last executing test programs: 5.386666606s ago: executing program 4 (id=308): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="756e686964652c636865636b3d72656c617865732c626c6f636b3d3078303030303030303030303030303230302c63727566742c68696465dc35e4ad3fca2c6f7600"/81], 0x1, 0x558, &(0x7f0000001800)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, 0x0, 0x0) 4.43325372s ago: executing program 4 (id=311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x46]}, 0x35) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r3, r4, 0x200000000000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) exit(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.543549134s ago: executing program 4 (id=321): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a183000000000000000005000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e00ae"], 0x78}}, 0x0) r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r5, &(0x7f0000000340), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(r7, 0x7) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r9, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000404, &(0x7f00000000c0), 0x1, 0x4be, &(0x7f0000000540)="$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") r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) 3.011815413s ago: executing program 4 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 2.710823017s ago: executing program 4 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000050000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000148000000020900010073797a30000000000900020073797a3200000000140000001100010000080000000000000200000a000000000000000000"], 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaa0180c2000003ef8ca6012735e1b4deffdec111f4005b000690ac1414bbad1414aa00004e2200f800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000001000000"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178e", 0x42}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xcb2}], 0x4, &(0x7f0000001480)}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/232, 0xe8, 0x1, &(0x7f0000000200)=""/51, 0x33}, &(0x7f0000000300)=0x40) pwritev(0xffffffffffffffff, &(0x7f0000001980)=[{0x0}], 0x1, 0x8, 0x365) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 2.672601978s ago: executing program 1 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'vlan1\x00'}) 2.53684611s ago: executing program 0 (id=331): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xprtrdma_post_send\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcded}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x3, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1}) 2.324011343s ago: executing program 0 (id=335): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xprtrdma_post_send\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcded}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x3, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000000000f8a428297045925b61dec9c5f6f3281815a858c2dc1bd67576c8b1269f89db16878e4f3e7e3675fbbbf5893f56bba9e3ca841bb5f29e2d0d60fbaa99a5009bef561e1557984fe4dab9ab5772a22c0682a9df9558f6f49d566151cfbe9cda3399ef5837ab9f0141893f6564"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1}) finit_module(r7, &(0x7f0000000140)='GPL\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8844) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) 2.157215886s ago: executing program 3 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 2.131492886s ago: executing program 0 (id=337): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) read(r1, &(0x7f0000003e40)=""/248, 0xf8) r5 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x400008c5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f00000011c0)=[{0x54}, {0x4c}, {0x6}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000340)='./file1\x00', 0x80000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2003}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000440)={0x2, 0x0, 0x85a, 0x9a8}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000640)={0x0, 0x2, 0x4, 0xc806}) 2.084324557s ago: executing program 3 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a0000000500000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x200000000000011, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/247, 0xf7}, {0x0}], 0x2) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000000)) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="000008000100000000003d000000450000c300000000078490783fffffffac1414aa00c30000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="940000049078001c0a0300050a000000fe00000000000000a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aa18c852b85396fd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257450bd8f2c42bf4a9768bef2ca76144bd2900fc6a8eb07aaa917e31a6f8e10a53"], 0xd1) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='^@\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) 2.001630998s ago: executing program 2 (id=339): socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x37}, 0x20000}], 0x1, 0x45833af96e4a39fc, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket(0x28, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) 1.762148932s ago: executing program 2 (id=340): socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xf) socket$inet6(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 1.724816613s ago: executing program 1 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xprtrdma_post_send\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x3, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.673000523s ago: executing program 1 (id=342): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfe, "0062ba7d9dd00014fbb36d9df98c4038096304"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f00000000c0)={'U+', 0xfffffffffffffff8}, 0x16, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1050c1, 0x1d6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x1, [{0xf, 0x9923, 0x100}, {0x8, 0x0, 0xf}, {0x7, 0x4, 0x1ff}, {0xd, 0x7, 0x4}, {0xb, 0x391, 0x1ff}, {0x2, 0xa886, 0x8}]}, @enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x0, 0x8}]}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x3, 0x4, 0x7fff}]}]}, {0x0, [0x61]}}, &(0x7f0000002d40)=""/4096, 0x9f, 0x1000, 0x0, 0x9c, 0x10000, @value=r3}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="15000000cc000000030000000400008000010000", @ANYRES32=r5, @ANYBLOB="b300"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="03000000020000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x5, &(0x7f00000001c0)=@raw=[@generic={0x80, 0x6, 0xe, 0x3, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @exit], &(0x7f0000000280)='GPL\x00', 0x6, 0xc4, &(0x7f00000003c0)=""/196, 0x40f00, 0x24, '\x00', r8, @netfilter=0x2d, r9, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0x200, 0x7}, 0x10, r10, r5, 0x9, &(0x7f0000000a00)=[r3, r11, r5, r4, 0xffffffffffffffff, r5, r4], &(0x7f0000000a40)=[{0x1, 0x4, 0x7, 0xa}, {0x3, 0x5, 0xb, 0x5}, {0x2, 0x1, 0x7, 0xc}, {0x2, 0x4, 0xb, 0x6}, {0x5, 0x4, 0xa, 0x8}, {0x1, 0x1, 0xb, 0x9}, {0x3, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x3, 0x2}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x4}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) fspick(r5, &(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) ioperm(0x3, 0x3, 0xffe) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x30}, 0x0) 1.444148727s ago: executing program 1 (id=343): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3ff, 0x0, 0x0}) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.357326198s ago: executing program 3 (id=344): socket$packet(0x11, 0xc412d5d6a981ab28, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_pcpu_drain\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000a60002"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@noacl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 1.055419213s ago: executing program 2 (id=345): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x437, &(0x7f00000010c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r3}, 0x18) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x80, 0xfffffffb}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x14) 1.052806903s ago: executing program 3 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getegid() 1.026443423s ago: executing program 3 (id=347): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) lstat(&(0x7f0000000580)='./file0\x00', 0x0) 951.252135ms ago: executing program 0 (id=348): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) getrandom(0x0, 0x0, 0x2) 950.781375ms ago: executing program 4 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 901.675805ms ago: executing program 3 (id=350): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="756e686964652c636865636b3d72656c617865732c626c6f636b3d3078303030303030303030303030303230302c63727566742c68696465dc35e4ad3fca2c6f7600"/81], 0x1, 0x558, &(0x7f0000001800)="$eJzs3V1v01gawPHHpd2WrIRWywqhqsCh7EpFKsFJICjiyuucpAcSO7Id1F6hiqaoIoUVZaVtbxZumBfNfAhu50PMN0JzPVeM/BLa0rwU+pKq8/9FcE7sJz7PSSM/chvbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHKrtl2wpGG89rIazK0GfnP3afbqAwvk9r5myLgiVvxPZmbkarro6j92V1+J/5uXufTZnMzEzYzs/PXK3x5enpzovX5Iwqdia3vnxWq323k97kRO0LXpwevq2jOhb5pOXSsT+qpSLtt3l2qhqpmGDlfCSDeVG2gn8gO14N5WhUqlpHR+xW979arT0L2FD+4UbbusHuVb2glC37v7KB+6S6bRMF49iYlXxzEP4g/iYxOpSDtNpdY3up3SqAnEQYXDBBVHBRXtYrFQKBYL5fuV+w9se/LAAvsLciBi/B9ajNcx7r2Bo5nI6r80xIgnbVkW1ffhSlUC8aU5YH2mV///dVcPHXdv/e9V+au7q2clqf/X02fXB9X/Abnsyeft4IjjeGzJtuzIC1mVrnSlI69PdLSz96iLFk+MhOKLkaY4yRKVLVFSkbKUxZansiQ1CUVJTYw0REsoKxJKJDr5RLkSiBZHIvElECUL4sptUVKQilSkJEq05GVFfGmLJ3WpipNsZV02kve9JMoalGMW9OPvnz4NCsn1Pi4dKQ6ZLfUffUxnH55Dhh/Hbhs4Fp969R8AAAAAAJxbVvLb9/j4f0quJb2aaWh73GkBAAAAAIBjlPzlfy5upuLeNbE4/gcAAAAA4LyxknPsLBHJyY20ty5Wck4VvwQAAAAAAOCcSP7+fz1ukmug3BDr8zVVOP4HAAAAAOCc+H7kNfbD1rT1628SBFPWu9byP61NJ45zNi/EzbRc+HKLUW3WupRtJGnKaTM56eo5ayYN+nwRzI9Zsz4qD6tfAm9FDp/A5Un5SW6mMTfX0nattyYdJVczDZ13/cbDgjjOpYlIL0f/fbnxP0mm/4PXvGTJ+ka3k3/2qruW5PIu3sq7zewCigeuozgklzfJ9RaScy76zngqOREjGzeXjmvvnf9E+vKJrxjzvcynMfPZFW9z++c/E49ZyO/Ofkr2zj7LonDEmb+XW2nMrYVbadMni2J+0M8gy6K4N4tvei8OkUVpVBalI2YBAOOyPqIKWQcL/zfs5b6tustXVvf3spDGLMwmO9bJ2T57dHvUHt0+YnX75cA9kAbV2Hjcn7+oqh/iF3wYOG7YKFrxW3jhzeZ/5MrW9s6djc3V553nnZfFYqls37Pt+0WZSqaRNdQeAEAf/e+xk9b2tP6PvAuPdW/EUfXfP3+lIC/P5JV0ZU0Wk7MNkm8c9N1qbs/XEBZHHLXmkjIZxxZkcchR3V+Ssxx62y0Ojd2fQ+mkfwwAAJyq+RF1eH/9v9i3/i+OOO7eX8uHHx3vxhZO+60AAOBPQwcfrVz0nRUEpvW0UKkUnGhJq8B3H6vAVOtaGS/SgbvkeHWtWoEf+a7fiDtPTFWHKmy3Wn4QqZofqJYfmuXkzu8qu/V7qJuOFxk3bDW0E2rl+l7kuJGqmtBVrfa/GyZc0kHy4rClXVMzrhMZ31Oh3w5cnVcq1HpPoKlqLzI1E3c91QpM0wlW1BO/0W5qVdWhG5hW5Kcb7I1lvJofNJPN5sf9ZgMAcEZsbe+8WO12O69PsDPuOQIAgP2o0gAAAAAAAAAAAAAAAAAAAAAAnH2ncf4fnXPe6V0K+qzkc/TORTkTaYyzM3LX8f8T3zkBOFF/BAAA//8ZwE+c") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = dup(r0) write$UHID_INPUT(r7, 0x0, 0x0) 821.296197ms ago: executing program 0 (id=351): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000008c0)='./file0\x00', 0x244) fallocate(r1, 0x0, 0x0, 0x9) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x8, 0x0, 0x2}) 478.195372ms ago: executing program 1 (id=352): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xprtrdma_post_send\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcded}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x3, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1}) 367.051124ms ago: executing program 1 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000050000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000148000000020900010073797a30000000000900020073797a3200000000140000001100010000080000000000000200000a000000000000000000"], 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaa0180c2000003ef8ca6012735e1b4deffdec111f4005b000690ac1414bbad1414aa00004e2200f800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000001000000"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178e", 0x42}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xcb2}], 0x4, &(0x7f0000001480)}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/232, 0xe8, 0x1, &(0x7f0000000200)=""/51, 0x33}, &(0x7f0000000300)=0x40) listen(r2, 0x3) pwritev(0xffffffffffffffff, &(0x7f0000001980)=[{0x0}], 0x1, 0x8, 0x365) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 364.853804ms ago: executing program 2 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r4 = epoll_create(0x8) ftruncate(r4, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0x9, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) 352.176614ms ago: executing program 0 (id=355): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}]}}, 0x0, 0x26}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x62d, 0x8, 0x7}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x5, 0x81, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x4, 0xffffffc4, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xfffffff8, 0x3}, {0x0, 0x4, 0xfff, 0x2, 0x9163ef6c, 0x80007}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8, 0xfff, 0x9, 0xffff, 0x1, 0x81}, {0x8, 0xfff, 0x6, 0x3ff, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x5, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x0, 0x48, 0x9}, {0x79, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0xb, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x8, 0x0, 0xff, 0x3}, {0xb, 0x7f, 0x5, 0x1, 0x402, 0x9}, {0x4, 0x8, 0x9b0, 0xb, 0x8, 0x4d}, {0x34db, 0x10001, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x200003, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0xfffff70f, 0x2, 0x8001, 0x40}, {0x7, 0x81, 0x7fffffff, 0x381, 0x1, 0x8}, {0x5, 0x1, 0x1, 0x8, 0x2000004, 0x2f}, {0x6, 0x81, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x810000, 0x8, 0x1, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x4}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x2, 0x10003, 0x3, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x8, 0x4d880, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x0, 0xe, 0x21a0, 0x0, 0x5}, {0x0, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0xe5a7}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x2, 0xf}, {0x1, 0x9, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x893}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0xffffffff, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0xa, 0x5, 0x5}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0xd09f}, {0x4, 0x7fffffff, 0x0, 0x8, 0x5, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x80, 0x40000040, 0x2, 0x89, 0x2}, {0x2, 0x6, 0xa, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x1605}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0x4, 0x3ee, 0x4}, {0xbfffffe, 0xfff, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0xe4ff, 0x6, 0x14}, {0x0, 0x1, 0x4c8d, 0x2, 0x7f, 0x8}, {0x5, 0x25c, 0xe9, 0x3, 0x9, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x2}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x477, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0xb}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xd, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x3, 0x8, 0x200}, {0xfff, 0x1, 0x0, 0x38, 0x9, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x0, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405bd, 0x6}, {0x9, 0x0, 0x9, 0x0, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x2}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x8000007, 0x97fd, 0xef, 0x2}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0x7fffffff}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0x3, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x2, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0x800ec3d, 0xffffffff, 0xea5, 0x3}, {0x6, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x6, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x96, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x8c5}, {0xfffffffb, 0x3, 0xb, 0x2ee8000, 0x8, 0x4}, {0x3, 0x2, 0x2, 0xc, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0x9, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0x4}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0xd, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x6}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x5, 0x3, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a4, 0x129, 0xad}, {0x7, 0x9, 0x8, 0x3, 0xe02, 0xf933271}, {0x2, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0xe63adc4050d28be2}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4f3, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 61.150889ms ago: executing program 2 (id=356): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x10}}, 0x0) 0s ago: executing program 2 (id=357): socket$packet(0x11, 0xc412d5d6a981ab28, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_pcpu_drain\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000a60002"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@noacl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) kernel console output (not intermixed with test programs): dm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.078003][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.099856][ T29] audit: type=1400 audit(1750904384.634:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.p27Bae/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.108503][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.133580][ T29] audit: type=1400 audit(1750904384.634:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.133605][ T29] audit: type=1400 audit(1750904384.634:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.p27Bae/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.133631][ T29] audit: type=1400 audit(1750904384.634:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.p27Bae/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.142314][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.164028][ T29] audit: type=1400 audit(1750904384.634:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.247973][ T29] audit: type=1400 audit(1750904384.834:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.270832][ T29] audit: type=1400 audit(1750904384.834:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=4034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 26.296111][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.296616][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.319480][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.328170][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.336922][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.350971][ T3302] veth0_vlan: entered promiscuous mode [ 26.361578][ T3314] veth1_vlan: entered promiscuous mode [ 26.370047][ T29] audit: type=1400 audit(1750904384.954:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.410492][ T3302] veth1_vlan: entered promiscuous mode [ 26.412166][ T3473] loop3: detected capacity change from 0 to 2048 [ 26.427956][ T3314] veth0_macvtap: entered promiscuous mode [ 26.436115][ T3314] veth1_macvtap: entered promiscuous mode [ 26.450388][ T3473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.455968][ T3302] veth0_macvtap: entered promiscuous mode [ 26.486479][ T3473] EXT4-fs (loop3): shut down requested (0) [ 26.491611][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.504484][ T3302] veth1_macvtap: entered promiscuous mode [ 26.515995][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.532635][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.542371][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.551212][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.560075][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.568809][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.588504][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.603978][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.612949][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.621791][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.630594][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.641020][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.712263][ T3487] xt_hashlimit: max too large, truncated to 1048576 [ 26.800626][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.809419][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.818201][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.850524][ T3487] infiniband syz!: set active [ 26.855269][ T3487] infiniband syz!: added team_slave_0 [ 26.892226][ T3487] RDS/IB: syz!: added [ 26.905370][ T3487] smc: adding ib device syz! with port count 1 [ 26.921959][ T3487] smc: ib device syz! port 1 has pnetid [ 26.943851][ T3498] loop4: detected capacity change from 0 to 512 [ 27.082569][ T3510] loop1: detected capacity change from 0 to 128 [ 27.271572][ T3487] syz.3.6 (3487) used greatest stack depth: 10448 bytes left [ 27.320004][ T3522] loop3: detected capacity change from 0 to 512 [ 27.326800][ T3522] ext2: Unknown parameter 'noacl' [ 27.590954][ T3535] loop3: detected capacity change from 0 to 1024 [ 27.591853][ T3534] xt_hashlimit: max too large, truncated to 1048576 [ 27.642026][ T3534] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 27.651570][ T3537] loop3: detected capacity change from 0 to 4096 [ 27.665590][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.683494][ T3537] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.695868][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 27.703760][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 27.712260][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.720099][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.727782][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.735606][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.743323][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.751013][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.758679][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.766370][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.774118][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.781785][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.789472][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.797158][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.804855][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.812532][ T3413] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 27.821059][ T3413] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 27.874547][ T2994] udevd[2994]: worker [3293] terminated by signal 33 (Unknown signal 33) [ 27.946951][ T2994] udevd[2994]: worker [3293] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.0001/hidraw/hidraw0' [ 27.970685][ T3582] IPv6: Can't replace route, no match found [ 28.002457][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.075474][ T3609] loop2: detected capacity change from 0 to 1024 [ 28.102932][ T3610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.103398][ T3609] EXT4-fs: Ignoring removed nobh option [ 28.111766][ T3610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.111786][ T3610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.117366][ T3609] EXT4-fs: Ignoring removed nobh option [ 28.141579][ T3610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.157606][ T3621] loop0: detected capacity change from 0 to 1024 [ 28.185219][ T3621] ======================================================= [ 28.185219][ T3621] WARNING: The mand mount option has been deprecated and [ 28.185219][ T3621] and is ignored by this kernel. Remove the mand [ 28.185219][ T3621] option from the mount to silence this warning. [ 28.185219][ T3621] ======================================================= [ 28.227603][ T3609] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 28.228844][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.259971][ T3621] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.309921][ T3609] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.23: inode #4294967295: comm syz.2.23: iget: illegal inode # [ 28.434360][ T3609] EXT4-fs (loop2): no journal found [ 28.439687][ T3609] EXT4-fs (loop2): can't get journal size [ 28.445558][ T3627] loop1: detected capacity change from 0 to 1024 [ 28.457908][ T3627] EXT4-fs: Ignoring removed nobh option [ 28.463541][ T3627] EXT4-fs: Ignoring removed bh option [ 28.486144][ T3609] EXT4-fs (loop2): failed to initialize system zone (-22) [ 28.500965][ T3627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.519522][ T3609] EXT4-fs (loop2): mount failed [ 28.532572][ T3631] IPv6: Can't replace route, no match found [ 28.541229][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.569768][ T3627] EXT4-fs (loop1): shut down requested (0) [ 28.836563][ T3641] loop4: detected capacity change from 0 to 1024 [ 28.844940][ T3627] syz.1.27 (3627) used greatest stack depth: 9696 bytes left [ 28.852877][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.885988][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.932660][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 28.941762][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.949167][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 28.957629][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.965115][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.981213][ T3646] capability: warning: `syz.1.30' uses deprecated v2 capabilities in a way that may be insecure [ 29.021228][ T3643] netlink: 'syz.1.30': attribute type 21 has an invalid length. [ 29.048958][ T3643] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 29.056695][ T3643] netlink: 144 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.056841][ T3649] loop0: detected capacity change from 0 to 512 [ 29.073639][ T3649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.082905][ T3584] syz.2.23 (3584) used greatest stack depth: 6952 bytes left [ 29.104247][ T3649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.126706][ T3653] IPv6: Can't replace route, no match found [ 29.137403][ T3649] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.154646][ T3649] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 29.168171][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 29.168110][ T3655] loop1: detected capacity change from 0 to 4096 [ 29.179762][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.184677][ T3649] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 29.211379][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 29.222485][ T3660] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.31: corrupted xattr block 19: overlapping e_value [ 29.222873][ T3649] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 29.246528][ T3660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 29.253063][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 29.308501][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.328977][ T3664] mmap: syz.0.34 (3664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.345404][ T3664] loop0: detected capacity change from 0 to 1024 [ 29.353712][ T3664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.362938][ T3664] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 29.374691][ T3664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 29.385355][ T3664] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.34: lblock 2 mapped to illegal pblock 2 (length 1) [ 29.400982][ T3664] EXT4-fs (loop0): Remounting filesystem read-only [ 29.407747][ T3664] EXT4-fs (loop0): 1 orphan inode deleted [ 29.414125][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.468483][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.478656][ T3670] loop3: detected capacity change from 0 to 1024 [ 29.522443][ T3670] EXT4-fs: Ignoring removed nobh option [ 29.522644][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.528047][ T3670] EXT4-fs: Ignoring removed nobh option [ 29.546230][ T3670] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 29.556260][ T3670] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.35: inode #4294967295: comm syz.3.35: iget: illegal inode # [ 29.571837][ T3670] EXT4-fs (loop3): no journal found [ 29.577083][ T3670] EXT4-fs (loop3): can't get journal size [ 29.623750][ T3670] EXT4-fs (loop3): failed to initialize system zone (-22) [ 29.683829][ T3670] EXT4-fs (loop3): mount failed [ 29.924707][ C1] hrtimer: interrupt took 38015 ns [ 29.978801][ T3691] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 30.037983][ T3695] serio: Serial port ptm0 [ 30.064725][ T3697] FAULT_INJECTION: forcing a failure. [ 30.064725][ T3697] name failslab, interval 1, probability 0, space 0, times 1 [ 30.077478][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.2.43 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 30.077529][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.077540][ T3697] Call Trace: [ 30.077545][ T3697] [ 30.077552][ T3697] __dump_stack+0x1d/0x30 [ 30.077571][ T3697] dump_stack_lvl+0xe8/0x140 [ 30.077592][ T3697] dump_stack+0x15/0x1b [ 30.077609][ T3697] should_fail_ex+0x265/0x280 [ 30.077645][ T3697] should_failslab+0x8c/0xb0 [ 30.077670][ T3697] kmem_cache_alloc_noprof+0x50/0x310 [ 30.077696][ T3697] ? skb_clone+0x151/0x1f0 [ 30.077712][ T3697] skb_clone+0x151/0x1f0 [ 30.077773][ T3697] __netlink_deliver_tap+0x2c9/0x500 [ 30.077812][ T3697] netlink_unicast+0x64c/0x670 [ 30.077964][ T3697] netlink_sendmsg+0x58b/0x6b0 [ 30.077981][ T3697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.078060][ T3697] __sock_sendmsg+0x142/0x180 [ 30.078082][ T3697] ____sys_sendmsg+0x31e/0x4e0 [ 30.078149][ T3697] ___sys_sendmsg+0x17b/0x1d0 [ 30.078194][ T3697] __x64_sys_sendmsg+0xd4/0x160 [ 30.078224][ T3697] x64_sys_call+0x2999/0x2fb0 [ 30.078317][ T3697] do_syscall_64+0xd2/0x200 [ 30.078337][ T3697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.078364][ T3697] ? clear_bhb_loop+0x40/0x90 [ 30.078413][ T3697] ? clear_bhb_loop+0x40/0x90 [ 30.078434][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.078456][ T3697] RIP: 0033:0x7fb6bd55e929 [ 30.078476][ T3697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.078500][ T3697] RSP: 002b:00007fb6bbbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.078583][ T3697] RAX: ffffffffffffffda RBX: 00007fb6bd785fa0 RCX: 00007fb6bd55e929 [ 30.078597][ T3697] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 30.078609][ T3697] RBP: 00007fb6bbbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 30.078618][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.078629][ T3697] R13: 0000000000000000 R14: 00007fb6bd785fa0 R15: 00007ffde785ccb8 [ 30.078645][ T3697] [ 30.434345][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.573438][ T3668] syz.3.35 (3668) used greatest stack depth: 5824 bytes left [ 30.591945][ T3713] xt_hashlimit: max too large, truncated to 1048576 [ 30.606960][ T3713] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 30.685643][ T3718] loop4: detected capacity change from 0 to 4096 [ 30.697718][ T3720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.717652][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.740728][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 30.748646][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 30.757009][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.764788][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.772557][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.780230][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.787876][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.795609][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.803761][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.811771][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.819520][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.827227][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.835006][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.842693][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.850431][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.858088][ T3367] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.869367][ T3367] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 30.981914][ T3746] loop1: detected capacity change from 0 to 128 [ 30.989190][ T3751] loop0: detected capacity change from 0 to 128 [ 30.997942][ T3746] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.998109][ T3751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.023632][ T3751] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.055906][ T3746] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.089294][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.118486][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.149288][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.155311][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 31.155325][ T29] audit: type=1326 audit(1750904389.744:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.165047][ T3766] xt_hashlimit: max too large, truncated to 1048576 [ 31.187934][ T29] audit: type=1326 audit(1750904389.744:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.218138][ T29] audit: type=1326 audit(1750904389.744:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.241782][ T29] audit: type=1326 audit(1750904389.744:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.253013][ T3766] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 31.264982][ T29] audit: type=1326 audit(1750904389.744:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.294767][ T29] audit: type=1326 audit(1750904389.744:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.318652][ T29] audit: type=1326 audit(1750904389.744:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.342499][ T29] audit: type=1326 audit(1750904389.744:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.344248][ T3771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.365880][ T29] audit: type=1326 audit(1750904389.744:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.397412][ T29] audit: type=1326 audit(1750904389.744:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d3e929 code=0x7ffc0000 [ 31.433786][ T3777] FAULT_INJECTION: forcing a failure. [ 31.433786][ T3777] name failslab, interval 1, probability 0, space 0, times 0 [ 31.446692][ T3777] CPU: 1 UID: 0 PID: 3777 Comm: syz.0.63 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 31.446775][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.446785][ T3777] Call Trace: [ 31.446790][ T3777] [ 31.446797][ T3777] __dump_stack+0x1d/0x30 [ 31.446815][ T3777] dump_stack_lvl+0xe8/0x140 [ 31.446878][ T3777] dump_stack+0x15/0x1b [ 31.446891][ T3777] should_fail_ex+0x265/0x280 [ 31.446954][ T3777] should_failslab+0x8c/0xb0 [ 31.446973][ T3777] kmem_cache_alloc_noprof+0x50/0x310 [ 31.446994][ T3777] ? skb_clone+0x151/0x1f0 [ 31.447010][ T3777] skb_clone+0x151/0x1f0 [ 31.447084][ T3777] __netlink_deliver_tap+0x2c9/0x500 [ 31.447122][ T3777] netlink_unicast+0x64c/0x670 [ 31.447218][ T3777] netlink_sendmsg+0x58b/0x6b0 [ 31.447235][ T3777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.447251][ T3777] __sock_sendmsg+0x142/0x180 [ 31.447271][ T3777] ____sys_sendmsg+0x31e/0x4e0 [ 31.447377][ T3777] ___sys_sendmsg+0x17b/0x1d0 [ 31.447413][ T3777] __x64_sys_sendmsg+0xd4/0x160 [ 31.447442][ T3777] x64_sys_call+0x2999/0x2fb0 [ 31.447479][ T3777] do_syscall_64+0xd2/0x200 [ 31.447495][ T3777] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.447573][ T3777] ? clear_bhb_loop+0x40/0x90 [ 31.447590][ T3777] ? clear_bhb_loop+0x40/0x90 [ 31.447688][ T3777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.447774][ T3777] RIP: 0033:0x7f678b0de929 [ 31.447787][ T3777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.447801][ T3777] RSP: 002b:00007f6789747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.447817][ T3777] RAX: ffffffffffffffda RBX: 00007f678b305fa0 RCX: 00007f678b0de929 [ 31.447827][ T3777] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 31.447837][ T3777] RBP: 00007f6789747090 R08: 0000000000000000 R09: 0000000000000000 [ 31.447955][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.447965][ T3777] R13: 0000000000000000 R14: 00007f678b305fa0 R15: 00007ffeb19146e8 [ 31.447980][ T3777] [ 31.800621][ T3791] loop4: detected capacity change from 0 to 1024 [ 31.822460][ T3791] EXT4-fs: Ignoring removed nobh option [ 31.828082][ T3791] EXT4-fs: Ignoring removed nobh option [ 31.850554][ T3791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 31.876912][ T3791] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.72: inode #4294967295: comm syz.4.72: iget: illegal inode # [ 31.914628][ T3791] EXT4-fs (loop4): no journal found [ 31.920410][ T3791] EXT4-fs (loop4): can't get journal size [ 31.959381][ T3791] EXT4-fs (loop4): failed to initialize system zone (-22) [ 31.976790][ T3808] loop1: detected capacity change from 0 to 128 [ 31.986789][ T3791] EXT4-fs (loop4): mount failed [ 32.009754][ T3808] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.040395][ T3808] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.120633][ T3810] capability: warning: `syz.2.76' uses 32-bit capabilities (legacy support in use) [ 32.171968][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.206148][ T3822] __nla_validate_parse: 12 callbacks suppressed [ 32.206162][ T3822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'. [ 32.221367][ T3822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 32.230176][ T3822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'. [ 32.244192][ T3827] loop1: detected capacity change from 0 to 256 [ 32.265296][ T3827] syzkaller1: entered promiscuous mode [ 32.270848][ T3827] syzkaller1: entered allmulticast mode [ 32.277263][ T3822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'. [ 32.315554][ T3827] netlink: 240 bytes leftover after parsing attributes in process `syz.1.80'. [ 32.339136][ T3830] x_tables: duplicate underflow at hook 3 [ 32.478272][ T3783] syz.4.72 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 32.492483][ T3783] CPU: 0 UID: 0 PID: 3783 Comm: syz.4.72 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 32.492551][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.492563][ T3783] Call Trace: [ 32.492569][ T3783] [ 32.492576][ T3783] __dump_stack+0x1d/0x30 [ 32.492729][ T3783] dump_stack_lvl+0xe8/0x140 [ 32.492745][ T3783] dump_stack+0x15/0x1b [ 32.492759][ T3783] dump_header+0x81/0x220 [ 32.492786][ T3783] oom_kill_process+0x334/0x3f0 [ 32.492888][ T3783] out_of_memory+0x979/0xb80 [ 32.492947][ T3783] try_charge_memcg+0x5e6/0x9e0 [ 32.493026][ T3783] obj_cgroup_charge_pages+0xa6/0x150 [ 32.493052][ T3783] __memcg_kmem_charge_page+0x9f/0x170 [ 32.493090][ T3783] __alloc_frozen_pages_noprof+0x188/0x360 [ 32.493121][ T3783] alloc_pages_mpol+0xb3/0x250 [ 32.493215][ T3783] alloc_pages_noprof+0x90/0x130 [ 32.493240][ T3783] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 32.493300][ T3783] __kvmalloc_node_noprof+0x30f/0x4e0 [ 32.493354][ T3783] ? ip_set_alloc+0x1f/0x30 [ 32.493378][ T3783] ? ip_set_alloc+0x1f/0x30 [ 32.493438][ T3783] ? __kmalloc_cache_noprof+0x189/0x320 [ 32.493462][ T3783] ip_set_alloc+0x1f/0x30 [ 32.493529][ T3783] hash_netiface_create+0x282/0x740 [ 32.493555][ T3783] ? __pfx_hash_netiface_create+0x10/0x10 [ 32.493636][ T3783] ip_set_create+0x3c9/0x960 [ 32.493748][ T3783] nfnetlink_rcv_msg+0x4c3/0x590 [ 32.493782][ T3783] ? selinux_capable+0x1f9/0x270 [ 32.493808][ T3783] netlink_rcv_skb+0x120/0x220 [ 32.493901][ T3783] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 32.493926][ T3783] nfnetlink_rcv+0x16b/0x1690 [ 32.493947][ T3783] ? __kfree_skb+0x109/0x150 [ 32.493972][ T3783] ? nlmon_xmit+0x4f/0x60 [ 32.493998][ T3783] ? consume_skb+0x49/0x150 [ 32.494028][ T3783] ? nlmon_xmit+0x4f/0x60 [ 32.494076][ T3783] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 32.494104][ T3783] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 32.494129][ T3783] ? __dev_queue_xmit+0x182/0x1fb0 [ 32.494194][ T3783] ? ref_tracker_free+0x37d/0x3e0 [ 32.494223][ T3783] ? __netlink_deliver_tap+0x4dc/0x500 [ 32.494252][ T3783] netlink_unicast+0x59e/0x670 [ 32.494278][ T3783] netlink_sendmsg+0x58b/0x6b0 [ 32.494323][ T3783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.494339][ T3783] __sock_sendmsg+0x142/0x180 [ 32.494359][ T3783] ____sys_sendmsg+0x31e/0x4e0 [ 32.494454][ T3783] ___sys_sendmsg+0x17b/0x1d0 [ 32.494479][ T3783] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 32.494510][ T3783] __x64_sys_sendmsg+0xd4/0x160 [ 32.494579][ T3783] x64_sys_call+0x2999/0x2fb0 [ 32.494597][ T3783] do_syscall_64+0xd2/0x200 [ 32.494612][ T3783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.494647][ T3783] ? clear_bhb_loop+0x40/0x90 [ 32.494665][ T3783] ? clear_bhb_loop+0x40/0x90 [ 32.494683][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.494736][ T3783] RIP: 0033:0x7f1593d3e929 [ 32.494750][ T3783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.494765][ T3783] RSP: 002b:00007f15923a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.494781][ T3783] RAX: ffffffffffffffda RBX: 00007f1593f65fa0 RCX: 00007f1593d3e929 [ 32.494792][ T3783] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 32.494803][ T3783] RBP: 00007f1593dc0b39 R08: 0000000000000000 R09: 0000000000000000 [ 32.494813][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.494864][ T3783] R13: 0000000000000000 R14: 00007f1593f65fa0 R15: 00007fff8beac2d8 [ 32.494878][ T3783] [ 32.494910][ T3783] memory: usage 306996kB, limit 307200kB, failcnt 78 [ 32.849575][ T3783] memory+swap: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 32.857458][ T3783] kmem: usage 306780kB, limit 9007199254740988kB, failcnt 0 [ 32.864803][ T3783] Memory cgroup stats for /syz4: [ 32.865114][ T3783] cache 40960 [ 32.873529][ T3783] rss 110592 [ 32.876719][ T3783] shmem 0 [ 32.879738][ T3783] mapped_file 40960 [ 32.883540][ T3783] dirty 8192 [ 32.886715][ T3783] writeback 0 [ 32.890016][ T3783] workingset_refault_anon 52 [ 32.894595][ T3783] workingset_refault_file 94 [ 32.899161][ T3783] swap 77824 [ 32.902401][ T3783] swapcached 122880 [ 32.906198][ T3783] pgpgin 1853 [ 32.909546][ T3783] pgpgout 1812 [ 32.912911][ T3783] pgfault 2971 [ 32.916351][ T3783] pgmajfault 32 [ 32.919906][ T3783] inactive_anon 122880 [ 32.923983][ T3783] active_anon 4096 [ 32.927712][ T3783] inactive_file 40960 [ 32.931738][ T3783] active_file 0 [ 32.935203][ T3783] unevictable 0 [ 32.938723][ T3783] hierarchical_memory_limit 314572800 [ 32.944156][ T3783] hierarchical_memsw_limit 9223372036854771712 [ 32.950434][ T3783] total_cache 40960 [ 32.954288][ T3783] total_rss 110592 [ 32.958003][ T3783] total_shmem 0 [ 32.961525][ T3783] total_mapped_file 40960 [ 32.965896][ T3783] total_dirty 8192 [ 32.969695][ T3783] total_writeback 0 [ 32.973572][ T3783] total_workingset_refault_anon 52 [ 32.978690][ T3783] total_workingset_refault_file 94 [ 32.983973][ T3783] total_swap 77824 [ 32.987700][ T3783] total_swapcached 122880 [ 32.992076][ T3783] total_pgpgin 1853 [ 32.995883][ T3783] total_pgpgout 1812 [ 32.999807][ T3783] total_pgfault 2971 [ 33.003802][ T3783] total_pgmajfault 32 [ 33.007788][ T3783] total_inactive_anon 122880 [ 33.012434][ T3783] total_active_anon 4096 [ 33.016685][ T3783] total_inactive_file 40960 [ 33.021202][ T3783] total_active_file 0 [ 33.025174][ T3783] total_unevictable 0 [ 33.029166][ T3783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.72,pid=3782,uid=0 [ 33.043615][ T3783] Memory cgroup out of memory: Killed process 3783 (syz.4.72) total-vm:93752kB, anon-rss:1064kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 33.203183][ T3860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.211976][ T3860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.230629][ T3863] xt_hashlimit: max too large, truncated to 1048576 [ 33.253045][ T3865] loop4: detected capacity change from 0 to 128 [ 33.267410][ T3869] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 33.327143][ T3877] loop4: detected capacity change from 0 to 128 [ 33.337433][ T3877] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.351656][ T3877] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.414508][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.468065][ T3886] loop4: detected capacity change from 0 to 4096 [ 33.477279][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.492692][ T3891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.504077][ T3886] netlink: 92 bytes leftover after parsing attributes in process `syz.4.100'. [ 33.515520][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 33.523276][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 33.536189][ T3891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.539418][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.554227][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.561919][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.569653][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.577308][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.585022][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.592789][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.600491][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.608136][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.615847][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.623556][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.631261][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.638936][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.646725][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 33.655075][ T3367] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 33.694203][ T3891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.743584][ T3891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.778435][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.811606][ T3891] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.825285][ T3891] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.837285][ T3891] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.852929][ T3891] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.935652][ T3919] FAULT_INJECTION: forcing a failure. [ 33.935652][ T3919] name failslab, interval 1, probability 0, space 0, times 0 [ 33.948366][ T3919] CPU: 1 UID: 0 PID: 3919 Comm: syz.1.109 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 33.948402][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.948413][ T3919] Call Trace: [ 33.948419][ T3919] [ 33.948427][ T3919] __dump_stack+0x1d/0x30 [ 33.948446][ T3919] dump_stack_lvl+0xe8/0x140 [ 33.948466][ T3919] dump_stack+0x15/0x1b [ 33.948483][ T3919] should_fail_ex+0x265/0x280 [ 33.948547][ T3919] should_failslab+0x8c/0xb0 [ 33.948637][ T3919] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 33.948740][ T3919] ? shmem_alloc_inode+0x34/0x50 [ 33.948768][ T3919] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 33.948788][ T3919] shmem_alloc_inode+0x34/0x50 [ 33.948806][ T3919] alloc_inode+0x3d/0x170 [ 33.948845][ T3919] new_inode+0x1d/0xe0 [ 33.948864][ T3919] shmem_get_inode+0x244/0x750 [ 33.948886][ T3919] shmem_mknod+0x46/0x180 [ 33.948909][ T3919] shmem_create+0x34/0x50 [ 33.948931][ T3919] vfs_create+0x194/0x2b0 [ 33.949014][ T3919] do_mknodat+0x2af/0x610 [ 33.949065][ T3919] __x64_sys_mknod+0x51/0x60 [ 33.949110][ T3919] x64_sys_call+0x181c/0x2fb0 [ 33.949134][ T3919] do_syscall_64+0xd2/0x200 [ 33.949149][ T3919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.949215][ T3919] ? clear_bhb_loop+0x40/0x90 [ 33.949236][ T3919] ? clear_bhb_loop+0x40/0x90 [ 33.949255][ T3919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.949273][ T3919] RIP: 0033:0x7f7cee63e929 [ 33.949339][ T3919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.949353][ T3919] RSP: 002b:00007f7cecca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 33.949368][ T3919] RAX: ffffffffffffffda RBX: 00007f7cee865fa0 RCX: 00007f7cee63e929 [ 33.949385][ T3919] RDX: 0000000000000703 RSI: 0000000000000408 RDI: 0000200000000000 [ 33.949398][ T3919] RBP: 00007f7cecca7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.949409][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.949444][ T3919] R13: 0000000000000000 R14: 00007f7cee865fa0 R15: 00007ffc64f58508 [ 33.949461][ T3919] [ 34.288212][ T3935] loop1: detected capacity change from 0 to 4096 [ 34.296709][ T3935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.310919][ T3935] netlink: 92 bytes leftover after parsing attributes in process `syz.1.115'. [ 34.346476][ T3938] loop0: detected capacity change from 0 to 512 [ 34.353356][ T3938] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.366447][ T3938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.377941][ T3938] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.392499][ T3938] EXT4-fs (loop0): 1 truncate cleaned up [ 34.398640][ T3938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.429669][ T3944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'. [ 34.438665][ T3944] netlink: 212 bytes leftover after parsing attributes in process `syz.2.118'. [ 34.521876][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.605452][ T3955] loop1: detected capacity change from 0 to 1024 [ 34.630446][ T3955] EXT4-fs: Ignoring removed nobh option [ 34.636130][ T3955] EXT4-fs: Ignoring removed nobh option [ 34.651349][ T3955] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 34.669423][ T3955] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.120: inode #4294967295: comm syz.1.120: iget: illegal inode # [ 34.698380][ T3963] loop4: detected capacity change from 0 to 512 [ 34.721278][ T3955] EXT4-fs (loop1): no journal found [ 34.726525][ T3955] EXT4-fs (loop1): can't get journal size [ 34.733373][ T3963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.790816][ T3968] loop3: detected capacity change from 0 to 512 [ 34.801406][ T3968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.820544][ T3963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.835628][ T3955] EXT4-fs (loop1): failed to initialize system zone (-22) [ 34.843425][ T3963] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.856201][ T3968] EXT4-fs (loop3): 1 truncate cleaned up [ 34.862158][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.870256][ T3955] EXT4-fs (loop1): mount failed [ 34.880090][ T3963] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 34.930960][ T3963] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 34.990008][ T3963] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 35.041840][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.051560][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.070885][ T3963] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 35.102355][ T3963] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 35.137091][ T3963] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 35.206710][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.229590][ T3982] FAULT_INJECTION: forcing a failure. [ 35.229590][ T3982] name failslab, interval 1, probability 0, space 0, times 0 [ 35.242314][ T3982] CPU: 1 UID: 0 PID: 3982 Comm: syz.3.129 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 35.242343][ T3982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.242369][ T3982] Call Trace: [ 35.242376][ T3982] [ 35.242384][ T3982] __dump_stack+0x1d/0x30 [ 35.242406][ T3982] dump_stack_lvl+0xe8/0x140 [ 35.242426][ T3982] dump_stack+0x15/0x1b [ 35.242443][ T3982] should_fail_ex+0x265/0x280 [ 35.242526][ T3982] should_failslab+0x8c/0xb0 [ 35.242550][ T3982] kmem_cache_alloc_node_noprof+0x57/0x320 [ 35.242581][ T3982] ? __alloc_skb+0x101/0x320 [ 35.242666][ T3982] ? css_rstat_updated+0x52/0x5b0 [ 35.242751][ T3982] __alloc_skb+0x101/0x320 [ 35.242781][ T3982] tcp_stream_alloc_skb+0x2d/0x1d0 [ 35.242809][ T3982] tcp_sendmsg_locked+0x12f0/0x2cc0 [ 35.242888][ T3982] ? try_charge_memcg+0x200/0x9e0 [ 35.242930][ T3982] ? __pfx_tcp_sendmsg+0x10/0x10 [ 35.242957][ T3982] tcp_sendmsg+0x2f/0x50 [ 35.243016][ T3982] inet_sendmsg+0x76/0xd0 [ 35.243035][ T3982] __sock_sendmsg+0x102/0x180 [ 35.243068][ T3982] sock_sendmsg+0xc1/0x130 [ 35.243110][ T3982] kcm_write_msgs+0x737/0xb70 [ 35.243211][ T3982] kcm_sendmsg+0x13d2/0x16c0 [ 35.243228][ T3982] ? avc_has_perm+0xd3/0x150 [ 35.243258][ T3982] ? __pfx_kcm_sendmsg+0x10/0x10 [ 35.243278][ T3982] __sock_sendmsg+0x142/0x180 [ 35.243421][ T3982] sock_write_iter+0x165/0x1b0 [ 35.243446][ T3982] ? __pfx_sock_write_iter+0x10/0x10 [ 35.243468][ T3982] vfs_write+0x49d/0x8e0 [ 35.243502][ T3982] ksys_write+0xda/0x1a0 [ 35.243568][ T3982] __x64_sys_write+0x40/0x50 [ 35.243583][ T3982] x64_sys_call+0x2cdd/0x2fb0 [ 35.243613][ T3982] do_syscall_64+0xd2/0x200 [ 35.243632][ T3982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.243842][ T3982] ? clear_bhb_loop+0x40/0x90 [ 35.243865][ T3982] ? clear_bhb_loop+0x40/0x90 [ 35.243885][ T3982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.243903][ T3982] RIP: 0033:0x7f6f9e5fe929 [ 35.243916][ T3982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.243967][ T3982] RSP: 002b:00007f6f9cc67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.244060][ T3982] RAX: ffffffffffffffda RBX: 00007f6f9e825fa0 RCX: 00007f6f9e5fe929 [ 35.244070][ T3982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 35.244080][ T3982] RBP: 00007f6f9cc67090 R08: 0000000000000000 R09: 0000000000000000 [ 35.244239][ T3982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.244250][ T3982] R13: 0000000000000000 R14: 00007f6f9e825fa0 R15: 00007ffdea7c30e8 [ 35.244276][ T3982] [ 35.538971][ T3987] xt_hashlimit: max too large, truncated to 1048576 [ 35.621771][ T3992] loop4: detected capacity change from 0 to 4096 [ 35.647127][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.671143][ T3992] netlink: 92 bytes leftover after parsing attributes in process `syz.4.130'. [ 35.724105][ T4003] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 35.837294][ T4011] xt_hashlimit: max too large, truncated to 1048576 [ 35.850824][ T4011] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 35.922964][ T4019] xt_hashlimit: max too large, truncated to 1048576 [ 35.931726][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.955656][ T4024] loop3: detected capacity change from 0 to 128 [ 35.970209][ T4024] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.983714][ T4019] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.004699][ T4024] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.049091][ T4030] loop4: detected capacity change from 0 to 512 [ 36.062961][ T4030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.075207][ T4034] loop3: detected capacity change from 0 to 128 [ 36.084394][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.099972][ T4030] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.111572][ T4034] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.139911][ T4030] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 36.156108][ T4034] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.172249][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 36.172263][ T29] audit: type=1326 audit(1750904394.744:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 36.202046][ T29] audit: type=1326 audit(1750904394.744:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 36.226612][ T4030] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 36.257326][ T4030] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 36.279195][ T4041] loop2: detected capacity change from 0 to 1024 [ 36.295464][ T4030] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 36.305522][ T4041] EXT4-fs: Ignoring removed nobh option [ 36.307880][ T4030] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 36.311152][ T4041] EXT4-fs: Ignoring removed nobh option [ 36.325500][ T4030] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 36.347098][ T29] audit: type=1400 audit(1750904394.934:1092): avc: granted { setsecparam } for pid=4051 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 36.384196][ T4054] loop1: detected capacity change from 0 to 4096 [ 36.406810][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.420209][ T4041] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 36.462833][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.474412][ T4059] erspan1: entered allmulticast mode [ 36.480026][ T29] audit: type=1326 audit(1750904395.044:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.503493][ T29] audit: type=1326 audit(1750904395.044:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.526864][ T29] audit: type=1326 audit(1750904395.044:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.550170][ T29] audit: type=1326 audit(1750904395.044:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.573604][ T29] audit: type=1326 audit(1750904395.044:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.597064][ T29] audit: type=1326 audit(1750904395.044:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.620384][ T29] audit: type=1326 audit(1750904395.044:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 36.648135][ T4041] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.147: inode #4294967295: comm syz.2.147: iget: illegal inode # [ 36.669598][ T4064] xt_hashlimit: max too large, truncated to 1048576 [ 36.681750][ T4064] syz!: rxe_newlink: already configured on team_slave_0 [ 36.720485][ T4041] EXT4-fs (loop2): no journal found [ 36.725826][ T4041] EXT4-fs (loop2): can't get journal size [ 36.736485][ T4069] xt_hashlimit: max too large, truncated to 1048576 [ 36.746354][ T4041] EXT4-fs (loop2): failed to initialize system zone (-22) [ 36.760567][ T4069] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.762475][ T4041] EXT4-fs (loop2): mount failed [ 36.802089][ T4076] loop4: detected capacity change from 0 to 256 [ 36.810347][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.875046][ T4078] loop3: detected capacity change from 0 to 1024 [ 36.911120][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.927566][ T4078] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.018926][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.300380][ T4101] loop0: detected capacity change from 0 to 128 [ 37.335694][ T4101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.372634][ T4101] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.416508][ T4103] loop2: detected capacity change from 0 to 512 [ 37.424464][ T4103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.469607][ T4111] xt_hashlimit: max too large, truncated to 1048576 [ 37.483056][ T4111] syz!: rxe_newlink: already configured on team_slave_0 [ 37.552827][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.587678][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.601510][ T4116] loop4: detected capacity change from 0 to 4096 [ 37.617898][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.631590][ T4103] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.648505][ T4103] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 37.655149][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 37.669416][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 37.677578][ T4103] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 37.686968][ T4103] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 37.719086][ T4103] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 37.731128][ T4103] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 37.749496][ T4103] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 37.839401][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.847116][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.854987][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.863080][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.870776][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.878430][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.886287][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.893969][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.901629][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.909385][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.917135][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.924819][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.932506][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.940227][ T3367] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 37.953737][ T3367] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 37.969035][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.009790][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.047110][ T4152] loop4: detected capacity change from 0 to 128 [ 38.056356][ T4152] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.071210][ T4152] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.115660][ T4155] loop1: detected capacity change from 0 to 1024 [ 38.129528][ T4154] loop0: detected capacity change from 0 to 1024 [ 38.136164][ T4154] EXT4-fs: Ignoring removed nobh option [ 38.141839][ T4154] EXT4-fs: Ignoring removed nobh option [ 38.151785][ T4150] xt_hashlimit: max too large, truncated to 1048576 [ 38.172798][ T4150] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 38.200370][ T4155] EXT4-fs: Ignoring removed nobh option [ 38.203848][ T4154] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 38.206259][ T4155] EXT4-fs: Ignoring removed nobh option [ 38.216004][ T4154] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.181: inode #4294967295: comm syz.0.181: iget: illegal inode # [ 38.236239][ T4154] EXT4-fs (loop0): no journal found [ 38.241561][ T4154] EXT4-fs (loop0): can't get journal size [ 38.249716][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.269829][ T4155] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 38.280375][ T4155] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.183: inode #4294967295: comm syz.1.183: iget: illegal inode # [ 38.295249][ T4154] EXT4-fs (loop0): failed to initialize system zone (-22) [ 38.312628][ T4154] EXT4-fs (loop0): mount failed [ 38.330376][ T4155] EXT4-fs (loop1): no journal found [ 38.335665][ T4155] EXT4-fs (loop1): can't get journal size [ 38.352468][ T4155] EXT4-fs (loop1): failed to initialize system zone (-22) [ 38.369470][ T4155] EXT4-fs (loop1): mount failed [ 38.390236][ T4170] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 38.398326][ T4171] __nla_validate_parse: 4 callbacks suppressed [ 38.398341][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 38.416274][ T4163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.423867][ T4170] bond1: entered promiscuous mode [ 38.429546][ T4170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.474429][ T4176] loop3: detected capacity change from 0 to 512 [ 38.486347][ T4178] loop2: detected capacity change from 0 to 512 [ 38.497742][ T4176] ext2: Unknown parameter 'noacl' [ 38.510101][ T4178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.542265][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.577650][ T4178] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.590691][ T4178] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 38.600175][ T4187] loop3: detected capacity change from 0 to 4096 [ 38.612126][ T4178] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.621371][ T4178] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 38.657492][ T4187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.657600][ T4178] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.679163][ T4178] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 38.693159][ T4178] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.721386][ T4193] xt_hashlimit: max too large, truncated to 1048576 [ 38.732881][ T4193] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 38.767829][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.779632][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 38.787333][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 38.796088][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.803934][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.811719][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.819605][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.827311][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.835087][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.842854][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.850545][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.858251][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.865985][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.873855][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.881550][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.889386][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.897147][ T10] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 38.919583][ T10] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 38.968799][ T4145] syz.0.181 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 38.979833][ T4145] CPU: 1 UID: 0 PID: 4145 Comm: syz.0.181 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 38.979858][ T4145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.979904][ T4145] Call Trace: [ 38.979909][ T4145] [ 38.979915][ T4145] __dump_stack+0x1d/0x30 [ 38.979935][ T4145] dump_stack_lvl+0xe8/0x140 [ 38.979956][ T4145] dump_stack+0x15/0x1b [ 38.979973][ T4145] dump_header+0x81/0x220 [ 38.980012][ T4145] oom_kill_process+0x334/0x3f0 [ 38.980104][ T4145] out_of_memory+0x979/0xb80 [ 38.980188][ T4145] try_charge_memcg+0x5e6/0x9e0 [ 38.980216][ T4145] charge_memcg+0x51/0xc0 [ 38.980308][ T4145] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 38.980344][ T4145] __read_swap_cache_async+0x1df/0x350 [ 38.980436][ T4145] swap_cluster_readahead+0x277/0x3e0 [ 38.980530][ T4145] swapin_readahead+0xde/0x6f0 [ 38.980626][ T4145] ? __filemap_get_folio+0x4f7/0x6b0 [ 38.980657][ T4145] ? swap_cache_get_folio+0x77/0x200 [ 38.980685][ T4145] do_swap_page+0x301/0x2430 [ 38.980705][ T4145] ? __account_obj_stock+0x2d6/0x350 [ 38.980753][ T4145] ? __account_obj_stock+0x211/0x350 [ 38.980787][ T4145] ? __pfx_default_wake_function+0x10/0x10 [ 38.980809][ T4145] handle_mm_fault+0x9a5/0x2be0 [ 38.980830][ T4145] ? mas_walk+0xf2/0x120 [ 38.980858][ T4145] do_user_addr_fault+0x636/0x1090 [ 38.980941][ T4145] ? fpregs_restore_userregs+0xe2/0x1d0 [ 38.981009][ T4145] ? switch_fpu_return+0xe/0x20 [ 38.981033][ T4145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.981060][ T4145] exc_page_fault+0x62/0xa0 [ 38.981089][ T4145] asm_exc_page_fault+0x26/0x30 [ 38.981159][ T4145] RIP: 0033:0x7f678b0de931 [ 38.981176][ T4145] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 38.981231][ T4145] RSP: 002b:00007ffeb1914848 EFLAGS: 00010217 [ 38.981247][ T4145] RAX: 0000000000000000 RBX: 00007f678b307ba0 RCX: 00007f678b0de929 [ 38.981258][ T4145] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.981270][ T4145] RBP: 00007f678b307ba0 R08: 0000000000008488 R09: 0000001cb1914b3f [ 38.981284][ T4145] R10: 00007f678b307ac0 R11: 0000000000000246 R12: 0000000000009796 [ 38.981340][ T4145] R13: 00007f678b306080 R14: ffffffffffffffff R15: 00007ffeb1914960 [ 38.981356][ T4145] [ 38.981362][ T4145] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 39.219889][ T4145] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 39.227777][ T4145] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 39.235089][ T4145] Memory cgroup stats for /syz0: [ 39.235271][ T4145] cache 0 [ 39.243224][ T4145] rss 4096 [ 39.246248][ T4145] shmem 0 [ 39.249255][ T4145] mapped_file 0 [ 39.252766][ T4145] dirty 0 [ 39.255707][ T4145] writeback 4096 [ 39.259282][ T4145] workingset_refault_anon 54 [ 39.263975][ T4145] workingset_refault_file 98 [ 39.268566][ T4145] swap 376832 [ 39.271873][ T4145] swapcached 8192 [ 39.275505][ T4145] pgpgin 22741 [ 39.278875][ T4145] pgpgout 22739 [ 39.282367][ T4145] pgfault 24502 [ 39.285883][ T4145] pgmajfault 31 [ 39.289360][ T4145] inactive_anon 8192 [ 39.293288][ T4145] active_anon 0 [ 39.296757][ T4145] inactive_file 0 [ 39.300408][ T4145] active_file 0 [ 39.303856][ T4145] unevictable 0 [ 39.307305][ T4145] hierarchical_memory_limit 314572800 [ 39.312755][ T4145] hierarchical_memsw_limit 9223372036854771712 [ 39.318935][ T4145] total_cache 0 [ 39.322466][ T4145] total_rss 4096 [ 39.326010][ T4145] total_shmem 0 [ 39.329489][ T4145] total_mapped_file 0 [ 39.333468][ T4145] total_dirty 0 [ 39.336927][ T4145] total_writeback 4096 [ 39.341026][ T4145] total_workingset_refault_anon 54 [ 39.346202][ T4145] total_workingset_refault_file 98 [ 39.351332][ T4145] total_swap 376832 [ 39.355131][ T4145] total_swapcached 8192 [ 39.359272][ T4145] total_pgpgin 22741 [ 39.363989][ T4145] total_pgpgout 22739 [ 39.367973][ T4145] total_pgfault 24502 [ 39.372739][ T4145] total_pgmajfault 31 [ 39.376716][ T4145] total_inactive_anon 8192 [ 39.381142][ T4145] total_active_anon 0 [ 39.385115][ T4145] total_inactive_file 0 [ 39.389249][ T4145] total_active_file 0 [ 39.393243][ T4145] total_unevictable 0 [ 39.397229][ T4145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.181,pid=4145,uid=0 [ 39.411721][ T4145] Memory cgroup out of memory: Killed process 4145 (syz.0.181) total-vm:93752kB, anon-rss:1064kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 39.432373][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.503485][ T4211] serio: Serial port ptm0 [ 39.593093][ T4227] loop1: detected capacity change from 0 to 512 [ 39.601097][ T4227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.613471][ T4227] EXT4-fs (loop1): 1 truncate cleaned up [ 39.620608][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.643304][ T4232] loop4: detected capacity change from 0 to 256 [ 39.651014][ T4232] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.742014][ T4238] xt_hashlimit: max too large, truncated to 1048576 [ 39.754410][ T4238] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.778182][ T4240] loop0: detected capacity change from 0 to 512 [ 39.785163][ T4240] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.796740][ T4240] EXT4-fs (loop0): 1 truncate cleaned up [ 39.803235][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.158925][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.193459][ T4246] loop1: detected capacity change from 0 to 4096 [ 40.202668][ T4246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.219508][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 40.227277][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 40.236373][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.244121][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.251824][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.259560][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.267201][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.274875][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.282608][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.290293][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.297948][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.305635][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.313303][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.321043][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.328703][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.336390][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 40.359242][ T4252] netlink: 'syz.3.211': attribute type 27 has an invalid length. [ 40.369023][ T36] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 40.441933][ T4260] loop2: detected capacity change from 0 to 256 [ 40.471678][ T4262] loop3: detected capacity change from 0 to 1024 [ 40.478561][ T4262] EXT4-fs: Ignoring removed nobh option [ 40.484387][ T4262] EXT4-fs: Ignoring removed nobh option [ 40.492335][ T4262] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.502426][ T4262] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.213: inode #4294967295: comm syz.3.213: iget: illegal inode # [ 40.523396][ T4262] EXT4-fs (loop3): no journal found [ 40.528705][ T4262] EXT4-fs (loop3): can't get journal size [ 40.549217][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.566763][ T4262] EXT4-fs (loop3): failed to initialize system zone (-22) [ 40.582803][ T4262] EXT4-fs (loop3): mount failed [ 40.648349][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.740427][ T4285] serio: Serial port ptm0 [ 40.793077][ T4286] loop0: detected capacity change from 0 to 1024 [ 40.801193][ T4286] EXT4-fs: Ignoring removed nobh option [ 40.806806][ T4286] EXT4-fs: Ignoring removed nobh option [ 40.813036][ T4286] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.822928][ T4286] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.221: inode #4294967295: comm syz.0.221: iget: illegal inode # [ 40.860300][ T4286] EXT4-fs (loop0): no journal found [ 40.865558][ T4286] EXT4-fs (loop0): can't get journal size [ 40.886775][ T4286] EXT4-fs (loop0): failed to initialize system zone (-22) [ 40.894315][ T4286] EXT4-fs (loop0): mount failed [ 41.127753][ T4257] syz.3.213 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 41.138796][ T4257] CPU: 1 UID: 0 PID: 4257 Comm: syz.3.213 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 41.138825][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.138922][ T4257] Call Trace: [ 41.138930][ T4257] [ 41.138938][ T4257] __dump_stack+0x1d/0x30 [ 41.138958][ T4257] dump_stack_lvl+0xe8/0x140 [ 41.138977][ T4257] dump_stack+0x15/0x1b [ 41.138994][ T4257] dump_header+0x81/0x220 [ 41.139028][ T4257] oom_kill_process+0x334/0x3f0 [ 41.139072][ T4257] out_of_memory+0x979/0xb80 [ 41.139103][ T4257] try_charge_memcg+0x5e6/0x9e0 [ 41.139132][ T4257] charge_memcg+0x51/0xc0 [ 41.139206][ T4257] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 41.139244][ T4257] __read_swap_cache_async+0x1df/0x350 [ 41.139279][ T4257] swap_cluster_readahead+0x277/0x3e0 [ 41.139318][ T4257] swapin_readahead+0xde/0x6f0 [ 41.139373][ T4257] ? __filemap_get_folio+0x4f7/0x6b0 [ 41.139405][ T4257] ? __rcu_read_unlock+0x34/0x70 [ 41.139508][ T4257] ? swap_cache_get_folio+0x77/0x200 [ 41.139539][ T4257] do_swap_page+0x301/0x2430 [ 41.139565][ T4257] ? css_rstat_updated+0xcd/0x5b0 [ 41.139596][ T4257] ? __pfx_default_wake_function+0x10/0x10 [ 41.139623][ T4257] handle_mm_fault+0x9a5/0x2be0 [ 41.139730][ T4257] ? mas_walk+0xf2/0x120 [ 41.139759][ T4257] do_user_addr_fault+0x636/0x1090 [ 41.139789][ T4257] exc_page_fault+0x62/0xa0 [ 41.139929][ T4257] asm_exc_page_fault+0x26/0x30 [ 41.139946][ T4257] RIP: 0033:0x7f6f9e4d538c [ 41.139960][ T4257] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 41.139975][ T4257] RSP: 002b:00007ffdea7c3250 EFLAGS: 00010283 [ 41.139990][ T4257] RAX: 0000000000000000 RBX: 00007f6f9e826080 RCX: 0000000000000000 [ 41.140001][ T4257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555576e26808 [ 41.140012][ T4257] RBP: 00007f6f9e827ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 41.140043][ T4257] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000a102 [ 41.140055][ T4257] R13: 00007f6f9e826080 R14: ffffffffffffffff R15: 00007ffdea7c3360 [ 41.140073][ T4257] [ 41.353282][ T4257] memory: usage 307200kB, limit 307200kB, failcnt 280 [ 41.360575][ T4257] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 41.368558][ T4257] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 41.376495][ T4257] Memory cgroup stats for /syz3: [ 41.376664][ T4257] cache 0 [ 41.384642][ T4257] rss 4096 [ 41.387669][ T4257] shmem 0 [ 41.390725][ T4257] mapped_file 0 [ 41.394186][ T4257] dirty 0 [ 41.397177][ T4257] writeback 4096 [ 41.400776][ T4257] workingset_refault_anon 93 [ 41.401248][ T4300] loop2: detected capacity change from 0 to 4096 [ 41.405347][ T4257] workingset_refault_file 124 [ 41.405358][ T4257] swap 733184 [ 41.405364][ T4257] swapcached 8192 [ 41.405370][ T4257] pgpgin 6684 [ 41.405377][ T4257] pgpgout 6682 [ 41.417998][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.419686][ T4257] pgfault 14285 [ 41.428838][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 41.429955][ T4257] pgmajfault 82 [ 41.442402][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 41.445861][ T4257] inactive_anon 8192 [ 41.445870][ T4257] active_anon 0 [ 41.472254][ T4257] inactive_file 0 [ 41.475890][ T4257] active_file 0 [ 41.479369][ T4257] unevictable 0 [ 41.482909][ T4257] hierarchical_memory_limit 314572800 [ 41.488279][ T4257] hierarchical_memsw_limit 9223372036854771712 [ 41.494473][ T4257] total_cache 0 [ 41.494682][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.497922][ T4257] total_rss 4096 [ 41.497932][ T4257] total_shmem 0 [ 41.497939][ T4257] total_mapped_file 0 [ 41.505605][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.509118][ T4257] total_dirty 0 [ 41.509126][ T4257] total_writeback 4096 [ 41.512605][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.516553][ T4257] total_workingset_refault_anon 93 [ 41.516563][ T4257] total_workingset_refault_file 124 [ 41.524190][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.524214][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.524273][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.527699][ T4257] total_swap 733184 [ 41.527708][ T4257] total_swapcached 8192 [ 41.531777][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.539404][ T4257] total_pgpgin 6684 [ 41.539412][ T4257] total_pgpgout 6682 [ 41.539418][ T4257] total_pgfault 14285 [ 41.539424][ T4257] total_pgmajfault 82 [ 41.539430][ T4257] total_inactive_anon 8192 [ 41.539436][ T4257] total_active_anon 0 [ 41.539442][ T4257] total_inactive_file 0 [ 41.544562][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.549741][ T4257] total_active_file 0 [ 41.557425][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.565130][ T4257] total_unevictable 0 [ 41.572780][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.576543][ T4257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 41.580715][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.588303][ T4257] ,cpuset=/ [ 41.592132][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.596021][ T4257] ,mems_allowed=0 [ 41.599994][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.603939][ T4257] ,oom_memcg=/syz3 [ 41.608343][ T1035] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 41.612318][ T4257] ,task_memcg= [ 41.627792][ T1035] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.628071][ T4257] /syz3,task=syz.3.213,pid=4257,uid=0 [ 41.714119][ T4257] Memory cgroup out of memory: Killed process 4257 (syz.3.213) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 41.802830][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.838258][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 41.838271][ T29] audit: type=1326 audit(1750904400.424:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 41.884684][ T4306] xt_hashlimit: max too large, truncated to 1048576 [ 41.896953][ T4306] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 41.921812][ T29] audit: type=1326 audit(1750904400.464:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 41.945592][ T29] audit: type=1326 audit(1750904400.464:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 41.969112][ T29] audit: type=1326 audit(1750904400.464:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 41.992431][ T29] audit: type=1326 audit(1750904400.464:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.015917][ T29] audit: type=1326 audit(1750904400.464:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.039523][ T29] audit: type=1326 audit(1750904400.464:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.062947][ T29] audit: type=1326 audit(1750904400.464:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.086699][ T29] audit: type=1326 audit(1750904400.464:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.110113][ T29] audit: type=1326 audit(1750904400.474:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6bd55e929 code=0x7ffc0000 [ 42.151980][ T4312] loop2: detected capacity change from 0 to 512 [ 42.152242][ T4312] ext2: Unknown parameter 'noacl' [ 42.264193][ T4327] ref_ctr_offset mismatch. inode: 0x115 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 42.335293][ T4330] loop3: detected capacity change from 0 to 512 [ 42.344242][ T4324] loop4: detected capacity change from 0 to 512 [ 42.364184][ T4324] EXT4-fs: Ignoring removed oldalloc option [ 42.372474][ T4324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.385746][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.399208][ T4330] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.411036][ T4324] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.418005][ T4324] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.228: Failed to acquire dquot type 1 [ 42.433889][ T4340] loop0: detected capacity change from 0 to 164 [ 42.440676][ T4340] iso9660: Bad value for 'check' [ 42.621515][ T4324] EXT4-fs (loop4): 1 truncate cleaned up [ 42.724306][ T4324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.755188][ T4343] xt_hashlimit: max too large, truncated to 1048576 [ 42.800954][ T4343] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.973158][ T4320] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.232: corrupted xattr block 33: invalid ea_ino [ 43.025548][ T4320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.046639][ T4320] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.232: corrupted xattr block 33: invalid ea_ino [ 43.063388][ T4320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.082797][ T4320] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.232: corrupted xattr block 33: invalid ea_ino [ 43.204010][ T4351] xt_hashlimit: max too large, truncated to 1048576 [ 43.225276][ T4351] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.245122][ T4349] xt_hashlimit: max too large, truncated to 1048576 [ 43.245717][ T4355] IPv6: Can't replace route, no match found [ 43.290393][ T4358] loop1: detected capacity change from 0 to 256 [ 43.299845][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.310784][ T4349] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.350619][ T4362] loop3: detected capacity change from 0 to 512 [ 43.372292][ T4362] ext2: Unknown parameter 'noacl' [ 43.638835][ T4374] loop1: detected capacity change from 0 to 4096 [ 43.660679][ T4376] xt_hashlimit: max too large, truncated to 1048576 [ 43.672428][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.718799][ T4376] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.722914][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 43.733281][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 43.743005][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.750758][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.758496][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.766398][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.774186][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.781915][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.789614][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.797321][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.805015][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.812705][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.820392][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.828047][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.835757][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.843461][ T36] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 43.854070][ T36] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 43.861960][ T4384] xt_hashlimit: max too large, truncated to 1048576 [ 44.004659][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.194946][ T4403] loop0: detected capacity change from 0 to 512 [ 44.205646][ T4403] ext2: Unknown parameter 'noacl' [ 44.263270][ T4409] serio: Serial port ptm0 [ 44.456916][ T4415] loop0: detected capacity change from 0 to 256 [ 44.666394][ T4421] xt_hashlimit: max too large, truncated to 1048576 [ 44.721150][ T4423] serio: Serial port ptm1 [ 44.732616][ T4425] loop0: detected capacity change from 0 to 128 [ 44.742073][ T4425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.755037][ T4425] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.783740][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.816377][ T4430] IPv6: Can't replace route, no match found [ 44.876244][ T4436] loop3: detected capacity change from 0 to 1024 [ 44.897189][ T4436] EXT4-fs: Ignoring removed nobh option [ 44.902877][ T4436] EXT4-fs: Ignoring removed nobh option [ 44.937713][ T4438] loop1: detected capacity change from 0 to 512 [ 44.956084][ T4436] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 44.969685][ T4438] ext2: Unknown parameter 'noacl' [ 44.991037][ T4436] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.268: inode #4294967295: comm syz.3.268: iget: illegal inode # [ 45.022419][ T4436] EXT4-fs (loop3): no journal found [ 45.027799][ T4436] EXT4-fs (loop3): can't get journal size [ 45.059581][ T4436] EXT4-fs (loop3): failed to initialize system zone (-22) [ 45.074862][ T4436] EXT4-fs (loop3): mount failed [ 45.268671][ T4448] loop2: detected capacity change from 0 to 256 [ 45.387374][ T4450] loop2: detected capacity change from 0 to 128 [ 45.422138][ T4450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.443169][ T4450] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.588849][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.662635][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 45.692874][ T4456] loop0: detected capacity change from 0 to 512 [ 45.710264][ T4456] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.742104][ T4456] EXT4-fs (loop0): 1 truncate cleaned up [ 45.755845][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.823617][ T4432] syz.3.268 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 45.837754][ T4432] CPU: 1 UID: 0 PID: 4432 Comm: syz.3.268 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 45.837876][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.837946][ T4432] Call Trace: [ 45.837951][ T4432] [ 45.837957][ T4432] __dump_stack+0x1d/0x30 [ 45.837978][ T4432] dump_stack_lvl+0xe8/0x140 [ 45.837999][ T4432] dump_stack+0x15/0x1b [ 45.838073][ T4432] dump_header+0x81/0x220 [ 45.838127][ T4432] oom_kill_process+0x334/0x3f0 [ 45.838342][ T4432] out_of_memory+0x979/0xb80 [ 45.838422][ T4432] try_charge_memcg+0x5e6/0x9e0 [ 45.838448][ T4432] obj_cgroup_charge_pages+0xa6/0x150 [ 45.838521][ T4432] __memcg_kmem_charge_page+0x9f/0x170 [ 45.838551][ T4432] __alloc_frozen_pages_noprof+0x188/0x360 [ 45.838614][ T4432] alloc_pages_mpol+0xb3/0x250 [ 45.838641][ T4432] alloc_pages_noprof+0x90/0x130 [ 45.838667][ T4432] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 45.838779][ T4432] __kvmalloc_node_noprof+0x30f/0x4e0 [ 45.838810][ T4432] ? ip_set_alloc+0x1f/0x30 [ 45.838840][ T4432] ? ip_set_alloc+0x1f/0x30 [ 45.838945][ T4432] ip_set_alloc+0x1f/0x30 [ 45.838970][ T4432] hash_netiface_create+0x282/0x740 [ 45.839003][ T4432] ? __pfx_hash_netiface_create+0x10/0x10 [ 45.839035][ T4432] ip_set_create+0x3c9/0x960 [ 45.839126][ T4432] ? __nla_parse+0x40/0x60 [ 45.839143][ T4432] nfnetlink_rcv_msg+0x4c3/0x590 [ 45.839177][ T4432] ? selinux_capable+0x1f9/0x270 [ 45.839224][ T4432] netlink_rcv_skb+0x120/0x220 [ 45.839332][ T4432] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 45.839359][ T4432] nfnetlink_rcv+0x16b/0x1690 [ 45.839383][ T4432] ? __kfree_skb+0x109/0x150 [ 45.839550][ T4432] ? nlmon_xmit+0x4f/0x60 [ 45.839571][ T4432] ? consume_skb+0x49/0x150 [ 45.839597][ T4432] ? nlmon_xmit+0x4f/0x60 [ 45.839675][ T4432] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 45.839711][ T4432] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 45.839772][ T4432] ? __dev_queue_xmit+0x182/0x1fb0 [ 45.839800][ T4432] ? ref_tracker_free+0x37d/0x3e0 [ 45.839830][ T4432] ? __netlink_deliver_tap+0x4dc/0x500 [ 45.839944][ T4432] netlink_unicast+0x59e/0x670 [ 45.839977][ T4432] netlink_sendmsg+0x58b/0x6b0 [ 45.839995][ T4432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.840012][ T4432] __sock_sendmsg+0x142/0x180 [ 45.840085][ T4432] ____sys_sendmsg+0x31e/0x4e0 [ 45.840118][ T4432] ___sys_sendmsg+0x17b/0x1d0 [ 45.840227][ T4432] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 45.840352][ T4432] __x64_sys_sendmsg+0xd4/0x160 [ 45.840391][ T4432] x64_sys_call+0x2999/0x2fb0 [ 45.840414][ T4432] do_syscall_64+0xd2/0x200 [ 45.840430][ T4432] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.840480][ T4432] ? clear_bhb_loop+0x40/0x90 [ 45.840508][ T4432] ? clear_bhb_loop+0x40/0x90 [ 45.840532][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.840556][ T4432] RIP: 0033:0x7f6f9e5fe929 [ 45.840572][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.840595][ T4432] RSP: 002b:00007f6f9cc67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.840611][ T4432] RAX: ffffffffffffffda RBX: 00007f6f9e825fa0 RCX: 00007f6f9e5fe929 [ 45.840659][ T4432] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 45.840669][ T4432] RBP: 00007f6f9e680b39 R08: 0000000000000000 R09: 0000000000000000 [ 45.840680][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.840690][ T4432] R13: 0000000000000000 R14: 00007f6f9e825fa0 R15: 00007ffdea7c30e8 [ 45.840708][ T4432] [ 46.185063][ T4432] memory: usage 307200kB, limit 307200kB, failcnt 548 [ 46.191895][ T4432] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 46.199801][ T4432] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 46.207086][ T4432] Memory cgroup stats for /syz3: [ 46.217723][ T4432] cache 0 [ 46.225880][ T4432] rss 0 [ 46.228752][ T4432] shmem 0 [ 46.231881][ T4432] mapped_file 0 [ 46.235347][ T4432] dirty 0 [ 46.238377][ T4432] writeback 0 [ 46.241760][ T4432] workingset_refault_anon 154 [ 46.246448][ T4432] workingset_refault_file 317 [ 46.251235][ T4432] swap 737280 [ 46.254532][ T4432] swapcached 4096 [ 46.258211][ T4432] pgpgin 7569 [ 46.261615][ T4432] pgpgout 7568 [ 46.264983][ T4432] pgfault 15426 [ 46.268481][ T4432] pgmajfault 137 [ 46.272135][ T4432] inactive_anon 4096 [ 46.276022][ T4432] active_anon 0 [ 46.279564][ T4432] inactive_file 0 [ 46.283282][ T4432] active_file 0 [ 46.286804][ T4432] unevictable 0 [ 46.290366][ T4432] hierarchical_memory_limit 314572800 [ 46.295734][ T4432] hierarchical_memsw_limit 9223372036854771712 [ 46.302143][ T4432] total_cache 0 [ 46.305600][ T4432] total_rss 0 [ 46.308879][ T4432] total_shmem 0 [ 46.312366][ T4432] total_mapped_file 0 [ 46.316455][ T4432] total_dirty 0 [ 46.319949][ T4432] total_writeback 0 [ 46.323787][ T4432] total_workingset_refault_anon 154 [ 46.329096][ T4432] total_workingset_refault_file 317 [ 46.334368][ T4432] total_swap 737280 [ 46.338229][ T4432] total_swapcached 4096 [ 46.342445][ T4432] total_pgpgin 7569 [ 46.346615][ T4432] total_pgpgout 7568 [ 46.350644][ T4432] total_pgfault 15426 [ 46.354869][ T4432] total_pgmajfault 137 [ 46.359378][ T4432] total_inactive_anon 4096 [ 46.363800][ T4432] total_active_anon 0 [ 46.367827][ T4432] total_inactive_file 0 [ 46.372120][ T4432] total_active_file 0 [ 46.376101][ T4432] total_unevictable 0 [ 46.380213][ T4432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.268,pid=4431,uid=0 [ 46.394873][ T4432] Memory cgroup out of memory: Killed process 4431 (syz.3.268) total-vm:95800kB, anon-rss:936kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 46.413695][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.429820][ T4462] loop1: detected capacity change from 0 to 512 [ 46.457479][ T4462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.498476][ T4462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.526065][ T4462] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.550552][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.562627][ T4462] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 46.585964][ T4462] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.592984][ T4472] loop4: detected capacity change from 0 to 1024 [ 46.601985][ T4462] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 46.615580][ T4462] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.625397][ T4462] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 46.639561][ T4462] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.652667][ T4472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.665893][ T4472] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.709078][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.751314][ T3551] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 393: padding at end of block bitmap is not set [ 46.768914][ T3551] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 46.781609][ T3551] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.781609][ T3551] [ 46.804481][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.815641][ T4487] ref_ctr_offset mismatch. inode: 0x147 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 46.986489][ T4483] loop0: detected capacity change from 0 to 512 [ 46.998731][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.054454][ T4483] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.056044][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 47.056057][ T29] audit: type=1326 audit(1750904405.644:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f9e5f58e7 code=0x7ffc0000 [ 47.094344][ T29] audit: type=1326 audit(1750904405.644:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f9e59ab19 code=0x7ffc0000 [ 47.117659][ T29] audit: type=1326 audit(1750904405.644:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f9e5f58e7 code=0x7ffc0000 [ 47.129098][ T4505] loop4: detected capacity change from 0 to 1024 [ 47.140902][ T29] audit: type=1326 audit(1750904405.644:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f9e59ab19 code=0x7ffc0000 [ 47.140966][ T29] audit: type=1326 audit(1750904405.644:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.151546][ T4504] xt_hashlimit: max too large, truncated to 1048576 [ 47.170485][ T29] audit: type=1326 audit(1750904405.644:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.170761][ T29] audit: type=1326 audit(1750904405.734:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.247382][ T29] audit: type=1326 audit(1750904405.734:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.270902][ T29] audit: type=1326 audit(1750904405.734:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.294346][ T29] audit: type=1326 audit(1750904405.734:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e5fe929 code=0x7ffc0000 [ 47.295422][ T4483] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.285: corrupted xattr block 33: invalid ea_ino [ 47.355404][ T4507] xt_hashlimit: max too large, truncated to 1048576 [ 47.359770][ T4483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 47.374437][ T4483] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.285: corrupted xattr block 33: invalid ea_ino [ 47.377491][ T4507] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.400129][ T4483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 47.410573][ T4505] EXT4-fs: Ignoring removed nobh option [ 47.416199][ T4505] EXT4-fs: Ignoring removed nobh option [ 47.423984][ T4483] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #15: comm syz.0.285: corrupted xattr block 33: invalid ea_ino [ 47.508404][ T4513] loop3: detected capacity change from 0 to 128 [ 47.511050][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518691][ T4505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.537742][ T4513] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.555334][ T4505] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.290: inode #4294967295: comm syz.4.290: iget: illegal inode # [ 47.579963][ T4513] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.648680][ T4505] EXT4-fs (loop4): no journal found [ 47.654060][ T4505] EXT4-fs (loop4): can't get journal size [ 47.666244][ T4518] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 47.687655][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.722036][ T4505] EXT4-fs (loop4): failed to initialize system zone (-22) [ 47.729595][ T4505] EXT4-fs (loop4): mount failed [ 47.773338][ T4527] loop0: detected capacity change from 0 to 512 [ 47.780867][ T4525] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.785217][ T4526] loop1: detected capacity change from 0 to 4096 [ 47.805053][ T4525] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=4525 comm=syz.2.299 [ 47.806550][ T4526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.818126][ T4527] ext2: Unknown parameter 'noacl' [ 47.890112][ T4526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.300'. [ 47.903170][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 47.910955][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 47.918812][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.926521][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.934286][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.941968][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.949645][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.957345][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.962556][ T4535] serio: Serial port ptm0 [ 47.965028][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.977025][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.984713][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 47.992432][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 48.000112][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 48.007955][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 48.015753][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 48.023592][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 48.040954][ T10] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 48.233787][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.359529][ T4557] loop4: detected capacity change from 0 to 164 [ 48.366334][ T4557] iso9660: Bad value for 'check' [ 49.125237][ T4561] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.221680][ T4567] loop0: detected capacity change from 0 to 512 [ 49.228273][ T4567] ext2: Unknown parameter 'noacl' [ 49.267359][ T4574] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.382174][ T4588] loop1: detected capacity change from 0 to 1024 [ 49.400289][ T4588] EXT4-fs: Ignoring removed nobh option [ 49.405911][ T4588] EXT4-fs: Ignoring removed nobh option [ 49.431905][ T4588] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.454202][ T4588] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.315: inode #4294967295: comm syz.1.315: iget: illegal inode # [ 49.490369][ T4588] EXT4-fs (loop1): no journal found [ 49.495800][ T4588] EXT4-fs (loop1): can't get journal size [ 49.502430][ T4591] serio: Serial port ptm0 [ 49.516690][ T4588] EXT4-fs (loop1): failed to initialize system zone (-22) [ 49.524591][ T4588] EXT4-fs (loop1): mount failed [ 49.564504][ T4594] serio: Serial port ptm1 [ 49.814327][ T4575] syz.1.315 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 49.825330][ T4575] CPU: 0 UID: 0 PID: 4575 Comm: syz.1.315 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 49.825354][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.825366][ T4575] Call Trace: [ 49.825373][ T4575] [ 49.825382][ T4575] __dump_stack+0x1d/0x30 [ 49.825474][ T4575] dump_stack_lvl+0xe8/0x140 [ 49.825495][ T4575] dump_stack+0x15/0x1b [ 49.825511][ T4575] dump_header+0x81/0x220 [ 49.825577][ T4575] oom_kill_process+0x334/0x3f0 [ 49.825609][ T4575] out_of_memory+0x979/0xb80 [ 49.825656][ T4575] try_charge_memcg+0x5e6/0x9e0 [ 49.825680][ T4575] charge_memcg+0x51/0xc0 [ 49.825706][ T4575] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 49.825805][ T4575] __read_swap_cache_async+0x1df/0x350 [ 49.825861][ T4575] swap_cluster_readahead+0x277/0x3e0 [ 49.825936][ T4575] swapin_readahead+0xde/0x6f0 [ 49.825991][ T4575] ? __filemap_get_folio+0x4f7/0x6b0 [ 49.826048][ T4575] ? swap_cache_get_folio+0x77/0x200 [ 49.826079][ T4575] do_swap_page+0x301/0x2430 [ 49.826096][ T4575] ? css_rstat_updated+0xcd/0x5b0 [ 49.826123][ T4575] ? __pfx_default_wake_function+0x10/0x10 [ 49.826155][ T4575] handle_mm_fault+0x9a5/0x2be0 [ 49.826178][ T4575] ? mas_walk+0xf2/0x120 [ 49.826242][ T4575] do_user_addr_fault+0x636/0x1090 [ 49.826309][ T4575] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 49.826383][ T4575] exc_page_fault+0x62/0xa0 [ 49.826452][ T4575] asm_exc_page_fault+0x26/0x30 [ 49.826495][ T4575] RIP: 0033:0x7f7cee6666c0 [ 49.826509][ T4575] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 49.826525][ T4575] RSP: 002b:00007ffc64f585f8 EFLAGS: 00010206 [ 49.826542][ T4575] RAX: 00000000fffffffa RBX: 00007f7cee865fa0 RCX: 0000000000000000 [ 49.826556][ T4575] RDX: 00007ffc64f58640 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.826569][ T4575] RBP: 00007f7cee867ba0 R08: 000000002e74c9a3 R09: 7fffffffffffffff [ 49.826582][ T4575] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000c39f [ 49.826619][ T4575] R13: 00007f7cee866080 R14: ffffffffffffffff R15: 00007ffc64f58780 [ 49.826638][ T4575] [ 49.826645][ T4575] memory: usage 307200kB, limit 307200kB, failcnt 306 [ 50.013224][ T4598] loop4: detected capacity change from 0 to 4096 [ 50.015294][ T4575] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 50.033047][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.039281][ T4575] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 50.039297][ T4575] Memory cgroup stats for /syz1: [ 50.039785][ T4575] cache 0 [ 50.062800][ T4598] netlink: 100 bytes leftover after parsing attributes in process `syz.4.321'. [ 50.063427][ T4575] rss 0 [ 50.081661][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 50.083098][ T4575] shmem 0 [ 50.088044][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 50.091040][ T4575] mapped_file 0 [ 50.091049][ T4575] dirty 0 [ 50.100034][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.102719][ T4575] writeback 8192 [ 50.110380][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.113280][ T4575] workingset_refault_anon 144 [ 50.120918][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.124344][ T4575] workingset_refault_file 191 [ 50.127271][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.127296][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.134897][ T4575] swap 737280 [ 50.134907][ T4575] swapcached 16384 [ 50.134913][ T4575] pgpgin 8407 [ 50.134919][ T4575] pgpgout 8402 [ 50.138456][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.146076][ T4575] pgfault 18655 [ 50.150771][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.158343][ T4575] pgmajfault 69 [ 50.158352][ T4575] inactive_anon 8192 [ 50.163145][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.171069][ T4575] active_anon 8192 [ 50.178689][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.181962][ T4575] inactive_file 0 [ 50.185675][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.188965][ T4575] active_file 4096 [ 50.192342][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.199903][ T4575] unevictable 0 [ 50.199913][ T4575] hierarchical_memory_limit 314572800 [ 50.203357][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.210971][ T4575] hierarchical_memsw_limit 9223372036854771712 [ 50.214427][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.218279][ T4575] total_cache 0 [ 50.218288][ T4575] total_rss 0 [ 50.225926][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 50.229618][ T4575] total_shmem 0 [ 50.229626][ T4575] total_mapped_file 0 [ 50.261662][ T36] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 50.263456][ T4575] total_dirty 0 [ 50.263465][ T4575] total_writeback 8192 [ 50.263472][ T4575] total_workingset_refault_anon 144 [ 50.335553][ T4575] total_workingset_refault_file 191 [ 50.335563][ T4575] total_swap 737280 [ 50.335570][ T4575] total_swapcached 16384 [ 50.348885][ T4575] total_pgpgin 8407 [ 50.352728][ T4575] total_pgpgout 8402 [ 50.356680][ T4575] total_pgfault 18655 [ 50.360668][ T4575] total_pgmajfault 69 [ 50.364695][ T4575] total_inactive_anon 8192 [ 50.369090][ T4575] total_active_anon 8192 [ 50.373338][ T4575] total_inactive_file 0 [ 50.377564][ T4575] total_active_file 4096 [ 50.381818][ T4575] total_unevictable 0 [ 50.385793][ T4575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.315,pid=4575,uid=0 [ 50.400299][ T4575] Memory cgroup out of memory: Killed process 4575 (syz.1.315) total-vm:95932kB, anon-rss:916kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 50.527972][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.610272][ T4610] loop2: detected capacity change from 0 to 164 [ 50.616909][ T4610] iso9660: Bad value for 'check' [ 50.957592][ T4623] xt_hashlimit: max too large, truncated to 1048576 [ 50.964842][ T4622] loop4: detected capacity change from 0 to 1024 [ 50.978168][ T4621] xt_hashlimit: max too large, truncated to 1048576 [ 50.983969][ T4622] EXT4-fs: Ignoring removed nobh option [ 50.990521][ T4622] EXT4-fs: Ignoring removed nobh option [ 51.002133][ T4622] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.015504][ T4622] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.326: inode #4294967295: comm syz.4.326: iget: illegal inode # [ 51.030640][ T4622] EXT4-fs (loop4): no journal found [ 51.035887][ T4622] EXT4-fs (loop4): can't get journal size [ 51.045254][ T4626] xt_hashlimit: max too large, truncated to 1048576 [ 51.073045][ T4622] EXT4-fs (loop4): failed to initialize system zone (-22) [ 51.080372][ T4622] EXT4-fs (loop4): mount failed [ 51.103845][ T4628] xt_hashlimit: max too large, truncated to 1048576 [ 51.245722][ T4638] xt_hashlimit: max too large, truncated to 1048576 [ 51.352744][ T4638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.538593][ T4645] serio: Serial port ptm0 [ 51.720932][ T4615] syz.4.326 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 51.735202][ T4615] CPU: 1 UID: 0 PID: 4615 Comm: syz.4.326 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 51.735228][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.735239][ T4615] Call Trace: [ 51.735244][ T4615] [ 51.735260][ T4615] __dump_stack+0x1d/0x30 [ 51.735323][ T4615] dump_stack_lvl+0xe8/0x140 [ 51.735344][ T4615] dump_stack+0x15/0x1b [ 51.735361][ T4615] dump_header+0x81/0x220 [ 51.735392][ T4615] oom_kill_process+0x334/0x3f0 [ 51.735475][ T4615] out_of_memory+0x979/0xb80 [ 51.735578][ T4615] try_charge_memcg+0x5e6/0x9e0 [ 51.735609][ T4615] obj_cgroup_charge_pages+0xa6/0x150 [ 51.735636][ T4615] __memcg_kmem_charge_page+0x9f/0x170 [ 51.735667][ T4615] __alloc_frozen_pages_noprof+0x188/0x360 [ 51.735766][ T4615] alloc_pages_mpol+0xb3/0x250 [ 51.735799][ T4615] alloc_pages_noprof+0x90/0x130 [ 51.735889][ T4615] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 51.735980][ T4615] __kvmalloc_node_noprof+0x30f/0x4e0 [ 51.736010][ T4615] ? ip_set_alloc+0x1f/0x30 [ 51.736038][ T4615] ? ip_set_alloc+0x1f/0x30 [ 51.736062][ T4615] ? __kmalloc_cache_noprof+0x189/0x320 [ 51.736147][ T4615] ip_set_alloc+0x1f/0x30 [ 51.736198][ T4615] hash_netiface_create+0x282/0x740 [ 51.736228][ T4615] ? __pfx_hash_netiface_create+0x10/0x10 [ 51.736332][ T4615] ip_set_create+0x3c9/0x960 [ 51.736412][ T4615] nfnetlink_rcv_msg+0x4c3/0x590 [ 51.736452][ T4615] ? selinux_capable+0x1f9/0x270 [ 51.736550][ T4615] netlink_rcv_skb+0x120/0x220 [ 51.736584][ T4615] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 51.736629][ T4615] nfnetlink_rcv+0x16b/0x1690 [ 51.736656][ T4615] ? __kfree_skb+0x109/0x150 [ 51.736700][ T4615] ? nlmon_xmit+0x4f/0x60 [ 51.736722][ T4615] ? consume_skb+0x49/0x150 [ 51.736808][ T4615] ? nlmon_xmit+0x4f/0x60 [ 51.736830][ T4615] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 51.736922][ T4615] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 51.736954][ T4615] ? __dev_queue_xmit+0x182/0x1fb0 [ 51.736983][ T4615] ? ref_tracker_free+0x37d/0x3e0 [ 51.737069][ T4615] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 51.737097][ T4615] ? __netlink_deliver_tap+0x12d/0x500 [ 51.737197][ T4615] ? __netlink_deliver_tap+0x4d7/0x500 [ 51.737227][ T4615] ? __netlink_deliver_tap+0x4dc/0x500 [ 51.737259][ T4615] netlink_unicast+0x59e/0x670 [ 51.737328][ T4615] netlink_sendmsg+0x58b/0x6b0 [ 51.737348][ T4615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.737366][ T4615] __sock_sendmsg+0x142/0x180 [ 51.737388][ T4615] ____sys_sendmsg+0x31e/0x4e0 [ 51.737455][ T4615] ___sys_sendmsg+0x17b/0x1d0 [ 51.737500][ T4615] __x64_sys_sendmsg+0xd4/0x160 [ 51.737587][ T4615] x64_sys_call+0x2999/0x2fb0 [ 51.737609][ T4615] do_syscall_64+0xd2/0x200 [ 51.737624][ T4615] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.737652][ T4615] ? clear_bhb_loop+0x40/0x90 [ 51.737689][ T4615] ? clear_bhb_loop+0x40/0x90 [ 51.737712][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.737731][ T4615] RIP: 0033:0x7f1593d3e929 [ 51.737822][ T4615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.737838][ T4615] RSP: 002b:00007f15923a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.737900][ T4615] RAX: ffffffffffffffda RBX: 00007f1593f65fa0 RCX: 00007f1593d3e929 [ 51.737912][ T4615] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 51.737923][ T4615] RBP: 00007f1593dc0b39 R08: 0000000000000000 R09: 0000000000000000 [ 51.737933][ T4615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.737952][ T4615] R13: 0000000000000000 R14: 00007f1593f65fa0 R15: 00007fff8beac2d8 [ 51.738083][ T4615] [ 51.738090][ T4615] memory: usage 307200kB, limit 307200kB, failcnt 329 [ 51.833873][ T4655] xt_hashlimit: max too large, truncated to 1048576 [ 51.837406][ T4615] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 51.837422][ T4615] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 52.099315][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 52.099360][ T29] audit: type=1400 audit(1750904410.684:2682): avc: denied { create } for pid=4661 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.104001][ T4615] Memory cgroup stats for [ 52.112636][ T29] audit: type=1400 audit(1750904410.704:2683): avc: denied { connect } for pid=4661 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.118451][ T4615] /syz4: [ 52.120921][ T4615] cache 0 [ 52.152340][ T29] audit: type=1400 audit(1750904410.704:2684): avc: denied { ioctl } for pid=4661 comm="syz.1.343" path="socket:[8213]" dev="sockfs" ino=8213 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.156034][ T4615] rss 0 [ 52.156042][ T4615] shmem 0 [ 52.156049][ T4615] mapped_file 0 [ 52.156056][ T4615] dirty 0 [ 52.218593][ T4615] writeback 0 [ 52.222034][ T4615] workingset_refault_anon 184 [ 52.226694][ T4615] workingset_refault_file 385 [ 52.231496][ T4615] swap 200704 [ 52.234773][ T4615] swapcached 4096 [ 52.238472][ T4615] pgpgin 17674 [ 52.241999][ T4615] pgpgout 17673 [ 52.245451][ T4615] pgfault 25787 [ 52.248895][ T4615] pgmajfault 98 [ 52.252493][ T4615] inactive_anon 4096 [ 52.256421][ T4615] active_anon 0 [ 52.260138][ T4615] inactive_file 0 [ 52.263752][ T4615] active_file 0 [ 52.267199][ T4615] unevictable 0 [ 52.270805][ T4615] hierarchical_memory_limit 314572800 [ 52.276222][ T4615] hierarchical_memsw_limit 9223372036854771712 [ 52.282523][ T4615] total_cache 0 [ 52.285999][ T4615] total_rss 0 [ 52.289262][ T4615] total_shmem 0 [ 52.292906][ T4615] total_mapped_file 0 [ 52.296879][ T4615] total_dirty 0 [ 52.300488][ T4615] total_writeback 0 [ 52.304366][ T4615] total_workingset_refault_anon 184 [ 52.309735][ T4615] total_workingset_refault_file 385 [ 52.315002][ T4615] total_swap 200704 [ 52.318789][ T4615] total_swapcached 4096 [ 52.323113][ T4615] total_pgpgin 17674 [ 52.327006][ T4615] total_pgpgout 17673 [ 52.331195][ T4615] total_pgfault 25787 [ 52.335169][ T4615] total_pgmajfault 98 [ 52.339158][ T4615] total_inactive_anon 4096 [ 52.343718][ T4615] total_active_anon 0 [ 52.347689][ T4615] total_inactive_file 0 [ 52.352102][ T4615] total_active_file 0 [ 52.356077][ T4615] total_unevictable 0 [ 52.360201][ T4615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.326,pid=4614,uid=0 [ 52.374852][ T4615] Memory cgroup out of memory: Killed process 4614 (syz.4.326) total-vm:93752kB, anon-rss:1064kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 52.435898][ T4664] loop3: detected capacity change from 0 to 512 [ 52.445636][ T4666] loop2: detected capacity change from 0 to 512 [ 52.453198][ T4664] ext2: Unknown parameter 'noacl' [ 52.470783][ T4666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.491246][ T4666] EXT4-fs (loop2): 1 truncate cleaned up [ 52.497279][ T4666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.537875][ T29] audit: type=1326 audit(1750904411.124:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.561469][ T29] audit: type=1326 audit(1750904411.124:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.587457][ T29] audit: type=1326 audit(1750904411.124:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.610971][ T29] audit: type=1326 audit(1750904411.124:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.634408][ T29] audit: type=1326 audit(1750904411.124:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.634435][ T29] audit: type=1326 audit(1750904411.124:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.634493][ T29] audit: type=1326 audit(1750904411.174:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678b0de929 code=0x7ffc0000 [ 52.722795][ T4681] loop0: detected capacity change from 0 to 128 [ 52.888830][ T4681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.903534][ T4681] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.936933][ T4683] loop3: detected capacity change from 0 to 164 [ 52.943506][ T4683] iso9660: Bad value for 'check' [ 53.095643][ T4685] xt_hashlimit: max too large, truncated to 1048576 [ 53.172755][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.186422][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.268796][ T4691] loop1: detected capacity change from 0 to 1024 [ 53.277558][ T4691] EXT4-fs: Ignoring removed nobh option [ 53.283283][ T4691] EXT4-fs: Ignoring removed nobh option [ 53.294691][ T4693] loop0: detected capacity change from 0 to 512 [ 53.302925][ T4693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.312902][ T4691] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.325656][ T4691] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.353: inode #4294967295: comm syz.1.353: iget: illegal inode # [ 53.327495][ T4690] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 53.353837][ T4691] EXT4-fs (loop1): no journal found [ 53.359091][ T4691] EXT4-fs (loop1): can't get journal size [ 53.365727][ T4693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.379138][ T4693] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.398439][ T4693] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 53.429276][ T4691] EXT4-fs (loop1): failed to initialize system zone (-22) [ 53.429408][ T4693] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.436852][ T4691] EXT4-fs (loop1): mount failed [ 53.465617][ T4693] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 53.492062][ T4693] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.501608][ T4693] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 53.522232][ T4693] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.559413][ T4688] ================================================================== [ 53.567535][ T4688] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 53.577351][ T4688] [ 53.579666][ T4688] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 53.587724][ T4688] tick_do_update_jiffies64+0x113/0x1c0 [ 53.593272][ T4688] tick_nohz_handler+0x7f/0x2d0 [ 53.598123][ T4688] __hrtimer_run_queues+0x20f/0x5a0 [ 53.603320][ T4688] hrtimer_interrupt+0x21a/0x460 [ 53.608255][ T4688] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 53.614154][ T4688] sysvec_apic_timer_interrupt+0x6f/0x80 [ 53.619794][ T4688] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.625772][ T4688] kcsan_setup_watchpoint+0x415/0x430 [ 53.631149][ T4688] vmalloc_to_page+0x210/0x480 [ 53.635915][ T4688] pcpu_depopulate_chunk+0x1ef/0x4a0 [ 53.641206][ T4688] pcpu_balance_workfn+0x298/0xc00 [ 53.646315][ T4688] process_scheduled_works+0x4ce/0x9d0 [ 53.651784][ T4688] worker_thread+0x582/0x770 [ 53.656379][ T4688] kthread+0x486/0x510 [ 53.660441][ T4688] ret_from_fork+0xda/0x150 [ 53.664940][ T4688] ret_from_fork_asm+0x1a/0x30 [ 53.669700][ T4688] [ 53.672017][ T4688] read to 0xffffffff868099c0 of 8 bytes by task 4688 on cpu 1: [ 53.679552][ T4688] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 53.685799][ T4688] count_shadow_nodes+0x6a/0x230 [ 53.690733][ T4688] do_shrink_slab+0x63/0x680 [ 53.695324][ T4688] shrink_slab+0x448/0x760 [ 53.699738][ T4688] shrink_node+0x6c3/0x2120 [ 53.704240][ T4688] do_try_to_free_pages+0x3f6/0xcd0 [ 53.709440][ T4688] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 53.715336][ T4688] try_charge_memcg+0x358/0x9e0 [ 53.720181][ T4688] obj_cgroup_charge_pages+0xa6/0x150 [ 53.725560][ T4688] __memcg_kmem_charge_page+0x9f/0x170 [ 53.731023][ T4688] __alloc_frozen_pages_noprof+0x188/0x360 [ 53.736841][ T4688] alloc_pages_mpol+0xb3/0x250 [ 53.741607][ T4688] alloc_pages_noprof+0x90/0x130 [ 53.746548][ T4688] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 53.752362][ T4688] __kvmalloc_node_noprof+0x30f/0x4e0 [ 53.757737][ T4688] ip_set_alloc+0x1f/0x30 [ 53.762076][ T4688] hash_netiface_create+0x282/0x740 [ 53.767279][ T4688] ip_set_create+0x3c9/0x960 [ 53.771884][ T4688] nfnetlink_rcv_msg+0x4c3/0x590 [ 53.776825][ T4688] netlink_rcv_skb+0x120/0x220 [ 53.781594][ T4688] nfnetlink_rcv+0x16b/0x1690 [ 53.786271][ T4688] netlink_unicast+0x59e/0x670 [ 53.791036][ T4688] netlink_sendmsg+0x58b/0x6b0 [ 53.795799][ T4688] __sock_sendmsg+0x142/0x180 [ 53.800473][ T4688] ____sys_sendmsg+0x31e/0x4e0 [ 53.805244][ T4688] ___sys_sendmsg+0x17b/0x1d0 [ 53.809937][ T4688] __x64_sys_sendmsg+0xd4/0x160 [ 53.814793][ T4688] x64_sys_call+0x2999/0x2fb0 [ 53.819471][ T4688] do_syscall_64+0xd2/0x200 [ 53.823969][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.829860][ T4688] [ 53.832173][ T4688] value changed: 0x00000000ffff9f8b -> 0x00000000ffff9f8c [ 53.839274][ T4688] [ 53.841589][ T4688] Reported by Kernel Concurrency Sanitizer on: [ 53.847735][ T4688] CPU: 1 UID: 0 PID: 4688 Comm: syz.1.353 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 53.860085][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.870135][ T4688] ================================================================== [ 53.924357][ T4701] loop2: detected capacity change from 0 to 512 [ 53.931014][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.941552][ T4701] ext2: Unknown parameter 'noacl'