last executing test programs: 2.74577521s ago: executing program 3 (id=2132): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r4 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 2.138507014s ago: executing program 1 (id=2154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) epoll_create1(0x0) 2.118819305s ago: executing program 1 (id=2156): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.100363605s ago: executing program 2 (id=2157): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = dup(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000004000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fcffffff85000000120000007566000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000840)=""/203, 0x40f00, 0x64, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x400, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x4, 0xb, 0x4}, {0x5, 0x3, 0x1, 0x7}, {0x0, 0x4, 0xf, 0x2}, {0x0, 0x3, 0xe, 0x2}, {0x2, 0x5, 0x9, 0xd}], 0x10, 0x2}, 0x94) exit(0x8) 2.068685395s ago: executing program 1 (id=2158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$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") 2.067374405s ago: executing program 1 (id=2159): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r4 = syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 1.889445586s ago: executing program 3 (id=2160): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) timer_gettime(r2, &(0x7f00000000c0)) 1.819646356s ago: executing program 3 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$rds(0x15, 0x5, 0x0) r5 = shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) 1.30357409s ago: executing program 0 (id=2167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) socket(0x10, 0x803, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) stat(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 1.28484272s ago: executing program 0 (id=2169): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 1.191793461s ago: executing program 2 (id=2170): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f6497f1395ca8b951ffacc6b3976143d8547fd036803213d3b15003a5a33c94a772b08061c02f0c5dda70dedfc2ff1b064f247c845a5f196f1adce0e3cf1dc55f4f0a1f70da00634d13487126c08f6d2dfe6ae35eeeea8b8725021fbdf4cfe0c9b5d3cda32ed73cf1f11936b7f9cdd2e8f860080e9282bf39efa498ad63efef90e3d78654f0784301b22a506725b898f76d", 0x99}, {&(0x7f0000000140)="c56c42d0fe92390b52c7c8922ebc7a4767a780c6256b91f8f41d5c1c1a8e428a4086afa97aa75d6b8a450851ca594d3407d7ebdea71e09625205121f", 0x3c}, {0x0}, {&(0x7f0000000800)="878ddb195f23e9cce1ea0b25636bba2bcefbe4ba03f9218bc28765459925d978474360c79cddf6119f24dc337214592c5cffb28cf44854ca2450dbc6d20489029807c618ff13e4b054307e262d11d92067bb33c660b4d6ab36507217bc3825c0fea8666629e67c2bcc233cb080bae518203c3b3d308939c7526055d3a52cbf64627c8d4366dffc57c28a3eb0374be99202950dc684", 0x95}], 0x5}, 0x5) 1.170143721s ago: executing program 1 (id=2171): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x1}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001540)='btrfs_qgroup_account_extent\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r6, 0x0, 0x7}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r11}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB, @ANYRES64=r12], 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7, 0x708, 0x0, 0x6, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x17, 0xc3, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @local]}]}}}}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)=ANY=[@ANYRES32=r13, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32=r2, @ANYBLOB="fc4b03e2ccf0edd10184f57d81a8a558f46412e9fb48554bc12110184b1b559f85352ad0fe8e3e6da7b0f06c9bcb648e7cc383f01e0d09910bae0172a3a969910df2da512fc8a43f8c8cca09e3b85615f0ea4bd373b04ea0f12cfa81d03617c796482d0eef4b0f698cdc489d7eba88bb9705d068e69576f939a741b74eb91ef64f93ee6cce7ae4f6ddc930901fa32df289a7c9e17472f97db4fe7d6acd4e91f9bc96a36b73cc028a0a3470eb9246f5a6622a72d88e32702c50690bff924bcbef181b262bcd4a00"/212, @ANYRES64=r12], 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r15, 0x0, 0xfffffffffffffffd}, 0x18) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.162628881s ago: executing program 0 (id=2172): unshare(0x7a040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000020800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6907000000feeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x70bd2d, 0x8000000, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x18, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000ebb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='hwmon_attr_show_string\x00', r9}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r8}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x4, &(0x7f0000000380)=[{0x101, 0x0, 0x4, 0x8}, {0x9, 0x1, 0x66, 0x8}, {0x80, 0x3, 0x30, 0xfffffff9}, {0x10, 0x7, 0x5, 0xfff}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100), 0x127, 0x0, 0x1, 0x1}, 0x28) 818.482133ms ago: executing program 2 (id=2174): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f00002aa000/0x3000)=nil) lstat(0x0, 0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000580)={{0x2, 0xee00, 0xee01, 0x0, 0x0, 0x60, 0xe}, 0x2, 0x7, 0x2, 0x1ff, 0x0, 0x0, 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) acct(0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000800000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x881) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) fallocate(r9, 0x11, 0x5, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$caif_stream(0x25, 0x1, 0x0) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) 636.137785ms ago: executing program 1 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d40)={0x8, 0x3, {0x6, @usage=0x1, 0x0, 0xffffffffffffffff, 0x100000001, 0x0, 0xffffffffffffb3b4, 0x1, 0x42, @usage=0x1, 0xe0d, 0x9, [0x7e, 0x4, 0x3, 0x10001, 0x1, 0x2]}, {0xf, @usage=0x1, 0x0, 0x7, 0x3d, 0x25f595a8, 0xa17, 0x3, 0x0, @struct={0x400, 0x814}, 0x2, 0x6, [0xfff, 0x4, 0x9, 0xd6, 0x8, 0x7ff]}, {0x10001, @struct={0x10, 0x9}, 0x0, 0xf, 0x3, 0x7f, 0x8001, 0x81, 0x2, @usage=0x2, 0x1, 0x2, [0x7, 0x5, 0x0, 0x8, 0x4, 0xfffffffffffff435]}, {0x3, 0x8, 0x6}}) 563.001525ms ago: executing program 2 (id=2176): syz_emit_ethernet(0xa2, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 462.929596ms ago: executing program 3 (id=2178): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x4000cdd) close_range(r2, 0xffffffffffffffff, 0x0) 462.395516ms ago: executing program 0 (id=2179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00fe31c5028008000140fffff2741400000011000100000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "930040", 0x28, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x70, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xf, 0xf989, "8846e4570781162db2801e"}, @mss={0x2, 0x4, 0x50}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 459.821196ms ago: executing program 2 (id=2180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0x1002}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$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") 458.711876ms ago: executing program 4 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x44) 426.809606ms ago: executing program 2 (id=2182): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r4 = syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 425.299656ms ago: executing program 3 (id=2183): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd21, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x4}]}}}]}, 0x3c}}, 0x24000004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) 423.620516ms ago: executing program 4 (id=2184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200010a8000"/20], 0x26}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='mm_vmscan_lru_isolate\x00', r3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) listen(r1, 0x3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 315.531557ms ago: executing program 4 (id=2185): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1}, 0xfffffffc}], 0x1, 0x12260, 0x0) 295.345637ms ago: executing program 4 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 246.218217ms ago: executing program 3 (id=2187): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x1, 0x0, 0x2, 0x4, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000003040)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000000700)=""/19, 0x13}, {&(0x7f0000000740)=""/105, 0x69}], 0x5, &(0x7f0000000840)=""/90, 0x5a}, 0xfffffffe}, {{&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000940)=""/120, 0x78}, {&(0x7f0000001c00)=""/161, 0xa1}, {&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000001cc0)=""/153, 0x99}, {&(0x7f0000001d80)=""/56, 0x38}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/35, 0x23}, {&(0x7f0000001ec0)=""/57, 0x39}, {&(0x7f0000001f00)=""/41, 0x29}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0xa, &(0x7f0000003000)=""/27, 0x1b}, 0x7}], 0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x4050) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) wait4(r10, &(0x7f0000000040), 0x80000000, &(0x7f0000000380)) 245.403288ms ago: executing program 4 (id=2188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) timer_gettime(r2, &(0x7f00000000c0)) 219.311757ms ago: executing program 4 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$rds(0x15, 0x5, 0x0) r5 = shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) 217.441997ms ago: executing program 0 (id=2190): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000a00), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r8, 0x0, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=2191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setregid(0x0, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): [ T8488] syz.2.1606: attempt to access beyond end of device [ 160.202876][ T8488] loop2: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.220901][ T8481] syz.3.1605: attempt to access beyond end of device [ 160.220901][ T8481] loop3: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.255048][ T8493] EXT4-fs mount: 2 callbacks suppressed [ 160.255099][ T8493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.268047][ T8488] syz.2.1606: attempt to access beyond end of device [ 160.268047][ T8488] loop2: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.296619][ T8481] syz.3.1605: attempt to access beyond end of device [ 160.296619][ T8481] loop3: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.306616][ T8493] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.324713][ T8493] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 160.337066][ T8493] EXT4-fs (loop0): This should not happen!! Data will be lost [ 160.337066][ T8493] [ 160.346742][ T8493] EXT4-fs (loop0): Total free blocks count 0 [ 160.352754][ T8493] EXT4-fs (loop0): Free/Dirty block details [ 160.358655][ T8493] EXT4-fs (loop0): free_blocks=2415919104 [ 160.364455][ T8493] EXT4-fs (loop0): dirty_blocks=32 [ 160.369573][ T8493] EXT4-fs (loop0): Block reservation details [ 160.375587][ T8493] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 160.381771][ T8488] syz.2.1606: attempt to access beyond end of device [ 160.381771][ T8488] loop2: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.394973][ T8488] syz.2.1606: attempt to access beyond end of device [ 160.394973][ T8488] loop2: rw=0, sector=313, nr_sectors = 8 limit=128 [ 160.420238][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.536157][ T8504] loop4: detected capacity change from 0 to 2048 [ 160.564723][ T8518] loop2: detected capacity change from 0 to 512 [ 160.570327][ T8520] loop3: detected capacity change from 0 to 128 [ 160.581439][ T8504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.603431][ T8518] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1619: corrupted in-inode xattr: e_name out of bounds [ 160.631092][ T8504] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.650555][ T8518] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1619: couldn't read orphan inode 15 (err -117) [ 160.678705][ T8518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.738456][ T8529] loop0: detected capacity change from 0 to 512 [ 160.748946][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 160.763617][ T8529] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.788945][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.798189][ T8529] EXT4-fs error (device loop0): ext4_quota_enable:7136: comm syz.0.1622: inode #218103808: comm syz.0.1622: iget: illegal inode # [ 160.824167][ T8529] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.1622: Bad quota inode: 218103808, type: 2 [ 160.849214][ T8529] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 160.881079][ T8529] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 160.922243][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.929154][ T8540] FAULT_INJECTION: forcing a failure. [ 160.929154][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 160.947222][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.2.1624 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.947246][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.947341][ T8540] Call Trace: [ 160.947347][ T8540] [ 160.947354][ T8540] __dump_stack+0x1d/0x30 [ 160.947379][ T8540] dump_stack_lvl+0xe8/0x140 [ 160.947402][ T8540] dump_stack+0x15/0x1b [ 160.947481][ T8540] should_fail_ex+0x265/0x280 [ 160.947500][ T8540] should_failslab+0x8c/0xb0 [ 160.947532][ T8540] __kvmalloc_node_noprof+0x12e/0x670 [ 160.947623][ T8540] ? traverse+0xa2/0x3a0 [ 160.947667][ T8540] traverse+0xa2/0x3a0 [ 160.947742][ T8540] ? terminate_walk+0x27f/0x2a0 [ 160.947776][ T8540] seq_read_iter+0x85f/0x950 [ 160.947799][ T8540] seq_read+0x270/0x2b0 [ 160.947825][ T8540] ? __pfx_seq_read+0x10/0x10 [ 160.947878][ T8540] proc_reg_read+0x128/0x1c0 [ 160.947900][ T8540] ? __pfx_proc_reg_read+0x10/0x10 [ 160.947928][ T8540] vfs_readv+0x3fb/0x690 [ 160.948000][ T8540] __x64_sys_preadv+0xfd/0x1c0 [ 160.948030][ T8540] x64_sys_call+0x282e/0x3000 [ 160.948102][ T8540] do_syscall_64+0xd2/0x200 [ 160.948123][ T8540] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.948149][ T8540] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.948178][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.948323][ T8540] RIP: 0033:0x7fc6ddfdf6c9 [ 160.948339][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.948431][ T8540] RSP: 002b:00007fc6dca3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 160.948449][ T8540] RAX: ffffffffffffffda RBX: 00007fc6de235fa0 RCX: 00007fc6ddfdf6c9 [ 160.948460][ T8540] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 160.948473][ T8540] RBP: 00007fc6dca3f090 R08: 0000000000000004 R09: 0000000000000000 [ 160.948486][ T8540] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 160.948497][ T8540] R13: 00007fc6de236038 R14: 00007fc6de235fa0 R15: 00007ffca016ad88 [ 160.948572][ T8540] [ 161.203754][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.236546][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 161.236654][ T8530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1614: bg 0: block 345: padding at end of block bitmap is not set [ 161.271027][ T8530] EXT4-fs (loop4): Remounting filesystem read-only [ 161.277566][ T6444] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 161.298595][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 161.370650][ T8548] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.380562][ T8548] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.385771][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.418702][ T8552] vlan2: entered allmulticast mode [ 161.452096][ T8548] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.454811][ T8557] loop4: detected capacity change from 0 to 1024 [ 161.461914][ T8548] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.492066][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.519979][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 161.550410][ T8548] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.560275][ T8548] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.620037][ T8572] FAULT_INJECTION: forcing a failure. [ 161.620037][ T8572] name failslab, interval 1, probability 0, space 0, times 0 [ 161.632758][ T8572] CPU: 0 UID: 0 PID: 8572 Comm: syz.3.1637 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.632787][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.632848][ T8572] Call Trace: [ 161.632853][ T8572] [ 161.632860][ T8572] __dump_stack+0x1d/0x30 [ 161.632901][ T8572] dump_stack_lvl+0xe8/0x140 [ 161.632923][ T8572] dump_stack+0x15/0x1b [ 161.632943][ T8572] should_fail_ex+0x265/0x280 [ 161.632963][ T8572] ? __se_sys_memfd_create+0x1cc/0x590 [ 161.632985][ T8572] should_failslab+0x8c/0xb0 [ 161.633039][ T8572] __kmalloc_cache_noprof+0x4c/0x4a0 [ 161.633101][ T8572] ? fput+0x8f/0xc0 [ 161.633122][ T8572] __se_sys_memfd_create+0x1cc/0x590 [ 161.633150][ T8572] __x64_sys_memfd_create+0x31/0x40 [ 161.633215][ T8572] x64_sys_call+0x2ac2/0x3000 [ 161.633236][ T8572] do_syscall_64+0xd2/0x200 [ 161.633255][ T8572] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.633359][ T8572] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.633487][ T8572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.633509][ T8572] RIP: 0033:0x7f8c8fa8f6c9 [ 161.633605][ T8572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.633622][ T8572] RSP: 002b:00007f8c8e4f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 161.633641][ T8572] RAX: ffffffffffffffda RBX: 00000000000007cc RCX: 00007f8c8fa8f6c9 [ 161.633656][ T8572] RDX: 00007f8c8e4f6ef0 RSI: 0000000000000000 RDI: 00007f8c8fb12960 [ 161.633671][ T8572] RBP: 0000200000002200 R08: 00007f8c8e4f6bb7 R09: 00007f8c8e4f6e40 [ 161.633685][ T8572] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 161.633700][ T8572] R13: 00007f8c8e4f6ef0 R14: 00007f8c8e4f6eb0 R15: 0000200000000000 [ 161.633743][ T8572] [ 161.821161][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 161.831996][ T8548] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.841778][ T8548] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.857564][ T8557] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1632: Allocating blocks 449-513 which overlap fs metadata [ 161.904445][ T8556] EXT4-fs (loop4): pa ffff88810721a770: logic 48, phys. 177, len 21 [ 161.912483][ T8556] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 161.938230][ T6444] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.946726][ T6444] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.965602][ T6444] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.973789][ T6444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.002240][ T6444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.010454][ T6444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.040367][ T6444] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.044309][ T8579] siw: device registration error -23 [ 162.048617][ T6444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.068880][ T8585] tmpfs: Bad value for 'mpol' [ 162.092062][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.107003][ T8593] loop0: detected capacity change from 0 to 128 [ 162.450562][ T8599] loop1: detected capacity change from 0 to 256 [ 162.472444][ T8599] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.529090][ T8599] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.566071][ T8599] FAULT_INJECTION: forcing a failure. [ 162.566071][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 162.578762][ T8599] CPU: 1 UID: 0 PID: 8599 Comm: syz.1.1647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.578795][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.578809][ T8599] Call Trace: [ 162.578815][ T8599] [ 162.578822][ T8599] __dump_stack+0x1d/0x30 [ 162.578847][ T8599] dump_stack_lvl+0xe8/0x140 [ 162.578870][ T8599] dump_stack+0x15/0x1b [ 162.578886][ T8599] should_fail_ex+0x265/0x280 [ 162.579028][ T8599] should_failslab+0x8c/0xb0 [ 162.579056][ T8599] kmem_cache_alloc_noprof+0x50/0x480 [ 162.579085][ T8599] ? getname_flags+0x80/0x3b0 [ 162.579180][ T8599] getname_flags+0x80/0x3b0 [ 162.579209][ T8599] __x64_sys_rename+0x33/0x70 [ 162.579303][ T8599] x64_sys_call+0x1f9/0x3000 [ 162.579326][ T8599] do_syscall_64+0xd2/0x200 [ 162.579347][ T8599] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.579376][ T8599] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.579453][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.579476][ T8599] RIP: 0033:0x7f52286ef6c9 [ 162.579490][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.579524][ T8599] RSP: 002b:00007f5227157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 162.579541][ T8599] RAX: ffffffffffffffda RBX: 00007f5228945fa0 RCX: 00007f52286ef6c9 [ 162.579684][ T8599] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000a00 [ 162.579695][ T8599] RBP: 00007f5227157090 R08: 0000000000000000 R09: 0000000000000000 [ 162.579763][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.579777][ T8599] R13: 00007f5228946038 R14: 00007f5228945fa0 R15: 00007ffefefe9cd8 [ 162.579798][ T8599] [ 162.764620][ T8604] loop4: detected capacity change from 0 to 256 [ 162.771805][ T8604] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.771924][ T8601] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 162.794388][ T8604] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.869053][ T3366] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.879749][ T8601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.908608][ T8609] FAULT_INJECTION: forcing a failure. [ 162.908608][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 162.921272][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.2.1650 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.921356][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.921367][ T8609] Call Trace: [ 162.921373][ T8609] [ 162.921379][ T8609] __dump_stack+0x1d/0x30 [ 162.921466][ T8609] dump_stack_lvl+0xe8/0x140 [ 162.921485][ T8609] dump_stack+0x15/0x1b [ 162.921501][ T8609] should_fail_ex+0x265/0x280 [ 162.921526][ T8609] ? __se_sys_memfd_create+0x1cc/0x590 [ 162.921553][ T8609] should_failslab+0x8c/0xb0 [ 162.921583][ T8609] __kmalloc_cache_noprof+0x4c/0x4a0 [ 162.921617][ T8609] __se_sys_memfd_create+0x1cc/0x590 [ 162.921655][ T8609] __x64_sys_memfd_create+0x31/0x40 [ 162.921680][ T8609] x64_sys_call+0x2ac2/0x3000 [ 162.921702][ T8609] do_syscall_64+0xd2/0x200 [ 162.921725][ T8609] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.921789][ T8609] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.921823][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.921902][ T8609] RIP: 0033:0x7fc6ddfdf6c9 [ 162.921918][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.921966][ T8609] RSP: 002b:00007fc6dca3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 162.921984][ T8609] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007fc6ddfdf6c9 [ 162.921997][ T8609] RDX: 00007fc6dca3eef0 RSI: 0000000000000000 RDI: 00007fc6de062960 [ 162.922010][ T8609] RBP: 0000200000000540 R08: 00007fc6dca3ebb7 R09: 00007fc6dca3ee40 [ 162.922024][ T8609] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 162.922038][ T8609] R13: 00007fc6dca3eef0 R14: 00007fc6dca3eeb0 R15: 00002000000009c0 [ 162.922094][ T8609] [ 162.922564][ T3366] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.005201][ T8615] loop4: detected capacity change from 0 to 128 [ 163.156185][ T8620] loop2: detected capacity change from 0 to 128 [ 163.346429][ T8633] loop0: detected capacity change from 0 to 128 [ 164.024981][ T8651] FAULT_INJECTION: forcing a failure. [ 164.024981][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 164.037639][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.2.1663 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.037667][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.037680][ T8651] Call Trace: [ 164.037685][ T8651] [ 164.037690][ T8651] __dump_stack+0x1d/0x30 [ 164.037704][ T8651] dump_stack_lvl+0xe8/0x140 [ 164.037789][ T8651] dump_stack+0x15/0x1b [ 164.037799][ T8651] should_fail_ex+0x265/0x280 [ 164.037811][ T8651] ? __se_sys_memfd_create+0x1cc/0x590 [ 164.037834][ T8651] should_failslab+0x8c/0xb0 [ 164.037910][ T8651] __kmalloc_cache_noprof+0x4c/0x4a0 [ 164.037931][ T8651] ? fput+0x8f/0xc0 [ 164.037941][ T8651] __se_sys_memfd_create+0x1cc/0x590 [ 164.037955][ T8651] __x64_sys_memfd_create+0x31/0x40 [ 164.038018][ T8651] x64_sys_call+0x2ac2/0x3000 [ 164.038040][ T8651] do_syscall_64+0xd2/0x200 [ 164.038131][ T8651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.038146][ T8651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.038245][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.038287][ T8651] RIP: 0033:0x7fc6ddfdf6c9 [ 164.038296][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.038306][ T8651] RSP: 002b:00007fc6dca3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 164.038317][ T8651] RAX: ffffffffffffffda RBX: 0000000000000483 RCX: 00007fc6ddfdf6c9 [ 164.038325][ T8651] RDX: 00007fc6dca3eef0 RSI: 0000000000000000 RDI: 00007fc6de062960 [ 164.038332][ T8651] RBP: 0000200000001040 R08: 00007fc6dca3ebb7 R09: 00007fc6dca3ee40 [ 164.038339][ T8651] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 164.038396][ T8651] R13: 00007fc6dca3eef0 R14: 00007fc6dca3eeb0 R15: 0000200000000680 [ 164.038454][ T8651] [ 164.269461][ T8655] loop3: detected capacity change from 0 to 512 [ 164.270075][ T8659] loop0: detected capacity change from 0 to 128 [ 164.283204][ T8655] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1665: EA inode hash validation failed [ 164.296015][ T8655] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1665: corrupted inode contents [ 164.339301][ T8655] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.1665: mark_inode_dirty error [ 164.350683][ T8666] geneve3: entered promiscuous mode [ 164.350886][ T8655] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1665: corrupted inode contents [ 164.355893][ T8666] geneve3: entered allmulticast mode [ 164.368021][ T8655] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1665: mark_inode_dirty error [ 164.385325][ T8655] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1665: mark inode dirty (error -117) [ 164.398255][ T8655] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 164.407438][ T8655] EXT4-fs (loop3): 1 orphan inode deleted [ 164.413568][ T8655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.461375][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 164.521873][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 164.521886][ T29] audit: type=1326 audit(1762242698.205:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.553480][ T29] audit: type=1326 audit(1762242698.235:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.576874][ T29] audit: type=1326 audit(1762242698.235:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.600222][ T29] audit: type=1326 audit(1762242698.235:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.623584][ T29] audit: type=1326 audit(1762242698.235:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.646962][ T29] audit: type=1326 audit(1762242698.235:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.670384][ T29] audit: type=1326 audit(1762242698.235:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.693780][ T29] audit: type=1326 audit(1762242698.235:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.717176][ T29] audit: type=1326 audit(1762242698.235:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.740474][ T29] audit: type=1326 audit(1762242698.235:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8fa8f6c9 code=0x7ffc0000 [ 164.793381][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.813765][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 164.832945][ T8690] FAULT_INJECTION: forcing a failure. [ 164.832945][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.842055][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.846029][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.2.1678 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.846058][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.846071][ T8690] Call Trace: [ 164.846077][ T8690] [ 164.846084][ T8690] __dump_stack+0x1d/0x30 [ 164.846109][ T8690] dump_stack_lvl+0xe8/0x140 [ 164.846136][ T8690] dump_stack+0x15/0x1b [ 164.846154][ T8690] should_fail_ex+0x265/0x280 [ 164.846175][ T8690] should_fail+0xb/0x20 [ 164.846263][ T8690] should_fail_usercopy+0x1a/0x20 [ 164.846284][ T8690] _copy_from_user+0x1c/0xb0 [ 164.846311][ T8690] ___sys_sendmsg+0xc1/0x1d0 [ 164.846343][ T8690] __x64_sys_sendmsg+0xd4/0x160 [ 164.846367][ T8690] x64_sys_call+0x191e/0x3000 [ 164.846407][ T8690] do_syscall_64+0xd2/0x200 [ 164.846427][ T8690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.846518][ T8690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.846558][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.846579][ T8690] RIP: 0033:0x7fc6ddfdf6c9 [ 164.846595][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.846614][ T8690] RSP: 002b:00007fc6dca3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.846662][ T8690] RAX: ffffffffffffffda RBX: 00007fc6de235fa0 RCX: 00007fc6ddfdf6c9 [ 164.846676][ T8690] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 164.846689][ T8690] RBP: 00007fc6dca3f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.846702][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.846715][ T8690] R13: 00007fc6de236038 R14: 00007fc6de235fa0 R15: 00007ffca016ad88 [ 164.846734][ T8690] [ 164.953009][ T8695] loop2: detected capacity change from 0 to 2048 [ 165.031790][ T8695] EXT4-fs: Ignoring removed bh option [ 165.047811][ T8697] loop4: detected capacity change from 0 to 512 [ 165.068755][ T8695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.083777][ T8695] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.090335][ T8679] bio_check_eod: 17889 callbacks suppressed [ 165.090348][ T8679] syz.0.1667: attempt to access beyond end of device [ 165.090348][ T8679] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 165.099400][ T8697] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1680: couldn't read orphan inode 26 (err -116) [ 165.129386][ T8679] syz.0.1667: attempt to access beyond end of device [ 165.129386][ T8679] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 165.129494][ T8695] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 165.154784][ T8695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.154784][ T8695] [ 165.164442][ T8695] EXT4-fs (loop2): Total free blocks count 0 [ 165.165169][ T8679] syz.0.1667: attempt to access beyond end of device [ 165.165169][ T8679] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 165.170422][ T8695] EXT4-fs (loop2): Free/Dirty block details [ 165.170437][ T8695] EXT4-fs (loop2): free_blocks=2415919104 [ 165.195114][ T8695] EXT4-fs (loop2): dirty_blocks=32 [ 165.200248][ T8695] EXT4-fs (loop2): Block reservation details [ 165.206330][ T8695] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 165.226471][ T8697] EXT4-fs (loop4): Remounting filesystem read-only [ 165.238479][ T8697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.253059][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.263085][ T42] kworker/u8:2: attempt to access beyond end of device [ 165.263085][ T42] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 165.263717][ T8697] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.290324][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 165.308626][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.327100][ T8713] FAULT_INJECTION: forcing a failure. [ 165.327100][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 165.339732][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.1.1687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.339829][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.339843][ T8713] Call Trace: [ 165.339849][ T8713] [ 165.339857][ T8713] __dump_stack+0x1d/0x30 [ 165.339928][ T8713] dump_stack_lvl+0xe8/0x140 [ 165.339948][ T8713] dump_stack+0x15/0x1b [ 165.339966][ T8713] should_fail_ex+0x265/0x280 [ 165.339992][ T8713] should_failslab+0x8c/0xb0 [ 165.340022][ T8713] kmem_cache_alloc_noprof+0x50/0x480 [ 165.340061][ T8713] ? getname_flags+0x80/0x3b0 [ 165.340125][ T8713] getname_flags+0x80/0x3b0 [ 165.340174][ T8709] loop3: detected capacity change from 0 to 512 [ 165.340178][ T8713] do_sys_openat2+0x60/0x110 [ 165.340202][ T8713] __x64_sys_openat+0xf2/0x120 [ 165.340223][ T8713] x64_sys_call+0x2eab/0x3000 [ 165.340246][ T8713] do_syscall_64+0xd2/0x200 [ 165.340293][ T8713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.340323][ T8713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.340355][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.340411][ T8713] RIP: 0033:0x7f52286edf10 [ 165.340426][ T8713] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 165.340444][ T8713] RSP: 002b:00007f5227156f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.340464][ T8713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f52286edf10 [ 165.340487][ T8713] RDX: 0000000000000000 RSI: 00007f522877207e RDI: 00000000ffffff9c [ 165.340577][ T8713] RBP: 00007f522877207e R08: 0000000000000000 R09: 0000000000000000 [ 165.340590][ T8713] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 165.340603][ T8713] R13: 00007f5228946038 R14: 00007f5228945fa0 R15: 00007ffefefe9cd8 [ 165.340623][ T8713] [ 165.411236][ T8711] bond3: option primary_reselect: invalid value (4) [ 165.459865][ T8709] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1684: couldn't read orphan inode 26 (err -116) [ 165.542989][ T8709] EXT4-fs (loop3): Remounting filesystem read-only [ 165.548836][ T8711] bond3 (unregistering): Released all slaves [ 165.550690][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.568317][ T8709] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.592682][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.189282][ T8725] loop1: detected capacity change from 0 to 256 [ 166.196247][ T8725] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.209524][ T8729] loop2: detected capacity change from 0 to 128 [ 166.212467][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 166.222207][ T8729] syz.2.1690: attempt to access beyond end of device [ 166.222207][ T8729] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 166.238301][ T8725] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.238625][ T8729] syz.2.1690: attempt to access beyond end of device [ 166.238625][ T8729] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 166.262264][ T8729] syz.2.1690: attempt to access beyond end of device [ 166.262264][ T8729] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 166.286160][ T8729] syz.2.1690: attempt to access beyond end of device [ 166.286160][ T8729] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 166.330124][ T8739] syz.2.1690: attempt to access beyond end of device [ 166.330124][ T8739] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 166.345972][ T8729] syz.2.1690: attempt to access beyond end of device [ 166.345972][ T8729] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 166.375416][ T8743] loop3: detected capacity change from 0 to 2048 [ 166.383493][ T8743] EXT4-fs: Ignoring removed bh option [ 166.392620][ T8750] loop1: detected capacity change from 0 to 128 [ 166.399841][ T8743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.414767][ T8743] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 166.430213][ T8743] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 166.442523][ T8743] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.442523][ T8743] [ 166.452167][ T8743] EXT4-fs (loop3): Total free blocks count 0 [ 166.458148][ T8743] EXT4-fs (loop3): Free/Dirty block details [ 166.464112][ T8743] EXT4-fs (loop3): free_blocks=2415919104 [ 166.469872][ T8743] EXT4-fs (loop3): dirty_blocks=32 [ 166.474978][ T8743] EXT4-fs (loop3): Block reservation details [ 166.480956][ T8743] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 166.499800][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.129304][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1703'. [ 167.129512][ T8768] loop3: detected capacity change from 0 to 2048 [ 167.151170][ T8768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.170299][ T8776] syzkaller0: entered promiscuous mode [ 167.175791][ T8776] syzkaller0: entered allmulticast mode [ 167.183886][ T8768] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.212821][ T8772] vlan2: entered allmulticast mode [ 167.234543][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1705'. [ 167.322492][ T8784] tipc: Enabling of bearer rejected, already enabled [ 167.333277][ T8786] loop1: detected capacity change from 0 to 2048 [ 167.357269][ T8786] EXT4-fs: Ignoring removed bh option [ 167.375244][ T42] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 167.393863][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1710'. [ 167.404756][ T42] EXT4-fs (loop3): Remounting filesystem read-only [ 167.412276][ T12] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 167.430101][ T8786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.464878][ T8786] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.492363][ T8786] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 167.504668][ T8786] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.504668][ T8786] [ 167.508744][ T8799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1709'. [ 167.514553][ T8786] EXT4-fs (loop1): Total free blocks count 0 [ 167.529398][ T8786] EXT4-fs (loop1): Free/Dirty block details [ 167.535271][ T8786] EXT4-fs (loop1): free_blocks=2415919104 [ 167.541029][ T8786] EXT4-fs (loop1): dirty_blocks=32 [ 167.546129][ T8786] EXT4-fs (loop1): Block reservation details [ 167.552109][ T8786] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 167.590169][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.599976][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.631708][ T8804] loop1: detected capacity change from 0 to 128 [ 168.059022][ T8778] syz.4.1705 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 168.073191][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.4.1705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.073220][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.073273][ T8778] Call Trace: [ 168.073280][ T8778] [ 168.073288][ T8778] __dump_stack+0x1d/0x30 [ 168.073314][ T8778] dump_stack_lvl+0xe8/0x140 [ 168.073336][ T8778] dump_stack+0x15/0x1b [ 168.073354][ T8778] dump_header+0x81/0x220 [ 168.073423][ T8778] oom_kill_process+0x342/0x400 [ 168.073489][ T8778] out_of_memory+0x979/0xb80 [ 168.073525][ T8778] try_charge_memcg+0x610/0xa10 [ 168.073558][ T8778] obj_cgroup_charge_pages+0xa6/0x150 [ 168.073578][ T8778] __memcg_kmem_charge_page+0x9f/0x170 [ 168.073702][ T8778] __alloc_frozen_pages_noprof+0x188/0x360 [ 168.073891][ T8778] alloc_pages_mpol+0xb3/0x260 [ 168.073979][ T8778] alloc_pages_noprof+0x90/0x130 [ 168.074003][ T8778] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 168.074067][ T8778] __kvmalloc_node_noprof+0x483/0x670 [ 168.074128][ T8778] ? ip_set_alloc+0x24/0x30 [ 168.074163][ T8778] ? ip_set_alloc+0x24/0x30 [ 168.074196][ T8778] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 168.074290][ T8778] ip_set_alloc+0x24/0x30 [ 168.074323][ T8778] hash_netiface_create+0x282/0x740 [ 168.074360][ T8778] ? __pfx_hash_netiface_create+0x10/0x10 [ 168.074467][ T8778] ip_set_create+0x3cc/0x970 [ 168.074571][ T8778] ? __nla_parse+0x40/0x60 [ 168.074596][ T8778] nfnetlink_rcv_msg+0x4c6/0x590 [ 168.074639][ T8778] netlink_rcv_skb+0x123/0x220 [ 168.074725][ T8778] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.074764][ T8778] nfnetlink_rcv+0x167/0x16c0 [ 168.074792][ T8778] ? kmem_cache_free+0xe4/0x3d0 [ 168.074828][ T8778] ? __kfree_skb+0x109/0x150 [ 168.074912][ T8778] ? nlmon_xmit+0x4f/0x60 [ 168.074934][ T8778] ? consume_skb+0x49/0x150 [ 168.074964][ T8778] ? nlmon_xmit+0x4f/0x60 [ 168.075054][ T8778] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 168.075095][ T8778] ? __dev_queue_xmit+0x1200/0x2000 [ 168.075127][ T8778] ? __dev_queue_xmit+0x182/0x2000 [ 168.075244][ T8778] ? kmem_cache_free+0x286/0x3d0 [ 168.075279][ T8778] ? ref_tracker_free+0x37d/0x3e0 [ 168.075402][ T8778] ? __netlink_deliver_tap+0x4dc/0x500 [ 168.075443][ T8778] netlink_unicast+0x5c0/0x690 [ 168.075477][ T8778] netlink_sendmsg+0x58b/0x6b0 [ 168.075575][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.075635][ T8778] __sock_sendmsg+0x145/0x180 [ 168.075719][ T8778] ____sys_sendmsg+0x31e/0x4e0 [ 168.075775][ T8778] ___sys_sendmsg+0x17b/0x1d0 [ 168.075809][ T8778] __x64_sys_sendmsg+0xd4/0x160 [ 168.075901][ T8778] x64_sys_call+0x191e/0x3000 [ 168.075927][ T8778] do_syscall_64+0xd2/0x200 [ 168.075946][ T8778] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.076023][ T8778] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.076057][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.076157][ T8778] RIP: 0033:0x7f5539c4f6c9 [ 168.076174][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.076194][ T8778] RSP: 002b:00007f55386af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.076215][ T8778] RAX: ffffffffffffffda RBX: 00007f5539ea5fa0 RCX: 00007f5539c4f6c9 [ 168.076230][ T8778] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 168.076250][ T8778] RBP: 00007f5539cd1f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.076264][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.076304][ T8778] R13: 00007f5539ea6038 R14: 00007f5539ea5fa0 R15: 00007ffdb45bac48 [ 168.076322][ T8778] [ 168.076327][ T8778] memory: usage 307200kB, limit 307200kB, failcnt 208 [ 168.426183][ T8778] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 168.434082][ T8778] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 168.441388][ T8778] Memory cgroup stats for /syz4: [ 168.441671][ T8778] cache 0 [ 168.449533][ T8778] rss 0 [ 168.452285][ T8778] shmem 0 [ 168.455205][ T8778] mapped_file 8192 [ 168.458933][ T8778] dirty 0 [ 168.461861][ T8778] writeback 0 [ 168.465134][ T8778] workingset_refault_anon 1679 [ 168.469903][ T8778] workingset_refault_file 4071 [ 168.474650][ T8778] swap 684032 [ 168.477923][ T8778] swapcached 8192 [ 168.481560][ T8778] pgpgin 242607 [ 168.485015][ T8778] pgpgout 242604 [ 168.488628][ T8778] pgfault 159489 [ 168.492155][ T8778] pgmajfault 296 [ 168.495747][ T8778] inactive_anon 0 [ 168.499381][ T8778] active_anon 8192 [ 168.503082][ T8778] inactive_file 0 [ 168.506768][ T8778] active_file 4096 [ 168.510517][ T8778] unevictable 0 [ 168.513964][ T8778] hierarchical_memory_limit 314572800 [ 168.519340][ T8778] hierarchical_memsw_limit 9223372036854771712 [ 168.525481][ T8778] total_cache 0 [ 168.528948][ T8778] total_rss 0 [ 168.532220][ T8778] total_shmem 0 [ 168.535662][ T8778] total_mapped_file 8192 [ 168.539893][ T8778] total_dirty 0 [ 168.543375][ T8778] total_writeback 0 [ 168.547245][ T8778] total_workingset_refault_anon 1679 [ 168.552560][ T8778] total_workingset_refault_file 4071 [ 168.557813][ T8778] total_swap 684032 [ 168.561855][ T8778] total_swapcached 8192 [ 168.566023][ T8778] total_pgpgin 242607 [ 168.570022][ T8778] total_pgpgout 242604 [ 168.574068][ T8778] total_pgfault 159489 [ 168.578132][ T8778] total_pgmajfault 296 [ 168.582190][ T8778] total_inactive_anon 0 [ 168.586313][ T8778] total_active_anon 8192 [ 168.590535][ T8778] total_inactive_file 0 [ 168.594657][ T8778] total_active_file 4096 [ 168.598878][ T8778] total_unevictable 0 [ 168.602827][ T8778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1705,pid=8777,uid=0 [ 168.617434][ T8778] Memory cgroup out of memory: Killed process 8777 (syz.4.1705) total-vm:93952kB, anon-rss:1116kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 168.659690][ T8817] loop1: detected capacity change from 0 to 2048 [ 168.669988][ T8817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.682144][ T8817] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.816548][ T8826] syzkaller0: entered promiscuous mode [ 168.822187][ T8826] syzkaller0: entered allmulticast mode [ 168.861508][ T8836] loop2: detected capacity change from 0 to 128 [ 168.899519][ T8839] loop0: detected capacity change from 0 to 128 [ 168.937044][ T8821] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1715: bg 0: block 345: padding at end of block bitmap is not set [ 168.970003][ T8821] EXT4-fs (loop1): Remounting filesystem read-only [ 168.976650][ T42] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 169.001455][ T8845] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 169.019091][ T8845] netlink: 'syz.4.1723': attribute type 10 has an invalid length. [ 169.031133][ T8845] team0: Port device dummy0 added [ 169.040131][ T8845] netlink: 'syz.4.1723': attribute type 10 has an invalid length. [ 169.049168][ T8845] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.077415][ T8845] team0: Failed to send options change via netlink (err -105) [ 169.095146][ T8845] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.106590][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.111650][ T8845] team0: Port device dummy0 removed [ 169.135019][ T8845] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.189572][ T8852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 169.191448][ T8855] loop4: detected capacity change from 0 to 128 [ 169.223266][ T8852] IPVS: Unknown mcast interface: vet [ 169.817112][ T8868] loop0: detected capacity change from 0 to 128 [ 169.827171][ T8871] loop3: detected capacity change from 0 to 512 [ 169.834777][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 169.834866][ T29] audit: type=1326 audit(1762242703.515:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 169.910145][ T29] audit: type=1326 audit(1762242703.555:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 169.933552][ T29] audit: type=1326 audit(1762242703.555:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 169.956950][ T29] audit: type=1326 audit(1762242703.555:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 169.980344][ T29] audit: type=1326 audit(1762242703.565:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.003733][ T29] audit: type=1326 audit(1762242703.565:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.027192][ T29] audit: type=1326 audit(1762242703.565:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.072120][ T8871] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1730: couldn't read orphan inode 26 (err -116) [ 170.095118][ T8871] EXT4-fs (loop3): Remounting filesystem read-only [ 170.098235][ T8877] bio_check_eod: 42834 callbacks suppressed [ 170.098248][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.098248][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.108892][ T8871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.136226][ T8871] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.146888][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.146888][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.148777][ T42] kworker/u8:2: attempt to access beyond end of device [ 170.148777][ T42] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 170.160206][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.160206][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.186854][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.186854][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.201771][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.201771][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.217079][ T29] audit: type=1326 audit(1762242703.895:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.240470][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.240470][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.240537][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.240537][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.253600][ T29] audit: type=1326 audit(1762242703.895:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.290161][ T29] audit: type=1326 audit(1762242703.895:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 170.290427][ T8881] loop2: detected capacity change from 0 to 2048 [ 170.328402][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 170.338286][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.338286][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.358475][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.365411][ T8877] syz.0.1731: attempt to access beyond end of device [ 170.365411][ T8877] loop0: rw=0, sector=313, nr_sectors = 8 limit=128 [ 170.389772][ T8881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.408316][ T8881] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.450867][ T8890] loop4: detected capacity change from 0 to 512 [ 170.463148][ T8892] xt_hashlimit: max too large, truncated to 1048576 [ 170.478850][ T8892] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.498786][ T8890] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1736: EA inode hash validation failed [ 170.511517][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1736: corrupted inode contents [ 170.532284][ T8890] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1736: mark_inode_dirty error [ 170.559885][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1736: corrupted inode contents [ 170.602730][ T8890] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1736: mark_inode_dirty error [ 170.662234][ T8890] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1736: mark inode dirty (error -117) [ 170.688389][ T8890] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 170.706195][ T8890] EXT4-fs (loop4): 1 orphan inode deleted [ 170.723841][ T8890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.764986][ T8906] loop0: detected capacity change from 0 to 128 [ 170.790276][ T8908] loop1: detected capacity change from 0 to 128 [ 170.972942][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.992431][ T8898] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1734: bg 0: block 345: padding at end of block bitmap is not set [ 171.052313][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 171.059045][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 171.258517][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.300839][ T8925] loop2: detected capacity change from 0 to 128 [ 171.686514][ T8933] loop1: detected capacity change from 0 to 128 [ 171.695397][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 171.815883][ T8927] loop4: detected capacity change from 0 to 32768 [ 171.868462][ T8927] loop4: p2 p3 [ 171.879824][ T8927] loop4: p3 size 196608 extends beyond EOD, truncated [ 172.054126][ T8941] tipc: Enabling of bearer rejected, already enabled [ 172.139529][ T8943] vlan2: entered allmulticast mode [ 172.302052][ T8950] loop4: detected capacity change from 0 to 512 [ 172.318478][ T8950] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1754: EA inode hash validation failed [ 172.344766][ T8950] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1754: corrupted inode contents [ 172.370077][ T8950] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1754: mark_inode_dirty error [ 172.392758][ T8950] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1754: corrupted inode contents [ 172.418127][ T8950] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1754: mark_inode_dirty error [ 172.442729][ T8950] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1754: mark inode dirty (error -117) [ 172.474368][ T8934] syz.0.1748 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 172.488509][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.0.1748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.488572][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.488592][ T8934] Call Trace: [ 172.488599][ T8934] [ 172.488608][ T8934] __dump_stack+0x1d/0x30 [ 172.488630][ T8934] dump_stack_lvl+0xe8/0x140 [ 172.488650][ T8934] dump_stack+0x15/0x1b [ 172.488667][ T8934] dump_header+0x81/0x220 [ 172.488719][ T8934] oom_kill_process+0x342/0x400 [ 172.488752][ T8934] out_of_memory+0x979/0xb80 [ 172.488844][ T8934] try_charge_memcg+0x610/0xa10 [ 172.488950][ T8934] obj_cgroup_charge_pages+0xa6/0x150 [ 172.488981][ T8934] __memcg_kmem_charge_page+0x9f/0x170 [ 172.489002][ T8934] __alloc_frozen_pages_noprof+0x188/0x360 [ 172.489079][ T8934] alloc_pages_mpol+0xb3/0x260 [ 172.489102][ T8934] ? alloc_pages_noprof+0xf4/0x130 [ 172.489126][ T8934] alloc_pages_noprof+0x90/0x130 [ 172.489146][ T8934] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 172.489243][ T8934] __kvmalloc_node_noprof+0x483/0x670 [ 172.489275][ T8934] ? ip_set_alloc+0x24/0x30 [ 172.489325][ T8934] ? ip_set_alloc+0x24/0x30 [ 172.489390][ T8934] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 172.489420][ T8934] ip_set_alloc+0x24/0x30 [ 172.489531][ T8934] hash_netiface_create+0x282/0x740 [ 172.489655][ T8934] ? __pfx_hash_netiface_create+0x10/0x10 [ 172.489691][ T8934] ip_set_create+0x3cc/0x970 [ 172.489716][ T8934] ? __nla_parse+0x40/0x60 [ 172.489738][ T8934] nfnetlink_rcv_msg+0x4c6/0x590 [ 172.489881][ T8934] netlink_rcv_skb+0x123/0x220 [ 172.489916][ T8934] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 172.489970][ T8934] nfnetlink_rcv+0x167/0x16c0 [ 172.490016][ T8934] ? kmem_cache_free+0xe4/0x3d0 [ 172.490046][ T8934] ? __kfree_skb+0x109/0x150 [ 172.490079][ T8934] ? nlmon_xmit+0x4f/0x60 [ 172.490184][ T8934] ? consume_skb+0x49/0x150 [ 172.490353][ T8934] ? nlmon_xmit+0x4f/0x60 [ 172.490402][ T8934] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 172.490447][ T8934] ? __dev_queue_xmit+0x1200/0x2000 [ 172.490548][ T8934] ? __dev_queue_xmit+0x182/0x2000 [ 172.490636][ T8934] ? kmem_cache_free+0x286/0x3d0 [ 172.490672][ T8934] ? ref_tracker_free+0x37d/0x3e0 [ 172.490761][ T8934] ? __netlink_deliver_tap+0x4dc/0x500 [ 172.490849][ T8934] netlink_unicast+0x5c0/0x690 [ 172.490886][ T8934] netlink_sendmsg+0x58b/0x6b0 [ 172.490910][ T8934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.490976][ T8934] __sock_sendmsg+0x145/0x180 [ 172.491005][ T8934] ____sys_sendmsg+0x31e/0x4e0 [ 172.491040][ T8934] ___sys_sendmsg+0x17b/0x1d0 [ 172.491116][ T8934] __x64_sys_sendmsg+0xd4/0x160 [ 172.491139][ T8934] x64_sys_call+0x191e/0x3000 [ 172.491161][ T8934] do_syscall_64+0xd2/0x200 [ 172.491294][ T8934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.491395][ T8934] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.491427][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.491488][ T8934] RIP: 0033:0x7f5fe266f6c9 [ 172.491505][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.491573][ T8934] RSP: 002b:00007f5fe10cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.491599][ T8934] RAX: ffffffffffffffda RBX: 00007f5fe28c5fa0 RCX: 00007f5fe266f6c9 [ 172.491614][ T8934] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 172.491628][ T8934] RBP: 00007f5fe26f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.491642][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.491656][ T8934] R13: 00007f5fe28c6038 R14: 00007f5fe28c5fa0 R15: 00007ffff786eb28 [ 172.491677][ T8934] [ 172.491684][ T8934] memory: usage 307200kB, limit 307200kB, failcnt 686 [ 172.580964][ T8950] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 172.586666][ T8934] memory+swap: usage 307684kB, limit 9007199254740988kB, failcnt 0 [ 172.586683][ T8934] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 172.598553][ T8950] EXT4-fs (loop4): 1 orphan inode deleted [ 172.601102][ T8934] Memory cgroup stats for /syz0 [ 172.606978][ T8950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.610948][ T8934] : [ 172.611656][ T8934] cache 0 [ 172.804354][ T8954] loop3: detected capacity change from 0 to 32768 [ 172.805908][ T8934] rss 0 [ 172.875956][ T8957] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 172.877566][ T8934] shmem 0 [ 172.877576][ T8934] mapped_file 0 [ 172.877584][ T8934] dirty 0 [ 172.883200][ T8957] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 172.894464][ T8934] writeback 0 [ 172.898113][ T8957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.899771][ T8934] workingset_refault_anon 217 [ 172.899782][ T8934] workingset_refault_file 4351 [ 172.899789][ T8934] swap 495616 [ 172.899797][ T8934] swapcached 4096 [ 172.899804][ T8934] pgpgin 195850 [ 172.899817][ T8934] pgpgout 195849 [ 172.968690][ T8934] pgfault 147009 [ 172.972264][ T8934] pgmajfault 179 [ 172.975779][ T8934] inactive_anon 0 [ 172.979408][ T8934] active_anon 4096 [ 172.983097][ T8934] inactive_file 0 [ 172.986747][ T8934] active_file 0 [ 172.990280][ T8934] unevictable 0 [ 172.993722][ T8934] hierarchical_memory_limit 314572800 [ 172.999081][ T8934] hierarchical_memsw_limit 9223372036854771712 [ 173.005206][ T8934] total_cache 0 [ 173.008730][ T8934] total_rss 0 [ 173.012059][ T8934] total_shmem 0 [ 173.015487][ T8934] total_mapped_file 0 [ 173.019459][ T8934] total_dirty 0 [ 173.022962][ T8934] total_writeback 0 [ 173.026738][ T8934] total_workingset_refault_anon 217 [ 173.031925][ T8934] total_workingset_refault_file 4351 [ 173.037180][ T8934] total_swap 495616 [ 173.040976][ T8934] total_swapcached 4096 [ 173.045104][ T8934] total_pgpgin 195850 [ 173.049098][ T8934] total_pgpgout 195849 [ 173.053150][ T8934] total_pgfault 147009 [ 173.057260][ T8934] total_pgmajfault 179 [ 173.061383][ T8934] total_inactive_anon 0 [ 173.065508][ T8934] total_active_anon 4096 [ 173.069822][ T8934] total_inactive_file 0 [ 173.073945][ T8934] total_active_file 0 [ 173.077896][ T8934] total_unevictable 0 [ 173.081929][ T8934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1748,pid=8932,uid=0 [ 173.096498][ T8934] Memory cgroup out of memory: Killed process 8932 (syz.0.1748) total-vm:93960kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 173.120876][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.158780][ T8954] loop3: p2 p3 [ 173.166989][ T8954] loop3: p3 size 196608 extends beyond EOD, truncated [ 173.282677][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 173.291640][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 173.309694][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 173.309876][ T8965] loop2: detected capacity change from 0 to 128 [ 173.338804][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 173.370555][ T8968] siw: device registration error -23 [ 173.539180][ T8975] bond2: option primary_reselect: invalid value (4) [ 173.557305][ T8975] bond2 (unregistering): Released all slaves [ 173.663323][ T8983] syzkaller0: entered promiscuous mode [ 173.668882][ T8983] syzkaller0: entered allmulticast mode [ 173.689852][ T8985] loop3: detected capacity change from 0 to 128 [ 173.819673][ T8990] loop1: detected capacity change from 0 to 2048 [ 173.833984][ T8990] EXT4-fs: Ignoring removed bh option [ 173.879277][ T8990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.905152][ T8990] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.937073][ T8990] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 173.949363][ T8990] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.949363][ T8990] [ 173.958995][ T8990] EXT4-fs (loop1): Total free blocks count 0 [ 173.965007][ T8990] EXT4-fs (loop1): Free/Dirty block details [ 173.970942][ T8990] EXT4-fs (loop1): free_blocks=2415919104 [ 173.976655][ T8990] EXT4-fs (loop1): dirty_blocks=32 [ 173.981775][ T8990] EXT4-fs (loop1): Block reservation details [ 173.987805][ T8990] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 174.099184][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 174.112288][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.184720][ T8998] loop1: detected capacity change from 0 to 2048 [ 174.208594][ T6444] Buffer I/O error on dev loop2, logical block 408, lost async page write [ 174.216955][ T8998] EXT4-fs: Ignoring removed bh option [ 174.236701][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1771'. [ 174.238816][ T8998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.296903][ T8998] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.349005][ T9008] xt_hashlimit: max too large, truncated to 1048576 [ 174.368520][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 174.377401][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 174.388354][ T8998] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 174.400636][ T8998] EXT4-fs (loop1): This should not happen!! Data will be lost [ 174.400636][ T8998] [ 174.410338][ T8998] EXT4-fs (loop1): Total free blocks count 0 [ 174.416307][ T8998] EXT4-fs (loop1): Free/Dirty block details [ 174.422218][ T8998] EXT4-fs (loop1): free_blocks=2415919104 [ 174.428008][ T8998] EXT4-fs (loop1): dirty_blocks=32 [ 174.433143][ T8998] EXT4-fs (loop1): Block reservation details [ 174.439134][ T8998] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 174.445852][ T9008] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.590604][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.732029][ T9021] syzkaller0: entered promiscuous mode [ 174.737517][ T9021] syzkaller0: entered allmulticast mode [ 174.926961][ T9029] loop0: detected capacity change from 0 to 512 [ 174.954320][ T9029] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1780: couldn't read orphan inode 26 (err -116) [ 174.993109][ T9029] EXT4-fs (loop0): Remounting filesystem read-only [ 175.013147][ T9029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.057338][ T9029] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.129460][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.143239][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 175.143253][ T29] audit: type=1326 audit(1762242708.825:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.172869][ T29] audit: type=1326 audit(1762242708.825:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.182953][ T9035] tipc: Enabling of bearer rejected, already enabled [ 175.258229][ T29] audit: type=1326 audit(1762242708.855:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.281726][ T29] audit: type=1326 audit(1762242708.855:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.305336][ T29] audit: type=1326 audit(1762242708.855:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.328817][ T29] audit: type=1326 audit(1762242708.855:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.352343][ T29] audit: type=1326 audit(1762242708.855:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.375925][ T29] audit: type=1326 audit(1762242708.855:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.399304][ T29] audit: type=1326 audit(1762242708.855:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.422748][ T29] audit: type=1326 audit(1762242708.855:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 175.476937][ T9046] tipc: Enabling of bearer rejected, already enabled [ 175.513238][ T9048] loop1: detected capacity change from 0 to 2048 [ 175.523935][ T9050] __nla_validate_parse: 5 callbacks suppressed [ 175.523949][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 175.538974][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 175.548178][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 175.576200][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.595852][ T9056] syzkaller0: entered promiscuous mode [ 175.601336][ T9056] syzkaller0: entered allmulticast mode [ 175.608301][ T9048] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.673685][ T9061] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 175.856694][ T9062] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1787: bg 0: block 345: padding at end of block bitmap is not set [ 175.872104][ T9062] EXT4-fs (loop1): Remounting filesystem read-only [ 175.878790][ T6444] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 175.906033][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 175.961168][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.070760][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 176.164209][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 176.173113][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 176.182169][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 176.209553][ T9095] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 176.211043][ T9077] siw: device registration error -23 [ 176.224936][ T9095] bond0: (slave dummy0): Releasing backup interface [ 176.240160][ T9095] team0: Port device dummy0 added [ 176.248366][ T9095] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 176.261407][ T9095] team0: Port device dummy0 removed [ 176.269506][ T9095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.296393][ T9097] loop4: detected capacity change from 0 to 128 [ 176.366000][ T9097] bio_check_eod: 42572 callbacks suppressed [ 176.366016][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.366016][ T9097] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 176.406520][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.406520][ T9097] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 176.426991][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.426991][ T9097] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 176.440959][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.440959][ T9097] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 176.454647][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.454647][ T9097] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 176.495007][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.495007][ T9097] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 176.518065][ T9102] loop3: detected capacity change from 0 to 2048 [ 176.524674][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.524674][ T9097] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 176.540300][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.540300][ T9097] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 176.554248][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.554248][ T9097] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 176.568634][ T9102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.580904][ T9102] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.591761][ T9097] syz.4.1805: attempt to access beyond end of device [ 176.591761][ T9097] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 176.604449][ T9110] loop2: detected capacity change from 0 to 512 [ 176.630046][ T9110] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1809: couldn't read orphan inode 26 (err -116) [ 176.655007][ T9110] EXT4-fs (loop2): Remounting filesystem read-only [ 176.668443][ T9110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.694855][ T9110] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.719739][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.836592][ T9113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1807: bg 0: block 345: padding at end of block bitmap is not set [ 176.851164][ T9113] EXT4-fs (loop3): Remounting filesystem read-only [ 176.857725][ T6444] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 176.943641][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.971180][ T9125] loop3: detected capacity change from 0 to 512 [ 176.987706][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 176.998621][ T9125] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1814: couldn't read orphan inode 26 (err -116) [ 177.011003][ T9125] EXT4-fs (loop3): Remounting filesystem read-only [ 177.019611][ T9125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.033997][ T9125] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.055243][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.078870][ T9135] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 177.091189][ T9135] bond0: (slave dummy0): Releasing backup interface [ 177.094548][ T9137] loop1: detected capacity change from 0 to 128 [ 177.106624][ T9135] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 177.115764][ T9135] team0: Failed to send options change via netlink (err -105) [ 177.123380][ T9135] team0: Port device dummy0 added [ 177.138676][ T9138] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 177.148022][ T9138] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 177.163119][ T9138] team0: Failed to send options change via netlink (err -105) [ 177.170812][ T9140] loop4: detected capacity change from 0 to 128 [ 177.175236][ T9138] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 177.186874][ T9138] team0: Port device dummy0 removed [ 177.203841][ T9138] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.776401][ T9157] loop2: detected capacity change from 0 to 2048 [ 177.813462][ T9157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.855837][ T9157] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.935155][ T9161] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 177.991012][ T9161] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.082846][ T9170] loop1: detected capacity change from 0 to 512 [ 178.105424][ T9170] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1828: couldn't read orphan inode 26 (err -116) [ 178.119695][ T9175] loop4: detected capacity change from 0 to 128 [ 178.140436][ T9170] EXT4-fs (loop1): Remounting filesystem read-only [ 178.162040][ T9170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.201676][ T9162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1824: bg 0: block 345: padding at end of block bitmap is not set [ 178.202126][ T9170] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.228477][ T9162] EXT4-fs (loop2): Remounting filesystem read-only [ 178.235085][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 178.274470][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.295883][ T9186] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:21 [ 178.304866][ T9185] xt_hashlimit: max too large, truncated to 1048576 [ 178.305623][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 178.312664][ T9185] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.392772][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.461295][ T9193] loop2: detected capacity change from 0 to 512 [ 178.469561][ T9193] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1834: EA inode hash validation failed [ 178.482431][ T9193] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1834: corrupted inode contents [ 178.494886][ T9193] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.1834: mark_inode_dirty error [ 178.506429][ T9193] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1834: corrupted inode contents [ 178.518501][ T9193] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1834: mark_inode_dirty error [ 178.530747][ T9193] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1834: mark inode dirty (error -117) [ 178.543618][ T9193] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 178.553048][ T9193] EXT4-fs (loop2): 1 orphan inode deleted [ 178.559948][ T9193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.585261][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.723074][ T9197] l2tp_ppp: sess 2/0: no socket in recv [ 178.776823][ T9200] loop2: detected capacity change from 0 to 128 [ 178.927101][ T9203] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 179.066667][ T9212] loop4: detected capacity change from 0 to 128 [ 179.733741][ T9223] loop3: detected capacity change from 0 to 512 [ 179.769602][ T9223] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1844: couldn't read orphan inode 26 (err -116) [ 179.824471][ T9223] EXT4-fs (loop3): Remounting filesystem read-only [ 179.836881][ T9223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.882801][ T9223] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.946040][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.971789][ T9238] loop4: detected capacity change from 0 to 128 [ 180.004453][ T9241] syzkaller0: entered promiscuous mode [ 180.009960][ T9241] syzkaller0: entered allmulticast mode [ 180.229110][ T9254] loop3: detected capacity change from 0 to 1024 [ 180.256057][ T9254] EXT4-fs: Ignoring removed nobh option [ 180.268006][ T9254] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.268686][ T9249] siw: device registration error -23 [ 180.300809][ T9254] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.348272][ T9254] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1854: couldn't read orphan inode 11 (err -117) [ 180.368814][ T9254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.400559][ T9254] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1854: Invalid block bitmap block 0 in block_group 0 [ 180.436270][ T9254] __quota_error: 197 callbacks suppressed [ 180.436282][ T9254] Quota error (device loop3): write_blk: dquota write failed [ 180.449418][ T9254] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 180.490450][ T9254] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1854: Failed to acquire dquot type 0 [ 180.673994][ T9270] __nla_validate_parse: 3 callbacks suppressed [ 180.674009][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 180.874386][ T9277] syzkaller0: entered promiscuous mode [ 180.879995][ T9277] syzkaller0: entered allmulticast mode [ 181.001633][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 181.130984][ T9295] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 181.164719][ T9295] netlink: 'syz.4.1869': attribute type 10 has an invalid length. [ 181.182329][ T9293] loop2: detected capacity change from 0 to 512 [ 181.194628][ T9295] bond0: (slave dummy0): Releasing backup interface [ 181.209430][ T9293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.215582][ T9299] netlink: 'syz.4.1869': attribute type 10 has an invalid length. [ 181.240329][ T9295] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.258900][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.270764][ T9295] team0: Failed to send options change via netlink (err -105) [ 181.278248][ T9295] team0: Port device dummy0 added [ 181.312498][ T9299] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.345383][ T9299] team0: Failed to send options change via netlink (err -105) [ 181.371043][ T9299] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.405462][ T9299] team0: Port device dummy0 removed [ 181.434201][ T9299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.496663][ T9309] loop2: detected capacity change from 0 to 128 [ 181.527870][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 181.607617][ T9314] bio_check_eod: 42079 callbacks suppressed [ 181.607631][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.607631][ T9314] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 181.639513][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 181.648398][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 181.671062][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 181.674487][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.674487][ T9314] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 181.720048][ T9319] syzkaller0: entered promiscuous mode [ 181.725530][ T9319] syzkaller0: entered allmulticast mode [ 181.745584][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.745584][ T9314] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 181.779425][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.779425][ T9314] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 181.813324][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.813324][ T9314] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 181.847207][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.847207][ T9314] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 181.848550][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 181.865288][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.865288][ T9314] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 181.901776][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.901776][ T9314] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 181.929854][ T29] audit: type=1326 audit(1762242715.615:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 181.944344][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.944344][ T9314] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 181.953246][ T29] audit: type=1326 audit(1762242715.615:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 181.989250][ T9314] syz.2.1873: attempt to access beyond end of device [ 181.989250][ T9314] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 182.078215][ T29] audit: type=1326 audit(1762242715.615:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.101570][ T29] audit: type=1326 audit(1762242715.615:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.125117][ T29] audit: type=1326 audit(1762242715.615:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.148552][ T29] audit: type=1326 audit(1762242715.615:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.171923][ T29] audit: type=1326 audit(1762242715.615:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.195409][ T29] audit: type=1326 audit(1762242715.615:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.1.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52286ef6c9 code=0x7ffc0000 [ 182.387043][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 182.584476][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 182.615230][ T9368] tipc: Enabling of bearer rejected, already enabled [ 182.710196][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1896'. [ 182.853296][ T9380] veth0_macvtap: left promiscuous mode [ 184.366367][ T9412] loop4: detected capacity change from 0 to 32768 [ 184.398305][ T9412] loop4: p2 p3 [ 184.404458][ T9412] loop4: p3 size 196608 extends beyond EOD, truncated [ 184.546908][ T9424] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 184.574805][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.592610][ T9424] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 184.623730][ T9424] bond0: (slave dummy0): Releasing backup interface [ 184.642155][ T9424] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.643585][ T9433] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 184.658962][ T9424] team0: Failed to send options change via netlink (err -105) [ 184.666429][ T9424] team0: Port device dummy0 added [ 184.678603][ T9433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.692898][ T9433] team0: Failed to send options change via netlink (err -105) [ 184.701874][ T9433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.710972][ T9433] team0: Port device dummy0 removed [ 184.718553][ T9433] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.058637][ T9441] tipc: Enabling of bearer rejected, already enabled [ 185.279412][ T9447] xt_hashlimit: max too large, truncated to 1048576 [ 185.299278][ T9447] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 185.312479][ T9431] syz.2.1915 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 185.326647][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.2.1915 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.326681][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.326694][ T9431] Call Trace: [ 185.326778][ T9431] [ 185.326784][ T9431] __dump_stack+0x1d/0x30 [ 185.326811][ T9431] dump_stack_lvl+0xe8/0x140 [ 185.326891][ T9431] dump_stack+0x15/0x1b [ 185.326911][ T9431] dump_header+0x81/0x220 [ 185.326928][ T9431] oom_kill_process+0x342/0x400 [ 185.326962][ T9431] out_of_memory+0x979/0xb80 [ 185.327053][ T9431] try_charge_memcg+0x610/0xa10 [ 185.327090][ T9431] obj_cgroup_charge_pages+0xa6/0x150 [ 185.327114][ T9431] __memcg_kmem_charge_page+0x9f/0x170 [ 185.327139][ T9431] __alloc_frozen_pages_noprof+0x188/0x360 [ 185.327236][ T9431] alloc_pages_mpol+0xb3/0x260 [ 185.327261][ T9431] alloc_pages_noprof+0x90/0x130 [ 185.327285][ T9431] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 185.327331][ T9431] __kvmalloc_node_noprof+0x483/0x670 [ 185.327434][ T9431] ? ip_set_alloc+0x24/0x30 [ 185.327465][ T9431] ? ip_set_alloc+0x24/0x30 [ 185.327498][ T9431] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 185.327563][ T9431] ip_set_alloc+0x24/0x30 [ 185.327595][ T9431] hash_netiface_create+0x282/0x740 [ 185.327714][ T9431] ? __pfx_hash_netiface_create+0x10/0x10 [ 185.327751][ T9431] ip_set_create+0x3cc/0x970 [ 185.327782][ T9431] ? __nla_parse+0x40/0x60 [ 185.327804][ T9431] nfnetlink_rcv_msg+0x4c6/0x590 [ 185.327914][ T9431] netlink_rcv_skb+0x123/0x220 [ 185.327990][ T9431] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.328067][ T9431] nfnetlink_rcv+0x167/0x16c0 [ 185.328114][ T9431] ? kmem_cache_free+0xe4/0x3d0 [ 185.328148][ T9431] ? __kfree_skb+0x109/0x150 [ 185.328235][ T9431] ? nlmon_xmit+0x4f/0x60 [ 185.328262][ T9431] ? consume_skb+0x49/0x150 [ 185.328295][ T9431] ? nlmon_xmit+0x4f/0x60 [ 185.328340][ T9431] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 185.328396][ T9431] ? __dev_queue_xmit+0x1200/0x2000 [ 185.328432][ T9431] ? __dev_queue_xmit+0x182/0x2000 [ 185.328463][ T9431] ? kmem_cache_free+0x286/0x3d0 [ 185.328559][ T9431] ? ref_tracker_free+0x37d/0x3e0 [ 185.328603][ T9431] ? __netlink_deliver_tap+0x4dc/0x500 [ 185.328638][ T9431] netlink_unicast+0x5c0/0x690 [ 185.328735][ T9431] netlink_sendmsg+0x58b/0x6b0 [ 185.328759][ T9431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.328781][ T9431] __sock_sendmsg+0x145/0x180 [ 185.328808][ T9431] ____sys_sendmsg+0x31e/0x4e0 [ 185.328854][ T9431] ___sys_sendmsg+0x17b/0x1d0 [ 185.328884][ T9431] __x64_sys_sendmsg+0xd4/0x160 [ 185.328910][ T9431] x64_sys_call+0x191e/0x3000 [ 185.328944][ T9431] do_syscall_64+0xd2/0x200 [ 185.328961][ T9431] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.328987][ T9431] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.329087][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.329142][ T9431] RIP: 0033:0x7fc6ddfdf6c9 [ 185.329164][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.329181][ T9431] RSP: 002b:00007fc6dca3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.329199][ T9431] RAX: ffffffffffffffda RBX: 00007fc6de235fa0 RCX: 00007fc6ddfdf6c9 [ 185.329211][ T9431] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 185.329222][ T9431] RBP: 00007fc6de061f91 R08: 0000000000000000 R09: 0000000000000000 [ 185.329271][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.329285][ T9431] R13: 00007fc6de236038 R14: 00007fc6de235fa0 R15: 00007ffca016ad88 [ 185.329304][ T9431] [ 185.670916][ T9431] memory: usage 307200kB, limit 307200kB, failcnt 1878 [ 185.677774][ T9431] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 185.685719][ T9431] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 185.693043][ T9431] Memory cgroup stats for /syz2: [ 185.733148][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 185.733166][ T29] audit: type=1326 audit(1762242719.405:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 185.818161][ T29] audit: type=1326 audit(1762242719.445:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 185.894874][ T9431] cache 0 [ 185.897814][ T9431] rss 0 [ 185.900604][ T9431] shmem 0 [ 185.903532][ T9431] mapped_file 0 [ 185.907018][ T9431] dirty 0 [ 185.909950][ T9431] writeback 0 [ 185.913219][ T9431] workingset_refault_anon 859 [ 185.917872][ T9431] workingset_refault_file 5322 [ 185.922695][ T9431] swap 401408 [ 185.925968][ T9431] swapcached 4096 [ 185.929650][ T9431] pgpgin 255738 [ 185.933181][ T9431] pgpgout 255735 [ 185.933628][ T29] audit: type=1400 audit(1762242719.615:6431): avc: denied { name_connect } for pid=9452 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 185.936720][ T9431] pgfault 168374 [ 185.936728][ T9431] pgmajfault 219 [ 185.936735][ T9431] inactive_anon 4096 [ 185.936743][ T9431] active_anon 0 [ 185.936749][ T9431] inactive_file 8192 [ 185.936755][ T9431] active_file 0 [ 185.936800][ T9431] unevictable 0 [ 185.936806][ T9431] hierarchical_memory_limit 314572800 [ 185.961349][ T9454] __nla_validate_parse: 1 callbacks suppressed [ 185.961362][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'. [ 185.964053][ T9431] hierarchical_memsw_limit 9223372036854771712 [ 185.994714][ T29] audit: type=1400 audit(1762242719.645:6432): avc: denied { accept } for pid=9452 comm="syz.0.1921" lport=54576 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.002569][ T9431] total_cache 0 [ 186.002578][ T9431] total_rss 0 [ 186.002585][ T9431] total_shmem 0 [ 186.002592][ T9431] total_mapped_file 0 [ 186.008746][ T29] audit: type=1400 audit(1762242719.645:6433): avc: denied { setopt } for pid=9452 comm="syz.0.1921" lport=54576 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 186.031625][ T9431] total_dirty 0 [ 186.031635][ T9431] total_writeback 0 [ 186.035067][ T29] audit: type=1400 audit(1762242719.645:6434): avc: denied { write } for pid=9452 comm="syz.0.1921" lport=54576 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 186.038414][ T9431] total_workingset_refault_anon 859 [ 186.041848][ T29] audit: type=1326 audit(1762242719.655:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 186.045797][ T9431] total_workingset_refault_file 5322 [ 186.045885][ T9431] total_swap 401408 [ 186.069331][ T29] audit: type=1326 audit(1762242719.655:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 186.072764][ T9431] total_swapcached 4096 [ 186.072773][ T9431] total_pgpgin 255738 [ 186.076617][ T29] audit: type=1326 audit(1762242719.655:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 186.100034][ T9431] total_pgpgout 255735 [ 186.100044][ T9431] total_pgfault 168374 [ 186.100051][ T9431] total_pgmajfault 219 [ 186.100058][ T9431] total_inactive_anon 4096 [ 186.105287][ T29] audit: type=1326 audit(1762242719.655:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 186.128617][ T9431] total_active_anon 0 [ 186.128627][ T9431] total_inactive_file 8192 [ 186.240843][ T9431] total_active_file 0 [ 186.244809][ T9431] total_unevictable 0 [ 186.248791][ T9431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1915,pid=9430,uid=0 [ 186.263437][ T9431] Memory cgroup out of memory: Killed process 9430 (syz.2.1915) total-vm:93960kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 186.379689][ T9463] loop4: detected capacity change from 0 to 128 [ 186.618175][ T9474] bio_check_eod: 547 callbacks suppressed [ 186.623973][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.623973][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.658807][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.658807][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.688560][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.688560][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.718575][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.718575][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.749532][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.749532][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.772038][ T9479] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 186.791294][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.791294][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.812392][ T9479] bond0: (slave dummy0): Releasing backup interface [ 186.828425][ T9482] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 186.833561][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.833561][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.850521][ T9479] dummy0: left promiscuous mode [ 186.860766][ T9479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.882063][ T9479] team0: Failed to send options change via netlink (err -105) [ 186.889598][ T9479] team0: Port device dummy0 added [ 186.901491][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.901491][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.926981][ T9482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.935482][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.935482][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 186.964630][ T9482] team0: Failed to send options change via netlink (err -105) [ 186.966373][ T9474] syz.4.1924: attempt to access beyond end of device [ 186.966373][ T9474] loop4: rw=0, sector=313, nr_sectors = 8 limit=128 [ 187.000332][ T9482] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 187.019244][ T9482] team0: Port device dummy0 removed [ 187.033092][ T9482] dummy0: entered promiscuous mode [ 187.044872][ T9482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.158494][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 187.407112][ T9507] syzkaller0: entered promiscuous mode [ 187.412640][ T9507] syzkaller0: entered allmulticast mode [ 187.560390][ T9515] xt_hashlimit: max too large, truncated to 1048576 [ 187.567602][ T9515] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 189.517860][ T9555] netlink: 'syz.3.1951': attribute type 12 has an invalid length. [ 189.525781][ T9555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1951'. [ 189.556491][ T9554] netlink: 'syz.3.1951': attribute type 12 has an invalid length. [ 189.564335][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1951'. [ 190.016777][ T9574] netlink: 'syz.0.1956': attribute type 10 has an invalid length. [ 190.025051][ T9574] bond0: (slave dummy0): Releasing backup interface [ 190.033497][ T9574] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.042267][ T9574] team0: Failed to send options change via netlink (err -105) [ 190.049734][ T9574] team0: Port device dummy0 added [ 190.055853][ T9574] netlink: 'syz.0.1956': attribute type 10 has an invalid length. [ 190.064099][ T9574] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.074193][ T9574] team0: Failed to send options change via netlink (err -105) [ 190.081670][ T9574] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.090569][ T9574] team0: Port device dummy0 removed [ 190.098022][ T9574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.112098][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 190.121525][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 190.347125][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 190.402094][ T9599] netlink: 'syz.1.1967': attribute type 2 has an invalid length. [ 190.565630][ T9602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=9602 comm=syz.1.1969 [ 190.980404][ T9657] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1990'. [ 191.027119][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 191.027133][ T29] audit: type=1326 audit(1762242724.705:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.056701][ T29] audit: type=1326 audit(1762242724.705:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.085514][ T29] audit: type=1326 audit(1762242724.705:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.109053][ T29] audit: type=1326 audit(1762242724.705:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.132649][ T29] audit: type=1326 audit(1762242724.705:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.156244][ T29] audit: type=1326 audit(1762242724.705:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.179685][ T29] audit: type=1326 audit(1762242724.705:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.203093][ T29] audit: type=1326 audit(1762242724.705:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.226383][ T29] audit: type=1326 audit(1762242724.705:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.249895][ T29] audit: type=1326 audit(1762242724.705:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.0.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 191.352708][ T9673] netlink: 'syz.1.1995': attribute type 10 has an invalid length. [ 191.369391][ T9673] bond0: (slave dummy0): Releasing backup interface [ 191.389070][ T9673] netlink: 'syz.1.1995': attribute type 10 has an invalid length. [ 191.400407][ T9673] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.479437][ T9685] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 191.528793][ T9691] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2003'. [ 191.578497][ T9696] syzkaller0: entered promiscuous mode [ 191.584052][ T9696] syzkaller0: entered allmulticast mode [ 191.621394][ T9700] FAULT_INJECTION: forcing a failure. [ 191.621394][ T9700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.634560][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.3.2006 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.634615][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.634629][ T9700] Call Trace: [ 191.634635][ T9700] [ 191.634641][ T9700] __dump_stack+0x1d/0x30 [ 191.634662][ T9700] dump_stack_lvl+0xe8/0x140 [ 191.634680][ T9700] dump_stack+0x15/0x1b [ 191.634696][ T9700] should_fail_ex+0x265/0x280 [ 191.634775][ T9700] should_fail+0xb/0x20 [ 191.634793][ T9700] should_fail_usercopy+0x1a/0x20 [ 191.634818][ T9700] _copy_to_user+0x20/0xa0 [ 191.634848][ T9700] simple_read_from_buffer+0xb5/0x130 [ 191.634909][ T9700] proc_fail_nth_read+0x10e/0x150 [ 191.634937][ T9700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.635028][ T9700] vfs_read+0x1a8/0x770 [ 191.635050][ T9700] ? __rcu_read_unlock+0x4f/0x70 [ 191.635074][ T9700] ? __fget_files+0x184/0x1c0 [ 191.635162][ T9700] ksys_read+0xda/0x1a0 [ 191.635185][ T9700] __x64_sys_read+0x40/0x50 [ 191.635271][ T9700] x64_sys_call+0x27c0/0x3000 [ 191.635296][ T9700] do_syscall_64+0xd2/0x200 [ 191.635318][ T9700] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.635343][ T9700] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.635395][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.635419][ T9700] RIP: 0033:0x7f8c8fa8e0dc [ 191.635435][ T9700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.635488][ T9700] RSP: 002b:00007f8c8e4f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.635509][ T9700] RAX: ffffffffffffffda RBX: 00007f8c8fce5fa0 RCX: 00007f8c8fa8e0dc [ 191.635524][ T9700] RDX: 000000000000000f RSI: 00007f8c8e4f70a0 RDI: 0000000000000003 [ 191.635538][ T9700] RBP: 00007f8c8e4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.635552][ T9700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.635644][ T9700] R13: 00007f8c8fce6038 R14: 00007f8c8fce5fa0 R15: 00007fffcb4e4328 [ 191.635665][ T9700] [ 191.874856][ T9704] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 191.887795][ T9704] bond0: (slave dummy0): Releasing backup interface [ 191.900216][ T9704] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 191.919435][ T9704] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.052813][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 192.448712][ T9737] syzkaller0: entered promiscuous mode [ 192.454215][ T9737] syzkaller0: entered allmulticast mode [ 192.579031][ T9741] netlink: 'syz.0.2019': attribute type 2 has an invalid length. [ 193.074426][ T9768] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 193.868074][ T9812] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2040'. [ 193.957833][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 194.024197][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 194.161260][ T9826] bond1: option primary_reselect: invalid value (4) [ 194.193390][ T9826] bond1 (unregistering): Released all slaves [ 194.444115][ T9844] 9pnet_fd: Insufficient options for proto=fd [ 195.404463][ T9874] validate_nla: 1 callbacks suppressed [ 195.404520][ T9874] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 195.420444][ T9874] bond0: (slave dummy0): Releasing backup interface [ 195.429503][ T9874] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.438430][ T9874] team0: Failed to send options change via netlink (err -105) [ 195.445934][ T9874] team0: Port device dummy0 added [ 195.471730][ T9876] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 195.488742][ T9876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.513963][ T9876] team0: Failed to send options change via netlink (err -105) [ 195.524762][ T9876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.548369][ T9876] team0: Port device dummy0 removed [ 195.555952][ T9876] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.684794][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 195.725538][ T9898] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 195.744728][ T9898] bond0: (slave dummy0): Releasing backup interface [ 195.761088][ T9898] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.776452][ T9904] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 195.779337][ T9898] team0: Failed to send options change via netlink (err -105) [ 195.791839][ T9898] team0: Port device dummy0 added [ 195.836663][ T9904] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.860351][ T9904] team0: Failed to send options change via netlink (err -105) [ 195.867955][ T9904] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.877046][ T9904] team0: Port device dummy0 removed [ 195.887262][ T9904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.050688][ T9914] bond2: option primary_reselect: invalid value (4) [ 196.066582][ T9914] bond2 (unregistering): Released all slaves [ 196.201062][ T9931] tipc: Enabling of bearer rejected, already enabled [ 196.656449][ T9943] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 196.675882][ T9943] bond0: (slave dummy0): Releasing backup interface [ 196.688800][ T9943] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 196.705184][ T9943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.731487][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 196.731501][ T29] audit: type=1400 audit(1762242730.415:6664): avc: denied { open } for pid=9944 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 196.772322][ T29] audit: type=1400 audit(1762242730.415:6665): avc: denied { perfmon } for pid=9944 comm="syz.2.2088" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.793248][ T29] audit: type=1400 audit(1762242730.415:6666): avc: denied { kernel } for pid=9944 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 196.812641][ T29] audit: type=1400 audit(1762242730.415:6667): avc: denied { tracepoint } for pid=9944 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 196.904687][ T29] audit: type=1400 audit(1762242730.455:6668): avc: denied { prog_load } for pid=9944 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.923784][ T29] audit: type=1400 audit(1762242730.455:6669): avc: denied { bpf } for pid=9944 comm="syz.2.2088" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.944321][ T29] audit: type=1400 audit(1762242730.465:6670): avc: denied { prog_run } for pid=9944 comm="syz.2.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.963280][ T29] audit: type=1400 audit(1762242730.495:6671): avc: denied { create } for pid=9946 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.983461][ T29] audit: type=1400 audit(1762242730.515:6672): avc: denied { execmem } for pid=9946 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 197.063548][ T9951] siw: device registration error -23 [ 197.119227][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 197.129028][ T29] audit: type=1326 audit(1762242730.625:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.2.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ddfdf6c9 code=0x7ffc0000 [ 197.913803][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2103'. [ 197.932718][ T9986] IPVS: Error connecting to the multicast addr [ 198.350032][T10017] siw: device registration error -23 [ 198.557370][T10041] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 198.695201][T10052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2127'. [ 198.706124][T10052] 9pnet_fd: Insufficient options for proto=fd [ 198.800239][T10055] FAULT_INJECTION: forcing a failure. [ 198.800239][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 198.812969][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.4.2128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.812998][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.813012][T10055] Call Trace: [ 198.813018][T10055] [ 198.813025][T10055] __dump_stack+0x1d/0x30 [ 198.813108][T10055] dump_stack_lvl+0xe8/0x140 [ 198.813129][T10055] dump_stack+0x15/0x1b [ 198.813149][T10055] should_fail_ex+0x265/0x280 [ 198.813177][T10055] should_failslab+0x8c/0xb0 [ 198.813204][T10055] kmem_cache_alloc_noprof+0x50/0x480 [ 198.813242][T10055] ? alloc_empty_file+0x76/0x200 [ 198.813263][T10055] alloc_empty_file+0x76/0x200 [ 198.813280][T10055] alloc_file_pseudo+0xc6/0x160 [ 198.813299][T10055] __shmem_file_setup+0x1de/0x210 [ 198.813318][T10055] shmem_file_setup+0x3b/0x50 [ 198.813400][T10055] __se_sys_memfd_create+0x2c3/0x590 [ 198.813424][T10055] __x64_sys_memfd_create+0x31/0x40 [ 198.813500][T10055] x64_sys_call+0x2ac2/0x3000 [ 198.813521][T10055] do_syscall_64+0xd2/0x200 [ 198.813572][T10055] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.813609][T10055] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 198.813638][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.813706][T10055] RIP: 0033:0x7f5539c4f6c9 [ 198.813722][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.813743][T10055] RSP: 002b:00007f55386aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 198.813831][T10055] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f5539c4f6c9 [ 198.813843][T10055] RDX: 00007f55386aeef0 RSI: 0000000000000000 RDI: 00007f5539cd2960 [ 198.813931][T10055] RBP: 0000200000001100 R08: 00007f55386aebb7 R09: 00007f55386aee40 [ 198.813943][T10055] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 198.813955][T10055] R13: 00007f55386aeef0 R14: 00007f55386aeeb0 R15: 0000200000000600 [ 198.813975][T10055] [ 199.405985][T10092] siw: device registration error -23 [ 199.528690][T10107] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 199.555747][T10107] bond0: (slave dummy0): Releasing backup interface [ 199.588660][T10113] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 199.588898][T10107] dummy0: left promiscuous mode [ 199.633197][T10107] team0: Port device dummy0 added [ 199.651188][T10113] team0: Port device dummy0 removed [ 199.664768][T10113] dummy0: entered promiscuous mode [ 199.676704][T10113] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.735795][T10125] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 200.387625][T10144] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 200.404200][T10149] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.416406][T10144] bond0: (slave dummy0): Releasing backup interface [ 200.416899][T10149] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 200.433128][T10144] team0: Port device dummy0 added [ 200.448314][T10150] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 200.456518][T10149] bond0: (slave dummy0): Releasing backup interface [ 200.465352][T10149] team0: Port device dummy0 added [ 200.470816][T10151] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 200.481217][T10150] team0: Port device dummy0 removed [ 200.489732][T10150] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 200.501715][T10151] team0: Port device dummy0 removed [ 200.509259][T10151] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 200.620086][T10137] syz.3.2161 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 200.634287][T10137] CPU: 1 UID: 0 PID: 10137 Comm: syz.3.2161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.634394][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.634408][T10137] Call Trace: [ 200.634415][T10137] [ 200.634422][T10137] __dump_stack+0x1d/0x30 [ 200.634448][T10137] dump_stack_lvl+0xe8/0x140 [ 200.634466][T10137] dump_stack+0x15/0x1b [ 200.634504][T10137] dump_header+0x81/0x220 [ 200.634534][T10137] oom_kill_process+0x342/0x400 [ 200.634570][T10137] out_of_memory+0x979/0xb80 [ 200.634617][T10137] try_charge_memcg+0x610/0xa10 [ 200.634687][T10137] obj_cgroup_charge_pages+0xa6/0x150 [ 200.634719][T10137] __memcg_kmem_charge_page+0x9f/0x170 [ 200.634862][T10137] __alloc_frozen_pages_noprof+0x188/0x360 [ 200.634883][T10137] alloc_pages_mpol+0xb3/0x260 [ 200.634908][T10137] alloc_pages_noprof+0x90/0x130 [ 200.634932][T10137] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 200.635015][T10137] __kvmalloc_node_noprof+0x483/0x670 [ 200.635114][T10137] ? ip_set_alloc+0x24/0x30 [ 200.635148][T10137] ? ip_set_alloc+0x24/0x30 [ 200.635180][T10137] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 200.635293][T10137] ip_set_alloc+0x24/0x30 [ 200.635419][T10137] hash_netiface_create+0x282/0x740 [ 200.635458][T10137] ? __pfx_hash_netiface_create+0x10/0x10 [ 200.635495][T10137] ip_set_create+0x3cc/0x970 [ 200.635519][T10137] ? __nla_parse+0x40/0x60 [ 200.635587][T10137] nfnetlink_rcv_msg+0x4c6/0x590 [ 200.635631][T10137] netlink_rcv_skb+0x123/0x220 [ 200.635731][T10137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.635765][T10137] nfnetlink_rcv+0x167/0x16c0 [ 200.635796][T10137] ? kmem_cache_free+0xe4/0x3d0 [ 200.635827][T10137] ? __kfree_skb+0x109/0x150 [ 200.635856][T10137] ? nlmon_xmit+0x4f/0x60 [ 200.635882][T10137] ? consume_skb+0x49/0x150 [ 200.635992][T10137] ? nlmon_xmit+0x4f/0x60 [ 200.636020][T10137] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 200.636056][T10137] ? __dev_queue_xmit+0x1200/0x2000 [ 200.636123][T10137] ? __dev_queue_xmit+0x182/0x2000 [ 200.636198][T10137] ? kmem_cache_free+0x286/0x3d0 [ 200.636301][T10137] ? ref_tracker_free+0x37d/0x3e0 [ 200.636350][T10137] ? __netlink_deliver_tap+0x4dc/0x500 [ 200.636429][T10137] netlink_unicast+0x5c0/0x690 [ 200.636466][T10137] netlink_sendmsg+0x58b/0x6b0 [ 200.636565][T10137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.636588][T10137] __sock_sendmsg+0x145/0x180 [ 200.636617][T10137] ____sys_sendmsg+0x31e/0x4e0 [ 200.636693][T10137] ___sys_sendmsg+0x17b/0x1d0 [ 200.636727][T10137] __x64_sys_sendmsg+0xd4/0x160 [ 200.636751][T10137] x64_sys_call+0x191e/0x3000 [ 200.636809][T10137] do_syscall_64+0xd2/0x200 [ 200.636827][T10137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 200.636853][T10137] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 200.636927][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.636948][T10137] RIP: 0033:0x7f8c8fa8f6c9 [ 200.636962][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.636979][T10137] RSP: 002b:00007f8c8e4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.637081][T10137] RAX: ffffffffffffffda RBX: 00007f8c8fce5fa0 RCX: 00007f8c8fa8f6c9 [ 200.637099][T10137] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 200.637114][T10137] RBP: 00007f8c8fb11f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.637182][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.637239][T10137] R13: 00007f8c8fce6038 R14: 00007f8c8fce5fa0 R15: 00007fffcb4e4328 [ 200.637261][T10137] [ 200.637268][T10137] memory: usage 307200kB, limit 307200kB, failcnt 631 [ 200.877209][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 200.878409][T10137] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 201.003891][T10137] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 201.011179][T10137] Memory cgroup stats for /syz3: [ 201.011573][T10137] cache 0 [ 201.019444][T10137] rss 0 [ 201.022196][T10137] shmem 0 [ 201.025115][T10137] mapped_file 0 [ 201.028586][T10137] dirty 0 [ 201.031505][T10137] writeback 0 [ 201.034780][T10137] workingset_refault_anon 5054 [ 201.039553][T10137] workingset_refault_file 10508 [ 201.044398][T10137] swap 368640 [ 201.047668][T10137] swapcached 12288 [ 201.051480][T10137] pgpgin 224084 [ 201.054992][T10137] pgpgout 224080 [ 201.058542][T10137] pgfault 180131 [ 201.062080][T10137] pgmajfault 915 [ 201.065722][T10137] inactive_anon 12288 [ 201.069718][T10137] active_anon 0 [ 201.073239][T10137] inactive_file 4096 [ 201.077177][T10137] active_file 0 [ 201.080648][T10137] unevictable 0 [ 201.084094][T10137] hierarchical_memory_limit 314572800 [ 201.089491][T10137] hierarchical_memsw_limit 9223372036854771712 [ 201.095624][T10137] total_cache 0 [ 201.099090][T10137] total_rss 0 [ 201.102361][T10137] total_shmem 0 [ 201.105800][T10137] total_mapped_file 0 [ 201.109922][T10137] total_dirty 0 [ 201.113365][T10137] total_writeback 0 [ 201.117156][T10137] total_workingset_refault_anon 5054 [ 201.122440][T10137] total_workingset_refault_file 10508 [ 201.127798][T10137] total_swap 368640 [ 201.131635][T10137] total_swapcached 12288 [ 201.135862][T10137] total_pgpgin 224084 [ 201.139844][T10137] total_pgpgout 224080 [ 201.143898][T10137] total_pgfault 180131 [ 201.147983][T10137] total_pgmajfault 915 [ 201.152046][T10137] total_inactive_anon 12288 [ 201.156595][T10137] total_active_anon 0 [ 201.160680][T10137] total_inactive_file 4096 [ 201.165137][T10137] total_active_file 0 [ 201.169172][T10137] total_unevictable 0 [ 201.173192][T10137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2161,pid=10136,uid=0 [ 201.188032][T10137] Memory cgroup out of memory: Killed process 10136 (syz.3.2161) total-vm:96008kB, anon-rss:1136kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 201.396180][T10191] netlink: 'syz.0.2179': attribute type 10 has an invalid length. [ 201.422482][T10191] bond0: (slave dummy0): Releasing backup interface [ 201.441816][T10191] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.450968][T10191] team0: Failed to send options change via netlink (err -105) [ 201.451574][T10202] netlink: 'syz.0.2179': attribute type 10 has an invalid length. [ 201.458437][T10191] team0: Port device dummy0 added [ 201.508078][T10201] bond2: option primary_reselect: invalid value (4) [ 201.521878][T10201] bond2 (unregistering): Released all slaves [ 201.550897][T10202] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.561532][T10202] team0: Failed to send options change via netlink (err -105) [ 201.569789][T10202] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.578901][T10202] team0: Port device dummy0 removed [ 201.588887][T10202] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.728717][T10221] veth0: entered promiscuous mode [ 201.740622][T10220] veth0: left promiscuous mode [ 201.768656][T10219] siw: device registration error -23 [ 201.781642][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 201.781656][ T29] audit: type=1326 audit(1762242735.465:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.811954][T10224] FAULT_INJECTION: forcing a failure. [ 201.811954][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 201.824603][T10224] CPU: 0 UID: 0 PID: 10224 Comm: syz.0.2191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.824712][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.824726][T10224] Call Trace: [ 201.824733][T10224] [ 201.824741][T10224] __dump_stack+0x1d/0x30 [ 201.824764][T10224] dump_stack_lvl+0xe8/0x140 [ 201.824783][T10224] dump_stack+0x15/0x1b [ 201.824799][T10224] should_fail_ex+0x265/0x280 [ 201.824849][T10224] should_failslab+0x8c/0xb0 [ 201.824896][T10224] kmem_cache_alloc_noprof+0x50/0x480 [ 201.824928][T10224] ? audit_log_start+0x342/0x720 [ 201.824996][T10224] audit_log_start+0x342/0x720 [ 201.825020][T10224] ? __account_obj_stock+0x211/0x350 [ 201.825052][T10224] audit_seccomp+0x48/0x100 [ 201.825084][T10224] ? __seccomp_filter+0x82d/0x1250 [ 201.825141][T10224] __seccomp_filter+0x83e/0x1250 [ 201.825188][T10224] __secure_computing+0x82/0x150 [ 201.825218][T10224] syscall_trace_enter+0xcf/0x1e0 [ 201.825319][T10224] do_syscall_64+0xac/0x200 [ 201.825341][T10224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.825371][T10224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 201.825400][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.825457][T10224] RIP: 0033:0x7f5fe266e0dc [ 201.825474][T10224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.825492][T10224] RSP: 002b:00007f5fe10cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.825511][T10224] RAX: ffffffffffffffda RBX: 00007f5fe28c5fa0 RCX: 00007f5fe266e0dc [ 201.825525][T10224] RDX: 000000000000000f RSI: 00007f5fe10cf0a0 RDI: 0000000000000006 [ 201.825604][T10224] RBP: 00007f5fe10cf090 R08: 0000000000000000 R09: 0000000000000000 [ 201.825618][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.825632][T10224] R13: 00007f5fe28c6038 R14: 00007f5fe28c5fa0 R15: 00007ffff786eb28 [ 201.825653][T10224] [ 201.825661][T10224] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 201.855823][ T29] audit: type=1326 audit(1762242735.465:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.856547][T10224] audit: out of memory in audit_log_start [ 201.861117][ T29] audit: type=1326 audit(1762242735.465:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.930148][T10217] ================================================================== [ 201.935796][ T29] audit: type=1326 audit(1762242735.465:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.941686][T10217] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 201.946089][ T29] audit: type=1326 audit(1762242735.465:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.965664][T10217] [ 201.965669][T10217] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 201.965686][T10217] tick_do_update_jiffies64+0x113/0x1c0 [ 201.974104][ T29] audit: type=1326 audit(1762242735.465:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.982030][T10217] tick_nohz_handler+0x7f/0x2d0 [ 201.990012][ T29] audit: type=1326 audit(1762242735.465:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 201.997938][T10217] __hrtimer_run_queues+0x20f/0x5a0 [ 202.005924][ T29] audit: type=1326 audit(1762242735.465:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe266f6c9 code=0x7ffc0000 [ 202.013841][T10217] hrtimer_interrupt+0x21a/0x460 [ 202.013884][T10217] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 202.248309][T10217] sysvec_apic_timer_interrupt+0x6f/0x80 [ 202.253943][T10217] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.259914][T10217] console_flush_all+0x51b/0x6a0 [ 202.264857][T10217] console_unlock+0xa1/0x2e0 [ 202.269434][T10217] vprintk_emit+0x3b5/0x580 [ 202.273925][T10217] vprintk_default+0x26/0x30 [ 202.278501][T10217] vprintk+0x1d/0x30 [ 202.282389][T10217] _printk+0x79/0xa0 [ 202.286280][T10217] kauditd_hold_skb+0x1b1/0x1c0 [ 202.291124][T10217] kauditd_send_queue+0x273/0x2c0 [ 202.296140][T10217] kauditd_thread+0x421/0x630 [ 202.300804][T10217] kthread+0x489/0x510 [ 202.304869][T10217] ret_from_fork+0x122/0x1b0 [ 202.309446][T10217] ret_from_fork_asm+0x1a/0x30 [ 202.314202][T10217] [ 202.316508][T10217] read to 0xffffffff868099c0 of 8 bytes by task 10217 on cpu 0: [ 202.324116][T10217] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 202.330354][T10217] count_shadow_nodes+0x6a/0x230 [ 202.335280][T10217] do_shrink_slab+0x63/0x680 [ 202.339865][T10217] shrink_slab+0x448/0x760 [ 202.344275][T10217] shrink_node+0x6c3/0x2120 [ 202.348768][T10217] do_try_to_free_pages+0x3f6/0xcd0 [ 202.353951][T10217] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 202.359835][T10217] try_charge_memcg+0x383/0xa10 [ 202.364675][T10217] obj_cgroup_charge_pages+0xa6/0x150 [ 202.370031][T10217] __memcg_kmem_charge_page+0x9f/0x170 [ 202.375476][T10217] __alloc_frozen_pages_noprof+0x188/0x360 [ 202.381263][T10217] alloc_pages_mpol+0xb3/0x260 [ 202.386012][T10217] alloc_pages_noprof+0x90/0x130 [ 202.390940][T10217] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 202.396745][T10217] __kvmalloc_node_noprof+0x483/0x670 [ 202.402117][T10217] ip_set_alloc+0x24/0x30 [ 202.406441][T10217] hash_netiface_create+0x282/0x740 [ 202.411633][T10217] ip_set_create+0x3cc/0x970 [ 202.416206][T10217] nfnetlink_rcv_msg+0x4c6/0x590 [ 202.421134][T10217] netlink_rcv_skb+0x123/0x220 [ 202.425893][T10217] nfnetlink_rcv+0x167/0x16c0 [ 202.430561][T10217] netlink_unicast+0x5c0/0x690 [ 202.435322][T10217] netlink_sendmsg+0x58b/0x6b0 [ 202.440075][T10217] __sock_sendmsg+0x145/0x180 [ 202.444743][T10217] ____sys_sendmsg+0x31e/0x4e0 [ 202.449505][T10217] ___sys_sendmsg+0x17b/0x1d0 [ 202.454175][T10217] __x64_sys_sendmsg+0xd4/0x160 [ 202.459019][T10217] x64_sys_call+0x191e/0x3000 [ 202.463685][T10217] do_syscall_64+0xd2/0x200 [ 202.468171][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.474057][T10217] [ 202.476365][T10217] value changed: 0x00000000ffffd987 -> 0x00000000ffffd988 [ 202.483454][T10217] [ 202.485758][T10217] Reported by Kernel Concurrency Sanitizer on: [ 202.491886][T10217] CPU: 0 UID: 0 PID: 10217 Comm: syz.4.2189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.501676][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.511720][T10217] ==================================================================