last executing test programs: 7.365098278s ago: executing program 4 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000001, 0xe}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) creat(0x0, 0x198) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 7.189173821s ago: executing program 4 (id=1599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7.141004831s ago: executing program 4 (id=1600): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000d589d15fdabd2780000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = timerfd_create(0x7, 0x0) timerfd_gettime(r8, &(0x7f0000001200)) r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) shutdown(r1, 0x0) clock_getres(0x9158dbb7b5d2d6d6, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 4.991572861s ago: executing program 2 (id=1625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 4.769317494s ago: executing program 2 (id=1627): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200000000", @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffefe, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000210003c3a00fe8000000000000000000000000000bbff020000000000000000000000000001010490780000000060e6863400002f00fc010000000000000000000000000000fe8000002d68000000000000000000aaad589e645ea437efa25f0026"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r4 = syz_genetlink_get_family_id$wireguard(0x0, r3) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000400000007020000f8ffffffb703000008000000b23cb7040000f66f63bb000000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='ext4_sync_file_exit\x00', r5, 0x0, 0x2000000008}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.663652837s ago: executing program 3 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.541195088s ago: executing program 3 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.540706908s ago: executing program 3 (id=1664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 1.473548789s ago: executing program 0 (id=1666): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x18000) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) r1 = open(&(0x7f0000000280)='./cgroup\x00', 0x210000, 0x7c42273793ca46ce) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0xffc6) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) r10 = socket(0x27, 0x5, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r11, 0x54, "737e1debecf2084a8b09a47cf5f1fb1881007a5532e05cc0c97429e98c03d997e027b5165484424dc508a295aebd6df908445b3cfb5ae2d4d4cea2fba1db1f5ed350a3d9bf9029654395c15847f5ec129c58bed9"}, &(0x7f0000000140)=0x5c) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "511e6b77e89ead1e", "18fabd446ce4d83d53b385d2bde82d9b", "ad888a1f", "0eaefdc642a864c4"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.467884439s ago: executing program 2 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) close_range(r3, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x801) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 1.289126482s ago: executing program 0 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180"], 0xb4}}, 0x20050800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 1.224611243s ago: executing program 0 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00810000000d00000000000007020000f8ffff000003000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r7}, 0x18) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27, 0x2}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000340), 0x11000) vmsplice(r9, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 1.184017273s ago: executing program 2 (id=1673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008a1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000800) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, 0x0, 0xf) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xf5, 0xf0, &(0x7f00000002c0)=""/240, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000200)=[r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x0, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x2, 0x8}, {0x5, 0x1, 0x1}, {0x3, 0x3, 0x8, 0x5}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x5d, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) 1.183492113s ago: executing program 3 (id=1674): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x81}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x200008, 0x8, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xfffd, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) 1.177366223s ago: executing program 1 (id=1675): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000a40867e13ef554766babe947d2d38f841ea28152c812939cc5541d9791d319c4a6ef562b59fa072cbba317e464ff55fcb3cb080366ba8b2f1397671dde38a76c87acd41a64331cd7b9"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, 0x0, &(0x7f0000000240)='%pi6 \x00'}, 0x20) r2 = socket$inet6(0xa, 0xa, 0x21) bind$inet6(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xa39}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', 0x0}) socket(0x29, 0x2, 0x0) socket$kcm(0x10, 0x7, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x2000000) 1.128140804s ago: executing program 3 (id=1676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000840)='block_plug\x00', r0}, 0x18) socket$inet(0x2, 0x3, 0x8d) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0xd105) 1.044861735s ago: executing program 3 (id=1677): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200000000", @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffefe, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000210003c3a00fe8000000000000000000000000000bbff020000000000000000000000000001010490780000000060e6863400002f00fc010000000000000000000000000000fe8000002d68000000000000000000aaad589e645ea437efa25f0026"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r4 = syz_genetlink_get_family_id$wireguard(0x0, r3) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000400000007020000f8ffffffb703000008000000b23cb7040000f66f63bb000000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='ext4_sync_file_exit\x00', r5, 0x0, 0x2000000008}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 974.802676ms ago: executing program 1 (id=1678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="2093c100"/16, @ANYRES16=r7, @ANYRES8=0x0], 0x20}}, 0x2400c8d5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x523, &(0x7f0000000f80)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x1, r8, 0x0, 0x0, 0x0, 0x10120, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x2, [0x0, 0x0]}, &(0x7f0000000540)=0xc) io_uring_enter(r10, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 589.295001ms ago: executing program 4 (id=1679): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 495.900002ms ago: executing program 1 (id=1680): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 467.315383ms ago: executing program 4 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0xfffffffe, 0x21}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000004c0), 0x0) 406.752164ms ago: executing program 4 (id=1682): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x4008, 0x3, 0x2a0, 0x130, 0x32, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'bridge0\x00', 'bond0\x00', {0xff}, {0xff}, 0x73, 0x2, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x0, 0x0, 0xb}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x71a) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=r6, @ANYBLOB="000000000003000010001a800c000a8005000800f7000000"], 0x30}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x20000007e, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x49, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x80000002, 0xc}, 0x45ff5eb5c5b44788, 0x2000000, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x0) linkat(r5, &(0x7f0000000480)='./file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) stat(&(0x7f0000005fc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_clone3(&(0x7f0000000500)={0x8000, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000240), {0x8}, &(0x7f00000012c0)=""/4096, 0x1000, &(0x7f0000000280)=""/96, &(0x7f0000000400)=[r8, r7, r7, r7, r7], 0x5, {r5}}, 0x58) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 400.247004ms ago: executing program 1 (id=1683): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0x4020100) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x4d48, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='mm_page_alloc\x00', r10, 0x0, 0x10000000006}, 0x18) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000cc0)={0x3, 0x40, 0xfa00, {{0xa, 0xffed, 0x5, @empty, 0x4}, {0x1b, 0x4e67, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, 0xfffffffd}}, 0x48) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) close_range(r9, 0xffffffffffffffff, 0x0) 356.829415ms ago: executing program 0 (id=1684): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064", 0x14}], 0x1}}], 0x1, 0x840) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x573, 0x5) openat$sysfs(0xffffffffffffff9c, 0x0, 0x143a82, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x4, 0x0) syz_pidfd_open(r3, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00088700fc0200000000000000000000000000fdff0200000000000000000000000000013b09"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x28bbb64, &(0x7f0000000440), 0x1, 0x5fc, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 330.569835ms ago: executing program 2 (id=1685): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 198.436347ms ago: executing program 1 (id=1686): syz_emit_ethernet(0x8e, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x800, 0xffffffff, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0x401, 0x6, 0x4000, 0xac9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x40, 0x558}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1211, &(0x7f0000002480)="$eJzs28FrXEUcB/Bf0qapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfsWwIrYvXk1b9DBBG8CeJNL7n4HwjecvFYQXySXW27ujmshGwon89lfzDznZ3ZYRdmebP/2hcfbm9V2Vbei9mZmZjdiUj3UqSYjX98Gi+9+uNPz924dfvaWrO5fj2lq2s3V15JKS09//07H3/1wg+9c29/u/TdfOwtv7v/2+qvexf2Lu7/efODVpVaVWp3eilPdzqdXn6nLNJmq9rOUnqrLPKqSK12VXRH2rfKzs5OP+XtzcWFnW5RVSlv99N20U+9Tup1+yl/P2+1U5ZlaXEhmNzp+9XGl/fquo6o67k4E3Vd14/FQpyLx2MxlqIRy/FEPBlPxfl4Oi7EM/FsfPPL1/2DBAAAAAAAAAAAAAAAAAAAAHB0Jr3/f3HQa9qzBgAAAAAAAAAAAAAAAAAAgEfLjVu3r601m+vXUzobUX6+u7G7MXwdtq9tRSvKKOJKNOKPGNz+HxrWV99orl9JA8vxWXn37/zd3Y1To/mVaMTL4/Mrw3wazc/HwsP51WjE+XH5uVgdmz8bl198KJ9FI35+LzpRxmYcZB+8/ycrKb3+ZvNf+UuDfoc7dRzbAwAAAEciS/eNPb9n2WHtw/wE/w+MnK8PspdOT3XpRETV/2g7L8uiqxhbXD4Z0xgUZ45ywLmImCz1e13X0/8QplQc/k2Zj4j/PfJMRJyMBf6nmPYvE8fhwaZPeyYAAAAAAAAAAABM4jgeJ5z2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//yrf0Ks=") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x1) 91.669018ms ago: executing program 0 (id=1687): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r1, 0x0, 0x3a) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 33.119679ms ago: executing program 0 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) 26.295099ms ago: executing program 2 (id=1689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x23}, 0x18) utimensat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}, 0x100) getdents(r2, &(0x7f0000000180)=""/172, 0xac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r3 = syz_io_uring_setup(0x43b9, &(0x7f00000006c0)={0x0, 0x42f5, 0x13408, 0x2, 0x330}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000004c0)={0x100000, 0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) io_uring_setup(0x46a2f, &(0x7f00000000c0)={0x0, 0x45d6, 0x2, 0x0, 0x0, 0x0, r3}) 0s ago: executing program 1 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000001, 0xe}, 0x45ff5eb5c5b446aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) creat(0x0, 0x198) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$eJzs3d9rHFsdAPDvbHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AcIIir4pCC+CP4BghR88VGEgj4rKopoqw8+aEd2d5KmyW6ybbbZNPl8YDLnnPnxPSdhJnNmDjMBnFrvRMSNiHiapunFiBjJynPZFJutqbHek8f3ZxpTEml66x9JJFnZ1r6SbH4u2+xMRHzlixFfT/bGra1vLE5XKuXVLF+qL62UausblxaWpufL8+XlycmJq1PXpq5Mjfeknecj4vrn//K9b//0C9d/+am7f7z9twvfaFRrOFu+sx0vKL/fwlbTC83fxc4NVl8y2HGUb7YwM9RujYE9JQ9ecZ0AAGivcY3//oj4eERcjJEY2P9yFgAAAHgNpZ8djv8mEWl7gx3KAQAAgNdIrjkGNskVs7EAw5HLFYutMbwfjLO5SrVW/+RcdW15tjVWdjQKubmFSnk8Gys8GoWkkZ9opp/lL+/KT0bEmxHx3ZGhZr44U63M9vvmBwAAAJwS53b1//890ur/AwAAACfMaL8rAAAAALxy+v8AAABw8un/AwAAwIn2pZs3G1O69f3r2Tvra4vVO5dmy7XF4tLaTHGmurpSnK9W55vv7Fs6aH+VanXl07G8dq9UL9fqpdr6xu2l6tpy/fbCc5/ABgAAAI7Qmx99+PskIjY/M9ScGga727TL1YDjKr+dSrJ5m8P6D2+05n8+okoBR2Kg3xUA+ibf7woAfVM4zMa53tUD6J/kgOUdB+/8Jpt/rLf1AQAAem/sw7ue/yfPugL7d+839f7hNffSB/FP0pbeVgc4Qp7/w+nVfP7f7UheV/xwohRcAcCpd+jn/wdyqwAAAPptuDkluWJ2e284crliMeJ887MAhWRuoVIej4g3IuJ3I4X3NfITzS2TA/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBLmiaRAgAAACdaRO6vya9a7/IfG3lvePf9gcHkPyORfSL07g9vff/edL2+OtEo/+d2ef0HWfnlftzBAAAAgFPhhT7gv9VP3+rHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvPXl8f2Zr2i4cffVx//65Vpy98fNxpjk/E4WIOPuvJPI7tksiYqAH8YcaPz7ULn7SqNZ2yHbxh3oQf/PBvvFjNPst7I4/GBHnehAfTrOHjfPPjXbHXy7eac7bH3/5iOfyL6vz+S+2z38DHc4/57uM8dajn5c6xn8Q8Va+/flnK37SIf67Xcb/2lc3NjotS38UMdb2/0/yXKxSfWmlVFvfuLSwND1fni8vT05OXJ26NnVlarw0t1ApZz/bxvjOR37xdL/2n+0Qf/SA9r/XZfv/9+je4w+0koV28S+82yb+r3+crbE3fi773/eJLN1YPraV3myld3r7Z799e7/2z3Zo/0F//wtdtv/il7/1py5XBQCOQG19Y3G6UimvnthEo5d+DKohcQwT3+zpDtM0TRvH1CH2k8Qhq3GjZ83p95kJAADotWcX/f2uCQAAAAAAAAAAAAAAAAAAAJxeR/GWtd0xN7dTSS9eoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0BP/DwAA//+aT+Dl") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000000, 0x0) sendmmsg$inet(r5, &(0x7f0000000780), 0x0, 0x4008804) kernel console output (not intermixed with test programs): 14: 00007f73df5f5fa0 R15: 00007fff9fd6a5d8 [ 97.633667][ T6067] [ 97.633675][ T6067] memory: usage 307200kB, limit 307200kB, failcnt 483 [ 97.793155][ T6129] sd 0:0:1:0: device reset [ 97.798123][ T6067] memory+swap: usage 308440kB, limit 9007199254740988kB, failcnt 0 [ 97.798146][ T6067] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 98.011205][ T6067] Memory cgroup stats for /syz4: [ 98.011473][ T6067] cache 12288 [ 98.019983][ T6067] rss 0 [ 98.022754][ T6067] shmem 0 [ 98.025835][ T6067] mapped_file 0 [ 98.029307][ T6067] dirty 0 [ 98.032348][ T6067] writeback 0 [ 98.035755][ T6067] workingset_refault_anon 406 [ 98.040477][ T6067] workingset_refault_file 110 [ 98.045145][ T6067] swap 1269760 [ 98.048692][ T6067] swapcached 4096 [ 98.052425][ T6067] pgpgin 63508 [ 98.055930][ T6067] pgpgout 63504 [ 98.059410][ T6067] pgfault 75630 [ 98.062861][ T6067] pgmajfault 201 [ 98.066459][ T6067] inactive_anon 4096 [ 98.070363][ T6067] active_anon 0 [ 98.073877][ T6067] inactive_file 12288 [ 98.078003][ T6067] active_file 0 [ 98.081455][ T6067] unevictable 0 [ 98.085000][ T6067] hierarchical_memory_limit 314572800 [ 98.090471][ T6067] hierarchical_memsw_limit 9223372036854771712 [ 98.096726][ T6067] total_cache 12288 [ 98.100570][ T6067] total_rss 0 [ 98.103849][ T6067] total_shmem 0 [ 98.107371][ T6067] total_mapped_file 0 [ 98.111463][ T6067] total_dirty 0 [ 98.114916][ T6067] total_writeback 0 [ 98.118764][ T6067] total_workingset_refault_anon 406 [ 98.123977][ T6067] total_workingset_refault_file 110 [ 98.129355][ T6067] total_swap 1269760 [ 98.133275][ T6067] total_swapcached 4096 [ 98.137691][ T6067] total_pgpgin 63508 [ 98.141907][ T6067] total_pgpgout 63504 [ 98.146367][ T6067] total_pgfault 75630 [ 98.150435][ T6067] total_pgmajfault 201 [ 98.154502][ T6067] total_inactive_anon 4096 [ 98.159340][ T6067] total_active_anon 0 [ 98.163333][ T6067] total_inactive_file 12288 [ 98.167881][ T6067] total_active_file 0 [ 98.171860][ T6067] total_unevictable 0 [ 98.175882][ T6067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.922,pid=6066,uid=0 [ 98.190931][ T6067] Memory cgroup out of memory: Killed process 6066 (syz.4.922) total-vm:93880kB, anon-rss:936kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 98.296989][ T6138] loop2: detected capacity change from 0 to 128 [ 98.400521][ T6150] netlink: 'syz.1.952': attribute type 12 has an invalid length. [ 98.594100][ T6161] loop3: detected capacity change from 0 to 128 [ 98.756801][ T6145] loop2: detected capacity change from 0 to 2048 [ 98.866607][ T6180] netlink: 'syz.1.964': attribute type 12 has an invalid length. [ 98.939233][ T6184] netlink: 'syz.1.965': attribute type 13 has an invalid length. [ 98.980986][ T6193] ALSA: seq fatal error: cannot create timer (-22) [ 99.019011][ T6197] sd 0:0:1:0: device reset [ 99.128901][ T6211] netlink: 'syz.0.975': attribute type 12 has an invalid length. [ 99.247695][ T6224] netlink: 'syz.4.980': attribute type 13 has an invalid length. [ 99.281206][ T6235] sd 0:0:1:0: device reset [ 99.289297][ T6234] loop1: detected capacity change from 0 to 512 [ 99.296771][ T6234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.305515][ T6234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.316203][ T6234] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.323099][ T6234] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.984: Failed to acquire dquot type 1 [ 99.337544][ T6234] EXT4-fs (loop1): 1 truncate cleaned up [ 99.385612][ T6247] netlink: 'syz.4.988': attribute type 12 has an invalid length. [ 99.664003][ T6258] loop2: detected capacity change from 0 to 2048 [ 99.736221][ T6263] sd 0:0:1:0: device reset [ 99.757808][ T6265] sd 0:0:1:0: device reset [ 100.089189][ T6274] netlink: 'syz.3.998': attribute type 13 has an invalid length. [ 100.146539][ T6280] netlink: 'syz.3.1000': attribute type 13 has an invalid length. [ 100.159013][ T6273] loop4: detected capacity change from 0 to 8192 [ 100.189188][ T6288] sd 0:0:1:0: device reset [ 100.226537][ T6294] loop4: detected capacity change from 0 to 128 [ 100.317315][ T6303] sd 0:0:1:0: device reset [ 100.324152][ T6304] sd 0:0:1:0: device reset [ 100.331559][ T6305] loop1: detected capacity change from 0 to 256 [ 100.338578][ T6305] vfat: Unknown parameter '0x0000000000000014' [ 100.489725][ T6322] sd 0:0:1:0: device reset [ 100.696942][ T6338] loop4: detected capacity change from 0 to 128 [ 100.704105][ T6325] loop2: detected capacity change from 0 to 8192 [ 100.713259][ T6330] __nla_validate_parse: 15 callbacks suppressed [ 100.713279][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 100.811667][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 100.839249][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 100.860345][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 100.871680][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 100.940251][ T6350] sd 0:0:1:0: device reset [ 100.944502][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 100.966636][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 101.016107][ T6356] sd 0:0:1:0: device reset [ 101.072124][ T6361] loop3: detected capacity change from 0 to 128 [ 101.199279][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 101.335210][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 101.495946][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 101.705883][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 101.705901][ T29] audit: type=1326 audit(1747687655.286:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff04715927 code=0x7ffc0000 [ 101.753852][ T29] audit: type=1326 audit(1747687655.286:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff046bab39 code=0x7ffc0000 [ 101.777652][ T29] audit: type=1326 audit(1747687655.286:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 101.802265][ T29] audit: type=1326 audit(1747687655.296:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff04715927 code=0x7ffc0000 [ 101.826843][ T29] audit: type=1326 audit(1747687655.296:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff046bab39 code=0x7ffc0000 [ 101.850288][ T29] audit: type=1326 audit(1747687655.296:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 101.873937][ T29] audit: type=1326 audit(1747687655.306:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff04715927 code=0x7ffc0000 [ 101.897636][ T29] audit: type=1326 audit(1747687655.306:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff046bab39 code=0x7ffc0000 [ 101.921048][ T29] audit: type=1326 audit(1747687655.306:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 101.945064][ T29] audit: type=1326 audit(1747687655.316:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6384 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff04715927 code=0x7ffc0000 [ 102.176326][ T6409] validate_nla: 4 callbacks suppressed [ 102.176344][ T6409] netlink: 'syz.4.1044': attribute type 12 has an invalid length. [ 102.286517][ T6413] sd 0:0:1:0: device reset [ 102.604720][ T6420] loop4: detected capacity change from 0 to 2048 [ 102.638900][ T6424] ALSA: seq fatal error: cannot create timer (-22) [ 102.720583][ T6428] netlink: 'syz.1.1053': attribute type 12 has an invalid length. [ 102.809272][ T6434] sd 0:0:1:0: device reset [ 102.880719][ T6442] loop2: detected capacity change from 0 to 128 [ 102.897768][ T6444] sd 0:0:1:0: device reset [ 102.919520][ T6446] loop2: detected capacity change from 0 to 512 [ 102.928355][ T6446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.935975][ T6446] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.951384][ T6446] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 102.960044][ T6446] EXT4-fs (loop2): 1 truncate cleaned up [ 102.966607][ T6446] EXT4-fs mount: 5 callbacks suppressed [ 102.966626][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.019844][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.050402][ T6455] ALSA: seq fatal error: cannot create timer (-22) [ 103.064063][ T6453] netlink: 'syz.4.1064': attribute type 12 has an invalid length. [ 103.070994][ T6365] syz.0.1029 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 103.086770][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.0.1029 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 103.086835][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.086852][ T6365] Call Trace: [ 103.086909][ T6365] [ 103.086927][ T6365] __dump_stack+0x1d/0x30 [ 103.086979][ T6365] dump_stack_lvl+0xe8/0x140 [ 103.087114][ T6365] dump_stack+0x15/0x1b [ 103.087173][ T6365] dump_header+0x81/0x220 [ 103.087250][ T6365] oom_kill_process+0x334/0x3f0 [ 103.087301][ T6365] out_of_memory+0x979/0xb80 [ 103.087337][ T6365] ? css_next_descendant_pre+0x138/0x160 [ 103.087448][ T6365] mem_cgroup_out_of_memory+0x13d/0x190 [ 103.087555][ T6365] try_charge_memcg+0x5e2/0x870 [ 103.087710][ T6365] obj_cgroup_charge_pages+0xb7/0x1a0 [ 103.087860][ T6365] __memcg_kmem_charge_page+0x9f/0x170 [ 103.087984][ T6365] __alloc_frozen_pages_noprof+0x188/0x360 [ 103.088085][ T6365] alloc_pages_mpol+0xb3/0x250 [ 103.088135][ T6365] alloc_pages_noprof+0x90/0x130 [ 103.088257][ T6365] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 103.088436][ T6365] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 103.088514][ T6365] ? ip_set_alloc+0x1f/0x30 [ 103.088540][ T6365] ? ip_set_alloc+0x1f/0x30 [ 103.088682][ T6365] ? __kmalloc_cache_noprof+0x189/0x320 [ 103.088805][ T6365] ip_set_alloc+0x1f/0x30 [ 103.088841][ T6365] hash_netiface_create+0x282/0x740 [ 103.088903][ T6365] ? __pfx_hash_netiface_create+0x10/0x10 [ 103.088964][ T6365] ip_set_create+0x3c9/0x960 [ 103.089144][ T6365] ? __nla_parse+0x40/0x60 [ 103.089265][ T6365] nfnetlink_rcv_msg+0x4c6/0x590 [ 103.089476][ T6365] netlink_rcv_skb+0x123/0x220 [ 103.089602][ T6365] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.089766][ T6365] nfnetlink_rcv+0x16b/0x1690 [ 103.089796][ T6365] ? __dquot_free_space+0x52d/0x800 [ 103.089920][ T6365] ? xas_find+0x15e/0x3e0 [ 103.090076][ T6365] ? xas_load+0x405/0x430 [ 103.090252][ T6365] ? find_get_entry+0x374/0x380 [ 103.090347][ T6365] ? __rcu_read_unlock+0x4f/0x70 [ 103.090394][ T6365] ? find_get_entries+0x1ea/0x220 [ 103.090429][ T6365] ? percpu_counter_add_batch+0xb6/0x130 [ 103.090549][ T6365] ? shmem_recalc_inode+0x19f/0x1c0 [ 103.090585][ T6365] ? shmem_undo_range+0xa4b/0xa80 [ 103.090616][ T6365] ? __rcu_read_unlock+0x4f/0x70 [ 103.090640][ T6365] ? __skb_flow_dissect+0x3d26/0x4210 [ 103.090688][ T6365] ? should_fail_ex+0x30/0x280 [ 103.090733][ T6365] ? selinux_nlmsg_lookup+0x99/0x8b0 [ 103.090827][ T6365] ? selinux_netlink_send+0x59f/0x5f0 [ 103.090859][ T6365] ? __rcu_read_unlock+0x34/0x70 [ 103.090890][ T6365] ? __netlink_lookup+0x266/0x2a0 [ 103.090952][ T6365] netlink_unicast+0x5a1/0x670 [ 103.091034][ T6365] netlink_sendmsg+0x58b/0x6b0 [ 103.091107][ T6365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.091150][ T6365] __sock_sendmsg+0x145/0x180 [ 103.091304][ T6365] ____sys_sendmsg+0x31e/0x4e0 [ 103.091362][ T6365] ___sys_sendmsg+0x17b/0x1d0 [ 103.091485][ T6365] __x64_sys_sendmsg+0xd4/0x160 [ 103.091520][ T6365] x64_sys_call+0x2999/0x2fb0 [ 103.091595][ T6365] do_syscall_64+0xd0/0x1a0 [ 103.091692][ T6365] ? clear_bhb_loop+0x40/0x90 [ 103.091730][ T6365] ? clear_bhb_loop+0x40/0x90 [ 103.091775][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.091821][ T6365] RIP: 0033:0x7f137c4be969 [ 103.091883][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.091976][ T6365] RSP: 002b:00007f137ab27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.092001][ T6365] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c4be969 [ 103.092029][ T6365] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.092050][ T6365] RBP: 00007f137c540ab1 R08: 0000000000000000 R09: 0000000000000000 [ 103.092078][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.092118][ T6365] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 103.092160][ T6365] [ 103.092170][ T6365] memory: usage 307200kB, limit 307200kB, failcnt 528 [ 103.500708][ T6365] memory+swap: usage 323848kB, limit 9007199254740988kB, failcnt 0 [ 103.508990][ T6365] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 103.516595][ T6365] Memory cgroup stats for /syz0: [ 103.516965][ T6365] cache 4096 [ 103.525832][ T6365] rss 4096 [ 103.529058][ T6365] shmem 0 [ 103.532190][ T6365] mapped_file 4096 [ 103.536127][ T6365] dirty 0 [ 103.539218][ T6365] writeback 0 [ 103.542802][ T6365] workingset_refault_anon 177 [ 103.547690][ T6365] workingset_refault_file 262 [ 103.552604][ T6365] swap 17047552 [ 103.556347][ T6365] swapcached 4096 [ 103.560011][ T6365] pgpgin 82916 [ 103.563413][ T6365] pgpgout 82914 [ 103.567142][ T6365] pgfault 67589 [ 103.571154][ T6365] pgmajfault 132 [ 103.574705][ T6365] inactive_anon 4096 [ 103.578625][ T6365] active_anon 0 [ 103.582086][ T6365] inactive_file 4096 [ 103.586031][ T6365] active_file 0 [ 103.589499][ T6365] unevictable 0 [ 103.592955][ T6365] hierarchical_memory_limit 314572800 [ 103.598505][ T6365] hierarchical_memsw_limit 9223372036854771712 [ 103.604713][ T6365] total_cache 4096 [ 103.608527][ T6365] total_rss 4096 [ 103.612166][ T6365] total_shmem 0 [ 103.615643][ T6365] total_mapped_file 4096 [ 103.620027][ T6365] total_dirty 0 [ 103.623522][ T6365] total_writeback 0 [ 103.627382][ T6365] total_workingset_refault_anon 177 [ 103.632979][ T6365] total_workingset_refault_file 262 [ 103.640262][ T6365] total_swap 17047552 [ 103.644268][ T6365] total_swapcached 4096 [ 103.648492][ T6365] total_pgpgin 82916 [ 103.652464][ T6365] total_pgpgout 82914 [ 103.656724][ T6365] total_pgfault 67589 [ 103.660814][ T6365] total_pgmajfault 132 [ 103.664937][ T6365] total_inactive_anon 4096 [ 103.669414][ T6365] total_active_anon 0 [ 103.673586][ T6365] total_inactive_file 4096 [ 103.678089][ T6365] total_active_file 0 [ 103.682083][ T6365] total_unevictable 0 [ 103.686077][ T6365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1029,pid=6364,uid=0 [ 103.701029][ T6365] Memory cgroup out of memory: Killed process 6364 (syz.0.1029) total-vm:100164kB, anon-rss:1064kB, file-rss:26412kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 103.867924][ T6469] loop2: detected capacity change from 0 to 128 [ 103.893540][ T6471] sd 0:0:1:0: device reset [ 103.935327][ T6476] loop2: detected capacity change from 0 to 512 [ 103.953186][ T6476] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.961361][ T6476] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.977760][ T6476] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 103.984992][ T6476] EXT4-fs (loop2): 1 truncate cleaned up [ 103.991598][ T6476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.036238][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.056262][ T6484] loop4: detected capacity change from 0 to 512 [ 104.085599][ T6484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.095531][ T6484] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.111964][ T6484] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 104.131553][ T6484] EXT4-fs (loop4): 1 truncate cleaned up [ 104.142053][ T6484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.232580][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.277076][ T6498] ALSA: seq fatal error: cannot create timer (-22) [ 104.366215][ T6508] sd 0:0:1:0: device reset [ 104.412146][ T6516] loop3: detected capacity change from 0 to 512 [ 104.432828][ T6516] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.478055][ T6516] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.500844][ T6527] netlink: 'syz.1.1095': attribute type 12 has an invalid length. [ 104.563137][ T6516] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 104.579669][ T6516] EXT4-fs (loop3): 1 truncate cleaned up [ 104.588902][ T6516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.621782][ T6529] loop1: detected capacity change from 0 to 256 [ 104.636611][ T6529] vfat: Unknown parameter '0x0000000000000014' [ 104.679204][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.753243][ T6535] loop3: detected capacity change from 0 to 128 [ 104.829586][ T6546] sd 0:0:1:0: device reset [ 104.897377][ T6553] netlink: 'syz.3.1106': attribute type 12 has an invalid length. [ 104.908245][ T6555] loop1: detected capacity change from 0 to 256 [ 104.914872][ T6555] vfat: Unknown parameter '0x0000000000000014' [ 104.970447][ T6563] loop2: detected capacity change from 0 to 512 [ 104.973068][ T6558] netlink: 'syz.3.1109': attribute type 13 has an invalid length. [ 105.016940][ T6563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.035278][ T6563] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.051093][ T6563] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 105.060558][ T6563] EXT4-fs (loop2): 1 truncate cleaned up [ 105.067306][ T6563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.176664][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.218545][ T6585] sd 0:0:1:0: device reset [ 105.281651][ T6591] ALSA: seq fatal error: cannot create timer (-22) [ 105.307769][ T6593] netlink: 'syz.0.1119': attribute type 12 has an invalid length. [ 105.370276][ T6605] loop4: detected capacity change from 0 to 512 [ 105.388464][ T6606] netlink: 'syz.2.1125': attribute type 13 has an invalid length. [ 105.409866][ T6605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.418452][ T6605] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.457003][ T6605] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 105.472365][ T6605] EXT4-fs (loop4): 1 truncate cleaned up [ 105.479210][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.573970][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.614960][ T6628] loop4: detected capacity change from 0 to 128 [ 105.686425][ T6635] ALSA: seq fatal error: cannot create timer (-22) [ 105.737969][ T6601] loop3: detected capacity change from 0 to 2048 [ 105.774147][ T6639] loop4: detected capacity change from 0 to 256 [ 105.791136][ T6639] vfat: Unknown parameter '0x0000000000000014' [ 105.972156][ T6648] loop2: detected capacity change from 0 to 128 [ 105.995632][ T6650] sd 0:0:1:0: device reset [ 106.046124][ T6654] __nla_validate_parse: 28 callbacks suppressed [ 106.046140][ T6654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1143'. [ 106.104800][ T6659] loop4: detected capacity change from 0 to 128 [ 106.246044][ T6668] loop4: detected capacity change from 0 to 128 [ 106.376243][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1154'. [ 106.438195][ T6679] loop1: detected capacity change from 0 to 8192 [ 106.444439][ T6681] loop3: detected capacity change from 0 to 256 [ 106.452109][ T6681] vfat: Unknown parameter '0x0000000000000014' [ 106.652103][ T6686] netlink: 'syz.0.1157': attribute type 12 has an invalid length. [ 106.707393][ T6695] netlink: 'syz.1.1161': attribute type 12 has an invalid length. [ 106.771926][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 106.845717][ T29] kauditd_printk_skb: 1332 callbacks suppressed [ 106.845735][ T29] audit: type=1326 audit(1747687660.406:11557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 106.875721][ T29] audit: type=1326 audit(1747687660.406:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 106.899682][ T29] audit: type=1326 audit(1747687660.406:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 106.925105][ T29] audit: type=1326 audit(1747687660.406:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 106.949408][ T29] audit: type=1326 audit(1747687660.406:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 106.973479][ T29] audit: type=1326 audit(1747687660.406:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 107.042851][ T29] audit: type=1326 audit(1747687660.456:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 107.066729][ T29] audit: type=1326 audit(1747687660.456:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 107.117828][ T6707] loop1: detected capacity change from 0 to 8192 [ 107.129576][ T6710] loop2: detected capacity change from 0 to 2048 [ 107.175092][ T6724] loop2: detected capacity change from 0 to 128 [ 107.253635][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.270114][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.294169][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.322753][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.373886][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.383180][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 107.432158][ T6745] validate_nla: 1 callbacks suppressed [ 107.432174][ T6745] netlink: 'syz.2.1180': attribute type 13 has an invalid length. [ 107.442216][ T6751] loop1: detected capacity change from 0 to 128 [ 107.542100][ T6732] loop3: detected capacity change from 0 to 2048 [ 107.550561][ T6757] netlink: 'syz.1.1185': attribute type 12 has an invalid length. [ 107.632053][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'. [ 107.651125][ T29] audit: type=1326 audit(1747687661.206:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df3ce969 code=0x7ffc0000 [ 107.675070][ T29] audit: type=1326 audit(1747687661.206:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df3ce969 code=0x7ffc0000 [ 107.734387][ T6774] netlink: 'syz.2.1193': attribute type 13 has an invalid length. [ 107.764370][ T6784] netlink: 'syz.2.1196': attribute type 12 has an invalid length. [ 107.964204][ T6794] loop4: detected capacity change from 0 to 8192 [ 108.015119][ T6796] loop2: detected capacity change from 0 to 2048 [ 108.026792][ T6805] loop1: detected capacity change from 0 to 128 [ 108.140317][ T6807] loop4: detected capacity change from 0 to 128 [ 108.185131][ T6812] netlink: 'syz.2.1209': attribute type 12 has an invalid length. [ 108.377834][ T6835] netlink: 'syz.2.1221': attribute type 12 has an invalid length. [ 108.510252][ T6833] loop3: detected capacity change from 0 to 2048 [ 108.659242][ T6846] loop3: detected capacity change from 0 to 2048 [ 108.677812][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.690373][ T6846] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.741863][ T6857] sd 0:0:1:0: device reset [ 108.837213][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 108.862656][ T6865] netlink: 'syz.0.1232': attribute type 12 has an invalid length. [ 108.884494][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 198 with error 117 [ 108.897394][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.897394][ T31] [ 108.972219][ T6863] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 214 with max blocks 1 with error 117 [ 108.984965][ T6863] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.984965][ T6863] [ 109.091555][ T6874] loop2: detected capacity change from 0 to 2048 [ 109.127340][ T6886] ALSA: seq fatal error: cannot create timer (-22) [ 109.241833][ T6894] loop1: detected capacity change from 0 to 512 [ 109.269602][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.280874][ T6898] netlink: 'syz.2.1244': attribute type 12 has an invalid length. [ 109.315757][ T6894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.337616][ T6894] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.344788][ T6894] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1242: Failed to acquire dquot type 1 [ 109.366896][ T6894] EXT4-fs (loop1): 1 truncate cleaned up [ 109.373362][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.387737][ T6902] netlink: 'syz.2.1245': attribute type 13 has an invalid length. [ 109.465321][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.477232][ T6908] loop2: detected capacity change from 0 to 128 [ 109.662012][ T6918] loop2: detected capacity change from 0 to 8192 [ 109.859043][ T6926] loop1: detected capacity change from 0 to 8192 [ 109.889926][ T6928] sd 0:0:1:0: device reset [ 109.945282][ T6930] netlink: 'syz.0.1255': attribute type 12 has an invalid length. [ 110.005501][ T6846] syz.3.1224 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 110.019761][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: syz.3.1224 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 110.019797][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 110.019811][ T6846] Call Trace: [ 110.019819][ T6846] [ 110.019829][ T6846] __dump_stack+0x1d/0x30 [ 110.019857][ T6846] dump_stack_lvl+0xe8/0x140 [ 110.019877][ T6846] dump_stack+0x15/0x1b [ 110.019942][ T6846] dump_header+0x81/0x220 [ 110.019990][ T6846] oom_kill_process+0x334/0x3f0 [ 110.020030][ T6846] out_of_memory+0x979/0xb80 [ 110.020092][ T6846] ? css_next_descendant_pre+0x138/0x160 [ 110.020118][ T6846] mem_cgroup_out_of_memory+0x13d/0x190 [ 110.020169][ T6846] try_charge_memcg+0x5e2/0x870 [ 110.020206][ T6846] obj_cgroup_charge_pages+0xb7/0x1a0 [ 110.020254][ T6846] __memcg_kmem_charge_page+0x9f/0x170 [ 110.020281][ T6846] __alloc_frozen_pages_noprof+0x188/0x360 [ 110.020324][ T6846] alloc_pages_mpol+0xb3/0x250 [ 110.020356][ T6846] alloc_pages_noprof+0x90/0x130 [ 110.020419][ T6846] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 110.020462][ T6846] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 110.020490][ T6846] ? ip_set_alloc+0x1f/0x30 [ 110.020526][ T6846] ? ip_set_alloc+0x1f/0x30 [ 110.020637][ T6846] ? __kmalloc_cache_noprof+0x189/0x320 [ 110.020748][ T6846] ip_set_alloc+0x1f/0x30 [ 110.020775][ T6846] hash_netiface_create+0x282/0x740 [ 110.020816][ T6846] ? __pfx_hash_netiface_create+0x10/0x10 [ 110.020882][ T6846] ip_set_create+0x3c9/0x960 [ 110.020997][ T6846] ? __nla_parse+0x40/0x60 [ 110.021027][ T6846] nfnetlink_rcv_msg+0x4c6/0x590 [ 110.021083][ T6846] netlink_rcv_skb+0x123/0x220 [ 110.021150][ T6846] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 110.021190][ T6846] nfnetlink_rcv+0x16b/0x1690 [ 110.021220][ T6846] ? sprintf+0x88/0xb0 [ 110.021266][ T6846] ? this_cpu_in_panic+0x2d/0x40 [ 110.021323][ T6846] ? _prb_read_valid+0x8c1/0x920 [ 110.021412][ T6846] ? __rcu_read_unlock+0x4f/0x70 [ 110.021442][ T6846] ? __skb_flow_dissect+0x3d26/0x4210 [ 110.021527][ T6846] ? should_fail_ex+0x30/0x280 [ 110.021573][ T6846] ? selinux_nlmsg_lookup+0x99/0x8b0 [ 110.021607][ T6846] ? selinux_netlink_send+0x59f/0x5f0 [ 110.021726][ T6846] ? __rcu_read_unlock+0x34/0x70 [ 110.021830][ T6846] ? __netlink_lookup+0x266/0x2a0 [ 110.021859][ T6846] netlink_unicast+0x5a1/0x670 [ 110.021901][ T6846] netlink_sendmsg+0x58b/0x6b0 [ 110.021939][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.021963][ T6846] __sock_sendmsg+0x145/0x180 [ 110.022000][ T6846] ____sys_sendmsg+0x31e/0x4e0 [ 110.022024][ T6846] ___sys_sendmsg+0x17b/0x1d0 [ 110.022061][ T6846] __x64_sys_sendmsg+0xd4/0x160 [ 110.022112][ T6846] x64_sys_call+0x2999/0x2fb0 [ 110.022195][ T6846] do_syscall_64+0xd0/0x1a0 [ 110.022221][ T6846] ? clear_bhb_loop+0x40/0x90 [ 110.022250][ T6846] ? clear_bhb_loop+0x40/0x90 [ 110.022280][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.022307][ T6846] RIP: 0033:0x7f8408efe969 [ 110.022369][ T6846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.022444][ T6846] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.022469][ T6846] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 110.022486][ T6846] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 110.022512][ T6846] RBP: 00007f8408f80ab1 R08: 0000000000000000 R09: 0000000000000000 [ 110.022528][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.022545][ T6846] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 110.022569][ T6846] [ 110.022578][ T6846] memory: usage 307200kB, limit 307200kB, failcnt 214 [ 110.309903][ T6921] loop4: detected capacity change from 0 to 2048 [ 110.311230][ T6846] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0 [ 110.311250][ T6846] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 110.311267][ T6846] Memory cgroup stats for /syz3: [ 110.314065][ T6846] cache 12288 [ 110.433844][ T6846] rss 4096 [ 110.437014][ T6846] shmem 0 [ 110.439981][ T6846] mapped_file 0 [ 110.443805][ T6846] dirty 0 [ 110.447263][ T6846] writeback 0 [ 110.450777][ T6846] workingset_refault_anon 110 [ 110.455621][ T6846] workingset_refault_file 306 [ 110.460553][ T6846] swap 1269760 [ 110.463948][ T6846] swapcached 8192 [ 110.467619][ T6846] pgpgin 52523 [ 110.471105][ T6846] pgpgout 52518 [ 110.474588][ T6846] pgfault 63924 [ 110.478224][ T6846] pgmajfault 52 [ 110.481805][ T6846] inactive_anon 8192 [ 110.485750][ T6846] active_anon 0 [ 110.489248][ T6846] inactive_file 12288 [ 110.493275][ T6846] active_file 0 [ 110.497108][ T6846] unevictable 0 [ 110.500880][ T6846] hierarchical_memory_limit 314572800 [ 110.506579][ T6846] hierarchical_memsw_limit 9223372036854771712 [ 110.512800][ T6846] total_cache 12288 [ 110.516803][ T6846] total_rss 4096 [ 110.520610][ T6846] total_shmem 0 [ 110.524177][ T6846] total_mapped_file 0 [ 110.528342][ T6846] total_dirty 0 [ 110.531846][ T6846] total_writeback 0 [ 110.536225][ T6846] total_workingset_refault_anon 110 [ 110.541544][ T6846] total_workingset_refault_file 306 [ 110.547631][ T6846] total_swap 1269760 [ 110.551906][ T6846] total_swapcached 8192 [ 110.556286][ T6846] total_pgpgin 52523 [ 110.560203][ T6846] total_pgpgout 52518 [ 110.564310][ T6846] total_pgfault 63924 [ 110.568408][ T6846] total_pgmajfault 52 [ 110.572732][ T6846] total_inactive_anon 8192 [ 110.577383][ T6846] total_active_anon 0 [ 110.581389][ T6846] total_inactive_file 12288 [ 110.586011][ T6846] total_active_file 0 [ 110.590175][ T6846] total_unevictable 0 [ 110.594557][ T6846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1224,pid=6844,uid=0 [ 110.609952][ T6846] Memory cgroup out of memory: Killed process 6844 (syz.3.1224) total-vm:95928kB, anon-rss:936kB, file-rss:22604kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 110.740429][ T6953] loop1: detected capacity change from 0 to 128 [ 110.884297][ T6954] loop2: detected capacity change from 0 to 8192 [ 110.955764][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.059440][ T6969] __nla_validate_parse: 23 callbacks suppressed [ 111.059755][ T6969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1273'. [ 111.142555][ T6988] sd 0:0:1:0: device reset [ 111.343795][ T7001] FAULT_INJECTION: forcing a failure. [ 111.343795][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 111.356913][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.0.1285 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 111.356945][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.356961][ T7001] Call Trace: [ 111.356970][ T7001] [ 111.356979][ T7001] __dump_stack+0x1d/0x30 [ 111.357008][ T7001] dump_stack_lvl+0xe8/0x140 [ 111.357081][ T7001] dump_stack+0x15/0x1b [ 111.357097][ T7001] should_fail_ex+0x265/0x280 [ 111.357147][ T7001] ? alloc_bprm+0x62/0x660 [ 111.357177][ T7001] should_failslab+0x8c/0xb0 [ 111.357295][ T7001] __kmalloc_cache_noprof+0x4c/0x320 [ 111.357321][ T7001] alloc_bprm+0x62/0x660 [ 111.357351][ T7001] ? should_fail+0xb/0x20 [ 111.357464][ T7001] do_execveat_common+0x12e/0x750 [ 111.357497][ T7001] ? getname_flags+0x154/0x3b0 [ 111.357539][ T7001] __x64_sys_execveat+0x73/0x90 [ 111.357617][ T7001] x64_sys_call+0x2dae/0x2fb0 [ 111.357697][ T7001] do_syscall_64+0xd0/0x1a0 [ 111.357721][ T7001] ? clear_bhb_loop+0x40/0x90 [ 111.357743][ T7001] ? clear_bhb_loop+0x40/0x90 [ 111.357771][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.357852][ T7001] RIP: 0033:0x7f137c4be969 [ 111.357871][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.357896][ T7001] RSP: 002b:00007f137ab27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 111.357914][ T7001] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c4be969 [ 111.357927][ T7001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.357942][ T7001] RBP: 00007f137ab27090 R08: 0000000000001000 R09: 0000000000000000 [ 111.357958][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.357974][ T7001] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 111.357997][ T7001] [ 111.588096][ T6997] loop2: detected capacity change from 0 to 8192 [ 111.598733][ T7009] sd 0:0:1:0: device reset [ 111.766231][ T7035] loop1: detected capacity change from 0 to 512 [ 111.773137][ T7035] EXT4-fs: Ignoring removed orlov option [ 111.780661][ T7038] loop4: detected capacity change from 0 to 128 [ 111.796861][ T7040] FAULT_INJECTION: forcing a failure. [ 111.796861][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.810151][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.0.1303 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 111.810189][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.810258][ T7040] Call Trace: [ 111.810265][ T7040] [ 111.810275][ T7040] __dump_stack+0x1d/0x30 [ 111.810303][ T7040] dump_stack_lvl+0xe8/0x140 [ 111.810329][ T7040] dump_stack+0x15/0x1b [ 111.810406][ T7040] should_fail_ex+0x265/0x280 [ 111.810450][ T7040] should_fail+0xb/0x20 [ 111.810485][ T7040] should_fail_usercopy+0x1a/0x20 [ 111.810505][ T7040] strncpy_from_user+0x25/0x230 [ 111.810550][ T7040] ? kmem_cache_alloc_noprof+0x186/0x310 [ 111.810575][ T7040] ? getname_flags+0x80/0x3b0 [ 111.810609][ T7040] getname_flags+0xae/0x3b0 [ 111.810645][ T7040] do_sys_openat2+0x60/0x110 [ 111.810699][ T7040] __x64_sys_openat+0xf2/0x120 [ 111.810727][ T7040] x64_sys_call+0x1af/0x2fb0 [ 111.810754][ T7040] do_syscall_64+0xd0/0x1a0 [ 111.810819][ T7040] ? clear_bhb_loop+0x40/0x90 [ 111.810846][ T7040] ? clear_bhb_loop+0x40/0x90 [ 111.810945][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.810974][ T7040] RIP: 0033:0x7f137c4be969 [ 111.810994][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.811018][ T7040] RSP: 002b:00007f137ab27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.811063][ T7040] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c4be969 [ 111.811080][ T7040] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 111.811131][ T7040] RBP: 00007f137ab27090 R08: 0000000000000000 R09: 0000000000000000 [ 111.811160][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.811176][ T7040] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 111.811199][ T7040] [ 112.033852][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.049803][ T29] kauditd_printk_skb: 1178 callbacks suppressed [ 112.049930][ T29] audit: type=1326 audit(1747687665.626:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.079987][ T29] audit: type=1326 audit(1747687665.626:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.103715][ T29] audit: type=1326 audit(1747687665.626:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.127743][ T29] audit: type=1326 audit(1747687665.626:12746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.133519][ T7051] loop3: detected capacity change from 0 to 8192 [ 112.152757][ T29] audit: type=1326 audit(1747687665.626:12747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.152868][ T29] audit: type=1326 audit(1747687665.626:12748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.176144][ T7035] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.189321][ T29] audit: type=1326 audit(1747687665.626:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.189359][ T29] audit: type=1326 audit(1747687665.626:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.272150][ T29] audit: type=1326 audit(1747687665.626:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.318597][ T29] audit: type=1326 audit(1747687665.806:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137c4be969 code=0x7ffc0000 [ 112.348706][ T7055] sd 0:0:1:0: device reset [ 112.365551][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.374744][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.387104][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.395981][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.412114][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.458554][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.467718][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 112.517742][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 112.562543][ T7082] syz.1.1320 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.575620][ T7086] FAULT_INJECTION: forcing a failure. [ 112.575620][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 112.588709][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.3.1321 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 112.588740][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.588757][ T7086] Call Trace: [ 112.588764][ T7086] [ 112.588774][ T7086] __dump_stack+0x1d/0x30 [ 112.588801][ T7086] dump_stack_lvl+0xe8/0x140 [ 112.588901][ T7086] dump_stack+0x15/0x1b [ 112.588920][ T7086] should_fail_ex+0x265/0x280 [ 112.588955][ T7086] should_failslab+0x8c/0xb0 [ 112.589035][ T7086] kmem_cache_alloc_noprof+0x50/0x310 [ 112.589060][ T7086] ? alloc_pid+0x7a/0x720 [ 112.589081][ T7086] alloc_pid+0x7a/0x720 [ 112.589102][ T7086] copy_process+0xe0e/0x1f90 [ 112.589134][ T7086] ? __pfx_io_wq_worker+0x10/0x10 [ 112.589239][ T7086] create_io_thread+0x93/0xc0 [ 112.589279][ T7086] ? __pfx_io_wq_worker+0x10/0x10 [ 112.589360][ T7086] create_io_worker+0xe0/0x370 [ 112.589404][ T7086] io_wq_enqueue+0x2e1/0x3c0 [ 112.589506][ T7086] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 112.589551][ T7086] io_queue_iowq+0x201/0x2e0 [ 112.589628][ T7086] io_queue_sqe_fallback+0x73/0xc0 [ 112.589652][ T7086] io_submit_sqes+0xb8b/0x1000 [ 112.589708][ T7086] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 112.589744][ T7086] ? queue_map_peek_elem+0x1f/0x30 [ 112.589809][ T7086] ? __rcu_read_unlock+0x4f/0x70 [ 112.589832][ T7086] ? bpf_trace_run2+0x124/0x1c0 [ 112.589858][ T7086] ? __rcu_read_unlock+0x4f/0x70 [ 112.589961][ T7086] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 112.589987][ T7086] ? __bpf_trace_sys_enter+0x10/0x30 [ 112.590010][ T7086] ? __traceiter_sys_enter+0x5c/0x80 [ 112.590098][ T7086] __x64_sys_io_uring_enter+0x78/0x90 [ 112.590133][ T7086] x64_sys_call+0x28c8/0x2fb0 [ 112.590226][ T7086] do_syscall_64+0xd0/0x1a0 [ 112.590251][ T7086] ? clear_bhb_loop+0x40/0x90 [ 112.590349][ T7086] ? clear_bhb_loop+0x40/0x90 [ 112.590371][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.590393][ T7086] RIP: 0033:0x7f8408efe969 [ 112.590408][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.590493][ T7086] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.590512][ T7086] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 112.590564][ T7086] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000003 [ 112.590622][ T7086] RBP: 00007f8407567090 R08: 0000000000000000 R09: 0000000000000e00 [ 112.590638][ T7086] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 112.590651][ T7086] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 112.590670][ T7086] [ 112.878230][ T7089] sd 0:0:1:0: device reset [ 112.887735][ T7087] loop2: detected capacity change from 0 to 512 [ 112.907794][ T7087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.923941][ T7087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.952495][ T7099] sd 0:0:1:0: device reset [ 112.971720][ T7087] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.979206][ T7102] loop3: detected capacity change from 0 to 128 [ 112.986375][ T7087] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1318: Failed to acquire dquot type 1 [ 113.006475][ T7087] EXT4-fs (loop2): 1 truncate cleaned up [ 113.013062][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.044393][ T7107] validate_nla: 3 callbacks suppressed [ 113.044408][ T7107] netlink: 'syz.1.1329': attribute type 12 has an invalid length. [ 113.059774][ T7109] netlink: 'syz.0.1330': attribute type 12 has an invalid length. [ 113.109750][ T7118] loop1: detected capacity change from 0 to 128 [ 113.129417][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 113.176457][ T7122] loop4: detected capacity change from 0 to 1024 [ 113.217026][ T7122] EXT4-fs: dax option not supported [ 113.225061][ T7128] sd 0:0:1:0: device reset [ 113.359714][ T7138] loop1: detected capacity change from 0 to 128 [ 113.424025][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.460582][ T7143] loop1: detected capacity change from 0 to 2048 [ 113.505825][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.518785][ T7143] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.533554][ T7152] loop3: detected capacity change from 0 to 128 [ 113.908077][ T7161] loop2: detected capacity change from 0 to 128 [ 113.916526][ T7154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1339: bg 0: block 345: padding at end of block bitmap is not set [ 113.956346][ T7154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 113.969261][ T7154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.969261][ T7154] [ 113.994294][ T7163] netlink: 'syz.2.1346': attribute type 12 has an invalid length. [ 114.026062][ T3428] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 114.040306][ T3428] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.040306][ T3428] [ 114.061209][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 114.217192][ T3428] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 114.230491][ T3428] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.230491][ T3428] [ 114.240401][ T3428] EXT4-fs (loop1): Total free blocks count 0 [ 114.246713][ T3428] EXT4-fs (loop1): Free/Dirty block details [ 114.252821][ T3428] EXT4-fs (loop1): free_blocks=0 [ 114.351418][ T7177] loop2: detected capacity change from 0 to 128 [ 114.432153][ T7181] loop4: detected capacity change from 0 to 512 [ 114.439855][ T7181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.449587][ T7181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.503131][ T7181] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.517553][ T7181] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1351: Failed to acquire dquot type 1 [ 114.537228][ T7181] EXT4-fs (loop4): 1 truncate cleaned up [ 114.544585][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.759563][ T7197] netlink: 'syz.3.1358': attribute type 12 has an invalid length. [ 114.822977][ T7183] loop2: detected capacity change from 0 to 2048 [ 114.827729][ T7125] syz.0.1336 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 114.841296][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.0.1336 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 114.841364][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 114.841382][ T7125] Call Trace: [ 114.841389][ T7125] [ 114.841398][ T7125] __dump_stack+0x1d/0x30 [ 114.841426][ T7125] dump_stack_lvl+0xe8/0x140 [ 114.841470][ T7125] dump_stack+0x15/0x1b [ 114.841493][ T7125] dump_header+0x81/0x220 [ 114.841535][ T7125] oom_kill_process+0x334/0x3f0 [ 114.841635][ T7125] out_of_memory+0x979/0xb80 [ 114.841670][ T7125] ? css_next_descendant_pre+0x138/0x160 [ 114.841727][ T7125] mem_cgroup_out_of_memory+0x13d/0x190 [ 114.841819][ T7125] try_charge_memcg+0x5e2/0x870 [ 114.841885][ T7125] charge_memcg+0x51/0xc0 [ 114.841971][ T7125] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 114.842002][ T7125] __read_swap_cache_async+0x1df/0x350 [ 114.842045][ T7125] swap_cluster_readahead+0x277/0x3e0 [ 114.842095][ T7125] swapin_readahead+0xde/0x6f0 [ 114.842129][ T7125] ? __filemap_get_folio+0x49f/0x650 [ 114.842172][ T7125] ? swap_cache_get_folio+0x77/0x200 [ 114.842257][ T7125] do_swap_page+0x301/0x2460 [ 114.842297][ T7125] ? cgroup_rstat_updated+0xa3/0x510 [ 114.842343][ T7125] ? __pfx_default_wake_function+0x10/0x10 [ 114.842446][ T7125] handle_mm_fault+0xb60/0x2ae0 [ 114.842551][ T7125] ? mas_walk+0xf2/0x120 [ 114.842589][ T7125] do_user_addr_fault+0x636/0x1090 [ 114.842650][ T7125] ? switch_fpu_return+0xe/0x20 [ 114.842687][ T7125] ? fpregs_assert_state_consistent+0x84/0xa0 [ 114.842742][ T7125] exc_page_fault+0x54/0xc0 [ 114.842768][ T7125] asm_exc_page_fault+0x26/0x30 [ 114.842795][ T7125] RIP: 0033:0x7f137c395388 [ 114.842815][ T7125] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 3a 28 35 00 00 0f 8e 09 fe ff ff e8 f3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 [ 114.842872][ T7125] RSP: 002b:00007ffedfb5d8d0 EFLAGS: 00010206 [ 114.842892][ T7125] RAX: 000000000001bff2 RBX: 00007f137c6e7ba0 RCX: 000000000001bd50 [ 114.842910][ T7125] RDX: 00000000000002a2 RSI: 00007ffedfb5d8b0 RDI: 0000000000000001 [ 114.842927][ T7125] RBP: 00007f137c6e7ba0 R08: 00000000282f0897 R09: 7fffffffffffffff [ 114.842944][ T7125] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001c6d4 [ 114.842971][ T7125] R13: 00007f137c6e6240 R14: ffffffffffffffff R15: 00007ffedfb5d9e0 [ 114.842996][ T7125] [ 114.843002][ T7125] memory: usage 307200kB, limit 307200kB, failcnt 3171 [ 115.084538][ T7206] loop3: detected capacity change from 0 to 128 [ 115.087099][ T7125] memory+swap: usage 323836kB, limit 9007199254740988kB, failcnt 0 [ 115.101398][ T7125] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 115.108934][ T7125] Memory cgroup stats for /syz0: [ 115.109345][ T7125] cache 0 [ 115.117413][ T7125] rss 0 [ 115.120216][ T7125] shmem 0 [ 115.123259][ T7125] mapped_file 0 [ 115.126967][ T7125] dirty 0 [ 115.130027][ T7125] writeback 4096 [ 115.133840][ T7125] workingset_refault_anon 499 [ 115.138729][ T7125] workingset_refault_file 376 [ 115.143521][ T7125] swap 17035264 [ 115.147026][ T7125] swapcached 16384 [ 115.150855][ T7125] pgpgin 100919 [ 115.154516][ T7125] pgpgout 100915 [ 115.158163][ T7125] pgfault 88348 [ 115.161798][ T7125] pgmajfault 170 [ 115.165410][ T7125] inactive_anon 4096 [ 115.169574][ T7125] active_anon 12288 [ 115.173569][ T7125] inactive_file 0 [ 115.177409][ T7125] active_file 0 [ 115.180958][ T7125] unevictable 0 [ 115.184431][ T7125] hierarchical_memory_limit 314572800 [ 115.189962][ T7125] hierarchical_memsw_limit 9223372036854771712 [ 115.196332][ T7125] total_cache 0 [ 115.199843][ T7125] total_rss 0 [ 115.203154][ T7125] total_shmem 0 [ 115.206657][ T7125] total_mapped_file 0 [ 115.210656][ T7125] total_dirty 0 [ 115.214213][ T7125] total_writeback 4096 [ 115.218423][ T7125] total_workingset_refault_anon 499 [ 115.223916][ T7125] total_workingset_refault_file 376 [ 115.229271][ T7125] total_swap 17035264 [ 115.233268][ T7125] total_swapcached 16384 [ 115.237670][ T7125] total_pgpgin 100919 [ 115.241692][ T7125] total_pgpgout 100915 [ 115.245925][ T7125] total_pgfault 88348 [ 115.250009][ T7125] total_pgmajfault 170 [ 115.254172][ T7125] total_inactive_anon 4096 [ 115.258655][ T7125] total_active_anon 12288 [ 115.263004][ T7125] total_inactive_file 0 [ 115.267198][ T7125] total_active_file 0 [ 115.271371][ T7125] total_unevictable 0 [ 115.275456][ T7125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1336,pid=7125,uid=0 [ 115.290188][ T7125] Memory cgroup out of memory: Killed process 7125 (syz.0.1336) total-vm:98116kB, anon-rss:1064kB, file-rss:26540kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 115.322072][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.479779][ T7213] loop2: detected capacity change from 0 to 128 [ 115.794530][ T7223] loop4: detected capacity change from 0 to 512 [ 115.814166][ T7223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.825895][ T7223] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.870555][ T7223] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 115.916403][ T7223] EXT4-fs (loop4): 1 truncate cleaned up [ 115.926205][ T7223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.077774][ T7228] netlink: 'syz.0.1366': attribute type 13 has an invalid length. [ 116.112654][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.179390][ T7236] loop4: detected capacity change from 0 to 128 [ 116.381062][ T7248] netlink: 'syz.3.1374': attribute type 12 has an invalid length. [ 116.405728][ T7243] __nla_validate_parse: 6 callbacks suppressed [ 116.405795][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 116.463234][ T7252] loop3: detected capacity change from 0 to 2048 [ 116.506557][ T7252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.526947][ T7252] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.570391][ T7261] netlink: 'syz.4.1379': attribute type 13 has an invalid length. [ 116.580537][ T7268] loop2: detected capacity change from 0 to 128 [ 116.817875][ T7274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1382'. [ 116.932408][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 116.976508][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 856 with error 117 [ 116.989221][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.989221][ T31] [ 117.262652][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 117.262736][ T29] audit: type=1326 audit(1747687670.836:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.307047][ T29] audit: type=1326 audit(1747687670.866:13400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.330726][ T29] audit: type=1326 audit(1747687670.866:13401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.354378][ T29] audit: type=1326 audit(1747687670.866:13402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.378045][ T29] audit: type=1326 audit(1747687670.866:13403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.401870][ T29] audit: type=1326 audit(1747687670.866:13404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.425668][ T29] audit: type=1326 audit(1747687670.876:13405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.449553][ T29] audit: type=1326 audit(1747687670.876:13406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.519711][ T7288] loop1: detected capacity change from 0 to 512 [ 117.535696][ T29] audit: type=1326 audit(1747687670.886:13407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.559287][ T29] audit: type=1326 audit(1747687670.886:13408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 117.570311][ T7288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.614122][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1388'. [ 117.624040][ T7288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.635359][ T7288] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.641844][ T7292] loop2: detected capacity change from 0 to 256 [ 117.642773][ T7288] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1387: Failed to acquire dquot type 1 [ 117.665698][ T7292] vfat: Unknown parameter '0x0000000000000014' [ 117.677501][ T7288] EXT4-fs (loop1): 1 truncate cleaned up [ 117.684067][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.731849][ T7300] netlink: 'syz.4.1391': attribute type 13 has an invalid length. [ 117.761673][ T7306] loop4: detected capacity change from 0 to 128 [ 117.850059][ T7310] loop4: detected capacity change from 0 to 128 [ 117.986609][ T7320] loop4: detected capacity change from 0 to 128 [ 117.996739][ T7251] syz.3.1376 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 117.996770][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.3.1376 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 117.996802][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.996831][ T7251] Call Trace: [ 117.996840][ T7251] [ 117.996849][ T7251] __dump_stack+0x1d/0x30 [ 117.996876][ T7251] dump_stack_lvl+0xe8/0x140 [ 117.996902][ T7251] dump_stack+0x15/0x1b [ 117.996930][ T7251] dump_header+0x81/0x220 [ 117.996971][ T7251] oom_kill_process+0x334/0x3f0 [ 117.997007][ T7251] out_of_memory+0x979/0xb80 [ 117.997053][ T7251] ? css_next_descendant_pre+0x138/0x160 [ 117.997081][ T7251] mem_cgroup_out_of_memory+0x13d/0x190 [ 117.997129][ T7251] try_charge_memcg+0x5e2/0x870 [ 117.997174][ T7251] charge_memcg+0x51/0xc0 [ 117.997242][ T7251] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 117.997282][ T7251] __read_swap_cache_async+0x1df/0x350 [ 117.997375][ T7251] swap_cluster_readahead+0x277/0x3e0 [ 117.997404][ T7251] swapin_readahead+0xde/0x6f0 [ 117.997434][ T7251] ? __filemap_get_folio+0x49f/0x650 [ 117.997471][ T7251] ? swap_cache_get_folio+0x77/0x200 [ 117.997502][ T7251] do_swap_page+0x301/0x2460 [ 117.997583][ T7251] ? cgroup_rstat_updated+0xa3/0x510 [ 117.997625][ T7251] ? __pfx_default_wake_function+0x10/0x10 [ 117.997652][ T7251] handle_mm_fault+0xb60/0x2ae0 [ 117.997703][ T7251] ? mas_walk+0xf2/0x120 [ 117.997737][ T7251] do_user_addr_fault+0x636/0x1090 [ 117.997780][ T7251] ? switch_fpu_return+0xe/0x20 [ 117.997886][ T7251] ? fpregs_assert_state_consistent+0x84/0xa0 [ 117.997938][ T7251] exc_page_fault+0x54/0xc0 [ 117.998014][ T7251] asm_exc_page_fault+0x26/0x30 [ 117.998034][ T7251] RIP: 0033:0x7f8408dd53ac [ 117.998051][ T7251] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 117.998069][ T7251] RSP: 002b:00007fff93f02d20 EFLAGS: 00010206 [ 117.998084][ T7251] RAX: 0000000000000000 RBX: 00007f8409125fa0 RCX: 0000000000000000 [ 117.998096][ T7251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557c65f808 [ 117.998108][ T7251] RBP: 00007f8409127ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 117.998272][ T7251] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001d3cc [ 117.998289][ T7251] R13: 00007f8409126240 R14: ffffffffffffffff R15: 00007fff93f02e30 [ 117.998314][ T7251] [ 117.998333][ T7251] memory: usage 307200kB, limit 307200kB, failcnt 568 [ 117.998350][ T7251] memory+swap: usage 308452kB, limit 9007199254740988kB, failcnt 0 [ 117.998367][ T7251] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 117.998379][ T7251] Memory cgroup stats for /syz3: [ 118.002686][ T7251] cache 12288 [ 118.066183][ T7251] rss 0 [ 118.066194][ T7251] shmem 0 [ 118.066202][ T7251] mapped_file 0 [ 118.066210][ T7251] dirty 0 [ 118.066217][ T7251] writeback 0 [ 118.066225][ T7251] workingset_refault_anon 258 [ 118.066234][ T7251] workingset_refault_file 567 [ 118.301272][ T7251] swap 1282048 [ 118.301285][ T7251] swapcached 4096 [ 118.301295][ T7251] pgpgin 64192 [ 118.301303][ T7251] pgpgout 64188 [ 118.301312][ T7251] pgfault 77077 [ 118.301321][ T7251] pgmajfault 139 [ 118.301330][ T7251] inactive_anon 4096 [ 118.326492][ T7251] active_anon 0 [ 118.326506][ T7251] inactive_file 12288 [ 118.326515][ T7251] active_file 0 [ 118.326546][ T7251] unevictable 0 [ 118.326555][ T7251] hierarchical_memory_limit 314572800 [ 118.326567][ T7251] hierarchical_memsw_limit 9223372036854771712 [ 118.326580][ T7251] total_cache 12288 [ 118.326590][ T7251] total_rss 0 [ 118.326642][ T7251] total_shmem 0 [ 118.363576][ T7251] total_mapped_file 0 [ 118.363586][ T7251] total_dirty 0 [ 118.363593][ T7251] total_writeback 0 [ 118.363600][ T7251] total_workingset_refault_anon 258 [ 118.363608][ T7251] total_workingset_refault_file 567 [ 118.363619][ T7251] total_swap 1282048 [ 118.363628][ T7251] total_swapcached 4096 [ 118.363685][ T7251] total_pgpgin 64192 [ 118.363694][ T7251] total_pgpgout 64188 [ 118.363772][ T7251] total_pgfault 77077 [ 118.363779][ T7251] total_pgmajfault 139 [ 118.363786][ T7251] total_inactive_anon 4096 [ 118.363794][ T7251] total_active_anon 0 [ 118.363803][ T7251] total_inactive_file 12288 [ 118.363888][ T7251] total_active_file 0 [ 118.363898][ T7251] total_unevictable 0 [ 118.363941][ T7251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1376,pid=7251,uid=0 [ 118.364087][ T7251] Memory cgroup out of memory: Killed process 7251 (syz.3.1376) total-vm:98116kB, anon-rss:936kB, file-rss:26536kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 118.459345][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.556650][ T7332] netlink: 'syz.4.1403': attribute type 12 has an invalid length. [ 119.007609][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.138875][ T7353] loop2: detected capacity change from 0 to 128 [ 119.259973][ T7366] netlink: 'syz.3.1416': attribute type 12 has an invalid length. [ 119.434931][ T7367] bond1: entered promiscuous mode [ 119.440120][ T7367] bond1: entered allmulticast mode [ 119.470267][ T7367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.535136][ T7373] loop1: detected capacity change from 0 to 256 [ 119.564710][ T7373] vfat: Unknown parameter '0x0000000000000014' [ 119.611557][ T7381] loop4: detected capacity change from 0 to 128 [ 119.722967][ T7387] block device autoloading is deprecated and will be removed. [ 119.765869][ T7387] syz.2.1424: attempt to access beyond end of device [ 119.765869][ T7387] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.808132][ T7362] loop0: detected capacity change from 0 to 2048 [ 120.031915][ T7397] loop3: detected capacity change from 0 to 8192 [ 120.092815][ T7401] netlink: 'syz.0.1429': attribute type 12 has an invalid length. [ 120.279659][ T7409] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1432'. [ 120.328530][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 120.341365][ T10] IPVS: starting estimator thread 0... [ 120.349440][ T7414] loop2: detected capacity change from 0 to 1024 [ 120.351494][ T7416] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 120.364090][ T7416] netlink: 'syz.3.1433': attribute type 2 has an invalid length. [ 120.366121][ T7414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.385983][ T7414] EXT4-fs: Ignoring removed bh option [ 120.433388][ T7411] loop3: detected capacity change from 0 to 1024 [ 120.436929][ T7414] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.452267][ T7411] EXT4-fs: inline encryption not supported [ 120.455023][ T7415] IPVS: using max 2352 ests per chain, 117600 per kthread [ 120.459041][ T7411] journal_path: Lookup failure for './file0' [ 120.472162][ T7411] EXT4-fs: error: could not find journal device path [ 120.520103][ T7423] sd 0:0:1:0: device reset [ 120.559468][ T7414] EXT4-fs error (device loop2): ext4_xattr_block_list:762: inode #15: comm syz.2.1434: corrupted xattr block 145: invalid header [ 120.604537][ T7414] EXT4-fs (loop2): Remounting filesystem read-only [ 120.712734][ T7433] loop1: detected capacity change from 0 to 256 [ 120.766729][ T7433] vfat: Unknown parameter '0x0000000000000014' [ 120.777193][ T7435] FAULT_INJECTION: forcing a failure. [ 120.777193][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 120.789892][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.3.1439 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 120.789919][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.789932][ T7435] Call Trace: [ 120.789938][ T7435] [ 120.789948][ T7435] __dump_stack+0x1d/0x30 [ 120.789975][ T7435] dump_stack_lvl+0xe8/0x140 [ 120.790003][ T7435] dump_stack+0x15/0x1b [ 120.790107][ T7435] should_fail_ex+0x265/0x280 [ 120.790146][ T7435] should_failslab+0x8c/0xb0 [ 120.790192][ T7435] kmem_cache_alloc_node_noprof+0x57/0x320 [ 120.790220][ T7435] ? __alloc_skb+0x101/0x320 [ 120.790357][ T7435] __alloc_skb+0x101/0x320 [ 120.790401][ T7435] mpls_netconf_notify_devconf+0x46/0x100 [ 120.790431][ T7435] mpls_dev_sysctl_unregister+0x6b/0x80 [ 120.790452][ T7435] ? __pfx_mpls_dev_notify+0x10/0x10 [ 120.790531][ T7435] mpls_dev_notify+0x7a7/0x8d0 [ 120.790557][ T7435] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 120.790590][ T7435] ? batadv_hard_if_event+0x217/0x1070 [ 120.790612][ T7435] ? ovs_netdev_get_vport+0x5a/0x60 [ 120.790635][ T7435] ? __pfx_mpls_dev_notify+0x10/0x10 [ 120.790690][ T7435] raw_notifier_call_chain+0x6f/0x1b0 [ 120.790717][ T7435] ? call_netdevice_notifiers_info+0x9c/0x100 [ 120.790804][ T7435] call_netdevice_notifiers_info+0xae/0x100 [ 120.790833][ T7435] unregister_netdevice_many_notify+0xd9a/0x16a0 [ 120.790928][ T7435] unregister_netdevice_queue+0x1f5/0x220 [ 120.790952][ T7435] vti6_siocdevprivate+0x273/0x8e0 [ 120.791058][ T7435] dev_ifsioc+0x8f8/0xaa0 [ 120.791088][ T7435] dev_ioctl+0x78d/0x960 [ 120.791111][ T7435] sock_ioctl+0x593/0x610 [ 120.791137][ T7435] ? __pfx_sock_ioctl+0x10/0x10 [ 120.791174][ T7435] __se_sys_ioctl+0xce/0x140 [ 120.791332][ T7435] __x64_sys_ioctl+0x43/0x50 [ 120.791361][ T7435] x64_sys_call+0x19a8/0x2fb0 [ 120.791420][ T7435] do_syscall_64+0xd0/0x1a0 [ 120.791445][ T7435] ? clear_bhb_loop+0x40/0x90 [ 120.791538][ T7435] ? clear_bhb_loop+0x40/0x90 [ 120.791561][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.791602][ T7435] RIP: 0033:0x7f8408efe969 [ 120.791620][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.791639][ T7435] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.791771][ T7435] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 120.791789][ T7435] RDX: 0000200000000680 RSI: 00000000000089f2 RDI: 0000000000000005 [ 120.791805][ T7435] RBP: 00007f8407567090 R08: 0000000000000000 R09: 0000000000000000 [ 120.791819][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.791831][ T7435] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 120.791850][ T7435] [ 121.179693][ T3318] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 121.198235][ T7441] netlink: 'syz.4.1440': attribute type 13 has an invalid length. [ 121.299627][ T7445] netlink: 'syz.0.1441': attribute type 13 has an invalid length. [ 121.575016][ T7467] FAULT_INJECTION: forcing a failure. [ 121.575016][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.588409][ T7467] CPU: 0 UID: 0 PID: 7467 Comm: syz.0.1449 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 121.588446][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.588463][ T7467] Call Trace: [ 121.588472][ T7467] [ 121.588481][ T7467] __dump_stack+0x1d/0x30 [ 121.588606][ T7467] dump_stack_lvl+0xe8/0x140 [ 121.588632][ T7467] dump_stack+0x15/0x1b [ 121.588696][ T7467] should_fail_ex+0x265/0x280 [ 121.588742][ T7467] should_fail+0xb/0x20 [ 121.588815][ T7467] should_fail_usercopy+0x1a/0x20 [ 121.588847][ T7467] _copy_from_user+0x1c/0xb0 [ 121.588877][ T7467] restore_altstack+0x4b/0x2d0 [ 121.588911][ T7467] ? __set_task_blocked+0x23a/0x2a0 [ 121.588987][ T7467] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 121.589033][ T7467] ? _raw_spin_unlock_irq+0x26/0x50 [ 121.589089][ T7467] ? signal_setup_done+0x266/0x290 [ 121.589115][ T7467] ? fpu__clear_user_states+0x3b/0x280 [ 121.589282][ T7467] ? __secure_computing+0x82/0x150 [ 121.589316][ T7467] x64_sys_call+0x2e8a/0x2fb0 [ 121.589346][ T7467] do_syscall_64+0xd0/0x1a0 [ 121.589382][ T7467] ? clear_bhb_loop+0x40/0x90 [ 121.589412][ T7467] ? clear_bhb_loop+0x40/0x90 [ 121.589441][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.589471][ T7467] RIP: 0033:0x7f137c45ab39 [ 121.589490][ T7467] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 121.589590][ T7467] RSP: 002b:00007f137ab26a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 121.589676][ T7467] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c45ab39 [ 121.589695][ T7467] RDX: 00007f137ab26a80 RSI: 00007f137ab26bb0 RDI: 0000000000000021 [ 121.589710][ T7467] RBP: 00007f137ab27090 R08: 0000000000000000 R09: 0000000000000000 [ 121.589726][ T7467] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 121.589741][ T7467] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 121.589765][ T7467] [ 121.871231][ T7476] loop0: detected capacity change from 0 to 128 [ 121.891266][ T7461] loop1: detected capacity change from 0 to 2048 [ 121.956995][ T7482] loop4: detected capacity change from 0 to 512 [ 121.964810][ T7482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.973068][ T7482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.982999][ T7482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.992184][ T7482] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1456: Failed to acquire dquot type 1 [ 122.004649][ T7482] EXT4-fs (loop4): 1 truncate cleaned up [ 122.016767][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.189265][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.189265][ T7476] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 122.268581][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 122.268600][ T29] audit: type=1326 audit(1747687675.846:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73df3c5927 code=0x7ffc0000 [ 122.379339][ T29] audit: type=1326 audit(1747687675.876:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73df36ab39 code=0x7ffc0000 [ 122.403129][ T29] audit: type=1326 audit(1747687675.876:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73df3c5927 code=0x7ffc0000 [ 122.426744][ T29] audit: type=1326 audit(1747687675.876:14020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73df36ab39 code=0x7ffc0000 [ 122.450305][ T29] audit: type=1326 audit(1747687675.876:14021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f73df3ce969 code=0x7ffc0000 [ 122.473728][ T29] audit: type=1326 audit(1747687675.886:14022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ba8fe969 code=0x7ffc0000 [ 122.497385][ T29] audit: type=1326 audit(1747687675.886:14023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ba8fe969 code=0x7ffc0000 [ 122.522140][ T29] audit: type=1326 audit(1747687675.886:14024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73df3c5927 code=0x7ffc0000 [ 122.527218][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.527218][ T7476] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 122.546443][ T29] audit: type=1326 audit(1747687675.886:14025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73df36ab39 code=0x7ffc0000 [ 122.585973][ T29] audit: type=1326 audit(1747687675.886:14026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f73df3ce969 code=0x7ffc0000 [ 122.609827][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.609827][ T7476] loop0: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 122.645840][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.645840][ T7476] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 122.687028][ T7485] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 122.694896][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1457'. [ 122.706287][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.706287][ T7476] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 122.741126][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.741126][ T7476] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 122.826377][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.826377][ T7476] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 122.856451][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.856451][ T7476] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 122.870277][ T7476] syz.0.1453: attempt to access beyond end of device [ 122.870277][ T7476] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 122.876341][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.979583][ T7516] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 123.036905][ T7520] FAULT_INJECTION: forcing a failure. [ 123.036905][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 123.049683][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.0.1469 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 123.049725][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.049741][ T7520] Call Trace: [ 123.049747][ T7520] [ 123.049755][ T7520] __dump_stack+0x1d/0x30 [ 123.049777][ T7520] dump_stack_lvl+0xe8/0x140 [ 123.049880][ T7520] dump_stack+0x15/0x1b [ 123.049897][ T7520] should_fail_ex+0x265/0x280 [ 123.049930][ T7520] ? __request_module+0x1c4/0x3e0 [ 123.049960][ T7520] should_failslab+0x8c/0xb0 [ 123.049996][ T7520] ? dev_load+0xa3/0xc0 [ 123.050031][ T7520] __kmalloc_cache_noprof+0x4c/0x320 [ 123.050073][ T7520] ? dev_load+0xa3/0xc0 [ 123.050105][ T7520] __request_module+0x1c4/0x3e0 [ 123.050130][ T7520] ? security_capable+0x83/0x90 [ 123.050181][ T7520] dev_load+0xa3/0xc0 [ 123.050202][ T7520] dev_ioctl+0x777/0x960 [ 123.050268][ T7520] sock_ioctl+0x593/0x610 [ 123.050303][ T7520] ? __pfx_sock_ioctl+0x10/0x10 [ 123.050331][ T7520] __se_sys_ioctl+0xce/0x140 [ 123.050399][ T7520] __x64_sys_ioctl+0x43/0x50 [ 123.050421][ T7520] x64_sys_call+0x19a8/0x2fb0 [ 123.050447][ T7520] do_syscall_64+0xd0/0x1a0 [ 123.050471][ T7520] ? clear_bhb_loop+0x40/0x90 [ 123.050494][ T7520] ? clear_bhb_loop+0x40/0x90 [ 123.050568][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.050629][ T7520] RIP: 0033:0x7f137c4be969 [ 123.050649][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.050754][ T7520] RSP: 002b:00007f137ab27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.050780][ T7520] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c4be969 [ 123.050794][ T7520] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 123.050806][ T7520] RBP: 00007f137ab27090 R08: 0000000000000000 R09: 0000000000000000 [ 123.050897][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.050990][ T7520] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 123.051010][ T7520] [ 123.298402][ T7525] loop0: detected capacity change from 0 to 128 [ 123.329003][ T7529] loop4: detected capacity change from 0 to 512 [ 123.339474][ T7531] loop0: detected capacity change from 0 to 128 [ 123.364124][ T7529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.373359][ T7529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.403096][ T7529] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.421649][ T7529] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1473: Failed to acquire dquot type 1 [ 123.442688][ T7529] EXT4-fs (loop4): 1 truncate cleaned up [ 123.449784][ T7529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.549545][ T7546] sd 0:0:1:0: device reset [ 123.638776][ T7549] loop1: detected capacity change from 0 to 8192 [ 123.704197][ T7559] loop1: detected capacity change from 0 to 128 [ 123.732947][ T7561] loop0: detected capacity change from 0 to 2048 [ 123.747301][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.944609][ T7573] sd 0:0:1:0: device reset [ 124.141709][ T7579] loop2: detected capacity change from 0 to 8192 [ 124.197124][ T7583] FAULT_INJECTION: forcing a failure. [ 124.197124][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 124.209925][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.3.1498 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 124.209958][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.209975][ T7583] Call Trace: [ 124.209983][ T7583] [ 124.209994][ T7583] __dump_stack+0x1d/0x30 [ 124.210084][ T7583] dump_stack_lvl+0xe8/0x140 [ 124.210110][ T7583] dump_stack+0x15/0x1b [ 124.210133][ T7583] should_fail_ex+0x265/0x280 [ 124.210248][ T7583] should_failslab+0x8c/0xb0 [ 124.210290][ T7583] __kmalloc_cache_node_noprof+0x54/0x320 [ 124.210320][ T7583] ? __get_vm_area_node+0x106/0x1d0 [ 124.210373][ T7583] __get_vm_area_node+0x106/0x1d0 [ 124.210405][ T7583] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 124.210431][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.210479][ T7583] ? avc_has_perm_noaudit+0x1b1/0x200 [ 124.210542][ T7583] ? selinux_capable+0x1f9/0x270 [ 124.210572][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.210600][ T7583] __vmalloc_noprof+0x5f/0x70 [ 124.210643][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.210685][ T7583] bpf_prog_alloc_no_stats+0x47/0x390 [ 124.210728][ T7583] ? bpf_prog_alloc+0x2a/0x150 [ 124.210789][ T7583] bpf_prog_alloc+0x3c/0x150 [ 124.210819][ T7583] bpf_prog_load+0x514/0x1070 [ 124.210937][ T7583] ? security_bpf+0x2b/0x90 [ 124.210975][ T7583] __sys_bpf+0x51d/0x790 [ 124.211095][ T7583] __x64_sys_bpf+0x41/0x50 [ 124.211131][ T7583] x64_sys_call+0x2478/0x2fb0 [ 124.211153][ T7583] do_syscall_64+0xd0/0x1a0 [ 124.211213][ T7583] ? clear_bhb_loop+0x40/0x90 [ 124.211243][ T7583] ? clear_bhb_loop+0x40/0x90 [ 124.211268][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.211289][ T7583] RIP: 0033:0x7f8408efe969 [ 124.211389][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.211411][ T7583] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.211436][ T7583] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 124.211453][ T7583] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 124.211470][ T7583] RBP: 00007f8407567090 R08: 0000000000000000 R09: 0000000000000000 [ 124.211483][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.211500][ T7583] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 124.211570][ T7583] [ 124.211578][ T7583] syz.3.1498: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 124.277823][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.283582][ T7583] ,cpuset=/,mems_allowed=0 [ 124.476653][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.3.1498 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 124.476730][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.476744][ T7583] Call Trace: [ 124.476752][ T7583] [ 124.476761][ T7583] __dump_stack+0x1d/0x30 [ 124.476784][ T7583] dump_stack_lvl+0xe8/0x140 [ 124.476811][ T7583] dump_stack+0x15/0x1b [ 124.476829][ T7583] warn_alloc+0x12b/0x1a0 [ 124.476862][ T7583] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 124.476934][ T7583] ? avc_has_perm_noaudit+0x1b1/0x200 [ 124.476995][ T7583] ? selinux_capable+0x1f9/0x270 [ 124.477026][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.477063][ T7583] __vmalloc_noprof+0x5f/0x70 [ 124.477172][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.477263][ T7583] bpf_prog_alloc_no_stats+0x47/0x390 [ 124.477300][ T7583] ? bpf_prog_alloc+0x2a/0x150 [ 124.477338][ T7583] bpf_prog_alloc+0x3c/0x150 [ 124.477377][ T7583] bpf_prog_load+0x514/0x1070 [ 124.477442][ T7583] ? security_bpf+0x2b/0x90 [ 124.477621][ T7583] __sys_bpf+0x51d/0x790 [ 124.477671][ T7583] __x64_sys_bpf+0x41/0x50 [ 124.477727][ T7583] x64_sys_call+0x2478/0x2fb0 [ 124.477755][ T7583] do_syscall_64+0xd0/0x1a0 [ 124.477786][ T7583] ? clear_bhb_loop+0x40/0x90 [ 124.477814][ T7583] ? clear_bhb_loop+0x40/0x90 [ 124.477843][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.477936][ T7583] RIP: 0033:0x7f8408efe969 [ 124.477955][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.477977][ T7583] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.477999][ T7583] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 124.478062][ T7583] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 124.478077][ T7583] RBP: 00007f8407567090 R08: 0000000000000000 R09: 0000000000000000 [ 124.478091][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.478105][ T7583] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 124.478129][ T7583] [ 124.478136][ T7583] Mem-Info: [ 124.693738][ T7583] active_anon:8300 inactive_anon:2 isolated_anon:0 [ 124.693738][ T7583] active_file:16291 inactive_file:10402 isolated_file:0 [ 124.693738][ T7583] unevictable:0 dirty:8375 writeback:0 [ 124.693738][ T7583] slab_reclaimable:3421 slab_unreclaimable:90972 [ 124.693738][ T7583] mapped:31887 shmem:4371 pagetables:846 [ 124.693738][ T7583] sec_pagetables:0 bounce:0 [ 124.693738][ T7583] kernel_misc_reclaimable:0 [ 124.693738][ T7583] free:1761638 free_pcp:50330 free_cma:0 [ 124.739759][ T7583] Node 0 active_anon:33200kB inactive_anon:8kB active_file:65164kB inactive_file:41608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127548kB dirty:33500kB writeback:0kB shmem:17484kB writeback_tmp:0kB kernel_stack:2896kB pagetables:3384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.768953][ T7583] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.795982][ T7583] lowmem_reserve[]: 0 2884 7863 7863 [ 124.801406][ T7583] Node 0 DMA32 free:2950028kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 124.829987][ T7583] lowmem_reserve[]: 0 0 4978 4978 [ 124.835086][ T7583] Node 0 Normal free:4081164kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:33200kB inactive_anon:8kB active_file:65164kB inactive_file:41608kB unevictable:0kB writepending:33500kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:197756kB local_pcp:100912kB free_cma:0kB [ 124.865810][ T7583] lowmem_reserve[]: 0 0 0 0 [ 124.870441][ T7583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.883258][ T7583] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950028kB [ 124.899435][ T7583] Node 0 Normal: 767*4kB (U) 542*8kB (UE) 782*16kB (UME) 818*32kB (UME) 496*64kB (UM) 286*128kB (UME) 49*256kB (UME) 167*512kB (UM) 130*1024kB (UM) 72*2048kB (UE) 876*4096kB (UM) = 4081164kB [ 124.918810][ T7583] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 124.928249][ T7583] 31119 total pagecache pages [ 124.932965][ T7583] 14 pages in swap cache [ 124.937321][ T7583] Free swap = 124940kB [ 124.941491][ T7583] Total swap = 124996kB [ 124.945700][ T7583] 2097051 pages RAM [ 124.949549][ T7583] 0 pages HighMem/MovableOnly [ 124.954302][ T7583] 80260 pages reserved [ 124.989660][ T7593] xt_TCPMSS: Only works on TCP SYN packets [ 125.005259][ T7593] loop2: detected capacity change from 0 to 1764 [ 125.031467][ T7595] netlink: 'syz.3.1501': attribute type 13 has an invalid length. [ 125.042072][ T7593] ISOFS: Unable to identify CD-ROM format. [ 125.060440][ T3428] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.076754][ T3428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 125.089380][ T3428] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.089380][ T3428] [ 125.099253][ T3428] EXT4-fs (loop0): Total free blocks count 0 [ 125.105388][ T3428] EXT4-fs (loop0): Free/Dirty block details [ 125.111505][ T3428] EXT4-fs (loop0): free_blocks=2415919504 [ 125.117349][ T3428] EXT4-fs (loop0): dirty_blocks=16400 [ 125.122751][ T3428] EXT4-fs (loop0): Block reservation details [ 125.128939][ T3428] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 125.130530][ T7600] syzkaller1: entered promiscuous mode [ 125.140887][ T7600] syzkaller1: entered allmulticast mode [ 125.151841][ T3428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 125.190673][ T7600] loop1: detected capacity change from 0 to 256 [ 125.306814][ T7610] sd 0:0:1:0: device reset [ 125.369636][ T7615] loop0: detected capacity change from 0 to 256 [ 125.387673][ T7617] loop2: detected capacity change from 0 to 512 [ 125.397062][ T7615] vfat: Unknown parameter '0xffffffffffffffff' [ 125.400309][ T7619] sd 0:0:1:0: device reset [ 125.409127][ T7617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.424742][ T7617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.439431][ T7617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.473814][ T7617] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1508: Failed to acquire dquot type 1 [ 125.506371][ T7617] EXT4-fs (loop2): 1 truncate cleaned up [ 125.516320][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.647682][ T7632] loop3: detected capacity change from 0 to 8192 [ 125.714370][ T7641] sd 0:0:1:0: device reset [ 125.803981][ T7647] netlink: 'syz.1.1520': attribute type 12 has an invalid length. [ 125.857959][ T7654] sd 0:0:1:0: device reset [ 125.880366][ T7662] loop0: detected capacity change from 0 to 256 [ 125.887558][ T7662] vfat: Unknown parameter '0xffffffffffffffff' [ 125.904251][ T7658] netlink: 'syz.4.1525': attribute type 13 has an invalid length. [ 126.013223][ T7673] loop4: detected capacity change from 0 to 128 [ 126.046176][ T7673] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.068123][ T7673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.159992][ T7677] loop3: detected capacity change from 0 to 512 [ 126.179747][ T7682] netlink: 'syz.0.1533': attribute type 12 has an invalid length. [ 126.181246][ T7677] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.221902][ T7677] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.237197][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.249160][ T7677] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 126.276802][ T7677] EXT4-fs (loop3): 1 truncate cleaned up [ 126.285639][ T7666] loop1: detected capacity change from 0 to 2048 [ 126.286730][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.290098][ T7688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.317450][ T7688] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.409989][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.503790][ T7700] sd 0:0:1:0: device reset [ 126.569293][ T7704] netlink: 'syz.0.1544': attribute type 12 has an invalid length. [ 126.654677][ T7716] loop2: detected capacity change from 0 to 512 [ 126.675919][ T7716] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.698414][ T7716] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.725777][ T7716] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 126.767472][ T7696] loop3: detected capacity change from 0 to 2048 [ 126.783346][ T7716] EXT4-fs (loop2): 1 truncate cleaned up [ 126.802804][ T7716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.878994][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.976619][ T7749] capability: warning: `syz.2.1555' uses 32-bit capabilities (legacy support in use) [ 127.044112][ T7755] sd 0:0:1:0: device reset [ 127.083773][ T7760] netlink: 'syz.1.1557': attribute type 12 has an invalid length. [ 127.138550][ T7765] loop1: detected capacity change from 0 to 512 [ 127.150348][ T7765] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.159014][ T7765] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.174162][ T7765] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 127.182958][ T7765] EXT4-fs (loop1): 1 truncate cleaned up [ 127.195839][ T7765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.285008][ T29] kauditd_printk_skb: 1612 callbacks suppressed [ 127.285027][ T29] audit: type=1326 audit(1747687680.856:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8408ef5927 code=0x7ffc0000 [ 127.315184][ T29] audit: type=1326 audit(1747687680.886:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8408e9ab39 code=0x7ffc0000 [ 127.315898][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.338823][ T29] audit: type=1326 audit(1747687680.886:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 127.338862][ T29] audit: type=1326 audit(1747687680.886:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8408ef5927 code=0x7ffc0000 [ 127.396004][ T29] audit: type=1326 audit(1747687680.886:15636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8408e9ab39 code=0x7ffc0000 [ 127.462278][ T7781] loop1: detected capacity change from 0 to 128 [ 127.485595][ T7776] loop4: detected capacity change from 0 to 2048 [ 127.498225][ T29] audit: type=1326 audit(1747687680.886:15637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 127.522297][ T29] audit: type=1326 audit(1747687680.926:15638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8408ef5927 code=0x7ffc0000 [ 127.546530][ T29] audit: type=1326 audit(1747687680.926:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8408e9ab39 code=0x7ffc0000 [ 127.570050][ T29] audit: type=1326 audit(1747687680.926:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8408efe969 code=0x7ffc0000 [ 127.593930][ T29] audit: type=1326 audit(1747687680.996:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8408ef5927 code=0x7ffc0000 [ 127.622883][ T7783] loop1: detected capacity change from 0 to 128 [ 127.739115][ T7793] netlink: 'syz.1.1573': attribute type 12 has an invalid length. [ 127.750066][ T7792] sd 0:0:1:0: device reset [ 127.845383][ T7802] loop1: detected capacity change from 0 to 512 [ 127.855281][ T7802] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.863503][ T7802] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.881094][ T7802] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 127.888204][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 127.888965][ T7802] EXT4-fs (loop1): 1 truncate cleaned up [ 127.901931][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 127.904276][ T7802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.007367][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.060634][ T7822] netlink: 'syz.0.1586': attribute type 12 has an invalid length. [ 128.069630][ T7818] xt_hashlimit: max too large, truncated to 1048576 [ 128.087943][ T7818] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 128.110038][ T7824] sd 0:0:1:0: device reset [ 128.243776][ T7812] loop4: detected capacity change from 0 to 2048 [ 128.386026][ T7840] syzkaller0: entered allmulticast mode [ 128.391882][ T7838] loop4: detected capacity change from 0 to 512 [ 128.392048][ T7840] syzkaller0: entered promiscuous mode [ 128.409314][ T7840] syzkaller0 (unregistering): left promiscuous mode [ 128.416114][ T7840] syzkaller0 (unregistering): left allmulticast mode [ 128.423494][ T7838] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.430343][ T7838] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.445291][ T7838] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 128.452668][ T7838] EXT4-fs (loop4): 1 truncate cleaned up [ 128.459515][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.510051][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.530739][ T7851] netlink: 'syz.4.1599': attribute type 12 has an invalid length. [ 128.550389][ T7849] loop3: detected capacity change from 0 to 2048 [ 128.578336][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.618008][ T7859] loop0: detected capacity change from 0 to 128 [ 129.221195][ T567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 129.245929][ T567] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 129.258518][ T567] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.258518][ T567] [ 129.268927][ T567] EXT4-fs (loop3): Total free blocks count 0 [ 129.274993][ T567] EXT4-fs (loop3): Free/Dirty block details [ 129.280932][ T567] EXT4-fs (loop3): free_blocks=2415919504 [ 129.286881][ T567] EXT4-fs (loop3): dirty_blocks=16400 [ 129.292279][ T567] EXT4-fs (loop3): Block reservation details [ 129.298534][ T567] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 129.319793][ T567] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 129.680560][ T7868] loop2: detected capacity change from 0 to 2048 [ 129.748162][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 129.778287][ T7881] loop3: detected capacity change from 0 to 512 [ 129.803928][ T7884] netlink: 'syz.1.1611': attribute type 12 has an invalid length. [ 129.827063][ T7881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.834129][ T7881] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.850299][ T7889] loop0: detected capacity change from 0 to 128 [ 129.867645][ T7887] FAULT_INJECTION: forcing a failure. [ 129.867645][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 129.880473][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.1.1613 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 129.880501][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 129.880518][ T7887] Call Trace: [ 129.880525][ T7887] [ 129.880532][ T7887] __dump_stack+0x1d/0x30 [ 129.880554][ T7887] dump_stack_lvl+0xe8/0x140 [ 129.880634][ T7887] dump_stack+0x15/0x1b [ 129.880668][ T7887] should_fail_ex+0x265/0x280 [ 129.880750][ T7887] should_failslab+0x8c/0xb0 [ 129.880783][ T7887] kmem_cache_alloc_noprof+0x50/0x310 [ 129.880803][ T7887] ? __anon_vma_prepare+0x70/0x2f0 [ 129.880862][ T7887] __anon_vma_prepare+0x70/0x2f0 [ 129.880891][ T7887] do_wp_page+0x17fa/0x23e0 [ 129.881062][ T7887] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 129.881145][ T7887] ? __rcu_read_lock+0x37/0x50 [ 129.881208][ T7887] handle_mm_fault+0x6dc/0x2ae0 [ 129.881241][ T7887] ? mas_walk+0xf2/0x120 [ 129.881287][ T7887] do_user_addr_fault+0x636/0x1090 [ 129.881381][ T7887] ? fpregs_assert_state_consistent+0x84/0xa0 [ 129.881432][ T7887] exc_page_fault+0x54/0xc0 [ 129.881452][ T7887] asm_exc_page_fault+0x26/0x30 [ 129.881473][ T7887] RIP: 0033:0x7eff045e0cc3 [ 129.881490][ T7887] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 129.881565][ T7887] RSP: 002b:00007eff02d864a0 EFLAGS: 00010202 [ 129.881581][ T7887] RAX: 0000000000000400 RBX: 00007eff02d86540 RCX: 00007efefa967000 [ 129.881594][ T7887] RDX: 00007eff02d866e0 RSI: 0000000000000011 RDI: 00007eff02d865e0 [ 129.881607][ T7887] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003c0 [ 129.881620][ T7887] R10: 00000000000003ce R11: 00007eff02d86540 R12: 0000000000000001 [ 129.881633][ T7887] R13: 00007eff047bbfc0 R14: 0000000000000020 R15: 00007eff02d865e0 [ 129.881697][ T7887] [ 129.881712][ T7887] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 130.077680][ T7887] loop1: detected capacity change from 0 to 512 [ 130.078852][ T7881] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 130.084292][ T7887] EXT4-fs: Ignoring removed orlov option [ 130.105274][ T7881] EXT4-fs (loop3): 1 truncate cleaned up [ 130.111380][ T7887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.121214][ T7881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.154374][ T7887] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 130.165847][ T7887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.172878][ T7887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1613: bg 0: block 248: padding at end of block bitmap is not set [ 130.197103][ T7887] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1613: Failed to acquire dquot type 1 [ 130.209428][ T7887] EXT4-fs (loop1): 1 truncate cleaned up [ 130.217523][ T7887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.249566][ T7896] loop2: detected capacity change from 0 to 512 [ 130.262735][ T7896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.276273][ T7896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.287635][ T7898] FAULT_INJECTION: forcing a failure. [ 130.287635][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.300935][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.0.1617 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 130.300963][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.301019][ T7898] Call Trace: [ 130.301026][ T7898] [ 130.301034][ T7898] __dump_stack+0x1d/0x30 [ 130.301056][ T7898] dump_stack_lvl+0xe8/0x140 [ 130.301132][ T7898] dump_stack+0x15/0x1b [ 130.301151][ T7898] should_fail_ex+0x265/0x280 [ 130.301239][ T7898] should_fail+0xb/0x20 [ 130.301280][ T7898] should_fail_usercopy+0x1a/0x20 [ 130.301318][ T7898] strncpy_from_user+0x25/0x230 [ 130.301363][ T7898] ? kmem_cache_alloc_noprof+0x186/0x310 [ 130.301382][ T7898] ? getname_flags+0x80/0x3b0 [ 130.301422][ T7898] getname_flags+0xae/0x3b0 [ 130.301601][ T7898] user_path_at+0x28/0x130 [ 130.301630][ T7898] do_faccessat+0x380/0x800 [ 130.301662][ T7898] __x64_sys_faccessat+0x41/0x50 [ 130.301779][ T7898] x64_sys_call+0x2802/0x2fb0 [ 130.301880][ T7898] do_syscall_64+0xd0/0x1a0 [ 130.301913][ T7898] ? clear_bhb_loop+0x40/0x90 [ 130.301939][ T7898] ? clear_bhb_loop+0x40/0x90 [ 130.302034][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.302056][ T7898] RIP: 0033:0x7f137c4be969 [ 130.302072][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.302093][ T7898] RSP: 002b:00007f137ab27038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 130.302118][ T7898] RAX: ffffffffffffffda RBX: 00007f137c6e5fa0 RCX: 00007f137c4be969 [ 130.302136][ T7898] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 130.302204][ T7898] RBP: 00007f137ab27090 R08: 0000000000000000 R09: 0000000000000000 [ 130.302286][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.302298][ T7898] R13: 0000000000000000 R14: 00007f137c6e5fa0 R15: 00007ffedfb5d768 [ 130.302328][ T7898] [ 130.304181][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.306512][ T7896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.511371][ T7896] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1616: Failed to acquire dquot type 1 [ 130.523324][ T7896] EXT4-fs (loop2): 1 truncate cleaned up [ 130.539342][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.549966][ T7896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.703952][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.914372][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 131.073318][ T7927] loop2: detected capacity change from 0 to 2048 [ 131.102103][ T7925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1626'. [ 131.210181][ T7927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.227988][ T7927] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.591849][ T7948] loop0: detected capacity change from 0 to 512 [ 131.608433][ T7948] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.623034][ T7948] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.721206][ T7948] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 131.755439][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1633'. [ 131.766145][ T7961] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1634'. [ 131.787145][ T7948] EXT4-fs (loop0): 1 truncate cleaned up [ 131.804908][ T7948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.820814][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 131.875903][ T7954] loop1: detected capacity change from 0 to 1024 [ 131.882911][ T7954] EXT4-fs: Ignoring removed nobh option [ 131.888569][ T7954] EXT4-fs: Ignoring removed bh option [ 131.899455][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1000 with error 117 [ 131.912391][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.912391][ T12] [ 131.922919][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.965034][ T7954] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1633: bad orphan inode 32767 [ 131.980004][ T7954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.036003][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.141916][ T7971] netlink: 'syz.3.1639': attribute type 13 has an invalid length. [ 132.319645][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 132.319665][ T29] audit: type=1326 audit(1747687685.846:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.349835][ T29] audit: type=1326 audit(1747687685.846:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.373809][ T29] audit: type=1326 audit(1747687685.846:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.397603][ T29] audit: type=1326 audit(1747687685.846:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.421677][ T29] audit: type=1326 audit(1747687685.846:16206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.445414][ T29] audit: type=1326 audit(1747687685.846:16207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.469158][ T29] audit: type=1326 audit(1747687685.866:16208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.492807][ T29] audit: type=1326 audit(1747687685.866:16209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0471e969 code=0x7ffc0000 [ 132.589450][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 132.648608][ T7988] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1643'. [ 132.709516][ T7997] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1645'. [ 132.779660][ T7999] bridge_slave_0: left allmulticast mode [ 132.785916][ T7999] bridge_slave_0: left promiscuous mode [ 132.791647][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.825477][ T8005] loop0: detected capacity change from 0 to 128 [ 132.834282][ T7999] bridge_slave_1: left allmulticast mode [ 132.840151][ T7999] bridge_slave_1: left promiscuous mode [ 132.846109][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.853441][ T29] audit: type=1400 audit(1747687686.416:16210): avc: denied { mount } for pid=7998 comm="syz.1.1646" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.875770][ T29] audit: type=1400 audit(1747687686.416:16211): avc: denied { write } for pid=7998 comm="syz.1.1646" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.920656][ T7999] bond0: (slave bond_slave_0): Releasing backup interface [ 132.936053][ T7999] bond0: (slave bond_slave_1): Releasing backup interface [ 132.946944][ T7999] team0: Port device team_slave_0 removed [ 132.954173][ T7999] team0: Port device team_slave_1 removed [ 132.960698][ T7999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.971600][ T7999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.008263][ T8013] netlink: 'syz.0.1651': attribute type 13 has an invalid length. [ 133.108613][ T8023] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1654'. [ 133.146036][ T8023] loop1: detected capacity change from 0 to 512 [ 133.152632][ T8023] EXT4-fs: Ignoring removed orlov option [ 133.165763][ T8023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.206508][ T8023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1654: bg 0: block 248: padding at end of block bitmap is not set [ 133.252964][ T7926] syz.2.1627 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 133.264052][ T7926] CPU: 0 UID: 0 PID: 7926 Comm: syz.2.1627 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 133.264083][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.264099][ T7926] Call Trace: [ 133.264116][ T7926] [ 133.264126][ T7926] __dump_stack+0x1d/0x30 [ 133.264154][ T7926] dump_stack_lvl+0xe8/0x140 [ 133.264179][ T7926] dump_stack+0x15/0x1b [ 133.264196][ T7926] dump_header+0x81/0x220 [ 133.264293][ T7926] oom_kill_process+0x334/0x3f0 [ 133.264403][ T7926] out_of_memory+0x979/0xb80 [ 133.264462][ T7926] ? css_next_descendant_pre+0x138/0x160 [ 133.264485][ T7926] mem_cgroup_out_of_memory+0x13d/0x190 [ 133.264522][ T7926] try_charge_memcg+0x5e2/0x870 [ 133.264609][ T7926] charge_memcg+0x51/0xc0 [ 133.264633][ T7926] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 133.264794][ T7926] __read_swap_cache_async+0x1df/0x350 [ 133.264867][ T7926] swap_cluster_readahead+0x277/0x3e0 [ 133.264907][ T7926] swapin_readahead+0xde/0x6f0 [ 133.265053][ T7926] ? __filemap_get_folio+0x49f/0x650 [ 133.265232][ T7926] ? __rcu_read_unlock+0x34/0x70 [ 133.265255][ T7926] ? swap_cache_get_folio+0x77/0x200 [ 133.265280][ T7926] do_swap_page+0x301/0x2460 [ 133.265371][ T7926] ? cgroup_rstat_updated+0xa3/0x510 [ 133.265410][ T7926] ? __pfx_default_wake_function+0x10/0x10 [ 133.265446][ T7926] handle_mm_fault+0xb60/0x2ae0 [ 133.265575][ T7926] ? mas_walk+0xf2/0x120 [ 133.265624][ T7926] do_user_addr_fault+0x636/0x1090 [ 133.265661][ T7926] ? fpregs_restore_userregs+0x7d/0x190 [ 133.265753][ T7926] exc_page_fault+0x54/0xc0 [ 133.265777][ T7926] asm_exc_page_fault+0x26/0x30 [ 133.265804][ T7926] RIP: 0033:0x7f21ba7d53ac [ 133.265824][ T7926] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 133.265845][ T7926] RSP: 002b:00007fff2a3c0d10 EFLAGS: 00010287 [ 133.265861][ T7926] RAX: 0000000000000000 RBX: 00007f21bab27040 RCX: 0000000000000000 [ 133.265874][ T7926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555584cb2808 [ 133.265886][ T7926] RBP: 00007f21bab27ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 133.265942][ T7926] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000020d7e [ 133.265956][ T7926] R13: 00007f21bab26240 R14: ffffffffffffffff R15: 00007fff2a3c0e20 [ 133.265973][ T7926] [ 133.498555][ T7926] memory: usage 307200kB, limit 307200kB, failcnt 711 [ 133.505429][ T7926] memory+swap: usage 308448kB, limit 9007199254740988kB, failcnt 0 [ 133.513560][ T7926] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 133.520912][ T7926] Memory cgroup stats for /syz2: [ 133.523504][ T8023] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1654: Failed to acquire dquot type 1 [ 133.547084][ T7926] cache 12288 [ 133.550481][ T7926] rss 0 [ 133.553287][ T7926] shmem 0 [ 133.556358][ T7926] mapped_file 0 [ 133.559899][ T7926] dirty 0 [ 133.562856][ T7926] writeback 0 [ 133.566199][ T7926] workingset_refault_anon 261 [ 133.570951][ T7926] workingset_refault_file 286 [ 133.575671][ T7926] swap 1277952 [ 133.579065][ T7926] swapcached 8192 [ 133.582709][ T7926] pgpgin 89559 [ 133.586159][ T7926] pgpgout 89554 [ 133.589756][ T7926] pgfault 108585 [ 133.593425][ T7926] pgmajfault 135 [ 133.596996][ T7926] inactive_anon 4096 [ 133.601156][ T7926] active_anon 4096 [ 133.605057][ T7926] inactive_file 0 [ 133.608752][ T7926] active_file 12288 [ 133.612820][ T7926] unevictable 0 [ 133.616385][ T7926] hierarchical_memory_limit 314572800 [ 133.621931][ T7926] hierarchical_memsw_limit 9223372036854771712 [ 133.628365][ T7926] total_cache 12288 [ 133.632260][ T7926] total_rss 0 [ 133.635768][ T7926] total_shmem 0 [ 133.639242][ T7926] total_mapped_file 0 [ 133.643312][ T7926] total_dirty 0 [ 133.646895][ T7926] total_writeback 0 [ 133.650809][ T7926] total_workingset_refault_anon 261 [ 133.656113][ T7926] total_workingset_refault_file 286 [ 133.661492][ T7926] total_swap 1277952 [ 133.665428][ T7926] total_swapcached 8192 [ 133.669644][ T7926] total_pgpgin 89559 [ 133.673629][ T7926] total_pgpgout 89554 [ 133.677664][ T7926] total_pgfault 108585 [ 133.681734][ T7926] total_pgmajfault 135 [ 133.685853][ T7926] total_inactive_anon 4096 [ 133.690360][ T7926] total_active_anon 4096 [ 133.694700][ T7926] total_inactive_file 0 [ 133.699054][ T7926] total_active_file 12288 [ 133.703397][ T7926] total_unevictable 0 [ 133.707415][ T7926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1627,pid=7926,uid=0 [ 133.718304][ T8023] EXT4-fs (loop1): 1 truncate cleaned up [ 133.722098][ T7926] Memory cgroup out of memory: Killed process 7926 (syz.2.1627) total-vm:98116kB, anon-rss:1032kB, file-rss:26532kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 133.737514][ T8023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.759911][ T8023] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.773571][ T8023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.913242][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 133.922310][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 134.059784][ T8041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1661'. [ 134.075788][ T8043] netlink: 'syz.3.1662': attribute type 12 has an invalid length. [ 134.091306][ T8041] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 134.134073][ T8041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1661'. [ 134.206000][ T8050] sd 0:0:1:0: device reset [ 134.237205][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.262872][ T8053] loop1: detected capacity change from 0 to 2048 [ 134.297648][ T8053] GPT:first_usable_lbas don't match. [ 134.303008][ T8053] GPT:34 != 290 [ 134.306566][ T8053] GPT: Use GNU Parted to correct GPT errors. [ 134.312845][ T8053] loop1: p1 p2 p3 [ 134.356318][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 134.369962][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 134.437002][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1670'. [ 134.447012][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 134.531510][ T8071] netlink: 'syz.3.1674': attribute type 13 has an invalid length. [ 134.558124][ T8079] loop2: detected capacity change from 0 to 128 [ 134.573146][ T8081] loop3: detected capacity change from 0 to 128 [ 134.702386][ T8085] loop3: detected capacity change from 0 to 2048 [ 134.727506][ T8085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.727528][ T8087] loop1: detected capacity change from 0 to 512 [ 134.747332][ T8085] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.759263][ T8087] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.777325][ T8087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1678: bg 0: block 248: padding at end of block bitmap is not set [ 134.837617][ T8087] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1678: Failed to acquire dquot type 1 [ 134.866546][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 134.887028][ T8087] EXT4-fs (loop1): 1 truncate cleaned up [ 134.901257][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.924250][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 215 with error 117 [ 134.936887][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.936887][ T12] [ 134.984963][ T8091] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 231 with max blocks 2 with error 117 [ 134.997499][ T8091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.997499][ T8091] [ 135.060973][ T8087] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 135.119038][ T8087] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 135.129270][ T8087] ext4 filesystem being remounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.199826][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.255094][ T8113] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.490353][ T8127] loop0: detected capacity change from 0 to 1024 [ 135.592106][ T8128] loop1: detected capacity change from 0 to 8192 [ 135.723449][ T8135] loop0: detected capacity change from 0 to 2048 [ 135.753386][ T8139] loop1: detected capacity change from 0 to 512 [ 135.762032][ T8135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.775751][ T3317] ================================================================== [ 135.775899][ T8139] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.784000][ T3317] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 135.800232][ T3317] [ 135.802574][ T3317] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 135.810738][ T3317] tick_do_update_jiffies64+0x113/0x1c0 [ 135.816393][ T3317] tick_nohz_handler+0x7f/0x2d0 [ 135.821467][ T3317] __hrtimer_run_queues+0x20c/0x5a0 [ 135.826687][ T3317] hrtimer_interrupt+0x21a/0x460 [ 135.831643][ T3317] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 135.837575][ T3317] sysvec_apic_timer_interrupt+0x6f/0x80 [ 135.843221][ T3317] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.849503][ T3317] ksoftirqd_should_run+0x0/0x20 [ 135.854472][ T3317] smpboot_thread_fn+0x2ae/0x530 [ 135.859553][ T3317] kthread+0x486/0x510 [ 135.863722][ T3317] ret_from_fork+0x4b/0x60 [ 135.868185][ T3317] ret_from_fork_asm+0x1a/0x30 [ 135.873052][ T3317] [ 135.875382][ T3317] read to 0xffffffff868099c0 of 8 bytes by task 3317 on cpu 0: [ 135.883024][ T3317] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 135.889831][ T3317] count_shadow_nodes+0x6a/0x230 [ 135.894907][ T3317] do_shrink_slab+0x60/0x680 [ 135.899615][ T3317] shrink_slab+0x448/0x760 [ 135.904063][ T3317] shrink_node+0x6c3/0x2110 [ 135.908675][ T3317] do_try_to_free_pages+0x3f6/0xcd0 [ 135.913900][ T3317] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 135.920017][ T3317] try_charge_memcg+0x3ab/0x870 [ 135.925036][ T3317] charge_memcg+0x51/0xc0 [ 135.929583][ T3317] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 135.935671][ T3317] __read_swap_cache_async+0x1df/0x350 [ 135.941352][ T3317] swap_cluster_readahead+0x277/0x3e0 [ 135.947103][ T3317] swapin_readahead+0xde/0x6f0 [ 135.952258][ T3317] do_swap_page+0x301/0x2460 [ 135.956870][ T3317] handle_mm_fault+0xb60/0x2ae0 [ 135.961745][ T3317] do_user_addr_fault+0x636/0x1090 [ 135.967072][ T3317] exc_page_fault+0x54/0xc0 [ 135.971675][ T3317] asm_exc_page_fault+0x26/0x30 [ 135.976638][ T3317] [ 135.979044][ T3317] value changed: 0x00000000ffffbfa5 -> 0x00000000ffffbfa6 [ 135.986508][ T3317] [ 135.988962][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 135.995134][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 136.006000][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 136.016074][ T3317] ================================================================== [ 136.036985][ T8139] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.045268][ T8085] syz.3.1677 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 136.058233][ T8139] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 136.066612][ T8085] CPU: 1 UID: 0 PID: 8085 Comm: syz.3.1677 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 136.066680][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 136.066700][ T8085] Call Trace: [ 136.066728][ T8085] [ 136.066740][ T8085] __dump_stack+0x1d/0x30 [ 136.066768][ T8085] dump_stack_lvl+0xe8/0x140 [ 136.066796][ T8085] dump_stack+0x15/0x1b [ 136.066829][ T8085] dump_header+0x81/0x220 [ 136.066886][ T8085] oom_kill_process+0x334/0x3f0 [ 136.067026][ T8085] out_of_memory+0x979/0xb80 [ 136.067123][ T8085] ? css_next_descendant_pre+0x138/0x160 [ 136.067162][ T8085] mem_cgroup_out_of_memory+0x13d/0x190 [ 136.067215][ T8085] try_charge_memcg+0x5e2/0x870 [ 136.067260][ T8085] obj_cgroup_charge_pages+0xb7/0x1a0 [ 136.067294][ T8085] __memcg_kmem_charge_page+0x9f/0x170 [ 136.067390][ T8085] __alloc_frozen_pages_noprof+0x188/0x360 [ 136.067432][ T8085] alloc_pages_mpol+0xb3/0x250 [ 136.067467][ T8085] alloc_pages_noprof+0x90/0x130 [ 136.067504][ T8085] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 136.067566][ T8085] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 136.067676][ T8085] ? ip_set_alloc+0x1f/0x30 [ 136.067714][ T8085] ? ip_set_alloc+0x1f/0x30 [ 136.067752][ T8085] ? __kmalloc_cache_noprof+0x189/0x320 [ 136.067784][ T8085] ip_set_alloc+0x1f/0x30 [ 136.067828][ T8085] hash_netiface_create+0x282/0x740 [ 136.067879][ T8085] ? __pfx_hash_netiface_create+0x10/0x10 [ 136.067922][ T8085] ip_set_create+0x3c9/0x960 [ 136.068091][ T8085] ? __nla_parse+0x40/0x60 [ 136.068124][ T8085] nfnetlink_rcv_msg+0x4c6/0x590 [ 136.068193][ T8085] netlink_rcv_skb+0x123/0x220 [ 136.068240][ T8085] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 136.068361][ T8085] nfnetlink_rcv+0x16b/0x1690 [ 136.068398][ T8085] ? sprintf+0x88/0xb0 [ 136.068502][ T8085] ? memchr+0x28/0x50 [ 136.068655][ T8085] ? this_cpu_in_panic+0x2d/0x40 [ 136.068701][ T8085] ? _prb_read_valid+0x8c1/0x920 [ 136.068756][ T8085] ? __rcu_read_unlock+0x4f/0x70 [ 136.068830][ T8085] ? __skb_flow_dissect+0x3d26/0x4210 [ 136.068917][ T8085] ? should_fail_ex+0x30/0x280 [ 136.068998][ T8085] ? selinux_nlmsg_lookup+0x99/0x8b0 [ 136.069036][ T8085] ? selinux_netlink_send+0x59f/0x5f0 [ 136.069068][ T8085] ? __rcu_read_unlock+0x34/0x70 [ 136.069107][ T8085] ? __netlink_lookup+0x266/0x2a0 [ 136.069137][ T8085] netlink_unicast+0x5a1/0x670 [ 136.069176][ T8085] netlink_sendmsg+0x58b/0x6b0 [ 136.069199][ T8085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.069227][ T8085] __sock_sendmsg+0x145/0x180 [ 136.069330][ T8085] ____sys_sendmsg+0x31e/0x4e0 [ 136.069364][ T8085] ___sys_sendmsg+0x17b/0x1d0 [ 136.069413][ T8085] __x64_sys_sendmsg+0xd4/0x160 [ 136.069448][ T8085] x64_sys_call+0x2999/0x2fb0 [ 136.069520][ T8085] do_syscall_64+0xd0/0x1a0 [ 136.069555][ T8085] ? clear_bhb_loop+0x40/0x90 [ 136.069684][ T8085] ? clear_bhb_loop+0x40/0x90 [ 136.069715][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.069778][ T8085] RIP: 0033:0x7f8408efe969 [ 136.069801][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.069827][ T8085] RSP: 002b:00007f8407567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.069909][ T8085] RAX: ffffffffffffffda RBX: 00007f8409125fa0 RCX: 00007f8408efe969 [ 136.069926][ T8085] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 136.070022][ T8085] RBP: 00007f8408f80ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.070075][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.070092][ T8085] R13: 0000000000000000 R14: 00007f8409125fa0 R15: 00007fff93f02bb8 [ 136.070118][ T8085] [ 136.070126][ T8085] memory: usage 307200kB, limit 307200kB, failcnt 781 [ 136.078809][ T8139] EXT4-fs (loop1): 1 truncate cleaned up [ 136.084227][ T8085] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0 [ 136.102071][ T8139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.105124][ T8085] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 136.480494][ T8085] Memory cgroup stats for /syz3: [ 136.480847][ T8085] cache 20480 [ 136.489260][ T8085] rss 8192 [ 136.492380][ T8085] shmem 0 [ 136.495391][ T8085] mapped_file 4096 [ 136.499410][ T8085] dirty 0 [ 136.502588][ T8085] writeback 4096 [ 136.506283][ T8085] workingset_refault_anon 436 [ 136.507584][ T8135] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.511181][ T8085] workingset_refault_file 759 [ 136.511193][ T8085] swap 1261568 [ 136.511203][ T8085] swapcached 16384 [ 136.536842][ T8085] pgpgin 90894 [ 136.541352][ T8085] pgpgout 90885 [ 136.545361][ T8085] pgfault 102910 [ 136.549675][ T8085] pgmajfault 224 [ 136.553449][ T8085] inactive_anon 16384 [ 136.557537][ T8085] active_anon 0 [ 136.561021][ T8085] inactive_file 20480 [ 136.565163][ T8085] active_file 0 [ 136.568681][ T8085] unevictable 0 [ 136.572651][ T8085] hierarchical_memory_limit 314572800 [ 136.578529][ T8085] hierarchical_memsw_limit 9223372036854771712 [ 136.585087][ T8085] total_cache 20480 [ 136.589305][ T8085] total_rss 8192 [ 136.593040][ T8085] total_shmem 0 [ 136.596887][ T8085] total_mapped_file 4096 [ 136.601258][ T8085] total_dirty 0 [ 136.604811][ T8085] total_writeback 4096 [ 136.609526][ T8085] total_workingset_refault_anon 436 [ 136.614792][ T8085] total_workingset_refault_file 759 [ 136.620738][ T8085] total_swap 1261568 [ 136.624888][ T8085] total_swapcached 16384 [ 136.629268][ T8085] total_pgpgin 90894 [ 136.633276][ T8085] total_pgpgout 90885 [ 136.637607][ T8085] total_pgfault 102910 [ 136.641764][ T8085] total_pgmajfault 224 [ 136.645890][ T8085] total_inactive_anon 16384 [ 136.650454][ T8085] total_active_anon 0 [ 136.654448][ T8085] total_inactive_file 20480 [ 136.659155][ T8085] total_active_file 0 [ 136.663960][ T8085] total_unevictable 0 [ 136.668066][ T8085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1677,pid=8084,uid=0 [ 136.684486][ T8085] Memory cgroup out of memory: Killed process 8084 (syz.3.1677) total-vm:93880kB, anon-rss:1064kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 136.763385][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.948537][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.