+0xcf/0xe40 [ 83.502031][ T6552] ? mntput_no_expire+0x6f/0x460 [ 83.502067][ T6552] ? mntput+0x4b/0x80 [ 83.502098][ T6552] tun_get_user+0x14d/0x2680 [ 83.502153][ T6552] ? path_openat+0x1bf8/0x2170 [ 83.502171][ T6552] ? _parse_integer_limit+0x170/0x190 [ 83.502195][ T6552] ? ref_tracker_alloc+0x1f2/0x2f0 [ 83.502219][ T6552] ? selinux_file_permission+0x1e4/0x320 [ 83.502245][ T6552] tun_chr_write_iter+0x15e/0x210 [ 83.502331][ T6552] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 83.502356][ T6552] vfs_write+0x52a/0x960 [ 83.502380][ T6552] ksys_write+0xda/0x1a0 [ 83.502449][ T6552] __x64_sys_write+0x40/0x50 [ 83.502474][ T6552] x64_sys_call+0x27fe/0x2ff0 [ 83.502497][ T6552] do_syscall_64+0xd2/0x200 [ 83.502576][ T6552] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.502602][ T6552] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.502623][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.502645][ T6552] RIP: 0033:0x7f68a9b4ebe9 [ 83.502736][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.502755][ T6552] RSP: 002b:00007f68a85b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.502778][ T6552] RAX: ffffffffffffffda RBX: 00007f68a9d75fa0 RCX: 00007f68a9b4ebe9 [ 83.502792][ T6552] RDX: 00000000000000dc RSI: 00002000000003c0 RDI: 0000000000000003 [ 83.502806][ T6552] RBP: 00007f68a85b7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.502820][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.502834][ T6552] R13: 00007f68a9d76038 R14: 00007f68a9d75fa0 R15: 00007ffe9b89b5a8 [ 83.502933][ T6552] [ 83.759073][ T6556] loop5: detected capacity change from 0 to 512 [ 83.799598][ T6556] netlink: 'syz.5.1002': attribute type 1 has an invalid length. [ 83.811176][ T6559] sd 0:0:1:0: device reset [ 83.882633][ T6564] loop5: detected capacity change from 0 to 1764 [ 83.898421][ T6564] ISOFS: Bad logical zone size 2051 [ 83.936590][ T6501] syz.4.981 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 83.947619][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.4.981 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 83.947649][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.947661][ T6501] Call Trace: [ 83.947670][ T6501] [ 83.947679][ T6501] __dump_stack+0x1d/0x30 [ 83.947754][ T6501] dump_stack_lvl+0xe8/0x140 [ 83.947773][ T6501] dump_stack+0x15/0x1b [ 83.947849][ T6501] dump_header+0x81/0x220 [ 83.947903][ T6501] oom_kill_process+0x342/0x400 [ 83.947980][ T6501] out_of_memory+0x979/0xb80 [ 83.948018][ T6501] try_charge_memcg+0x5e6/0x9e0 [ 83.948051][ T6501] charge_memcg+0x51/0xc0 [ 83.948069][ T6501] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 83.948197][ T6501] __read_swap_cache_async+0x1df/0x350 [ 83.948236][ T6501] swap_cluster_readahead+0x277/0x3e0 [ 83.948276][ T6501] swapin_readahead+0xde/0x6f0 [ 83.948313][ T6501] ? __filemap_get_folio+0x4f7/0x6b0 [ 83.948416][ T6501] ? swap_cache_get_folio+0x77/0x200 [ 83.948452][ T6501] do_swap_page+0x301/0x2430 [ 83.948477][ T6501] ? __set_next_task_fair+0x5b/0x150 [ 83.948499][ T6501] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 83.948566][ T6501] ? finish_task_switch+0xad/0x2b0 [ 83.948586][ T6501] ? __pfx_default_wake_function+0x10/0x10 [ 83.948610][ T6501] handle_mm_fault+0x9a5/0x2c20 [ 83.948642][ T6501] do_user_addr_fault+0x636/0x1090 [ 83.948692][ T6501] ? fpregs_restore_userregs+0xe2/0x1d0 [ 83.948889][ T6501] ? switch_fpu_return+0xe/0x20 [ 83.948917][ T6501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.948946][ T6501] exc_page_fault+0x62/0xa0 [ 83.948971][ T6501] asm_exc_page_fault+0x26/0x30 [ 83.948995][ T6501] RIP: 0033:0x7f806e670efe [ 83.949071][ T6501] Code: e9 77 c7 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d fb 10 35 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 83.949092][ T6501] RSP: 002b:00007fffd785d6d0 EFLAGS: 00010202 [ 83.949112][ T6501] RAX: 00007f806e9c5fa0 RBX: 00007f806e9c5fa0 RCX: 0000000000000026 [ 83.949127][ T6501] RDX: 0000000000000001 RSI: 00007f806e9c6038 RDI: 0000000000000016 [ 83.949141][ T6501] RBP: 00007f806e9c7da0 R08: 0000000000000001 R09: 0000000000000026 [ 83.949193][ T6501] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001471b [ 83.949207][ T6501] R13: 00007f806e9c6090 R14: ffffffffffffffff R15: 00007fffd785d850 [ 83.949228][ T6501] [ 83.949236][ T6501] memory: usage 307200kB, limit 307200kB, failcnt 294 [ 84.192261][ T6501] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 84.200556][ T6501] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 84.208245][ T6501] Memory cgroup stats for /syz4: [ 84.208516][ T6501] cache 0 [ 84.216615][ T6501] rss 4096 [ 84.219650][ T6501] shmem 0 [ 84.222649][ T6501] mapped_file 0 [ 84.226122][ T6501] dirty 0 [ 84.229235][ T6501] writeback 8192 [ 84.232937][ T6501] workingset_refault_anon 26 [ 84.237607][ T6501] workingset_refault_file 299 [ 84.242538][ T6501] swap 180224 [ 84.245855][ T6501] swapcached 20480 [ 84.249898][ T6501] pgpgin 75577 [ 84.253580][ T6501] pgpgout 75567 [ 84.257137][ T6501] pgfault 87214 [ 84.260636][ T6501] pgmajfault 13 [ 84.260760][ T6578] loop5: detected capacity change from 0 to 512 [ 84.264117][ T6501] inactive_anon 8192 [ 84.264132][ T6501] active_anon 12288 [ 84.264140][ T6501] inactive_file 0 [ 84.264148][ T6501] active_file 20480 [ 84.264156][ T6501] unevictable 0 [ 84.264165][ T6501] hierarchical_memory_limit 314572800 [ 84.294568][ T6501] hierarchical_memsw_limit 9223372036854771712 [ 84.295564][ T6576] FAULT_INJECTION: forcing a failure. [ 84.295564][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.301031][ T6501] total_cache 0 [ 84.301043][ T6501] total_rss 4096 [ 84.301051][ T6501] total_shmem 0 [ 84.301058][ T6501] total_mapped_file 0 [ 84.301065][ T6501] total_dirty 0 [ 84.301071][ T6501] total_writeback 8192 [ 84.301078][ T6501] total_workingset_refault_anon 26 [ 84.301125][ T6501] total_workingset_refault_file 299 [ 84.314236][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.3.1009 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 84.314265][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.314353][ T6576] Call Trace: [ 84.314426][ T6576] [ 84.314434][ T6576] __dump_stack+0x1d/0x30 [ 84.314457][ T6576] dump_stack_lvl+0xe8/0x140 [ 84.314532][ T6576] dump_stack+0x15/0x1b [ 84.314549][ T6576] should_fail_ex+0x265/0x280 [ 84.314648][ T6576] should_fail+0xb/0x20 [ 84.314665][ T6576] should_fail_usercopy+0x1a/0x20 [ 84.314688][ T6576] _copy_from_user+0x1c/0xb0 [ 84.314716][ T6576] ___sys_sendmsg+0xc1/0x1d0 [ 84.314818][ T6576] __x64_sys_sendmsg+0xd4/0x160 [ 84.314843][ T6576] x64_sys_call+0x191e/0x2ff0 [ 84.314906][ T6576] do_syscall_64+0xd2/0x200 [ 84.314931][ T6576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.315011][ T6576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.315042][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.315063][ T6576] RIP: 0033:0x7fa4d1bdebe9 [ 84.315078][ T6576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.315094][ T6576] RSP: 002b:00007fa4d0647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.315124][ T6576] RAX: ffffffffffffffda RBX: 00007fa4d1e05fa0 RCX: 00007fa4d1bdebe9 [ 84.315136][ T6576] RDX: 0000000000004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 84.315167][ T6576] RBP: 00007fa4d0647090 R08: 0000000000000000 R09: 0000000000000000 [ 84.315179][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.315192][ T6576] R13: 00007fa4d1e06038 R14: 00007fa4d1e05fa0 R15: 00007ffe4c35e9d8 [ 84.315211][ T6576] [ 84.353160][ T6580] pim6reg: entered allmulticast mode [ 84.357570][ T6501] total_swap 180224 [ 84.357584][ T6501] total_swapcached 20480 [ 84.357592][ T6501] total_pgpgin 75577 [ 84.357598][ T6501] total_pgpgout 75567 [ 84.357605][ T6501] total_pgfault 87214 [ 84.357612][ T6501] total_pgmajfault 13 [ 84.357619][ T6501] total_inactive_anon 8192 [ 84.357626][ T6501] total_active_anon 12288 [ 84.357648][ T6501] total_inactive_file 0 [ 84.357656][ T6501] total_active_file 20480 [ 84.371473][ T6580] pim6reg: left allmulticast mode [ 84.374073][ T6501] total_unevictable 0 [ 84.386918][ T6578] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.387285][ T6501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 84.433395][ T6584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.436379][ T6501] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4 [ 84.442347][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 84.446768][ T6501] ,task=syz.4.981,pid=6501,uid=0 [ 84.466389][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 84.466422][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 84.474998][ T6501] Memory cgroup out of memory: Killed process 6501 (syz.4.981) total-vm:93764kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 84.709318][ T6588] loop5: detected capacity change from 0 to 1024 [ 84.719984][ T6588] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.746912][ T6588] EXT4-fs error (device loop5): __ext4_iget:5464: inode #12: block 13: comm syz.5.1011: invalid block [ 84.791099][ T6588] EXT4-fs (loop5): Remounting filesystem read-only [ 84.799749][ T6597] loop1: detected capacity change from 0 to 512 [ 84.810699][ T6599] 1: renamed from 70 (while UP) [ 84.821463][ T6599] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 84.838628][ T6597] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 84.858079][ T6602] ALSA: seq fatal error: cannot create timer (-22) [ 84.915533][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 84.915551][ T29] audit: type=1400 audit(1754946245.003:5418): avc: denied { create } for pid=6605 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.000720][ T29] audit: type=1400 audit(1754946245.033:5419): avc: denied { setopt } for pid=6605 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.020641][ T29] audit: type=1400 audit(1754946245.033:5420): avc: denied { bind } for pid=6605 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.032332][ T6618] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 85.040387][ T29] audit: type=1400 audit(1754946245.043:5421): avc: denied { listen } for pid=6605 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.066926][ T29] audit: type=1400 audit(1754946245.043:5422): avc: denied { connect } for pid=6605 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.086944][ T29] audit: type=1400 audit(1754946245.043:5423): avc: denied { write } for pid=6605 comm="syz.1.1020" path="socket:[16766]" dev="sockfs" ino=16766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.148612][ T29] audit: type=1400 audit(1754946245.203:5424): avc: denied { ioctl } for pid=6605 comm="syz.1.1020" path="socket:[16766]" dev="sockfs" ino=16766 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.182789][ T6619] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 85.192455][ T36] IPVS: starting estimator thread 0... [ 85.192629][ T29] audit: type=1326 audit(1754946245.233:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 85.221691][ T29] audit: type=1326 audit(1754946245.233:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 85.245298][ T29] audit: type=1326 audit(1754946245.233:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 85.291171][ T6618] loop3: detected capacity change from 0 to 512 [ 85.297893][ T6618] EXT4-fs: inline encryption not supported [ 85.308967][ T6618] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1022: error while reading EA inode 32 err=-116 [ 85.324038][ T6618] EXT4-fs (loop3): Remounting filesystem read-only [ 85.331151][ T6618] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.341989][ T6618] EXT4-fs (loop3): 1 orphan inode deleted [ 85.370107][ T6625] IPVS: using max 2640 ests per chain, 132000 per kthread [ 85.466374][ T6611] loop5: detected capacity change from 0 to 512 [ 85.478561][ T6626] loop1: detected capacity change from 0 to 8192 [ 85.486670][ T6611] EXT4-fs: inline encryption not supported [ 85.520823][ T6632] loop4: detected capacity change from 0 to 2048 [ 85.521523][ T6626] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 85.535135][ T6626] FAT-fs (loop1): Filesystem has been set read-only [ 85.543406][ T6611] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1021: error while reading EA inode 32 err=-116 [ 85.573658][ T6611] EXT4-fs (loop5): Remounting filesystem read-only [ 85.580267][ T6611] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.598513][ T6611] EXT4-fs (loop5): 1 orphan inode deleted [ 85.621747][ T6632] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.717746][ T6639] loop4: detected capacity change from 0 to 512 [ 85.740792][ T6639] EXT4-fs: Ignoring removed i_version option [ 85.748173][ T6639] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 85.748208][ T6639] EXT4-fs: failed to create workqueue [ 85.763357][ T6639] EXT4-fs (loop4): mount failed [ 85.838893][ T6647] loop5: detected capacity change from 0 to 512 [ 85.848034][ T6649] __nla_validate_parse: 26 callbacks suppressed [ 85.848055][ T6649] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1030'. [ 85.865633][ T6649] 0: renamed from 71 (while UP) [ 85.871594][ T6647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.883239][ T6649] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 85.919236][ T6647] EXT4-fs (loop5): 1 truncate cleaned up [ 85.934904][ T6652] ALSA: seq fatal error: cannot create timer (-22) [ 85.946163][ T6647] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 85.982692][ T6654] FAULT_INJECTION: forcing a failure. [ 85.982692][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.996255][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.4.1033 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 85.996285][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.996299][ T6654] Call Trace: [ 85.996305][ T6654] [ 85.996313][ T6654] __dump_stack+0x1d/0x30 [ 85.996372][ T6654] dump_stack_lvl+0xe8/0x140 [ 85.996427][ T6654] dump_stack+0x15/0x1b [ 85.996445][ T6654] should_fail_ex+0x265/0x280 [ 85.996545][ T6654] should_fail+0xb/0x20 [ 85.996561][ T6654] should_fail_usercopy+0x1a/0x20 [ 85.996583][ T6654] _copy_from_iter+0xcf/0xe40 [ 85.996608][ T6654] ? __build_skb_around+0x1a0/0x200 [ 85.996654][ T6654] ? __alloc_skb+0x223/0x320 [ 85.996697][ T6654] netlink_sendmsg+0x471/0x6b0 [ 85.996722][ T6654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.996743][ T6654] __sock_sendmsg+0x145/0x180 [ 85.996846][ T6654] ____sys_sendmsg+0x31e/0x4e0 [ 85.996873][ T6654] ___sys_sendmsg+0x17b/0x1d0 [ 85.996981][ T6654] __x64_sys_sendmsg+0xd4/0x160 [ 85.997011][ T6654] x64_sys_call+0x191e/0x2ff0 [ 85.997073][ T6654] do_syscall_64+0xd2/0x200 [ 85.997100][ T6654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.997128][ T6654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.997153][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.997177][ T6654] RIP: 0033:0x7f806e79ebe9 [ 85.997193][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.997210][ T6654] RSP: 002b:00007f806d1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.997264][ T6654] RAX: ffffffffffffffda RBX: 00007f806e9c5fa0 RCX: 00007f806e79ebe9 [ 85.997277][ T6654] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 85.997291][ T6654] RBP: 00007f806d1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 85.997303][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.997351][ T6654] R13: 00007f806e9c6038 R14: 00007f806e9c5fa0 R15: 00007fffd785d5d8 [ 85.997372][ T6654] [ 86.007019][ T6656] sd 0:0:1:0: device reset [ 86.060600][ T6658] FAULT_INJECTION: forcing a failure. [ 86.060600][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 86.144887][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 86.153436][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.4.1035 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 86.153541][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.153554][ T6658] Call Trace: [ 86.153560][ T6658] [ 86.153569][ T6658] __dump_stack+0x1d/0x30 [ 86.153596][ T6658] dump_stack_lvl+0xe8/0x140 [ 86.153618][ T6658] dump_stack+0x15/0x1b [ 86.153637][ T6658] should_fail_ex+0x265/0x280 [ 86.153660][ T6658] should_failslab+0x8c/0xb0 [ 86.153758][ T6658] kmem_cache_alloc_node_noprof+0x57/0x320 [ 86.153834][ T6658] ? __alloc_skb+0x101/0x320 [ 86.153865][ T6658] __alloc_skb+0x101/0x320 [ 86.153937][ T6658] ? audit_log_start+0x365/0x6c0 [ 86.153967][ T6658] audit_log_start+0x380/0x6c0 [ 86.154009][ T6658] audit_seccomp+0x48/0x100 [ 86.154034][ T6658] ? __seccomp_filter+0x68c/0x10d0 [ 86.154056][ T6658] __seccomp_filter+0x69d/0x10d0 [ 86.154135][ T6658] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.154161][ T6658] ? vfs_write+0x7e8/0x960 [ 86.154237][ T6658] ? __rcu_read_unlock+0x4f/0x70 [ 86.154258][ T6658] ? __fget_files+0x184/0x1c0 [ 86.154284][ T6658] __secure_computing+0x82/0x150 [ 86.154305][ T6658] syscall_trace_enter+0xcf/0x1e0 [ 86.154329][ T6658] do_syscall_64+0xac/0x200 [ 86.154423][ T6658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.154447][ T6658] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.154471][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.154493][ T6658] RIP: 0033:0x7f806e79ebe9 [ 86.154510][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.154579][ T6658] RSP: 002b:00007f806d1ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 86.154600][ T6658] RAX: ffffffffffffffda RBX: 00007f806e9c5fa0 RCX: 00007f806e79ebe9 [ 86.154613][ T6658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.154689][ T6658] RBP: 00007f806d1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 86.154702][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.154715][ T6658] R13: 00007f806e9c6038 R14: 00007f806e9c5fa0 R15: 00007fffd785d5d8 [ 86.154733][ T6658] [ 86.450757][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 86.502829][ T6670] loop4: detected capacity change from 0 to 512 [ 86.517082][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1037'. [ 86.577077][ T6670] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.607782][ T6683] netlink: 'syz.3.1039': attribute type 16 has an invalid length. [ 86.615717][ T6683] netlink: 15942 bytes leftover after parsing attributes in process `syz.3.1039'. [ 86.633187][ T6686] loop5: detected capacity change from 0 to 512 [ 86.669732][ T6686] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.711363][ T6686] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1042'. [ 86.721599][ T6689] loop1: detected capacity change from 0 to 8192 [ 86.743039][ T6689] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 86.751022][ T6689] FAT-fs (loop1): Filesystem has been set read-only [ 86.924045][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 87.213326][ T6723] loop5: detected capacity change from 0 to 512 [ 87.223308][ T6723] netlink: 'syz.5.1049': attribute type 1 has an invalid length. [ 87.231105][ T6723] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1049'. [ 87.241460][ T6727] ALSA: seq fatal error: cannot create timer (-22) [ 87.316757][ T6731] loop1: detected capacity change from 0 to 1764 [ 87.333069][ T6731] ISOFS: Bad logical zone size 2051 [ 87.400260][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 87.409295][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 87.430347][ T6736] netlink: 'syz.1.1058': attribute type 6 has an invalid length. [ 87.437659][ T6734] loop5: detected capacity change from 0 to 8192 [ 87.480491][ T6739] loop1: detected capacity change from 0 to 512 [ 87.481099][ T6734] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 87.494792][ T6734] FAT-fs (loop5): Filesystem has been set read-only [ 87.522338][ T6739] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.692547][ T6744] FAULT_INJECTION: forcing a failure. [ 87.692547][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 87.705264][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.1.1060 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 87.705376][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.705390][ T6744] Call Trace: [ 87.705398][ T6744] [ 87.705408][ T6744] __dump_stack+0x1d/0x30 [ 87.705498][ T6744] dump_stack_lvl+0xe8/0x140 [ 87.705520][ T6744] dump_stack+0x15/0x1b [ 87.705535][ T6744] should_fail_ex+0x265/0x280 [ 87.705556][ T6744] should_failslab+0x8c/0xb0 [ 87.705577][ T6744] kmem_cache_alloc_noprof+0x50/0x310 [ 87.705620][ T6744] ? __inet_hash_connect+0xbdf/0x1350 [ 87.705646][ T6744] __inet_hash_connect+0xbdf/0x1350 [ 87.705671][ T6744] inet_hash_connect+0xd1/0xf0 [ 87.705690][ T6744] tcp_v4_connect+0x783/0xad0 [ 87.705758][ T6744] __inet_stream_connect+0x166/0x7e0 [ 87.705793][ T6744] ? tcp_sendmsg_fastopen+0x172/0x520 [ 87.705825][ T6744] ? should_failslab+0x8c/0xb0 [ 87.705851][ T6744] ? __kmalloc_cache_noprof+0x189/0x320 [ 87.705934][ T6744] tcp_sendmsg_fastopen+0x43a/0x520 [ 87.705989][ T6744] tcp_sendmsg_locked+0x26e1/0x2c00 [ 87.706017][ T6744] ? mntput_no_expire+0x6f/0x460 [ 87.706049][ T6744] ? __rcu_read_unlock+0x4f/0x70 [ 87.706072][ T6744] ? avc_has_perm_noaudit+0x1b1/0x200 [ 87.706098][ T6744] ? avc_has_perm+0xf7/0x180 [ 87.706121][ T6744] ? _raw_spin_unlock_bh+0x36/0x40 [ 87.706152][ T6744] ? __pfx_tcp_sendmsg+0x10/0x10 [ 87.706265][ T6744] tcp_sendmsg+0x2f/0x50 [ 87.706292][ T6744] inet_sendmsg+0x76/0xd0 [ 87.706310][ T6744] __sock_sendmsg+0x102/0x180 [ 87.706336][ T6744] __sys_sendto+0x268/0x330 [ 87.706456][ T6744] __x64_sys_sendto+0x76/0x90 [ 87.706531][ T6744] x64_sys_call+0x2d05/0x2ff0 [ 87.706551][ T6744] do_syscall_64+0xd2/0x200 [ 87.706574][ T6744] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.706605][ T6744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.706635][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.706656][ T6744] RIP: 0033:0x7f68a9b4ebe9 [ 87.706670][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.706686][ T6744] RSP: 002b:00007f68a8596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.706727][ T6744] RAX: ffffffffffffffda RBX: 00007f68a9d76090 RCX: 00007f68a9b4ebe9 [ 87.706746][ T6744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 87.706757][ T6744] RBP: 00007f68a8596090 R08: 0000200000e68000 R09: 0000000000000010 [ 87.706768][ T6744] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 87.706779][ T6744] R13: 00007f68a9d76128 R14: 00007f68a9d76090 R15: 00007ffe9b89b5a8 [ 87.706832][ T6744] [ 88.312398][ T6780] loop4: detected capacity change from 0 to 1764 [ 88.319863][ T6780] ISOFS: Bad logical zone size 2051 [ 88.388082][ T6789] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.452682][ T6791] 1: renamed from 70 (while UP) [ 88.459562][ T6791] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 88.594647][ T6782] loop3: detected capacity change from 0 to 512 [ 88.601483][ T6782] EXT4-fs: inline encryption not supported [ 88.609521][ T6782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1069: error while reading EA inode 32 err=-116 [ 88.636618][ T6782] EXT4-fs (loop3): Remounting filesystem read-only [ 88.643253][ T6782] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 88.660416][ T6782] EXT4-fs (loop3): 1 orphan inode deleted [ 88.661949][ T6794] loop4: detected capacity change from 0 to 8192 [ 88.686113][ T6794] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 88.694100][ T6794] FAT-fs (loop4): Filesystem has been set read-only [ 88.748637][ T6797] loop4: detected capacity change from 0 to 512 [ 88.782153][ T6797] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.845129][ T6801] loop3: detected capacity change from 0 to 1024 [ 88.856065][ T6801] EXT4-fs: Ignoring removed bh option [ 88.895665][ T6801] EXT4-fs: Mount option(s) incompatible with ext3 [ 88.919880][ T6801] 9pnet_fd: Insufficient options for proto=fd [ 89.091682][ T6813] loop3: detected capacity change from 0 to 512 [ 89.116191][ T6813] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.379063][ T6837] loop5: detected capacity change from 0 to 1764 [ 89.408469][ T6837] ISOFS: Bad logical zone size 2051 [ 89.501494][ T6861] 1: renamed from 70 (while UP) [ 89.517344][ T6861] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 89.790038][ T6901] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.861219][ T6908] loop5: detected capacity change from 0 to 512 [ 89.867742][ T6908] EXT4-fs: inline encryption not supported [ 89.912019][ T6906] loop1: detected capacity change from 0 to 1764 [ 89.937997][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 89.938091][ T29] audit: type=1326 audit(1754946250.023:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68a9b4d84a code=0x7ffc0000 [ 89.972400][ T6906] ISOFS: Bad logical zone size 2051 [ 89.972668][ T29] audit: type=1326 audit(1754946250.043:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 90.001518][ T29] audit: type=1326 audit(1754946250.063:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68a9b4d84a code=0x7ffc0000 [ 90.025266][ T29] audit: type=1326 audit(1754946250.063:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f68a9b4d457 code=0x7ffc0000 [ 90.049446][ T29] audit: type=1326 audit(1754946250.063:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f68a9b5038a code=0x7ffc0000 [ 90.073065][ T29] audit: type=1326 audit(1754946250.063:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 90.096666][ T29] audit: type=1326 audit(1754946250.063:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 90.120139][ T29] audit: type=1326 audit(1754946250.063:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 90.143920][ T29] audit: type=1326 audit(1754946250.063:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f806e79ebe9 code=0x7ffc0000 [ 90.170349][ T29] audit: type=1326 audit(1754946250.093:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.1.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68a9b4d550 code=0x7ffc0000 [ 90.201281][ T6908] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1091: error while reading EA inode 32 err=-116 [ 90.244127][ T6908] EXT4-fs (loop5): Remounting filesystem read-only [ 90.250782][ T6908] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.282373][ T6924] 0: renamed from 71 (while UP) [ 90.289217][ T6908] EXT4-fs (loop5): 1 orphan inode deleted [ 90.297043][ T6924] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 90.367289][ T6928] FAULT_INJECTION: forcing a failure. [ 90.367289][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.380453][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.3.1098 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 90.380483][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.380495][ T6928] Call Trace: [ 90.380502][ T6928] [ 90.380510][ T6928] __dump_stack+0x1d/0x30 [ 90.380592][ T6928] dump_stack_lvl+0xe8/0x140 [ 90.380612][ T6928] dump_stack+0x15/0x1b [ 90.380628][ T6928] should_fail_ex+0x265/0x280 [ 90.380656][ T6928] should_fail+0xb/0x20 [ 90.380715][ T6928] should_fail_usercopy+0x1a/0x20 [ 90.380761][ T6928] _copy_from_user+0x1c/0xb0 [ 90.380794][ T6928] memdup_user+0x5e/0xd0 [ 90.380883][ T6928] proc_pid_attr_write+0x15e/0x220 [ 90.380907][ T6928] vfs_writev+0x403/0x8b0 [ 90.381082][ T6928] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 90.381115][ T6928] ? mutex_lock+0xd/0x30 [ 90.381214][ T6928] do_writev+0xe7/0x210 [ 90.381240][ T6928] __x64_sys_writev+0x45/0x50 [ 90.381293][ T6928] x64_sys_call+0x1e9a/0x2ff0 [ 90.381340][ T6928] do_syscall_64+0xd2/0x200 [ 90.381371][ T6928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.381404][ T6928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.381430][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.381455][ T6928] RIP: 0033:0x7fa4d1bdebe9 [ 90.381474][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.381537][ T6928] RSP: 002b:00007fa4d0647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 90.381562][ T6928] RAX: ffffffffffffffda RBX: 00007fa4d1e05fa0 RCX: 00007fa4d1bdebe9 [ 90.381607][ T6928] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 90.381619][ T6928] RBP: 00007fa4d0647090 R08: 0000000000000000 R09: 0000000000000000 [ 90.381632][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.381646][ T6928] R13: 00007fa4d1e06038 R14: 00007fa4d1e05fa0 R15: 00007ffe4c35e9d8 [ 90.381668][ T6928] [ 90.820601][ T6957] batadv_slave_1: entered promiscuous mode [ 90.829126][ T6957] loop3: detected capacity change from 0 to 128 [ 90.839035][ T6955] loop5: detected capacity change from 0 to 128 [ 90.848647][ T6957] loop9: detected capacity change from 0 to 7 [ 90.855519][ T6957] buffer_io_error: 26315 callbacks suppressed [ 90.855536][ T6957] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.889984][ T6957] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.898037][ T6957] loop9: unable to read partition table [ 90.917446][ T6955] __nla_validate_parse: 15 callbacks suppressed [ 90.917466][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 90.920006][ T6957] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 90.920006][ T6957] ) failed (rc=-5) [ 90.947142][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.968447][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.976828][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.985443][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.993668][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.055840][ T6969] loop5: detected capacity change from 0 to 512 [ 91.112820][ T6969] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.164066][ T6979] loop1: detected capacity change from 0 to 512 [ 91.202077][ T6979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1106: error while reading EA inode 32 err=-116 [ 91.217525][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.240171][ T6979] EXT4-fs (loop1): Remounting filesystem read-only [ 91.246754][ T6979] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 91.257073][ T6979] EXT4-fs (loop1): 1 orphan inode deleted [ 91.265187][ T6956] batadv_slave_1: left promiscuous mode [ 91.282519][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.306897][ T3511] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.385929][ T1841] bio_check_eod: 102 callbacks suppressed [ 91.385954][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.385954][ T1841] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 91.428877][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.428877][ T1841] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 91.480387][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.480387][ T1841] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 91.520004][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.520004][ T1841] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 91.549782][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.549782][ T1841] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 91.574198][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.574198][ T1841] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 91.591474][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.591474][ T1841] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 91.613862][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.613862][ T1841] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 91.628126][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.628126][ T1841] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 91.642449][ T1841] kworker/u8:7: attempt to access beyond end of device [ 91.642449][ T1841] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 91.696262][ T7003] loop3: detected capacity change from 0 to 1764 [ 91.703995][ T7003] ISOFS: Bad logical zone size 2051 [ 91.724623][ T7000] loop4: detected capacity change from 0 to 512 [ 91.752012][ T7000] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 91.759801][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1109'. [ 91.837858][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 91.904769][ T7021] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 91.913578][ T7022] loop5: detected capacity change from 0 to 128 [ 91.927308][ T7022] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.974609][ T7012] loop4: detected capacity change from 0 to 1024 [ 91.981577][ T7012] EXT4-fs: inline encryption not supported [ 91.987845][ T7012] EXT4-fs: Ignoring removed bh option [ 91.995655][ T7022] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.028527][ T7014] loop3: detected capacity change from 0 to 512 [ 92.105160][ T7014] EXT4-fs: inline encryption not supported [ 92.115259][ T7014] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1113: error while reading EA inode 32 err=-116 [ 92.123252][ T7036] loop5: detected capacity change from 0 to 512 [ 92.145867][ T7014] EXT4-fs (loop3): Remounting filesystem read-only [ 92.152487][ T7014] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.164899][ T7014] EXT4-fs (loop3): 1 orphan inode deleted [ 92.203068][ T7036] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.239449][ T7036] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1117'. [ 92.400959][ T7053] loop3: detected capacity change from 0 to 1764 [ 92.419596][ T7053] ISOFS: Bad logical zone size 2051 [ 92.537711][ T7059] loop3: detected capacity change from 0 to 512 [ 92.562813][ T7059] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.902148][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.911961][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.444062][ T7105] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 93.452690][ T7105] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 93.464201][ T7110] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1141'. [ 93.476220][ T7110] 0: renamed from hsr0 (while UP) [ 93.483397][ T7110] 0: entered allmulticast mode [ 93.488315][ T7110] hsr_slave_0: entered allmulticast mode [ 93.494165][ T7110] hsr_slave_1: entered allmulticast mode [ 93.501756][ T7110] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 94.066167][ T7129] loop5: detected capacity change from 0 to 512 [ 94.091506][ T7129] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.191011][ T7142] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1153'. [ 94.200142][ T7142] 0: renamed from 71 (while UP) [ 94.207130][ T7142] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 94.452247][ T7151] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1156'. [ 94.850586][ T7162] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1160'. [ 94.946789][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 94.946809][ T29] audit: type=1326 audit(1754946255.033:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 94.976538][ T29] audit: type=1326 audit(1754946255.033:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.004609][ T29] audit: type=1326 audit(1754946255.033:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c5cc9d550 code=0x7ffc0000 [ 95.015143][ T7165] sd 0:0:1:0: device reset [ 95.028706][ T29] audit: type=1326 audit(1754946255.033:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.058576][ T29] audit: type=1326 audit(1754946255.033:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.150007][ T29] audit: type=1326 audit(1754946255.103:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.173770][ T29] audit: type=1326 audit(1754946255.173:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.197224][ T29] audit: type=1326 audit(1754946255.173:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.220747][ T29] audit: type=1326 audit(1754946255.223:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.244517][ T29] audit: type=1326 audit(1754946255.223:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5cc9ebe9 code=0x7ffc0000 [ 95.331234][ T7175] ALSA: seq fatal error: cannot create timer (-22) [ 95.333696][ T7177] netlink: 'syz.3.1165': attribute type 1 has an invalid length. [ 95.435096][ T7184] ALSA: seq fatal error: cannot create timer (-22) [ 95.606131][ T7195] 1: renamed from 70 (while UP) [ 95.623570][ T7195] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 95.673800][ T7201] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 95.982869][ T7213] netlink: 'syz.5.1177': attribute type 1 has an invalid length. [ 96.205765][ T7219] __nla_validate_parse: 1 callbacks suppressed [ 96.205852][ T7219] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1179'. [ 96.239423][ T7219] 0: renamed from 71 (while UP) [ 96.261924][ T7219] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 96.318621][ T7207] syz.3.1176 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.333716][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.3.1176 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 96.333814][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.333828][ T7207] Call Trace: [ 96.333836][ T7207] [ 96.333852][ T7207] __dump_stack+0x1d/0x30 [ 96.333887][ T7207] dump_stack_lvl+0xe8/0x140 [ 96.333908][ T7207] dump_stack+0x15/0x1b [ 96.333934][ T7207] dump_header+0x81/0x220 [ 96.334028][ T7207] oom_kill_process+0x342/0x400 [ 96.334104][ T7207] out_of_memory+0x979/0xb80 [ 96.334143][ T7207] try_charge_memcg+0x5e6/0x9e0 [ 96.334172][ T7207] obj_cgroup_charge_pages+0xa6/0x150 [ 96.334206][ T7207] __memcg_kmem_charge_page+0x9f/0x170 [ 96.334314][ T7207] __alloc_frozen_pages_noprof+0x188/0x360 [ 96.334347][ T7207] alloc_pages_mpol+0xb3/0x250 [ 96.334376][ T7207] alloc_pages_noprof+0x90/0x130 [ 96.334472][ T7207] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 96.334520][ T7207] __kvmalloc_node_noprof+0x30f/0x4e0 [ 96.334684][ T7207] ? ip_set_alloc+0x1f/0x30 [ 96.334720][ T7207] ? ip_set_alloc+0x1f/0x30 [ 96.334753][ T7207] ? hash_netiface_create+0x21b/0x740 [ 96.334792][ T7207] ? __kmalloc_cache_noprof+0x189/0x320 [ 96.334825][ T7207] ip_set_alloc+0x1f/0x30 [ 96.334861][ T7207] hash_netiface_create+0x282/0x740 [ 96.334999][ T7207] ? __pfx_hash_netiface_create+0x10/0x10 [ 96.335038][ T7207] ip_set_create+0x3cc/0x960 [ 96.335069][ T7207] ? __nla_parse+0x40/0x60 [ 96.335098][ T7207] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.335160][ T7207] netlink_rcv_skb+0x120/0x220 [ 96.335193][ T7207] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.335289][ T7207] nfnetlink_rcv+0x16b/0x1690 [ 96.335322][ T7207] ? nlmon_xmit+0x4f/0x60 [ 96.335353][ T7207] ? consume_skb+0x49/0x150 [ 96.335407][ T7207] ? nlmon_xmit+0x4f/0x60 [ 96.335506][ T7207] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 96.335535][ T7207] ? __dev_queue_xmit+0x1200/0x2000 [ 96.335618][ T7207] ? __dev_queue_xmit+0x182/0x2000 [ 96.335644][ T7207] ? ref_tracker_free+0x37d/0x3e0 [ 96.335674][ T7207] ? __netlink_deliver_tap+0x4dc/0x500 [ 96.335703][ T7207] netlink_unicast+0x5c0/0x690 [ 96.335757][ T7207] netlink_sendmsg+0x58b/0x6b0 [ 96.335778][ T7207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.335800][ T7207] __sock_sendmsg+0x145/0x180 [ 96.335839][ T7207] ____sys_sendmsg+0x31e/0x4e0 [ 96.335875][ T7207] ___sys_sendmsg+0x17b/0x1d0 [ 96.335906][ T7207] __x64_sys_sendmsg+0xd4/0x160 [ 96.335965][ T7207] x64_sys_call+0x191e/0x2ff0 [ 96.335989][ T7207] do_syscall_64+0xd2/0x200 [ 96.336075][ T7207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.336105][ T7207] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.336135][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.336160][ T7207] RIP: 0033:0x7fa4d1bdebe9 [ 96.336180][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.336199][ T7207] RSP: 002b:00007fa4d0647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.336236][ T7207] RAX: ffffffffffffffda RBX: 00007fa4d1e05fa0 RCX: 00007fa4d1bdebe9 [ 96.336248][ T7207] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 96.336261][ T7207] RBP: 00007fa4d1c61e19 R08: 0000000000000000 R09: 0000000000000000 [ 96.336330][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.336421][ T7207] R13: 00007fa4d1e06038 R14: 00007fa4d1e05fa0 R15: 00007ffe4c35e9d8 [ 96.336444][ T7207] [ 96.336490][ T7207] memory: usage 307200kB, limit 307200kB, failcnt 368 [ 96.470880][ T7206] ================================================================== [ 96.470913][ T7206] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 96.476616][ T7207] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 96.481301][ T7206] [ 96.481307][ T7206] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 96.481327][ T7206] tick_do_update_jiffies64+0x113/0x1c0 [ 96.485748][ T7207] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 96.490693][ T7206] tick_nohz_handler+0x7f/0x2d0 [ 96.490720][ T7206] __hrtimer_run_queues+0x20c/0x5a0 [ 96.495472][ T7207] Memory cgroup stats for /syz3 [ 96.500919][ T7206] hrtimer_interrupt+0x21a/0x460 [ 96.505691][ T7207] : [ 96.510070][ T7206] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 96.510110][ T7206] sysvec_apic_timer_interrupt+0x6f/0x80 [ 96.776120][ T7206] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.782126][ T7206] console_flush_all+0x55b/0x730 [ 96.787172][ T7206] console_unlock+0xa1/0x330 [ 96.791877][ T7206] vprintk_emit+0x388/0x650 [ 96.796673][ T7206] vprintk_default+0x26/0x30 [ 96.801373][ T7206] vprintk+0x1d/0x30 [ 96.805471][ T7206] _printk+0x79/0xa0 [ 96.809389][ T7206] mem_cgroup_print_oom_meminfo+0x84/0x250 [ 96.815211][ T7206] dump_header+0xa0/0x220 [ 96.819641][ T7206] oom_kill_process+0x342/0x400 [ 96.824595][ T7206] out_of_memory+0x979/0xb80 [ 96.829230][ T7206] try_charge_memcg+0x5e6/0x9e0 [ 96.834140][ T7206] obj_cgroup_charge_pages+0xa6/0x150 [ 96.839549][ T7206] __memcg_kmem_charge_page+0x9f/0x170 [ 96.845117][ T7206] __alloc_frozen_pages_noprof+0x188/0x360 [ 96.853475][ T7206] alloc_pages_mpol+0xb3/0x250 [ 96.858526][ T7206] alloc_pages_noprof+0x90/0x130 [ 96.863761][ T7206] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 96.869593][ T7206] __kvmalloc_node_noprof+0x30f/0x4e0 [ 96.875167][ T7206] ip_set_alloc+0x1f/0x30 [ 96.879641][ T7206] hash_netiface_create+0x282/0x740 [ 96.884904][ T7206] ip_set_create+0x3cc/0x960 [ 96.889608][ T7206] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.894556][ T7206] netlink_rcv_skb+0x120/0x220 [ 96.899537][ T7206] nfnetlink_rcv+0x16b/0x1690 [ 96.904235][ T7206] netlink_unicast+0x5c0/0x690 [ 96.909287][ T7206] netlink_sendmsg+0x58b/0x6b0 [ 96.914068][ T7206] __sock_sendmsg+0x145/0x180 [ 96.918836][ T7206] ____sys_sendmsg+0x31e/0x4e0 [ 96.923606][ T7206] ___sys_sendmsg+0x17b/0x1d0 [ 96.928296][ T7206] __x64_sys_sendmsg+0xd4/0x160 [ 96.933226][ T7206] x64_sys_call+0x191e/0x2ff0 [ 96.937930][ T7206] do_syscall_64+0xd2/0x200 [ 96.942544][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.948496][ T7206] [ 96.950840][ T7206] read to 0xffffffff868099c0 of 8 bytes by task 7206 on cpu 1: [ 96.958476][ T7206] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 96.964817][ T7206] count_shadow_nodes+0x6a/0x230 [ 96.969823][ T7206] do_shrink_slab+0x63/0x680 [ 96.974438][ T7206] shrink_slab+0x448/0x760 [ 96.978871][ T7206] shrink_node+0x6c3/0x2120 [ 96.983386][ T7206] do_try_to_free_pages+0x3f6/0xcd0 [ 96.988616][ T7206] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 96.994526][ T7206] try_charge_memcg+0x358/0x9e0 [ 96.999384][ T7206] charge_memcg+0x51/0xc0 [ 97.003742][ T7206] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 97.009737][ T7206] __read_swap_cache_async+0x1df/0x350 [ 97.015323][ T7206] swap_cluster_readahead+0x277/0x3e0 [ 97.020991][ T7206] swapin_readahead+0xde/0x6f0 [ 97.025783][ T7206] do_swap_page+0x301/0x2430 [ 97.030482][ T7206] handle_mm_fault+0x9a5/0x2c20 [ 97.035358][ T7206] do_user_addr_fault+0x636/0x1090 [ 97.040493][ T7206] exc_page_fault+0x62/0xa0 [ 97.045148][ T7206] asm_exc_page_fault+0x26/0x30 [ 97.050005][ T7206] [ 97.052329][ T7206] value changed: 0x00000000ffffb047 -> 0x00000000ffffb048 [ 97.059525][ T7206] [ 97.061848][ T7206] Reported by Kernel Concurrency Sanitizer on: [ 97.068065][ T7206] CPU: 1 UID: 0 PID: 7206 Comm: syz.3.1176 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 97.078803][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.089086][ T7206] ================================================================== [ 97.105518][ T7207] cache 4096 [ 97.108862][ T7207] rss 0 [ 97.111744][ T7207] shmem 0 [ 97.114697][ T7207] mapped_file 0 [ 97.118164][ T7207] dirty 0 [ 97.121333][ T7207] writeback 8192 [ 97.124886][ T7207] workingset_refault_anon 84 [ 97.129538][ T7207] workingset_refault_file 744 [ 97.134291][ T7207] swap 331776 [ 97.137626][ T7207] swapcached 28672 [ 97.141373][ T7207] pgpgin 119194 [ 97.144845][ T7207] pgpgout 119182 [ 97.148477][ T7207] pgfault 69330 [ 97.151973][ T7207] pgmajfault 51 [ 97.155442][ T7207] inactive_anon 28672 [ 97.159429][ T7207] active_anon 0 [ 97.163031][ T7207] inactive_file 20480 [ 97.167014][ T7207] active_file 0 [ 97.170496][ T7207] unevictable 0 [ 97.174045][ T7207] hierarchical_memory_limit 314572800 [ 97.179629][ T7207] hierarchical_memsw_limit 9223372036854771712 [ 97.186001][ T7207] total_cache 4096 [ 97.189975][ T7207] total_rss 0 [ 97.193259][ T7207] total_shmem 0 [ 97.196728][ T7207] total_mapped_file 0 [ 97.200826][ T7207] total_dirty 0 [ 97.204572][ T7207] total_writeback 8192 [ 97.208663][ T7207] total_workingset_refault_anon 84 [ 97.214007][ T7207] total_workingset_refault_file 744 [ 97.219410][ T7207] total_swap 331776 [ 97.223356][ T7207] total_swapcached 28672 [ 97.227670][ T7207] total_pgpgin 119194 [ 97.231738][ T7207] total_pgpgout 119182 [ 97.235904][ T7207] total_pgfault 69330 [ 97.240015][ T7207] total_pgmajfault 51 [ 97.244091][ T7207] total_inactive_anon 28672 [ 97.248608][ T7207] total_active_anon 0 [ 97.252625][ T7207] total_inactive_file 20480 [ 97.257142][ T7207] total_active_file 0 [ 97.261273][ T7207] total_unevictable 0 [ 97.265354][ T7207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1176,pid=7206,uid=0 [ 97.280216][ T7207] Memory cgroup out of memory: Killed process 7206 (syz.3.1176) total-vm:93764kB, anon-rss:1072kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000