last executing test programs: 1.905849799s ago: executing program 1 (id=875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x446000, 0x80, 0x4}, 0x18) symlinkat(0x0, r0, 0x0) 1.849202424s ago: executing program 0 (id=877): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c00243a9b832912800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xa9, 0xd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000000000000ff020000613c04d2964d41230bb69eb4000000000000000000004001242088a8000000020006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000a06aea5dcd3f475014906c61fcd45c69bb2667e1edd2e28c0a3cb14d5dbf4bfe1cf7ab"], 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) 1.697864669s ago: executing program 1 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) 1.697246679s ago: executing program 4 (id=879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2bc4, 0x0, 0x0, 0xd1be8e5621984e0c}, 0x94) socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="0103feffffff000000000100"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) 1.598898589s ago: executing program 4 (id=880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c00243a9b832912800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xa9, 0xd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000000000000ff020000613c04d2964d41230bb69eb4000000000000000000004001242088a8000000020006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000a06aea5dcd3f475014906c61fcd45c69bb2667e1edd2e28c0a3cb14d5dbf4bfe1cf7ab"], 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) 1.354988934s ago: executing program 2 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1.282543501s ago: executing program 0 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x200000}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 1.19419452s ago: executing program 2 (id=884): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.087075171s ago: executing program 0 (id=885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2bc4, 0x0, 0x0, 0xd1be8e5621984e0c}, 0x94) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(r0, &(0x7f00000004c0)=@known='trusted.overlay.opaque\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="0103feffffff000000000100"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) r7 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0x73, &(0x7f0000000180)="ab29d30dcc7fe6d3c14c794581686afb9497aa597f7fa0010405bc4837b870a2e29b3c33b86f02e391175bee4e5c3b79f150e3fef259c37e11f004b3709080a2668d61e635f5caaba5338775c0ac8cffbbfc041fc1460825643f143426457e2b5d20ec969806b64d253fd50fc9026c7a825497", 0xa3, 0x0, &(0x7f0000000200)="cbdfb7cb5a5807e092630c4ce3b75f0f8234f6180145dbd81ef46cb28d16d727bdd62a0694873c8f02ff6afcca1a7a9bf2045a46c930151e30bb9a8a7c5f552fcd00c8ffdb026e247a939d73bd7f2821faf7b17cac99e87c62c3f831dde40bbb9c2f89cd8886270ebbed42e420cd88278353a1451e65f002ac1590ba958683c3b5de4d4d3ff1cb6a61e841b0014c21a2e4af8be0686485d1b40245cf115b1c60ce327c"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r11, 0x25, 0x4}, 0x14) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r12, r13, 0x4, r9}, 0x10) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0xffc0}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540), &(0x7f00000005c0)=0x4) 1.036047436s ago: executing program 3 (id=886): socket$netlink(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) 927.510347ms ago: executing program 0 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x880, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 884.975931ms ago: executing program 3 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 790.64325ms ago: executing program 0 (id=889): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) 790.18396ms ago: executing program 0 (id=890): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c00243a9b832912800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xa9, 0xd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000000000000ff020000613c04d2964d41230bb69eb4000000000000000000004001242088a8000000020006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000a06aea5dcd3f475014906c61fcd45c69bb2667e1edd2e28c0a3cb14d5dbf4bfe1cf7ab"], 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) 734.007366ms ago: executing program 4 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 641.725285ms ago: executing program 2 (id=892): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900c600000000190000000000", @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 482.024741ms ago: executing program 1 (id=893): r0 = msgget$private(0x0, 0xc7) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000ff7f1c823e695237825488d5e047d09602c1017642c6ca17e11ecf866b5b33b179d065bdcb1b5e01481dfb6a2c73cc623a60ca094f1a550aba92acd8a69444d52f86e5db83b032f4c6cb4f5b0437c2fcd0c084237048eefc30d84c82b62811c1ed61c0d1cc88dbb7e15311885b8c03a47e40dc0a477e793c06fe89f41fe664acdf6434e5cf7eca1eed5afb2f9e91e889b97755d343257d850a78e658f2d1f1b4ff08fd506422d93d3b8b9ee5580b0eb7f573bd411b8a27de0a2d011cf5bf2940dfc6dd679d19b42d2caa34c32fa898432365273970a5082329e61912d4eef4f24b9268e601579fc8f0fa2a3c2af89591ffce34b75eebb33b8156902d50adc2bcdb24763d29716bfd0626e59496e492fc385c150cf7e89132f467ebaa62301278af495c0e9bc64c588aa6e815255b85c7d90fe5c01aa73969671fd0e29b206006309aeb4615a4b5b0d066b3fa6bce7be06c51410e3ea7e031e6a8edd63d3c44f5ddd104222c649edb056ece9ce94e7a1d115f79b4f2d26a1d29f3213f0d647cafbbb8ef825c1226ed716bfb0d187df7463bc949b8281cd1e5343f1f2d37f5690a5557262a2053e34484be6267897bcba5f709a52ae5a6255c58ef0f46632e05c2ccfe33e8258daf59413151812ebddc6b4293ca132b3612b1cf78b5f83285393979c5d07c3a01db4aba7bf8bca1705673b1a6f218fc971ebfc5ef5accc6fea12d0c0369d290bd9684eab10b88cad97cb10ea58ffc615c54212574874ee72289b96f8f3f00be319ebf72ddfeb45e36b9055f042dad6a290a01101452c3d0e2dd43ea4779f62bee347f05eb191b877dad4c5bdabfd0210b6a39fc8a93e0c2efab44426a3c9e0dbdc4626f4ffa245992c519d624a29b25ed65151ecc38e67d071e01886d922b2ec23728e8445223882b60e6dc2f8551bcbddc2f3d8bc106c8aa2ad0edcf0d1ee8af02ad69e57114f302f13acbda7b97730f4f141cd041198f9a3cb806b7db72b2c05e0aaf6a786bd367d38402a9087b669ec9b557ca2571689369bbd076789a91f655ff0bcaa853891b0ef2b0cf9914a2b886e6c3a0d3eb8d9225557baff7573bd6d45a4b64d4b3d8d5b596a0c944845cb79ca0b1eccd0048f3195b77ec0d2d16158a80cb5937b6f78066ad1e97c8afa5c654c8a68befd2a253280497c7ea2e0409f1fbfc3b507dbb6574dd111ffed8e2de29b5d696196ac949398971d217e9418c08715fe11e29c454ece4a0577633879ef0b8c95bfa5c556b0a746332333e617146f0bb06e15d4102cef7106e2dadd3682c9e47b827ee43e9319181c7759bf6726dac95f0852dd5448b96222edd4bc6c8e0e85656bcaf5137f8ce0cd0fca7fb12eb5582eb6d2a680ab74e18806ccd441cdd87fed1a985cf4f178e3cf12b658d8d8c3b2153d73eee7eba29175fd9a5be776985192fa1b763db8a3f"], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x3, 0xffffffffffffffff, r1, r2, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0x10, 0x3, 0x1000, 0xc, 0x9, 0x3, 0x1, 0xadae, r3}) 475.120972ms ago: executing program 3 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 401.40789ms ago: executing program 4 (id=895): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r1, &(0x7f0000003200)={0xc, {0x3b, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb"}}, 0x41) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 381.315491ms ago: executing program 1 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x200000}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 380.865982ms ago: executing program 2 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) 354.204924ms ago: executing program 1 (id=898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c00243a9b832912800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xa9, 0xd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000000000000ff020000613c04d2964d41230bb69eb4000000000000000000004001242088a8000000020006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000a06aea5dcd3f475014906c61fcd45c69bb2667e1edd2e28c0a3cb14d5dbf4bfe1cf7ab"], 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) 353.865224ms ago: executing program 3 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 310.157468ms ago: executing program 2 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) 301.63729ms ago: executing program 3 (id=901): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xef, 0x4a0, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000020000000}, 0x11, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf252100000009001f0070687931000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008081}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000003be9e552a243b896ac79c10cb1266bf6e27ae5dde6cc9381451639bb566a443452580d0c384b7d2cfa4d5609fb4b75efd4cb6b7e2730fa89938abc14384dff01a42b68103d7732f7d9f89a81736ab293d6fe31526c198fce5a400dc1bd39be6a29fc2b9419a53b758ae7", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf251800000008000300", @ANYRES32, @ANYBLOB="240030802000018008000100000000001400038006000100010000000800020001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x34, r0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x480d1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000180000000000000000000000000000009500090000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000001000085100000010000009500000000000000184400000300000000000000000000008500000012000000950000000000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="cd3e00000000020000000100000014000500fc020000000000000000000000000001ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283070014000600fc0000000000000000000000000000080800020003"], 0x11c}}, 0x8800) 229.680856ms ago: executing program 4 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6f6c0e7c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)=ANY=[], 0x18) 191.8209ms ago: executing program 2 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) 171.560992ms ago: executing program 4 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 77.184182ms ago: executing program 3 (id=905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 0s ago: executing program 1 (id=906): r0 = msgget$private(0x0, 0xc7) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000ff7f1c823e695237825488d5e047d09602c1017642c6ca17e11ecf866b5b33b179d065bdcb1b5e01481dfb6a2c73cc623a60ca094f1a550aba92acd8a69444d52f86e5db83b032f4c6cb4f5b0437c2fcd0c084237048eefc30d84c82b62811c1ed61c0d1cc88dbb7e15311885b8c03a47e40dc0a477e793c06fe89f41fe664acdf6434e5cf7eca1eed5afb2f9e91e889b97755d343257d850a78e658f2d1f1b4ff08fd506422d93d3b8b9ee5580b0eb7f573bd411b8a27de0a2d011cf5bf2940dfc6dd679d19b42d2caa34c32fa898432365273970a5082329e61912d4eef4f24b9268e601579fc8f0fa2a3c2af89591ffce34b75eebb33b8156902d50adc2bcdb24763d29716bfd0626e59496e492fc385c150cf7e89132f467ebaa62301278af495c0e9bc64c588aa6e815255b85c7d90fe5c01aa73969671fd0e29b206006309aeb4615a4b5b0d066b3fa6bce7be06c51410e3ea7e031e6a8edd63d3c44f5ddd104222c649edb056ece9ce94e7a1d115f79b4f2d26a1d29f3213f0d647cafbbb8ef825c1226ed716bfb0d187df7463bc949b8281cd1e5343f1f2d37f5690a5557262a2053e34484be6267897bcba5f709a52ae5a6255c58ef0f46632e05c2ccfe33e8258daf59413151812ebddc6b4293ca132b3612b1cf78b5f83285393979c5d07c3a01db4aba7bf8bca1705673b1a6f218fc971ebfc5ef5accc6fea12d0c0369d290bd9684eab10b88cad97cb10ea58ffc615c54212574874ee72289b96f8f3f00be319ebf72ddfeb45e36b9055f042dad6a290a01101452c3d0e2dd43ea4779f62bee347f05eb191b877dad4c5bdabfd0210b6a39fc8a93e0c2efab44426a3c9e0dbdc4626f4ffa245992c519d624a29b25ed65151ecc38e67d071e01886d922b2ec23728e8445223882b60e6dc2f8551bcbddc2f3d8bc106c8aa2ad0edcf0d1ee8af02ad69e57114f302f13acbda7b97730f4f141cd041198f9a3cb806b7db72b2c05e0aaf6a786bd367d38402a9087b669ec9b557ca2571689369bbd076789a91f655ff0bcaa853891b0ef2b0cf9914a2b886e6c3a0d3eb8d9225557baff7573bd6d45a4b64d4b3d8d5b596a0c944845cb79ca0b1eccd0048f3195b77ec0d2d16158a80cb5937b6f78066ad1e97c8afa5c654c8a68befd2a253280497c7ea2e0409f1fbfc3b507dbb6574dd111ffed8e2de29b5d696196ac949398971d217e9418c08715fe11e29c454ece4a0577633879ef0b8c95bfa5c556b0a746332333e617146f0bb06e15d4102cef7106e2dadd3682c9e47b827ee43e9319181c7759bf6726dac95f0852dd5448b96222edd4bc6c8e0e85656bcaf5137f8ce0cd0fca7fb12eb5582eb6d2a680ab74e18806ccd441cdd87fed1a985cf4f178e3cf12b658d8d8c3b2153d73eee7eba29175fd9a5be776985192fa1b763db8a3f"], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x3, 0xffffffffffffffff, r1, r2, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0x10, 0x3, 0x1000, 0xc, 0x9, 0x3, 0x1, 0xadae, r3}) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.112244][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.304713][ T4134] loop1: detected capacity change from 0 to 128 [ 53.319068][ T4134] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.332847][ T4134] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.385301][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.479995][ T4147] loop3: detected capacity change from 0 to 1024 [ 53.498151][ T4147] EXT4-fs: inline encryption not supported [ 53.506736][ T4152] syz.2.233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.534888][ T4147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.557179][ T4147] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 53.572037][ T4147] EXT4-fs (loop3): Remounting filesystem read-only [ 53.588436][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.674237][ T4165] loop2: detected capacity change from 0 to 128 [ 53.692616][ T4165] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.757352][ T4170] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.856449][ T4179] loop1: detected capacity change from 0 to 1024 [ 53.893504][ T4179] EXT4-fs: inline encryption not supported [ 53.942062][ T4179] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 53.957033][ T4185] loop3: detected capacity change from 0 to 512 [ 53.957222][ T4179] EXT4-fs (loop1): Remounting filesystem read-only [ 53.967445][ T4185] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.070357][ T4198] IPVS: length: 88 != 8 [ 54.135654][ T4207] loop1: detected capacity change from 0 to 512 [ 54.174516][ T4211] loop4: detected capacity change from 0 to 1024 [ 54.185720][ T4211] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.196715][ T4211] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.196899][ T4207] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.256: corrupted inode contents [ 54.223340][ T4214] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.231587][ T4211] JBD2: no valid journal superblock found [ 54.237397][ T4211] EXT4-fs (loop4): Could not load journal inode [ 54.243469][ T4214] netlink: 'syz.3.258': attribute type 13 has an invalid length. [ 54.251483][ T4207] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 54.269644][ T4205] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 54.279704][ T4207] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.256: corrupted inode contents [ 54.297530][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 54.297548][ T29] audit: type=1400 audit(1763498872.949:1262): avc: denied { create } for pid=4202 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.323405][ T4207] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.256: mark_inode_dirty error [ 54.326901][ T29] audit: type=1400 audit(1763498872.949:1263): avc: denied { write } for pid=4202 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.354164][ T29] audit: type=1400 audit(1763498872.949:1264): avc: denied { module_request } for pid=4202 comm="syz.4.255" kmod="crypto-rfc3686(ctr(aes))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.358691][ T4220] loop0: detected capacity change from 0 to 1024 [ 54.384014][ T4207] EXT4-fs (loop1): 1 orphan inode deleted [ 54.393912][ T29] audit: type=1400 audit(1763498873.049:1265): avc: denied { create } for pid=4206 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.396308][ T4220] EXT4-fs: inline encryption not supported [ 54.420422][ T29] audit: type=1400 audit(1763498873.049:1266): avc: denied { connect } for pid=4206 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.440231][ T29] audit: type=1400 audit(1763498873.069:1267): avc: denied { bind } for pid=4206 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.459830][ T29] audit: type=1400 audit(1763498873.069:1268): avc: denied { read } for pid=4206 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.512151][ T29] audit: type=1326 audit(1763498873.159:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 54.539668][ T29] audit: type=1326 audit(1763498873.159:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 54.558174][ T4220] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 54.563298][ T29] audit: type=1326 audit(1763498873.159:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 54.564467][ T4220] EXT4-fs (loop0): Remounting filesystem read-only [ 54.894464][ T4256] __nla_validate_parse: 3 callbacks suppressed [ 54.894516][ T4256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 54.944889][ T4260] loop2: detected capacity change from 0 to 1024 [ 54.951871][ T4260] EXT4-fs: inline encryption not supported [ 55.007245][ T4262] loop1: detected capacity change from 0 to 512 [ 55.048211][ T4262] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.080805][ T4262] EXT4-fs (loop1): 1 truncate cleaned up [ 55.086937][ T4260] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 55.104888][ T4260] EXT4-fs (loop2): Remounting filesystem read-only [ 55.142531][ T4271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 55.310469][ T4284] loop1: detected capacity change from 0 to 128 [ 55.313863][ T4287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 55.341306][ T4284] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.687203][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 55.766230][ T4299] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.977260][ T4305] loop0: detected capacity change from 0 to 1024 [ 56.033562][ T4305] EXT4-fs: inline encryption not supported [ 56.116239][ T4311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.291'. [ 56.209201][ T4325] loop4: detected capacity change from 0 to 512 [ 56.229382][ T4325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.306444][ T4331] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 56.306527][ T4325] EXT4-fs (loop4): 1 truncate cleaned up [ 56.336216][ T4331] EXT4-fs (loop0): Remounting filesystem read-only [ 56.360978][ T4276] syz.2.278 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 56.375256][ T4276] CPU: 1 UID: 0 PID: 4276 Comm: syz.2.278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.375287][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.375357][ T4276] Call Trace: [ 56.375365][ T4276] [ 56.375374][ T4276] __dump_stack+0x1d/0x30 [ 56.375401][ T4276] dump_stack_lvl+0xe8/0x140 [ 56.375426][ T4276] dump_stack+0x15/0x1b [ 56.375450][ T4276] dump_header+0x81/0x220 [ 56.375537][ T4276] oom_kill_process+0x342/0x400 [ 56.375578][ T4276] out_of_memory+0x979/0xb80 [ 56.375614][ T4276] try_charge_memcg+0x610/0xa10 [ 56.375686][ T4276] obj_cgroup_charge_pages+0xa6/0x150 [ 56.375712][ T4276] __memcg_kmem_charge_page+0x9f/0x170 [ 56.375814][ T4276] __alloc_frozen_pages_noprof+0x188/0x360 [ 56.375857][ T4276] alloc_pages_mpol+0xb3/0x260 [ 56.375889][ T4276] ? alloc_pages_noprof+0xf4/0x130 [ 56.375916][ T4276] alloc_pages_noprof+0x90/0x130 [ 56.375969][ T4276] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 56.376043][ T4276] __kvmalloc_node_noprof+0x483/0x670 [ 56.376097][ T4276] ? ip_set_alloc+0x24/0x30 [ 56.376137][ T4276] ? ip_set_alloc+0x24/0x30 [ 56.376227][ T4276] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 56.376305][ T4276] ip_set_alloc+0x24/0x30 [ 56.376404][ T4276] hash_netiface_create+0x282/0x740 [ 56.376541][ T4276] ? __pfx_hash_netiface_create+0x10/0x10 [ 56.376577][ T4276] ip_set_create+0x3cc/0x970 [ 56.376607][ T4276] ? __nla_parse+0x40/0x60 [ 56.376682][ T4276] nfnetlink_rcv_msg+0x4c6/0x590 [ 56.376733][ T4276] netlink_rcv_skb+0x123/0x220 [ 56.376899][ T4276] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.377016][ T4276] nfnetlink_rcv+0x167/0x16c0 [ 56.377048][ T4276] ? kmem_cache_free+0xe4/0x3d0 [ 56.377087][ T4276] ? __kfree_skb+0x109/0x150 [ 56.377180][ T4276] ? nlmon_xmit+0x4f/0x60 [ 56.377213][ T4276] ? consume_skb+0x49/0x150 [ 56.377246][ T4276] ? nlmon_xmit+0x4f/0x60 [ 56.377316][ T4276] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 56.377477][ T4276] ? __dev_queue_xmit+0x1200/0x2000 [ 56.377503][ T4276] ? __dev_queue_xmit+0x182/0x2000 [ 56.377529][ T4276] ? ref_tracker_free+0x37d/0x3e0 [ 56.377648][ T4276] ? __netlink_deliver_tap+0x4dc/0x500 [ 56.377670][ T4276] netlink_unicast+0x5c0/0x690 [ 56.377706][ T4276] netlink_sendmsg+0x58b/0x6b0 [ 56.377806][ T4276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.377825][ T4276] __sock_sendmsg+0x145/0x180 [ 56.377849][ T4276] ____sys_sendmsg+0x31e/0x4e0 [ 56.377949][ T4276] ___sys_sendmsg+0x17b/0x1d0 [ 56.377985][ T4276] __x64_sys_sendmsg+0xd4/0x160 [ 56.378014][ T4276] x64_sys_call+0x191e/0x3000 [ 56.378039][ T4276] do_syscall_64+0xd2/0x200 [ 56.378081][ T4276] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.378134][ T4276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.378155][ T4276] RIP: 0033:0x7f25acd1f6c9 [ 56.378176][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.378200][ T4276] RSP: 002b:00007f25ab787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.378279][ T4276] RAX: ffffffffffffffda RBX: 00007f25acf75fa0 RCX: 00007f25acd1f6c9 [ 56.378291][ T4276] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 56.378369][ T4276] RBP: 00007f25acda1f91 R08: 0000000000000000 R09: 0000000000000000 [ 56.378385][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.378397][ T4276] R13: 00007f25acf76038 R14: 00007f25acf75fa0 R15: 00007ffe6836b008 [ 56.378451][ T4276] [ 56.378475][ T4276] memory: usage 307200kB, limit 307200kB, failcnt 219 [ 56.445872][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 56.447614][ T4276] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 56.559236][ T4340] loop4: detected capacity change from 0 to 512 [ 56.561433][ T4276] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 56.578721][ T4340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.582135][ T4276] Memory cgroup stats for /syz2 [ 56.605356][ T4340] EXT4-fs (loop4): 1 truncate cleaned up [ 56.607214][ T4276] : [ 56.776697][ T4276] cache 0 [ 56.782151][ T4276] rss 0 [ 56.782164][ T4276] shmem 0 [ 56.782172][ T4276] mapped_file 0 [ 56.782180][ T4276] dirty 0 [ 56.782188][ T4276] writeback 0 [ 56.782197][ T4276] workingset_refault_anon 116 [ 56.782206][ T4276] workingset_refault_file 318 [ 56.782214][ T4276] swap 229376 [ 56.810747][ T4276] swapcached 0 [ 56.810766][ T4276] pgpgin 9829 [ 56.810775][ T4276] pgpgout 9829 [ 56.810784][ T4276] pgfault 19750 [ 56.810792][ T4276] pgmajfault 77 [ 56.810800][ T4276] inactive_anon 0 [ 56.810809][ T4276] active_anon 0 [ 56.810819][ T4276] inactive_file 0 [ 56.810827][ T4276] active_file 0 [ 56.842288][ T4276] unevictable 0 [ 56.845809][ T4276] hierarchical_memory_limit 314572800 [ 56.851202][ T4276] hierarchical_memsw_limit 9223372036854771712 [ 56.857427][ T4276] total_cache 0 [ 56.860910][ T4276] total_rss 0 [ 56.864276][ T4276] total_shmem 0 [ 56.867765][ T4276] total_mapped_file 0 [ 56.871822][ T4276] total_dirty 0 [ 56.875308][ T4276] total_writeback 0 [ 56.879125][ T4276] total_workingset_refault_anon 116 [ 56.884372][ T4276] total_workingset_refault_file 318 [ 56.889646][ T4276] total_swap 229376 [ 56.893518][ T4276] total_swapcached 0 [ 56.897448][ T4276] total_pgpgin 9829 [ 56.901269][ T4276] total_pgpgout 9829 [ 56.905245][ T4276] total_pgfault 19750 [ 56.909293][ T4276] total_pgmajfault 77 [ 56.913306][ T4276] total_inactive_anon 0 [ 56.917472][ T4276] total_active_anon 0 [ 56.921487][ T4276] total_inactive_file 0 [ 56.925681][ T4276] total_active_file 0 [ 56.929676][ T4276] total_unevictable 0 [ 56.933795][ T4276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.278,pid=4274,uid=0 [ 56.948390][ T4276] Memory cgroup out of memory: Killed process 4274 (syz.2.278) total-vm:100368kB, anon-rss:1136kB, file-rss:26636kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 57.309714][ T4365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 57.319120][ T4315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.288'. [ 57.468356][ T4380] loop2: detected capacity change from 0 to 512 [ 57.477058][ T4380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.521859][ T4380] EXT4-fs (loop2): 1 truncate cleaned up [ 57.551390][ T4385] loop3: detected capacity change from 0 to 128 [ 57.584673][ T4385] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.637192][ T4390] syz_tun: entered allmulticast mode [ 57.807082][ T4395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 57.844515][ T4400] loop2: detected capacity change from 0 to 1024 [ 57.860838][ T4400] EXT4-fs: inline encryption not supported [ 57.885106][ T4392] loop1: detected capacity change from 0 to 512 [ 57.891775][ T4392] EXT4-fs: Ignoring removed oldalloc option [ 57.901493][ T4397] loop3: detected capacity change from 0 to 1024 [ 57.905471][ T4400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.325'. [ 57.917321][ T4397] EXT4-fs: Ignoring removed bh option [ 57.922476][ T4392] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.315: Parent and EA inode have the same ino 15 [ 57.956200][ T4400] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 57.973553][ T4392] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.986808][ T4397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.000416][ T4397] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.011033][ T4392] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.315: Parent and EA inode have the same ino 15 [ 58.024403][ T4400] EXT4-fs (loop2): Remounting filesystem read-only [ 58.031236][ T4392] EXT4-fs (loop1): 1 orphan inode deleted [ 58.044268][ T4397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 58.054087][ T4397] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.324: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.068385][ T4397] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.324: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.085227][ T4397] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.324: Failed to acquire dquot type 0 [ 58.096923][ T4397] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.106943][ T4397] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.324: mark_inode_dirty error [ 58.118512][ T4397] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.129137][ T4397] EXT4-fs (loop3): 1 orphan inode deleted [ 58.143298][ T385] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.160274][ T385] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 58.265576][ T3321] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.278694][ T3321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.289857][ T3321] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 58.836164][ T4433] loop0: detected capacity change from 0 to 1024 [ 58.877152][ T4433] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.888152][ T4433] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.921204][ T4433] JBD2: no valid journal superblock found [ 58.927037][ T4433] EXT4-fs (loop0): Could not load journal inode [ 58.980504][ T4433] loop0: detected capacity change from 0 to 1024 [ 58.987856][ T4433] EXT4-fs: Ignoring removed orlov option [ 58.994258][ T4433] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.090696][ T4455] loop1: detected capacity change from 0 to 1024 [ 59.121607][ T4455] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.132662][ T4455] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.153806][ T4455] JBD2: no valid journal superblock found [ 59.159612][ T4455] EXT4-fs (loop1): Could not load journal inode [ 59.333273][ T4450] 9pnet_fd: Insufficient options for proto=fd [ 59.403939][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 59.403955][ T29] audit: type=1326 audit(1763498878.059:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.477238][ T4462] loop1: detected capacity change from 0 to 1024 [ 59.516068][ T4462] EXT4-fs: Ignoring removed orlov option [ 59.565137][ T4462] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.691873][ T29] audit: type=1326 audit(1763498878.099:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.715453][ T29] audit: type=1326 audit(1763498878.099:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.738930][ T29] audit: type=1326 audit(1763498878.099:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.762469][ T29] audit: type=1326 audit(1763498878.099:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.785830][ T29] audit: type=1326 audit(1763498878.099:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.809188][ T29] audit: type=1326 audit(1763498878.099:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.832606][ T29] audit: type=1326 audit(1763498878.099:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.856028][ T29] audit: type=1326 audit(1763498878.099:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 59.879572][ T29] audit: type=1326 audit(1763498878.099:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 60.009025][ T4477] __nla_validate_parse: 6 callbacks suppressed [ 60.009045][ T4477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 60.039678][ T4477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 60.083243][ T4477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4477 comm=syz.1.350 [ 60.109280][ T4489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 60.142676][ T4477] loop1: detected capacity change from 0 to 128 [ 60.202102][ T4496] loop2: detected capacity change from 0 to 1024 [ 60.230552][ T4496] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.241563][ T4496] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.262741][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 60.293987][ T4496] JBD2: no valid journal superblock found [ 60.299784][ T4496] EXT4-fs (loop2): Could not load journal inode [ 60.477829][ T4522] loop2: detected capacity change from 0 to 1024 [ 60.508262][ T4516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.521866][ T4522] EXT4-fs: Ignoring removed orlov option [ 60.538364][ T4522] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 60.549386][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 60.576973][ T4516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.608875][ T4529] FAULT_INJECTION: forcing a failure. [ 60.608875][ T4529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.616620][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'. [ 60.622122][ T4529] CPU: 1 UID: 0 PID: 4529 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.622159][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.622209][ T4529] Call Trace: [ 60.622218][ T4529] [ 60.622229][ T4529] __dump_stack+0x1d/0x30 [ 60.622260][ T4529] dump_stack_lvl+0xe8/0x140 [ 60.622289][ T4529] dump_stack+0x15/0x1b [ 60.622329][ T4529] should_fail_ex+0x265/0x280 [ 60.622368][ T4529] should_fail+0xb/0x20 [ 60.622391][ T4529] should_fail_usercopy+0x1a/0x20 [ 60.622428][ T4529] _copy_from_user+0x1c/0xb0 [ 60.622486][ T4529] ___sys_sendmsg+0xc1/0x1d0 [ 60.622532][ T4529] __x64_sys_sendmsg+0xd4/0x160 [ 60.622564][ T4529] x64_sys_call+0x191e/0x3000 [ 60.622657][ T4529] do_syscall_64+0xd2/0x200 [ 60.622687][ T4529] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.622726][ T4529] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.622792][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.622821][ T4529] RIP: 0033:0x7f9514c0f6c9 [ 60.622842][ T4529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.622866][ T4529] RSP: 002b:00007f9513677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.622902][ T4529] RAX: ffffffffffffffda RBX: 00007f9514e65fa0 RCX: 00007f9514c0f6c9 [ 60.622919][ T4529] RDX: 0000000004000880 RSI: 0000200000000780 RDI: 0000000000000003 [ 60.622936][ T4529] RBP: 00007f9513677090 R08: 0000000000000000 R09: 0000000000000000 [ 60.622953][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.622969][ T4529] R13: 00007f9514e66038 R14: 00007f9514e65fa0 R15: 00007ffca5ad8268 [ 60.622995][ T4529] [ 60.812416][ T4531] ip6gre1: entered promiscuous mode [ 60.817736][ T4531] ip6gre1: entered allmulticast mode [ 60.839234][ T4516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.925414][ T4546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 60.948300][ T4516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.060925][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.078026][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.088089][ T4557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 61.097891][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.106257][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.169800][ T4558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.277619][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 61.292705][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.390'. [ 61.838202][ T4592] loop0: detected capacity change from 0 to 512 [ 61.845268][ T4592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.864029][ T4592] EXT4-fs (loop0): 1 truncate cleaned up [ 61.956913][ T4597] loop0: detected capacity change from 0 to 128 [ 61.976220][ T4597] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.081562][ T4555] syz.2.386 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 62.095703][ T4555] CPU: 1 UID: 0 PID: 4555 Comm: syz.2.386 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.095733][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.095746][ T4555] Call Trace: [ 62.095754][ T4555] [ 62.095763][ T4555] __dump_stack+0x1d/0x30 [ 62.095791][ T4555] dump_stack_lvl+0xe8/0x140 [ 62.095816][ T4555] dump_stack+0x15/0x1b [ 62.095891][ T4555] dump_header+0x81/0x220 [ 62.095980][ T4555] oom_kill_process+0x342/0x400 [ 62.096024][ T4555] out_of_memory+0x979/0xb80 [ 62.096095][ T4555] try_charge_memcg+0x610/0xa10 [ 62.096143][ T4555] obj_cgroup_charge_pages+0xa6/0x150 [ 62.096165][ T4555] __memcg_kmem_charge_page+0x9f/0x170 [ 62.096194][ T4555] __alloc_frozen_pages_noprof+0x188/0x360 [ 62.096258][ T4555] alloc_pages_mpol+0xb3/0x260 [ 62.096287][ T4555] alloc_pages_noprof+0x90/0x130 [ 62.096307][ T4555] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 62.096416][ T4555] __kvmalloc_node_noprof+0x483/0x670 [ 62.096474][ T4555] ? ip_set_alloc+0x24/0x30 [ 62.096576][ T4555] ? ip_set_alloc+0x24/0x30 [ 62.096659][ T4555] ip_set_alloc+0x24/0x30 [ 62.096695][ T4555] hash_netiface_create+0x282/0x740 [ 62.096737][ T4555] ? __pfx_hash_netiface_create+0x10/0x10 [ 62.096782][ T4555] ip_set_create+0x3cc/0x970 [ 62.096935][ T4555] ? __nla_parse+0x40/0x60 [ 62.096966][ T4555] nfnetlink_rcv_msg+0x4c6/0x590 [ 62.097095][ T4555] netlink_rcv_skb+0x123/0x220 [ 62.097176][ T4555] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.097221][ T4555] nfnetlink_rcv+0x167/0x16c0 [ 62.097297][ T4555] ? kmem_cache_free+0xe4/0x3d0 [ 62.097397][ T4555] ? __kfree_skb+0x109/0x150 [ 62.097443][ T4555] ? nlmon_xmit+0x4f/0x60 [ 62.097503][ T4555] ? consume_skb+0x49/0x150 [ 62.097541][ T4555] ? nlmon_xmit+0x4f/0x60 [ 62.097572][ T4555] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 62.097647][ T4555] ? __dev_queue_xmit+0x1200/0x2000 [ 62.097669][ T4555] ? __dev_queue_xmit+0x182/0x2000 [ 62.097692][ T4555] ? merge_sched_in+0x605/0xa30 [ 62.097737][ T4555] ? ref_tracker_free+0x37d/0x3e0 [ 62.097870][ T4555] ? __netlink_deliver_tap+0x4dc/0x500 [ 62.097931][ T4555] netlink_unicast+0x5c0/0x690 [ 62.098007][ T4555] netlink_sendmsg+0x58b/0x6b0 [ 62.098031][ T4555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.098050][ T4555] __sock_sendmsg+0x145/0x180 [ 62.098075][ T4555] ____sys_sendmsg+0x31e/0x4e0 [ 62.098140][ T4555] ___sys_sendmsg+0x17b/0x1d0 [ 62.098181][ T4555] __x64_sys_sendmsg+0xd4/0x160 [ 62.098203][ T4555] x64_sys_call+0x191e/0x3000 [ 62.098226][ T4555] do_syscall_64+0xd2/0x200 [ 62.098327][ T4555] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.098375][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.098403][ T4555] RIP: 0033:0x7f25acd1f6c9 [ 62.098422][ T4555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.098517][ T4555] RSP: 002b:00007f25ab787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.098540][ T4555] RAX: ffffffffffffffda RBX: 00007f25acf75fa0 RCX: 00007f25acd1f6c9 [ 62.098552][ T4555] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 62.098564][ T4555] RBP: 00007f25acda1f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.098576][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.098647][ T4555] R13: 00007f25acf76038 R14: 00007f25acf75fa0 R15: 00007ffe6836b008 [ 62.098671][ T4555] [ 62.098730][ T4555] memory: usage 307200kB, limit 307200kB, failcnt 449 [ 62.439252][ T4555] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 62.447423][ T4555] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 62.454740][ T4555] Memory cgroup stats for /syz2: [ 62.457556][ T4555] cache 0 [ 62.465602][ T4555] rss 0 [ 62.468381][ T4555] shmem 0 [ 62.471329][ T4555] mapped_file 0 [ 62.474917][ T4555] dirty 0 [ 62.477890][ T4555] writeback 0 [ 62.481209][ T4555] workingset_refault_anon 138 [ 62.485949][ T4555] workingset_refault_file 447 [ 62.490782][ T4555] swap 217088 [ 62.494194][ T4555] swapcached 12288 [ 62.497984][ T4555] pgpgin 11881 [ 62.501595][ T4555] pgpgout 11878 [ 62.505083][ T4555] pgfault 24171 [ 62.508566][ T4555] pgmajfault 91 [ 62.512114][ T4555] inactive_anon 12288 [ 62.516126][ T4555] active_anon 0 [ 62.519617][ T4555] inactive_file 0 [ 62.523331][ T4555] active_file 0 [ 62.526804][ T4555] unevictable 0 [ 62.530259][ T4555] hierarchical_memory_limit 314572800 [ 62.535690][ T4555] hierarchical_memsw_limit 9223372036854771712 [ 62.541851][ T4555] total_cache 0 [ 62.545359][ T4555] total_rss 0 [ 62.548655][ T4555] total_shmem 0 [ 62.552108][ T4555] total_mapped_file 0 [ 62.556111][ T4555] total_dirty 0 [ 62.559579][ T4555] total_writeback 0 [ 62.563472][ T4555] total_workingset_refault_anon 138 [ 62.568827][ T4555] total_workingset_refault_file 447 [ 62.574064][ T4555] total_swap 217088 [ 62.577898][ T4555] total_swapcached 12288 [ 62.582139][ T4555] total_pgpgin 11881 [ 62.586059][ T4555] total_pgpgout 11878 [ 62.590056][ T4555] total_pgfault 24171 [ 62.594108][ T4555] total_pgmajfault 91 [ 62.598114][ T4555] total_inactive_anon 12288 [ 62.602758][ T4555] total_active_anon 0 [ 62.606878][ T4555] total_inactive_file 0 [ 62.611055][ T4555] total_active_file 0 [ 62.615069][ T4555] total_unevictable 0 [ 62.619259][ T4555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.386,pid=4554,uid=0 [ 62.633807][ T4555] Memory cgroup out of memory: Killed process 4554 (syz.2.386) total-vm:100372kB, anon-rss:1264kB, file-rss:26564kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 62.710833][ T4617] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.744925][ T4621] loop0: detected capacity change from 0 to 512 [ 62.762899][ T4619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4619 comm=syz.1.409 [ 62.798140][ T4621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.852299][ T4621] EXT4-fs (loop0): 1 truncate cleaned up [ 62.861568][ T4625] loop1: detected capacity change from 0 to 128 [ 62.879495][ T4625] bio_check_eod: 5 callbacks suppressed [ 62.879511][ T4625] syz.1.412: attempt to access beyond end of device [ 62.879511][ T4625] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 62.898739][ T4625] syz.1.412: attempt to access beyond end of device [ 62.898739][ T4625] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 62.912268][ T4625] syz.1.412: attempt to access beyond end of device [ 62.912268][ T4625] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 62.926190][ T4625] syz.1.412: attempt to access beyond end of device [ 62.926190][ T4625] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 62.939753][ T4625] syz.1.412: attempt to access beyond end of device [ 62.939753][ T4625] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 62.953424][ T4625] syz.1.412: attempt to access beyond end of device [ 62.953424][ T4625] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 62.966867][ T4625] syz.1.412: attempt to access beyond end of device [ 62.966867][ T4625] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 62.984298][ T4632] syz.1.412: attempt to access beyond end of device [ 62.984298][ T4632] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 62.985386][ T4625] syz.1.412: attempt to access beyond end of device [ 62.985386][ T4625] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 63.030537][ T4631] loop2: detected capacity change from 0 to 128 [ 63.041521][ T4625] syz.1.412: attempt to access beyond end of device [ 63.041521][ T4625] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 63.052993][ T4628] loop3: detected capacity change from 0 to 2048 [ 63.095668][ T4638] loop4: detected capacity change from 0 to 128 [ 63.141345][ T4638] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.174099][ T4625] Buffer I/O error on dev loop1, logical block 305, async page read [ 63.182231][ T4625] Buffer I/O error on dev loop1, logical block 306, async page read [ 63.193448][ T4625] Buffer I/O error on dev loop1, logical block 307, async page read [ 63.201961][ T4625] Buffer I/O error on dev loop1, logical block 308, async page read [ 63.213445][ T4625] Buffer I/O error on dev loop1, logical block 309, async page read [ 63.221656][ T4625] Buffer I/O error on dev loop1, logical block 310, async page read [ 63.229809][ T4625] Buffer I/O error on dev loop1, logical block 311, async page read [ 63.237943][ T4625] Buffer I/O error on dev loop1, logical block 312, async page read [ 63.246167][ T4625] Buffer I/O error on dev loop1, logical block 305, async page read [ 63.254371][ T4625] Buffer I/O error on dev loop1, logical block 306, async page read [ 63.299310][ T4648] FAULT_INJECTION: forcing a failure. [ 63.299310][ T4648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.312576][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.312609][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.312625][ T4648] Call Trace: [ 63.312660][ T4648] [ 63.312668][ T4648] __dump_stack+0x1d/0x30 [ 63.312694][ T4648] dump_stack_lvl+0xe8/0x140 [ 63.312717][ T4648] dump_stack+0x15/0x1b [ 63.312739][ T4648] should_fail_ex+0x265/0x280 [ 63.312832][ T4648] should_fail+0xb/0x20 [ 63.312853][ T4648] should_fail_usercopy+0x1a/0x20 [ 63.312880][ T4648] strncpy_from_user+0x25/0x230 [ 63.312908][ T4648] ? kmem_cache_alloc_noprof+0x242/0x480 [ 63.312996][ T4648] ? getname_flags+0x80/0x3b0 [ 63.313036][ T4648] getname_flags+0xae/0x3b0 [ 63.313072][ T4648] user_path_at+0x28/0x130 [ 63.313095][ T4648] __se_sys_mount+0x25b/0x2e0 [ 63.313126][ T4648] ? fput+0x8f/0xc0 [ 63.313214][ T4648] __x64_sys_mount+0x67/0x80 [ 63.313245][ T4648] x64_sys_call+0x2b51/0x3000 [ 63.313273][ T4648] do_syscall_64+0xd2/0x200 [ 63.313377][ T4648] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.313414][ T4648] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.313482][ T4648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.313502][ T4648] RIP: 0033:0x7fd4b31af6c9 [ 63.313520][ T4648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.313542][ T4648] RSP: 002b:00007fd4b1c0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.313562][ T4648] RAX: ffffffffffffffda RBX: 00007fd4b3405fa0 RCX: 00007fd4b31af6c9 [ 63.313582][ T4648] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 63.313598][ T4648] RBP: 00007fd4b1c0f090 R08: 00002000000000c0 R09: 0000000000000000 [ 63.313613][ T4648] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 63.313628][ T4648] R13: 00007fd4b3406038 R14: 00007fd4b3405fa0 R15: 00007ffc2b5f2dc8 [ 63.313652][ T4648] [ 63.594563][ T4656] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.612699][ T4659] 9p: Unknown access argument : -22 [ 63.623328][ T4656] vhci_hcd: invalid port number 96 [ 63.628661][ T4656] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 63.759132][ T4663] loop3: detected capacity change from 0 to 128 [ 63.780864][ T4663] SELinux: policydb version 431990519 does not match my version range 15-35 [ 63.790056][ T4663] SELinux: failed to load policy [ 63.942089][ T4672] loop0: detected capacity change from 0 to 1024 [ 63.993828][ T4672] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.004871][ T4672] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.026223][ T4672] JBD2: no valid journal superblock found [ 64.032034][ T4672] EXT4-fs (loop0): Could not load journal inode [ 64.129437][ T4675] loop0: detected capacity change from 0 to 1024 [ 64.148317][ T4675] EXT4-fs: Ignoring removed orlov option [ 64.168154][ T4675] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.316627][ T4688] loop0: detected capacity change from 0 to 512 [ 64.332843][ T4688] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.434: inode has both inline data and extents flags [ 64.346645][ T4688] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.434: couldn't read orphan inode 15 (err -117) [ 64.368376][ T4688] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.434: bg 0: block 320: padding at end of block bitmap is not set [ 64.660244][ T4696] FAULT_INJECTION: forcing a failure. [ 64.660244][ T4696] name failslab, interval 1, probability 0, space 0, times 0 [ 64.673052][ T4696] CPU: 1 UID: 0 PID: 4696 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.673083][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.673098][ T4696] Call Trace: [ 64.673106][ T4696] [ 64.673120][ T4696] __dump_stack+0x1d/0x30 [ 64.673144][ T4696] dump_stack_lvl+0xe8/0x140 [ 64.673180][ T4696] dump_stack+0x15/0x1b [ 64.673202][ T4696] should_fail_ex+0x265/0x280 [ 64.673269][ T4696] should_failslab+0x8c/0xb0 [ 64.673297][ T4696] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 64.673330][ T4696] ? simple_xattr_set+0xa8/0x2b0 [ 64.673399][ T4696] kstrdup+0x3e/0xd0 [ 64.673431][ T4696] simple_xattr_set+0xa8/0x2b0 [ 64.673538][ T4696] ? strlen+0x19/0x40 [ 64.673566][ T4696] shmem_xattr_handler_set+0x12b/0x220 [ 64.673598][ T4696] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 64.673627][ T4696] __vfs_setxattr+0x2e6/0x310 [ 64.673682][ T4696] __vfs_setxattr_noperm+0xe8/0x410 [ 64.673710][ T4696] __vfs_setxattr_locked+0x1af/0x1d0 [ 64.673743][ T4696] vfs_setxattr+0x132/0x270 [ 64.673778][ T4696] file_setxattr+0x139/0x1b0 [ 64.673879][ T4696] path_setxattrat+0x290/0x310 [ 64.673935][ T4696] __x64_sys_fsetxattr+0x6b/0x80 [ 64.673972][ T4696] x64_sys_call+0x1ced/0x3000 [ 64.674019][ T4696] do_syscall_64+0xd2/0x200 [ 64.674046][ T4696] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.674078][ T4696] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.674110][ T4696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.674198][ T4696] RIP: 0033:0x7f75b31df6c9 [ 64.674214][ T4696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.674231][ T4696] RSP: 002b:00007f75b1c1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 64.674280][ T4696] RAX: ffffffffffffffda RBX: 00007f75b3436090 RCX: 00007f75b31df6c9 [ 64.674295][ T4696] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 64.674308][ T4696] RBP: 00007f75b1c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 64.674321][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.674411][ T4696] R13: 00007f75b3436128 R14: 00007f75b3436090 R15: 00007ffe59a49db8 [ 64.674439][ T4696] [ 65.207585][ T4720] loop1: detected capacity change from 0 to 1024 [ 65.219644][ T4720] EXT4-fs: inline encryption not supported [ 65.362434][ T4730] __nla_validate_parse: 9 callbacks suppressed [ 65.362452][ T4730] netlink: 14 bytes leftover after parsing attributes in process `syz.3.450'. [ 65.391838][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 65.391855][ T29] audit: type=1326 audit(1763498884.039:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 65.422238][ T29] audit: type=1326 audit(1763498884.039:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 65.471785][ T4736] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 65.486776][ T4736] EXT4-fs (loop1): Remounting filesystem read-only [ 65.568008][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 65.673807][ T4742] loop0: detected capacity change from 0 to 1024 [ 65.688984][ T4742] EXT4-fs (loop0): filesystem is read-only [ 65.699287][ T4742] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 65.740473][ T4742] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.751133][ T4742] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.453: inode #1: comm syz.0.453: iget: illegal inode # [ 65.765148][ T4742] EXT4-fs (loop0): no journal found [ 65.770448][ T4742] EXT4-fs (loop0): can't get journal size [ 65.778313][ T4742] EXT4-fs (loop0): failed to initialize system zone (-22) [ 65.785640][ T4742] EXT4-fs (loop0): mount failed [ 65.791387][ T4747] loop1: detected capacity change from 0 to 128 [ 65.832392][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 65.842687][ T4747] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.845436][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 65.950902][ T4749] loop4: detected capacity change from 0 to 128 [ 65.953810][ T29] audit: type=1400 audit(1763498884.599:1776): avc: denied { append } for pid=4754 comm="syz.1.458" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.981849][ T4755] FAULT_INJECTION: forcing a failure. [ 65.981849][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.986687][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'. [ 65.995062][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.1.458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.995096][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.995114][ T4755] Call Trace: [ 65.995122][ T4755] [ 65.995132][ T4755] __dump_stack+0x1d/0x30 [ 65.995165][ T4755] dump_stack_lvl+0xe8/0x140 [ 65.995256][ T4755] dump_stack+0x15/0x1b [ 65.995281][ T4755] should_fail_ex+0x265/0x280 [ 65.995328][ T4755] should_fail+0xb/0x20 [ 65.995427][ T4755] should_fail_usercopy+0x1a/0x20 [ 65.995456][ T4755] _copy_from_iter+0xd2/0xe80 [ 65.995488][ T4755] ? __build_skb_around+0x1ab/0x200 [ 65.995529][ T4755] ? __alloc_skb+0x223/0x320 [ 65.995621][ T4755] netlink_sendmsg+0x471/0x6b0 [ 65.995652][ T4755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.995745][ T4755] __sock_sendmsg+0x145/0x180 [ 65.995833][ T4755] sock_write_iter+0x1a7/0x1f0 [ 65.995872][ T4755] do_iter_readv_writev+0x4a1/0x540 [ 65.995919][ T4755] vfs_writev+0x2df/0x8b0 [ 65.995978][ T4755] do_writev+0xe7/0x210 [ 65.996095][ T4755] __x64_sys_writev+0x45/0x50 [ 65.996133][ T4755] x64_sys_call+0x1e9a/0x3000 [ 65.996241][ T4755] do_syscall_64+0xd2/0x200 [ 65.996306][ T4755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.996345][ T4755] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.996442][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.996471][ T4755] RIP: 0033:0x7fe6192df6c9 [ 65.996493][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.996518][ T4755] RSP: 002b:00007fe617d3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 65.996547][ T4755] RAX: ffffffffffffffda RBX: 00007fe619535fa0 RCX: 00007fe6192df6c9 [ 65.996564][ T4755] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 65.996659][ T4755] RBP: 00007fe617d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.996715][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.996737][ T4755] R13: 00007fe619536038 R14: 00007fe619535fa0 R15: 00007ffe90b19f68 [ 65.996765][ T4755] [ 66.131066][ T4749] atomic_op ffff888104028528 conn xmit_atomic 0000000000000000 [ 66.252727][ T4765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.304267][ T29] audit: type=1400 audit(1763498884.959:1777): avc: denied { create } for pid=4766 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.353537][ T29] audit: type=1400 audit(1763498884.979:1778): avc: denied { listen } for pid=4766 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.373066][ T29] audit: type=1400 audit(1763498884.979:1779): avc: denied { ioctl } for pid=4766 comm="syz.4.463" path="socket:[9086]" dev="sockfs" ino=9086 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.397754][ T29] audit: type=1400 audit(1763498884.979:1780): avc: denied { name_bind } for pid=4766 comm="syz.4.463" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.468843][ T4781] 9p: Unknown access argument : -22 [ 66.480744][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 66.491059][ T4768] loop1: detected capacity change from 0 to 8192 [ 66.515434][ T4783] loop3: detected capacity change from 0 to 512 [ 66.559944][ T4783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.606719][ T4783] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.869579][ T29] audit: type=1326 audit(1763498885.519:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 66.869685][ T29] audit: type=1326 audit(1763498885.519:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 66.916396][ T29] audit: type=1326 audit(1763498885.519:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75b31df6c9 code=0x7ffc0000 [ 66.933402][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 67.253399][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 67.268909][ T4823] netlink: 'syz.2.484': attribute type 4 has an invalid length. [ 67.308451][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 67.458719][ T4838] loop1: detected capacity change from 0 to 512 [ 67.465670][ T4838] ext4: Unknown parameter 'noacl' [ 67.628007][ T4852] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.752884][ T4856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 67.771349][ T4860] loop1: detected capacity change from 0 to 128 [ 67.783732][ T4856] loop2: detected capacity change from 0 to 128 [ 67.914241][ T4860] bio_check_eod: 40675 callbacks suppressed [ 67.914260][ T4860] syz.1.501: attempt to access beyond end of device [ 67.914260][ T4860] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 67.937340][ T4860] syz.1.501: attempt to access beyond end of device [ 67.937340][ T4860] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 67.951254][ T4860] syz.1.501: attempt to access beyond end of device [ 67.951254][ T4860] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 67.967947][ T4860] syz.1.501: attempt to access beyond end of device [ 67.967947][ T4860] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 67.982258][ T4860] syz.1.501: attempt to access beyond end of device [ 67.982258][ T4860] loop1: rw=2049, sector=441, nr_sectors = 8 limit=128 [ 67.999343][ T4878] 9p: Unknown access argument : -22 [ 68.010254][ T4860] syz.1.501: attempt to access beyond end of device [ 68.010254][ T4860] loop1: rw=2049, sector=457, nr_sectors = 8 limit=128 [ 68.056374][ T4880] loop0: detected capacity change from 0 to 512 [ 68.056829][ T52] kworker/u8:3: attempt to access beyond end of device [ 68.056829][ T52] loop1: rw=1, sector=305, nr_sectors = 1 limit=128 [ 68.070196][ T4880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.096117][ T4880] EXT4-fs (loop0): 1 truncate cleaned up [ 68.415841][ T4909] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.475527][ T4913] loop0: detected capacity change from 0 to 128 [ 68.488833][ T4913] syz.0.522: attempt to access beyond end of device [ 68.488833][ T4913] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 68.527592][ T4913] syz.0.522: attempt to access beyond end of device [ 68.527592][ T4913] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 68.557187][ T4913] syz.0.522: attempt to access beyond end of device [ 68.557187][ T4913] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 68.732082][ T4923] loop1: detected capacity change from 0 to 128 [ 68.737279][ T4913] buffer_io_error: 38015 callbacks suppressed [ 68.737325][ T4913] Buffer I/O error on dev loop0, logical block 305, async page read [ 68.762776][ T4913] Buffer I/O error on dev loop0, logical block 306, async page read [ 68.779833][ T4913] Buffer I/O error on dev loop0, logical block 307, async page read [ 68.805640][ T4913] Buffer I/O error on dev loop0, logical block 308, async page read [ 68.815949][ T4913] Buffer I/O error on dev loop0, logical block 309, async page read [ 68.824554][ T4913] Buffer I/O error on dev loop0, logical block 310, async page read [ 68.832746][ T4913] Buffer I/O error on dev loop0, logical block 311, async page read [ 68.841357][ T4913] Buffer I/O error on dev loop0, logical block 312, async page read [ 68.876624][ T4913] Buffer I/O error on dev loop0, logical block 305, async page read [ 68.891586][ T4913] Buffer I/O error on dev loop0, logical block 306, async page read [ 69.170087][ T4940] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 69.331309][ T4948] loop3: detected capacity change from 0 to 1024 [ 69.365708][ T4948] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.376773][ T4948] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.401044][ T4948] JBD2: no valid journal superblock found [ 69.407015][ T4948] EXT4-fs (loop3): Could not load journal inode [ 69.513341][ T4958] loop3: detected capacity change from 0 to 1024 [ 69.523873][ T4958] EXT4-fs: Ignoring removed orlov option [ 69.568810][ T4958] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.878960][ T4982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.082792][ T4994] 9p: Unknown access argument : -22 [ 70.394217][ T5002] loop4: detected capacity change from 0 to 512 [ 70.419117][ T5002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.455417][ T5002] EXT4-fs (loop4): 1 truncate cleaned up [ 70.463621][ T5002] EXT4-fs mount: 60 callbacks suppressed [ 70.463635][ T5002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.508523][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.690689][ T5009] loop3: detected capacity change from 0 to 1024 [ 70.745169][ T5009] EXT4-fs: inline encryption not supported [ 70.795623][ T5009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.857726][ T5018] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.015911][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 71.015984][ T29] audit: type=1326 audit(1763498889.669:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.057223][ T29] audit: type=1326 audit(1763498889.669:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.080658][ T29] audit: type=1326 audit(1763498889.669:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.098005][ T5026] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: [ 71.104052][ T29] audit: type=1326 audit(1763498889.669:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.104065][ T5026] block 177: [ 71.104089][ T29] audit: type=1326 audit(1763498889.669:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.112621][ T5026] freeing already freed block (bit 11); block bitmap corrupt. [ 71.136194][ T29] audit: type=1326 audit(1763498889.669:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.169956][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 71.170304][ T29] audit: type=1326 audit(1763498889.669:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.223568][ T29] audit: type=1326 audit(1763498889.669:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.246884][ T29] audit: type=1326 audit(1763498889.669:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.270323][ T29] audit: type=1326 audit(1763498889.669:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 71.300763][ T4994] __nla_validate_parse: 12 callbacks suppressed [ 71.300781][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 71.526937][ T5035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.566'. [ 71.617562][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.627278][ T5037] loop1: detected capacity change from 0 to 512 [ 71.649949][ T5037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.667160][ T5037] EXT4-fs (loop1): 1 truncate cleaned up [ 71.673867][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.733659][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.769630][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'. [ 71.796343][ T5047] loop4: detected capacity change from 0 to 1024 [ 71.820311][ T5047] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.831327][ T5047] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.857122][ T5047] JBD2: no valid journal superblock found [ 71.862938][ T5047] EXT4-fs (loop4): Could not load journal inode [ 71.959076][ T5054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.568'. [ 71.970924][ T5054] 9pnet_virtio: no channels available for device [ 72.184135][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 72.469366][ T5060] loop4: detected capacity change from 0 to 1024 [ 72.727209][ T5070] loop2: detected capacity change from 0 to 1024 [ 72.734189][ T5060] EXT4-fs: Ignoring removed orlov option [ 72.763698][ T5070] EXT4-fs: inline encryption not supported [ 72.782031][ T5060] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 72.825427][ T5070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.839907][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.580'. [ 72.904139][ T5060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.926169][ T5070] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 72.969361][ T5070] EXT4-fs (loop2): Remounting filesystem read-only [ 72.984429][ T5084] loop1: detected capacity change from 0 to 512 [ 72.991490][ T5084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.008269][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 73.031019][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.053089][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.156252][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.182393][ T5091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'. [ 73.199952][ T5091] loop2: detected capacity change from 0 to 128 [ 73.236245][ T5091] bio_check_eod: 21095 callbacks suppressed [ 73.236263][ T5091] syz.2.584: attempt to access beyond end of device [ 73.236263][ T5091] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 73.267316][ T5091] syz.2.584: attempt to access beyond end of device [ 73.267316][ T5091] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 73.282064][ T5091] syz.2.584: attempt to access beyond end of device [ 73.282064][ T5091] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 73.329157][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.353457][ T5108] syz.2.584: attempt to access beyond end of device [ 73.353457][ T5108] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 73.364278][ T5091] syz.2.584: attempt to access beyond end of device [ 73.364278][ T5091] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 73.386700][ T5108] syz.2.584: attempt to access beyond end of device [ 73.386700][ T5108] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 73.395795][ T5091] syz.2.584: attempt to access beyond end of device [ 73.395795][ T5091] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 73.407378][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 73.414280][ T5091] syz.2.584: attempt to access beyond end of device [ 73.414280][ T5091] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 73.440490][ T5111] loop1: detected capacity change from 0 to 1024 [ 73.451277][ T5108] syz.2.584: attempt to access beyond end of device [ 73.451277][ T5108] loop2: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 73.472584][ T5115] 9p: Unknown access argument : -22 [ 73.478839][ T5111] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.489849][ T5111] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.501225][ T5091] syz.2.584: attempt to access beyond end of device [ 73.501225][ T5091] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 73.515732][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 73.525275][ T5111] JBD2: no valid journal superblock found [ 73.531198][ T5111] EXT4-fs (loop1): Could not load journal inode [ 73.656868][ T5123] loop3: detected capacity change from 0 to 1024 [ 73.663792][ T5118] loop1: detected capacity change from 0 to 1024 [ 73.674261][ T5123] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.685275][ T5123] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.693593][ T5118] EXT4-fs: Ignoring removed orlov option [ 73.709934][ T5118] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.743500][ T5091] buffer_io_error: 20254 callbacks suppressed [ 73.743517][ T5091] Buffer I/O error on dev loop2, logical block 305, async page read [ 73.763426][ T5123] JBD2: no valid journal superblock found [ 73.765605][ T5118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.769232][ T5123] EXT4-fs (loop3): Could not load journal inode [ 73.807395][ T5091] Buffer I/O error on dev loop2, logical block 306, async page read [ 73.822293][ T5129] loop0: detected capacity change from 0 to 512 [ 73.838896][ T5091] Buffer I/O error on dev loop2, logical block 307, async page read [ 73.872502][ T5129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.875677][ T5091] Buffer I/O error on dev loop2, logical block 308, async page read [ 73.899690][ T5091] Buffer I/O error on dev loop2, logical block 309, async page read [ 73.901673][ T5129] EXT4-fs (loop0): 1 truncate cleaned up [ 73.913396][ T5091] Buffer I/O error on dev loop2, logical block 310, async page read [ 73.931715][ T5091] Buffer I/O error on dev loop2, logical block 311, async page read [ 73.939798][ T5091] Buffer I/O error on dev loop2, logical block 312, async page read [ 73.940243][ T5129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.982135][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.009347][ T5091] Buffer I/O error on dev loop2, logical block 305, async page read [ 74.024660][ T5136] loop3: detected capacity change from 0 to 1024 [ 74.033498][ T5136] EXT4-fs: Ignoring removed orlov option [ 74.060212][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.080955][ T5136] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.106214][ T5091] Buffer I/O error on dev loop2, logical block 306, async page read [ 74.184780][ T5136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.295675][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 74.453902][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.499795][ T5162] loop3: detected capacity change from 0 to 512 [ 74.531409][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.606: inode has both inline data and extents flags [ 74.557362][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.606: couldn't read orphan inode 15 (err -117) [ 74.570918][ T5166] loop2: detected capacity change from 0 to 1024 [ 74.578119][ T5162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.628446][ T5166] EXT4-fs: inline encryption not supported [ 74.650604][ T5162] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.606: bg 0: block 320: padding at end of block bitmap is not set [ 74.674697][ T5166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.738192][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.873565][ T5174] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 74.897571][ T5176] loop3: detected capacity change from 0 to 1024 [ 74.913409][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 74.922981][ T5176] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.933966][ T5176] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.957300][ T5176] JBD2: no valid journal superblock found [ 74.963102][ T5176] EXT4-fs (loop3): Could not load journal inode [ 75.056159][ T5184] loop3: detected capacity change from 0 to 1024 [ 75.062980][ T5184] EXT4-fs: Ignoring removed orlov option [ 75.077448][ T5184] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.257353][ T5184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.334675][ T5199] loop0: detected capacity change from 0 to 512 [ 75.394637][ T5199] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.619: inode has both inline data and extents flags [ 75.446849][ T5199] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.619: couldn't read orphan inode 15 (err -117) [ 75.461339][ T5204] loop4: detected capacity change from 0 to 512 [ 75.473918][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.494957][ T5204] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.620: inode has both inline data and extents flags [ 75.527479][ T5199] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.619: bg 0: block 320: padding at end of block bitmap is not set [ 75.578429][ T5204] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.620: couldn't read orphan inode 15 (err -117) [ 75.597979][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.610465][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.635341][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.661372][ T5204] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.620: bg 0: block 320: padding at end of block bitmap is not set [ 75.713063][ T5211] 9p: Unknown access argument : -22 [ 75.737032][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.761212][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.888551][ T5225] lo: entered promiscuous mode [ 75.893537][ T5225] lo: entered allmulticast mode [ 75.902230][ T5228] loop4: detected capacity change from 0 to 1024 [ 75.922467][ T5225] tunl0: entered promiscuous mode [ 75.923278][ T5228] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.927614][ T5225] tunl0: entered allmulticast mode [ 75.938520][ T5228] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.945965][ T5225] gre0: entered promiscuous mode [ 75.958253][ T5225] gre0: entered allmulticast mode [ 75.970374][ T5225] gretap0: entered promiscuous mode [ 75.975811][ T5225] gretap0: entered allmulticast mode [ 75.981657][ T5228] JBD2: no valid journal superblock found [ 75.987468][ T5228] EXT4-fs (loop4): Could not load journal inode [ 75.996217][ T5225] erspan0: entered promiscuous mode [ 76.001546][ T5225] erspan0: entered allmulticast mode [ 76.011402][ T5225] ip_vti0: entered promiscuous mode [ 76.016807][ T5225] ip_vti0: entered allmulticast mode [ 76.024569][ T5225] ip6_vti0: entered promiscuous mode [ 76.029928][ T5225] ip6_vti0: entered allmulticast mode [ 76.060591][ T5225] sit0: entered promiscuous mode [ 76.065673][ T5225] sit0: entered allmulticast mode [ 76.084526][ T5225] ip6tnl0: entered promiscuous mode [ 76.089872][ T5225] ip6tnl0: entered allmulticast mode [ 76.105123][ T5225] ip6gre0: entered promiscuous mode [ 76.110402][ T5225] ip6gre0: entered allmulticast mode [ 76.128976][ T5230] loop4: detected capacity change from 0 to 1024 [ 76.136805][ T5225] syz_tun: entered promiscuous mode [ 76.142044][ T5225] syz_tun: entered allmulticast mode [ 76.177706][ T5230] EXT4-fs: Ignoring removed orlov option [ 76.207011][ T5225] ip6gretap0: entered promiscuous mode [ 76.212580][ T5225] ip6gretap0: entered allmulticast mode [ 76.217854][ T5230] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.229912][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.237205][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.244907][ T5225] bridge0: entered allmulticast mode [ 76.252375][ T5225] vcan0: entered promiscuous mode [ 76.257604][ T5225] vcan0: entered allmulticast mode [ 76.263707][ T5230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.276997][ T5225] bond0: entered promiscuous mode [ 76.282060][ T5225] bond_slave_0: entered promiscuous mode [ 76.287889][ T5225] bond_slave_1: entered promiscuous mode [ 76.293679][ T5225] bond0: entered allmulticast mode [ 76.298908][ T5225] bond_slave_0: entered allmulticast mode [ 76.304740][ T5225] bond_slave_1: entered allmulticast mode [ 76.313859][ T5225] team0: entered promiscuous mode [ 76.319005][ T5225] team_slave_0: entered promiscuous mode [ 76.324810][ T5225] team_slave_1: entered promiscuous mode [ 76.330544][ T5225] team0: entered allmulticast mode [ 76.335741][ T5225] team_slave_0: entered allmulticast mode [ 76.341498][ T5225] team_slave_1: entered allmulticast mode [ 76.349213][ T5225] dummy0: entered promiscuous mode [ 76.354639][ T5225] dummy0: entered allmulticast mode [ 76.361972][ T5225] nlmon0: entered promiscuous mode [ 76.367202][ T5225] nlmon0: entered allmulticast mode [ 76.373193][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.392842][ T5225] caif0: entered promiscuous mode [ 76.398228][ T5225] caif0: entered allmulticast mode [ 76.404156][ T5225] batadv0: entered promiscuous mode [ 76.409383][ T5225] batadv0: entered allmulticast mode [ 76.416960][ T5225] vxcan0: entered promiscuous mode [ 76.422126][ T5225] vxcan0: entered allmulticast mode [ 76.448604][ T5225] vxcan1: entered promiscuous mode [ 76.453838][ T5225] vxcan1: entered allmulticast mode [ 76.460403][ T5225] veth0: entered promiscuous mode [ 76.465718][ T5225] veth0: entered allmulticast mode [ 76.472836][ T5225] veth1: entered promiscuous mode [ 76.477982][ T5225] veth1: entered allmulticast mode [ 76.485569][ T5225] wg0: entered promiscuous mode [ 76.490480][ T5225] wg0: entered allmulticast mode [ 76.497729][ T5225] wg1: entered promiscuous mode [ 76.502706][ T5225] wg1: entered allmulticast mode [ 76.510750][ T5225] wg2: entered promiscuous mode [ 76.515779][ T5225] wg2: entered allmulticast mode [ 76.531261][ T5225] veth0_to_bridge: entered promiscuous mode [ 76.537605][ T5225] veth0_to_bridge: entered allmulticast mode [ 76.571502][ T5225] veth1_to_bridge: entered promiscuous mode [ 76.577504][ T5225] veth1_to_bridge: entered allmulticast mode [ 76.578186][ T5211] __nla_validate_parse: 1 callbacks suppressed [ 76.578204][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 76.586806][ T5225] veth0_to_bond: entered promiscuous mode [ 76.604599][ T5225] veth0_to_bond: entered allmulticast mode [ 76.612891][ T5225] veth1_to_bond: entered promiscuous mode [ 76.618721][ T5225] veth1_to_bond: entered allmulticast mode [ 76.627351][ T5225] veth0_to_team: entered promiscuous mode [ 76.633216][ T5225] veth0_to_team: entered allmulticast mode [ 76.644713][ T5225] veth1_to_team: entered promiscuous mode [ 76.650602][ T5225] veth1_to_team: entered allmulticast mode [ 76.691549][ T5225] veth0_to_batadv: entered promiscuous mode [ 76.696482][ T5241] loop2: detected capacity change from 0 to 512 [ 76.697607][ T5225] veth0_to_batadv: entered allmulticast mode [ 76.716267][ T5241] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.632: inode has both inline data and extents flags [ 76.746126][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.753236][ T5241] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.632: couldn't read orphan inode 15 (err -117) [ 76.754159][ T5225] batadv_slave_0: entered promiscuous mode [ 76.771193][ T5225] batadv_slave_0: entered allmulticast mode [ 76.778336][ T5241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.800331][ T5241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.632: bg 0: block 320: padding at end of block bitmap is not set [ 76.806266][ T5225] veth1_to_batadv: entered promiscuous mode [ 76.820548][ T5225] veth1_to_batadv: entered allmulticast mode [ 76.828582][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.836111][ T5225] batadv_slave_1: entered promiscuous mode [ 76.841957][ T5225] batadv_slave_1: entered allmulticast mode [ 76.849272][ T5225] xfrm0: entered promiscuous mode [ 76.854357][ T5225] xfrm0: entered allmulticast mode [ 76.860661][ T5225] veth0_to_hsr: entered promiscuous mode [ 76.866499][ T5225] veth0_to_hsr: entered allmulticast mode [ 76.873163][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.873694][ T5225] hsr_slave_0: entered allmulticast mode [ 76.889420][ T5225] veth1_to_hsr: entered promiscuous mode [ 76.895154][ T5225] veth1_to_hsr: entered allmulticast mode [ 76.925976][ T5225] hsr_slave_1: entered allmulticast mode [ 76.933186][ T5225] hsr0: entered promiscuous mode [ 76.938221][ T5225] hsr0: entered allmulticast mode [ 76.945000][ T5225] veth1_virt_wifi: entered promiscuous mode [ 76.950951][ T5225] veth1_virt_wifi: entered allmulticast mode [ 76.958543][ T5225] veth0_virt_wifi: entered promiscuous mode [ 76.964585][ T5225] veth0_virt_wifi: entered allmulticast mode [ 76.972298][ T5225] veth1_vlan: entered allmulticast mode [ 76.979499][ T5225] veth0_vlan: entered allmulticast mode [ 76.989847][ T5225] vlan0: entered promiscuous mode [ 76.995231][ T5225] vlan0: entered allmulticast mode [ 76.995839][ T5248] loop2: detected capacity change from 0 to 512 [ 77.000527][ T5225] vlan1: entered promiscuous mode [ 77.012265][ T5225] vlan1: entered allmulticast mode [ 77.012436][ T5248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.027568][ T5225] macvlan0: entered promiscuous mode [ 77.032947][ T5225] macvlan0: entered allmulticast mode [ 77.044415][ T5225] macvlan1: entered promiscuous mode [ 77.046813][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 77.049787][ T5225] macvlan1: entered allmulticast mode [ 77.050987][ T5225] ipvlan0: entered promiscuous mode [ 77.056333][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.060880][ T5225] ipvlan0: entered allmulticast mode [ 77.078300][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 77.078319][ T29] audit: type=1326 audit(1763498895.729:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.078784][ T5225] ipvlan1: entered promiscuous mode [ 77.086419][ T29] audit: type=1326 audit(1763498895.739:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.090130][ T5225] ipvlan1: entered allmulticast mode [ 77.113420][ T29] audit: type=1326 audit(1763498895.739:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.113482][ T29] audit: type=1326 audit(1763498895.739:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.194073][ T29] audit: type=1326 audit(1763498895.739:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.217570][ T29] audit: type=1326 audit(1763498895.739:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.241002][ T29] audit: type=1326 audit(1763498895.739:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.264409][ T29] audit: type=1326 audit(1763498895.739:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.281516][ T5225] veth1_macvtap: entered allmulticast mode [ 77.288088][ T29] audit: type=1326 audit(1763498895.769:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 77.315691][ T5225] veth0_macvtap: entered allmulticast mode [ 77.317114][ T29] audit: type=1400 audit(1763498895.769:2325): avc: denied { create } for pid=5246 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.342448][ T5225] macvtap0: entered promiscuous mode [ 77.348151][ T5225] macvtap0: entered allmulticast mode [ 77.354787][ T5225] macsec0: entered promiscuous mode [ 77.360068][ T5225] macsec0: entered allmulticast mode [ 77.367037][ T5225] geneve0: entered promiscuous mode [ 77.372274][ T5225] geneve0: entered allmulticast mode [ 77.379506][ T5225] geneve1: entered promiscuous mode [ 77.384794][ T5225] geneve1: entered allmulticast mode [ 77.391704][ T5225] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 77.399255][ T5225] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 77.408691][ T5225] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 77.416339][ T5225] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 77.425372][ T5225] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 77.432717][ T5225] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 77.441450][ T5225] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 77.448879][ T5225] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 77.458431][ T5225] syztnl1: entered promiscuous mode [ 77.463709][ T5225] syztnl1: entered allmulticast mode [ 77.469725][ T5225] macsec1: entered allmulticast mode [ 77.476235][ T5225] nicvf0: entered promiscuous mode [ 77.481442][ T5225] nicvf0: entered allmulticast mode [ 77.488480][ T5225] bridge1: entered promiscuous mode [ 77.493812][ T5225] bridge1: entered allmulticast mode [ 77.513502][ T287] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.543258][ T287] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.552259][ T287] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.565916][ T287] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.575804][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.612504][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.637'. [ 77.754558][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 77.781586][ T5262] loop1: detected capacity change from 0 to 1024 [ 77.824745][ T5262] EXT4-fs: inline encryption not supported [ 77.850521][ T5268] loop4: detected capacity change from 0 to 512 [ 77.868648][ T5262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.904858][ T5268] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.643: inode has both inline data and extents flags [ 77.953430][ T5268] EXT4-fs (loop4): get root inode failed [ 77.959162][ T5268] EXT4-fs (loop4): mount failed [ 78.035469][ T5277] loop0: detected capacity change from 0 to 512 [ 78.042600][ T5277] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.073836][ T5277] EXT4-fs (loop0): 1 truncate cleaned up [ 78.080359][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 78.101563][ T5277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.146125][ T5284] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 78.176506][ T5284] EXT4-fs (loop1): Remounting filesystem read-only [ 78.197801][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.269434][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.311996][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 78.474990][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 78.506268][ T5307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5307 comm=syz.0.657 [ 78.525397][ T5309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'. [ 78.536032][ T5309] loop1: detected capacity change from 0 to 128 [ 78.559611][ T5309] bio_check_eod: 6974 callbacks suppressed [ 78.559629][ T5309] syz.1.658: attempt to access beyond end of device [ 78.559629][ T5309] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 78.602920][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 78.614171][ T5309] syz.1.658: attempt to access beyond end of device [ 78.614171][ T5309] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 78.633248][ T5309] syz.1.658: attempt to access beyond end of device [ 78.633248][ T5309] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 78.714620][ T5320] syz.1.658: attempt to access beyond end of device [ 78.714620][ T5320] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 78.753361][ T5309] syz.1.658: attempt to access beyond end of device [ 78.753361][ T5309] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 78.761090][ T5322] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.787122][ T5324] SELinux: Context system_u:object_r:sulogin_exec_t:s0 is not valid (left unmapped). [ 78.830664][ T5320] syz.1.658: attempt to access beyond end of device [ 78.830664][ T5320] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 78.846158][ T5309] syz.1.658: attempt to access beyond end of device [ 78.846158][ T5309] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 78.856155][ T5320] syz.1.658: attempt to access beyond end of device [ 78.856155][ T5320] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 78.873032][ T5309] syz.1.658: attempt to access beyond end of device [ 78.873032][ T5309] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 78.908208][ T5320] syz.1.658: attempt to access beyond end of device [ 78.908208][ T5320] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 78.983589][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.668'. [ 79.018260][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 79.150972][ T5352] loop1: detected capacity change from 0 to 1024 [ 79.159639][ T5349] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.160138][ T5352] EXT4-fs: inline encryption not supported [ 79.223854][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.307922][ T5357] loop4: detected capacity change from 0 to 512 [ 79.324229][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.352490][ T5357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.384660][ T5369] netlink: 'syz.0.684': attribute type 12 has an invalid length. [ 79.434612][ T5369] loop0: detected capacity change from 0 to 128 [ 79.441954][ T5357] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.679: corrupted xattr entries [ 79.467537][ T5369] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 79.477774][ T5369] FAT-fs (loop0): Filesystem has been set read-only [ 79.526898][ T5357] EXT4-fs (loop4): 1 truncate cleaned up [ 79.541986][ T5382] FAULT_INJECTION: forcing a failure. [ 79.541986][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 79.554697][ T5382] CPU: 1 UID: 0 PID: 5382 Comm: syz.2.688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.554728][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.554799][ T5382] Call Trace: [ 79.554807][ T5382] [ 79.554817][ T5382] __dump_stack+0x1d/0x30 [ 79.554845][ T5382] dump_stack_lvl+0xe8/0x140 [ 79.554871][ T5382] dump_stack+0x15/0x1b [ 79.554924][ T5382] should_fail_ex+0x265/0x280 [ 79.554960][ T5382] ? snd_seq_prioq_new+0x2c/0x60 [ 79.555029][ T5382] should_failslab+0x8c/0xb0 [ 79.555060][ T5382] __kmalloc_cache_noprof+0x4c/0x4a0 [ 79.555095][ T5382] snd_seq_prioq_new+0x2c/0x60 [ 79.555123][ T5382] snd_seq_queue_alloc+0xd7/0x450 [ 79.555180][ T5382] ? should_fail_ex+0xdb/0x280 [ 79.555219][ T5382] snd_seq_ioctl_create_queue+0x4d/0x1c0 [ 79.555325][ T5382] snd_seq_ioctl+0x177/0x300 [ 79.555362][ T5382] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 79.555383][ T5382] __se_sys_ioctl+0xce/0x140 [ 79.555419][ T5382] __x64_sys_ioctl+0x43/0x50 [ 79.555455][ T5382] x64_sys_call+0x1816/0x3000 [ 79.555490][ T5382] do_syscall_64+0xd2/0x200 [ 79.555517][ T5382] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.555593][ T5382] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.555726][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.555747][ T5382] RIP: 0033:0x7f25acd1f6c9 [ 79.555762][ T5382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.555784][ T5382] RSP: 002b:00007f25ab787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.555808][ T5382] RAX: ffffffffffffffda RBX: 00007f25acf75fa0 RCX: 00007f25acd1f6c9 [ 79.555823][ T5382] RDX: 00002000000001c0 RSI: 00000000c08c5332 RDI: 0000000000000005 [ 79.555839][ T5382] RBP: 00007f25ab787090 R08: 0000000000000000 R09: 0000000000000000 [ 79.555852][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.555865][ T5382] R13: 00007f25acf76038 R14: 00007f25acf75fa0 R15: 00007ffe6836b008 [ 79.555886][ T5382] [ 79.756869][ T5357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.907122][ T5395] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.049219][ T5406] random: crng reseeded on system resumption [ 80.059132][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.075392][ T5406] Restarting kernel threads ... [ 80.107780][ T5406] Done restarting kernel threads. [ 80.129917][ T5406] loop0: detected capacity change from 0 to 512 [ 80.152897][ T5406] vfat: Unknown parameter '' [ 80.242445][ T5422] loop0: detected capacity change from 0 to 1024 [ 80.260290][ T5422] EXT4-fs: inline encryption not supported [ 80.309159][ T5422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.478324][ T5437] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 80.525302][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 81.102735][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 81.113819][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.113917][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.113932][ T3314] Call Trace: [ 81.113938][ T3314] [ 81.113945][ T3314] __dump_stack+0x1d/0x30 [ 81.114021][ T3314] dump_stack_lvl+0xe8/0x140 [ 81.114120][ T3314] dump_stack+0x15/0x1b [ 81.114136][ T3314] dump_header+0x81/0x220 [ 81.114220][ T3314] oom_kill_process+0x342/0x400 [ 81.114252][ T3314] out_of_memory+0x979/0xb80 [ 81.114293][ T3314] try_charge_memcg+0x610/0xa10 [ 81.114371][ T3314] charge_memcg+0x51/0xc0 [ 81.114394][ T3314] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 81.114453][ T3314] __read_swap_cache_async+0x17b/0x2d0 [ 81.114485][ T3314] swap_cluster_readahead+0x262/0x3c0 [ 81.114528][ T3314] swapin_readahead+0xde/0x800 [ 81.114549][ T3314] ? next_uptodate_folio+0x815/0x890 [ 81.114569][ T3314] ? percpu_counter_add_batch+0xb6/0x130 [ 81.114630][ T3314] ? __rcu_read_unlock+0x4f/0x70 [ 81.114660][ T3314] ? swap_cache_get_folio+0x277/0x280 [ 81.114738][ T3314] do_swap_page+0x2ae/0x2370 [ 81.114927][ T3314] ? filemap_fault+0x842/0xb60 [ 81.114964][ T3314] ? css_rstat_updated+0xb7/0x240 [ 81.114983][ T3314] ? __pfx_default_wake_function+0x10/0x10 [ 81.115019][ T3314] handle_mm_fault+0x9a5/0x2be0 [ 81.115110][ T3314] ? vma_start_read+0x141/0x1f0 [ 81.115160][ T3314] do_user_addr_fault+0x630/0x1080 [ 81.115194][ T3314] exc_page_fault+0x62/0xa0 [ 81.115256][ T3314] asm_exc_page_fault+0x26/0x30 [ 81.115279][ T3314] RIP: 0033:0x7f25acbf5f37 [ 81.115371][ T3314] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 68 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 f7 ea 00 48 01 d1 39 7c 24 [ 81.115397][ T3314] RSP: 002b:00007ffe6836b390 EFLAGS: 00010202 [ 81.115421][ T3314] RAX: 0000001b33a24000 RBX: 000000000000011e RCX: 0000000000013c68 [ 81.115436][ T3314] RDX: 00000000006cb6d7 RSI: 00007ffe6836b420 RDI: 000000000000001c [ 81.115447][ T3314] RBP: 00007ffe6836b3cc R08: 00000000019eb63d R09: 7fffffffffffffff [ 81.115459][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 81.115470][ T3314] R13: 00000000000927c0 R14: 0000000000013a76 R15: 00007ffe6836b420 [ 81.115488][ T3314] [ 81.115558][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 938 [ 81.203534][ T5473] loop4: detected capacity change from 0 to 128 [ 81.205471][ T3314] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 81.360462][ T3314] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 81.367900][ T3314] Memory cgroup stats for /syz2: [ 81.370280][ T3314] cache 0 [ 81.378284][ T3314] rss 0 [ 81.381042][ T3314] shmem 0 [ 81.384017][ T3314] mapped_file 0 [ 81.387515][ T3314] dirty 0 [ 81.390488][ T3314] writeback 0 [ 81.393820][ T3314] workingset_refault_anon 173 [ 81.398511][ T3314] workingset_refault_file 772 [ 81.403319][ T3314] swap 368640 [ 81.406687][ T3314] swapcached 24576 [ 81.410560][ T3314] pgpgin 18416 [ 81.413975][ T3314] pgpgout 18409 [ 81.417444][ T3314] pgfault 43528 [ 81.420895][ T3314] pgmajfault 119 [ 81.424534][ T3314] inactive_anon 24576 [ 81.428515][ T3314] active_anon 0 [ 81.432005][ T3314] inactive_file 4096 [ 81.435989][ T3314] active_file 0 [ 81.439538][ T3314] unevictable 0 [ 81.443207][ T3314] hierarchical_memory_limit 314572800 [ 81.448587][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 81.454786][ T3314] total_cache 0 [ 81.458254][ T3314] total_rss 0 [ 81.461534][ T3314] total_shmem 0 [ 81.465018][ T3314] total_mapped_file 0 [ 81.469023][ T3314] total_dirty 0 [ 81.472475][ T3314] total_writeback 0 [ 81.476497][ T3314] total_workingset_refault_anon 173 [ 81.481745][ T3314] total_workingset_refault_file 772 [ 81.487144][ T3314] total_swap 368640 [ 81.490960][ T3314] total_swapcached 24576 [ 81.495234][ T3314] total_pgpgin 18416 [ 81.499139][ T3314] total_pgpgout 18409 [ 81.503175][ T3314] total_pgfault 43528 [ 81.507162][ T3314] total_pgmajfault 119 [ 81.511228][ T3314] total_inactive_anon 24576 [ 81.515767][ T3314] total_active_anon 0 [ 81.519811][ T3314] total_inactive_file 4096 [ 81.524285][ T3314] total_active_file 0 [ 81.528327][ T3314] total_unevictable 0 [ 81.532308][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.709,pid=5430,uid=0 [ 81.546876][ T3314] Memory cgroup out of memory: Killed process 5430 (syz.2.709) total-vm:93952kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 81.606520][ T5481] __nla_validate_parse: 7 callbacks suppressed [ 81.606573][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 81.777015][ T5431] syz.2.709 (5431) used greatest stack depth: 6328 bytes left [ 81.928222][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 81.964272][ T5499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'. [ 81.997769][ T5499] loop3: detected capacity change from 0 to 128 [ 82.071826][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.153529][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 82.153751][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 82.176638][ T5499] buffer_io_error: 5958 callbacks suppressed [ 82.176655][ T5499] Buffer I/O error on dev loop3, logical block 305, async page read [ 82.204632][ T5502] loop2: detected capacity change from 0 to 128 [ 82.211761][ T5499] Buffer I/O error on dev loop3, logical block 306, async page read [ 82.220256][ T5499] Buffer I/O error on dev loop3, logical block 307, async page read [ 82.239957][ T5499] Buffer I/O error on dev loop3, logical block 308, async page read [ 82.256705][ T5499] Buffer I/O error on dev loop3, logical block 309, async page read [ 82.273277][ T5499] Buffer I/O error on dev loop3, logical block 310, async page read [ 82.291007][ T5499] Buffer I/O error on dev loop3, logical block 311, async page read [ 82.307468][ T5499] Buffer I/O error on dev loop3, logical block 312, async page read [ 82.325002][ T5499] Buffer I/O error on dev loop3, logical block 305, async page read [ 82.343226][ T5499] Buffer I/O error on dev loop3, logical block 306, async page read [ 82.424777][ T5517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.593072][ T5526] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.688398][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 83.099362][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 83.099379][ T29] audit: type=1326 audit(1763498901.749:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.137895][ T29] audit: type=1326 audit(1763498901.789:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.161304][ T29] audit: type=1326 audit(1763498901.789:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.184780][ T29] audit: type=1326 audit(1763498901.789:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.208189][ T29] audit: type=1326 audit(1763498901.789:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.231577][ T29] audit: type=1326 audit(1763498901.789:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.254990][ T29] audit: type=1326 audit(1763498901.789:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.278493][ T29] audit: type=1326 audit(1763498901.789:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.301935][ T29] audit: type=1326 audit(1763498901.789:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.325611][ T29] audit: type=1326 audit(1763498901.789:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9514c0f6c9 code=0x7ffc0000 [ 83.404669][ T5551] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.423535][ T5549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'. [ 83.455011][ T5555] 9pnet_fd: Insufficient options for proto=fd [ 83.473627][ T5549] loop3: detected capacity change from 0 to 128 [ 83.535615][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 83.600587][ T5549] bio_check_eod: 44505 callbacks suppressed [ 83.600651][ T5549] syz.3.759: attempt to access beyond end of device [ 83.600651][ T5549] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 83.647242][ T5549] syz.3.759: attempt to access beyond end of device [ 83.647242][ T5549] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 83.663510][ T5574] loop1: detected capacity change from 0 to 512 [ 83.683006][ T5574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.702979][ T5549] syz.3.759: attempt to access beyond end of device [ 83.702979][ T5549] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 83.723589][ T5549] syz.3.759: attempt to access beyond end of device [ 83.723589][ T5549] loop3: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 83.749765][ T5549] syz.3.759: attempt to access beyond end of device [ 83.749765][ T5549] loop3: rw=2049, sector=441, nr_sectors = 8 limit=128 [ 83.763916][ T5549] syz.3.759: attempt to access beyond end of device [ 83.763916][ T5549] loop3: rw=2049, sector=457, nr_sectors = 8 limit=128 [ 83.777681][ T5574] EXT4-fs (loop1): 1 truncate cleaned up [ 83.784321][ T5574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.796514][ T5549] syz.3.759: attempt to access beyond end of device [ 83.796514][ T5549] loop3: rw=2049, sector=473, nr_sectors = 8 limit=128 [ 83.806531][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 83.812959][ T5549] syz.3.759: attempt to access beyond end of device [ 83.812959][ T5549] loop3: rw=2049, sector=489, nr_sectors = 8 limit=128 [ 83.833290][ T5549] syz.3.759: attempt to access beyond end of device [ 83.833290][ T5549] loop3: rw=2049, sector=505, nr_sectors = 8 limit=128 [ 83.858472][ T5549] syz.3.759: attempt to access beyond end of device [ 83.858472][ T5549] loop3: rw=2049, sector=521, nr_sectors = 8 limit=128 [ 83.914805][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.966532][ T5589] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.070205][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.779'. [ 84.268699][ T5604] loop4: detected capacity change from 0 to 512 [ 84.317674][ T5604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.371762][ T5604] EXT4-fs (loop4): 1 truncate cleaned up [ 84.378172][ T5604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.423704][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.466952][ T287] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.985324][ T5622] loop4: detected capacity change from 0 to 128 [ 85.428385][ T5632] loop3: detected capacity change from 0 to 512 [ 85.451035][ T5632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.519373][ T5632] EXT4-fs (loop3): 1 truncate cleaned up [ 85.528963][ T5632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.603025][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.696360][ T5646] 9p: Unknown access argument : -22 [ 85.777644][ T5648] loop4: detected capacity change from 0 to 1024 [ 85.787100][ T5648] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.798145][ T5648] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.816215][ T5653] batadv_slave_1: entered promiscuous mode [ 85.824451][ T5648] JBD2: no valid journal superblock found [ 85.830282][ T5648] EXT4-fs (loop4): Could not load journal inode [ 85.972072][ T5666] loop4: detected capacity change from 0 to 1024 [ 86.001159][ T5666] EXT4-fs: Ignoring removed orlov option [ 86.025997][ T5666] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.097667][ T5666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.373072][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.523339][ T5615] Bluetooth: hci0: command 0x1003 tx timeout [ 86.523409][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.643657][ T5652] batadv_slave_1: left promiscuous mode [ 86.686376][ T5700] __nla_validate_parse: 7 callbacks suppressed [ 86.686397][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.811'. [ 86.778970][ T5703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.812'. [ 86.834344][ T5705] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 86.847394][ T5707] loop4: detected capacity change from 0 to 1024 [ 86.887385][ T5707] EXT4-fs: inline encryption not supported [ 86.915347][ T5705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.944804][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.043915][ T5710] bond1: (slave batadv1): Opening slave failed [ 87.069470][ T5705] loop3: detected capacity change from 0 to 512 [ 87.143405][ T5705] EXT4-fs (loop3): too many log groups per flexible block group [ 87.147017][ T5719] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 87.334509][ T5705] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 87.356091][ T5719] EXT4-fs (loop4): Remounting filesystem read-only [ 87.370115][ T5705] EXT4-fs (loop3): mount failed [ 87.483791][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 87.497411][ T5693] syz.0.810 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 87.508382][ T5693] CPU: 1 UID: 0 PID: 5693 Comm: syz.0.810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.508464][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.508476][ T5693] Call Trace: [ 87.508483][ T5693] [ 87.508492][ T5693] __dump_stack+0x1d/0x30 [ 87.508520][ T5693] dump_stack_lvl+0xe8/0x140 [ 87.508582][ T5693] dump_stack+0x15/0x1b [ 87.508600][ T5693] dump_header+0x81/0x220 [ 87.508623][ T5693] oom_kill_process+0x342/0x400 [ 87.508670][ T5693] out_of_memory+0x979/0xb80 [ 87.508702][ T5693] try_charge_memcg+0x610/0xa10 [ 87.508736][ T5693] charge_memcg+0x51/0xc0 [ 87.508758][ T5693] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 87.508839][ T5693] __read_swap_cache_async+0x17b/0x2d0 [ 87.508872][ T5693] swap_cluster_readahead+0x362/0x3c0 [ 87.508908][ T5693] swapin_readahead+0xde/0x800 [ 87.508933][ T5693] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 87.509037][ T5693] ? __rcu_read_unlock+0x34/0x70 [ 87.509071][ T5693] ? __rcu_read_unlock+0x4f/0x70 [ 87.509104][ T5693] ? swap_cache_get_folio+0x277/0x280 [ 87.509147][ T5693] do_swap_page+0x2ae/0x2370 [ 87.509180][ T5693] ? css_rstat_updated+0xb7/0x240 [ 87.509268][ T5693] ? __pfx_default_wake_function+0x10/0x10 [ 87.509312][ T5693] handle_mm_fault+0x9a5/0x2be0 [ 87.509339][ T5693] ? vma_start_read+0x141/0x1f0 [ 87.509404][ T5693] do_user_addr_fault+0x630/0x1080 [ 87.509439][ T5693] exc_page_fault+0x62/0xa0 [ 87.509474][ T5693] asm_exc_page_fault+0x26/0x30 [ 87.509500][ T5693] RIP: 0033:0x7fd4b31af679 [ 87.509520][ T5693] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 7b 62 ff ff 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 b1 32 00 00 90 b8 4d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 [ 87.509565][ T5693] RSP: 002b:00007ffc2b5f2f28 EFLAGS: 00010206 [ 87.509584][ T5693] RAX: 0000000000000000 RBX: 00007fd4b3405fa0 RCX: 0000000000000000 [ 87.509600][ T5693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555593b56808 [ 87.509668][ T5693] RBP: 00007fd4b3407da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 87.509680][ T5693] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001554e [ 87.509693][ T5693] R13: 00007fd4b3406270 R14: ffffffffffffffff R15: 00007ffc2b5f3040 [ 87.509718][ T5693] [ 87.509726][ T5693] memory: usage 307200kB, limit 307200kB, failcnt 454 [ 87.734571][ T5693] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 87.742485][ T5693] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 87.749864][ T5693] Memory cgroup stats for /syz0: [ 87.752713][ T5693] cache 0 [ 87.760737][ T5693] rss 0 [ 87.763543][ T5693] shmem 0 [ 87.766540][ T5693] mapped_file 0 [ 87.770006][ T5693] dirty 0 [ 87.772954][ T5693] writeback 0 [ 87.776336][ T5693] workingset_refault_anon 404 [ 87.781041][ T5693] workingset_refault_file 3649 [ 87.785895][ T5693] swap 217088 [ 87.789190][ T5693] swapcached 0 [ 87.792631][ T5693] pgpgin 64104 [ 87.796039][ T5693] pgpgout 64102 [ 87.799504][ T5693] pgfault 92156 [ 87.802981][ T5693] pgmajfault 321 [ 87.806563][ T5693] inactive_anon 0 [ 87.810205][ T5693] active_anon 0 [ 87.813698][ T5693] inactive_file 0 [ 87.817357][ T5693] active_file 8192 [ 87.821086][ T5693] unevictable 0 [ 87.824651][ T5693] hierarchical_memory_limit 314572800 [ 87.830118][ T5693] hierarchical_memsw_limit 9223372036854771712 [ 87.836415][ T5693] total_cache 0 [ 87.839888][ T5693] total_rss 0 [ 87.843201][ T5693] total_shmem 0 [ 87.846664][ T5693] total_mapped_file 0 [ 87.850643][ T5693] total_dirty 0 [ 87.854209][ T5693] total_writeback 0 [ 87.858022][ T5693] total_workingset_refault_anon 404 [ 87.863312][ T5693] total_workingset_refault_file 3649 [ 87.868723][ T5693] total_swap 217088 [ 87.872536][ T5693] total_swapcached 0 [ 87.876479][ T5693] total_pgpgin 64104 [ 87.880377][ T5693] total_pgpgout 64102 [ 87.884395][ T5693] total_pgfault 92156 [ 87.888455][ T5693] total_pgmajfault 321 [ 87.892532][ T5693] total_inactive_anon 0 [ 87.896728][ T5693] total_active_anon 0 [ 87.900720][ T5693] total_inactive_file 0 [ 87.904899][ T5693] total_active_file 8192 [ 87.909145][ T5693] total_unevictable 0 [ 87.913214][ T5693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.810,pid=5693,uid=0 [ 87.927805][ T5693] Memory cgroup out of memory: Killed process 5693 (syz.0.810) total-vm:98324kB, anon-rss:1132kB, file-rss:26472kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 88.004230][ T5745] loop2: detected capacity change from 0 to 512 [ 88.010781][ T5745] ext4: Unknown parameter ' [ 88.010781][ T5745] ' [ 88.029854][ T5744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 88.080306][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'. [ 88.109148][ T5749] netdevsim netdevsim1: Direct firmware load for $ failed with error -2 [ 88.125412][ T5751] loop3: detected capacity change from 0 to 128 [ 88.139354][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 88.139374][ T29] audit: type=1400 audit(1763498906.789:2717): avc: denied { bind } for pid=5747 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.149703][ T5754] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.265741][ T5758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 88.321623][ T287] buffer_io_error: 42766 callbacks suppressed [ 88.321642][ T287] Buffer I/O error on dev loop3, logical block 305, lost async page write [ 88.413351][ T5763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 88.462009][ T5763] loop3: detected capacity change from 0 to 128 [ 88.609059][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 88.686083][ T37] bio_check_eod: 5753 callbacks suppressed [ 88.686102][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.686102][ T37] loop3: rw=1, sector=305, nr_sectors = 80 limit=128 [ 88.713901][ T5772] netlink: 124 bytes leftover after parsing attributes in process `syz.2.834'. [ 88.714171][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.723656][ T29] audit: type=1326 audit(1763498907.359:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.755325][ T29] audit: type=1326 audit(1763498907.359:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.760365][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 88.778813][ T29] audit: type=1326 audit(1763498907.359:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.794828][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.794828][ T37] loop3: rw=1, sector=393, nr_sectors = 8 limit=128 [ 88.811100][ T29] audit: type=1326 audit(1763498907.359:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.847807][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.847807][ T37] loop3: rw=1, sector=409, nr_sectors = 8 limit=128 [ 88.847819][ T29] audit: type=1326 audit(1763498907.359:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.884661][ T29] audit: type=1326 audit(1763498907.359:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.884722][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.884722][ T37] loop3: rw=1, sector=425, nr_sectors = 8 limit=128 [ 88.908455][ T29] audit: type=1326 audit(1763498907.359:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.922724][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.922724][ T37] loop3: rw=1, sector=441, nr_sectors = 8 limit=128 [ 88.945262][ T29] audit: type=1326 audit(1763498907.359:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.961063][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.961063][ T37] loop3: rw=1, sector=457, nr_sectors = 8 limit=128 [ 88.982075][ T29] audit: type=1326 audit(1763498907.359:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acd1f6c9 code=0x7ffc0000 [ 88.995906][ T37] kworker/u8:2: attempt to access beyond end of device [ 88.995906][ T37] loop3: rw=1, sector=473, nr_sectors = 8 limit=128 [ 89.033399][ T37] kworker/u8:2: attempt to access beyond end of device [ 89.033399][ T37] loop3: rw=1, sector=489, nr_sectors = 8 limit=128 [ 89.053978][ T37] kworker/u8:2: attempt to access beyond end of device [ 89.053978][ T37] loop3: rw=1, sector=505, nr_sectors = 8 limit=128 [ 89.067681][ T37] kworker/u8:2: attempt to access beyond end of device [ 89.067681][ T37] loop3: rw=1, sector=521, nr_sectors = 8 limit=128 [ 89.156087][ T5782] loop3: detected capacity change from 0 to 1024 [ 89.162870][ T5782] EXT4-fs: inline encryption not supported [ 89.212541][ T5789] batadv_slave_1: entered promiscuous mode [ 89.239888][ T5782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.274325][ T5792] loop2: detected capacity change from 0 to 128 [ 89.283262][ T5788] batadv_slave_1: left promiscuous mode [ 89.417547][ T5803] netdevsim netdevsim0: Direct firmware load for $ failed with error -2 [ 89.441420][ T5806] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 89.490222][ T5808] loop4: detected capacity change from 0 to 1024 [ 89.513026][ T5808] EXT4-fs: inline encryption not supported [ 89.535734][ T5803] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 89.568689][ T1791] Buffer I/O error on dev loop2, logical block 305, lost async page write [ 89.570224][ T5806] EXT4-fs (loop3): Remounting filesystem read-only [ 89.636237][ T5808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.657565][ T5803] team0: Port device geneve1 added [ 89.787327][ T5808] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 89.814332][ T5808] EXT4-fs (loop4): Remounting filesystem read-only [ 89.873965][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.901238][ T5827] loop2: detected capacity change from 0 to 1024 [ 89.908367][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.949498][ T5827] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.960494][ T5827] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.007927][ T5827] JBD2: no valid journal superblock found [ 90.013932][ T5827] EXT4-fs (loop2): Could not load journal inode [ 90.188373][ T5841] loop1: detected capacity change from 0 to 128 [ 90.207716][ T5842] loop2: detected capacity change from 0 to 1024 [ 90.249614][ T5842] EXT4-fs: Ignoring removed orlov option [ 90.343467][ T5842] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.765260][ T5842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.831636][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.895936][ T5860] loop2: detected capacity change from 0 to 512 [ 90.914338][ T5860] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.865: inode has both inline data and extents flags [ 90.948092][ T5860] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.865: couldn't read orphan inode 15 (err -117) [ 90.971039][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.016518][ T5866] loop4: detected capacity change from 0 to 512 [ 91.058805][ T5866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.132128][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.152702][ T5866] EXT4-fs (loop4): 1 truncate cleaned up [ 91.159042][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.294174][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.406242][ T5890] netlink: 'syz.4.876': attribute type 12 has an invalid length. [ 91.568493][ T5891] loop0: detected capacity change from 0 to 128 [ 91.602326][ T5898] loop4: detected capacity change from 0 to 128 [ 91.734302][ T5898] Buffer I/O error on dev loop4, logical block 305, async page read [ 91.742380][ T5898] Buffer I/O error on dev loop4, logical block 306, async page read [ 91.751571][ T5898] Buffer I/O error on dev loop4, logical block 307, async page read [ 91.759653][ T5898] Buffer I/O error on dev loop4, logical block 308, async page read [ 91.767846][ T5898] Buffer I/O error on dev loop4, logical block 309, async page read [ 91.775924][ T5898] Buffer I/O error on dev loop4, logical block 310, async page read [ 91.783985][ T5898] Buffer I/O error on dev loop4, logical block 311, async page read [ 91.792168][ T5898] Buffer I/O error on dev loop4, logical block 312, async page read [ 92.088214][ T5911] netlink: 'syz.0.885': attribute type 12 has an invalid length. [ 92.108178][ T5911] __nla_validate_parse: 16 callbacks suppressed [ 92.108200][ T5911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.885'. [ 92.170311][ T5914] loop0: detected capacity change from 0 to 128 [ 92.200950][ T5911] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 92.211150][ T5911] FAT-fs (loop0): Filesystem has been set read-only [ 92.330851][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 92.455217][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.890'. [ 92.485767][ T5924] loop0: detected capacity change from 0 to 128 [ 92.744023][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 92.820223][ T5937] loop4: detected capacity change from 0 to 512 [ 92.850728][ T5937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.869183][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'. [ 92.884981][ T5937] EXT4-fs (loop4): 1 truncate cleaned up [ 92.894983][ T5943] loop1: detected capacity change from 0 to 128 [ 92.907679][ T5950] loop3: detected capacity change from 0 to 512 [ 92.995573][ T5950] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.901: inode has both inline data and extents flags [ 93.032772][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 93.033314][ T5950] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.901: couldn't read orphan inode 15 (err -117) [ 93.067847][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 93.223220][ T5957] ================================================================== [ 93.231367][ T5957] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 93.241236][ T5957] [ 93.243573][ T5957] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 93.251665][ T5957] tick_do_update_jiffies64+0x113/0x1c0 [ 93.257349][ T5957] tick_nohz_handler+0x7f/0x2d0 [ 93.262238][ T5957] __hrtimer_run_queues+0x20f/0x5a0 [ 93.267485][ T5957] hrtimer_interrupt+0x21a/0x460 [ 93.272466][ T5957] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 93.278401][ T5957] sysvec_apic_timer_interrupt+0x6f/0x80 [ 93.284088][ T5957] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.290099][ T5957] pte_offset_map_rw_nolock+0x8b/0x1f0 [ 93.295609][ T5957] handle_mm_fault+0x62f/0x2be0 [ 93.300500][ T5957] __get_user_pages+0x102a/0x1ed0 [ 93.305553][ T5957] __mm_populate+0x243/0x3a0 [ 93.310186][ T5957] vm_mmap_pgoff+0x232/0x2e0 [ 93.314815][ T5957] ksys_mmap_pgoff+0xc2/0x310 [ 93.319509][ T5957] x64_sys_call+0x14a3/0x3000 [ 93.324230][ T5957] do_syscall_64+0xd2/0x200 [ 93.324580][ T5924] buffer_io_error: 89489 callbacks suppressed [ 93.324599][ T5924] Buffer I/O error on dev loop0, logical block 305, async page read [ 93.328755][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.328786][ T5957] [ 93.351051][ T5957] read to 0xffffffff868099c0 of 8 bytes by task 5957 on cpu 1: [ 93.358618][ T5957] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 93.364911][ T5957] count_shadow_nodes+0x6a/0x230 [ 93.366593][ T5924] Buffer I/O error on dev loop0, logical block 306, async page read [ 93.369882][ T5957] do_shrink_slab+0x63/0x680 [ 93.382492][ T5957] shrink_slab+0x448/0x760 [ 93.386941][ T5957] shrink_node+0x6c3/0x2120 [ 93.391481][ T5957] do_try_to_free_pages+0x3f6/0xcd0 [ 93.395800][ T5924] Buffer I/O error on dev loop0, logical block 307, async page read [ 93.396709][ T5957] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 93.405985][ T5924] Buffer I/O error on dev loop0, logical block 308, async page read [ 93.410596][ T5957] try_charge_memcg+0x383/0xa10 [ 93.419156][ T5924] Buffer I/O error on dev loop0, logical block 309, async page read [ 93.423424][ T5957] obj_cgroup_charge_pages+0xa6/0x150 [ 93.423455][ T5957] __memcg_kmem_charge_page+0x9f/0x170 [ 93.431610][ T5924] Buffer I/O error on dev loop0, logical block 310, async page read [ 93.436821][ T5957] __alloc_frozen_pages_noprof+0x188/0x360 [ 93.436869][ T5957] alloc_pages_mpol+0xb3/0x260 [ 93.436888][ T5957] alloc_pages_noprof+0x90/0x130 [ 93.436907][ T5957] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 93.436938][ T5957] __kvmalloc_node_noprof+0x483/0x670 [ 93.451330][ T5924] Buffer I/O error on dev loop0, logical block 311, async page read [ 93.456191][ T5957] ip_set_alloc+0x24/0x30 [ 93.456231][ T5957] hash_netiface_create+0x282/0x740 [ 93.456272][ T5957] ip_set_create+0x3cc/0x970 [ 93.461461][ T5924] Buffer I/O error on dev loop0, logical block 312, async page read [ 93.466087][ T5957] nfnetlink_rcv_msg+0x4c6/0x590 [ 93.466128][ T5957] netlink_rcv_skb+0x123/0x220 [ 93.517080][ T5957] nfnetlink_rcv+0x167/0x16c0 [ 93.521777][ T5957] netlink_unicast+0x5c0/0x690 [ 93.526559][ T5957] netlink_sendmsg+0x58b/0x6b0 [ 93.531348][ T5957] __sock_sendmsg+0x145/0x180 [ 93.536055][ T5957] ____sys_sendmsg+0x31e/0x4e0 [ 93.540824][ T5957] ___sys_sendmsg+0x17b/0x1d0 [ 93.545506][ T5957] __x64_sys_sendmsg+0xd4/0x160 [ 93.550365][ T5957] x64_sys_call+0x191e/0x3000 [ 93.555064][ T5957] do_syscall_64+0xd2/0x200 [ 93.559582][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.565485][ T5957] [ 93.567900][ T5957] value changed: 0x00000000ffffaf05 -> 0x00000000ffffaf06 [ 93.575010][ T5957] [ 93.577364][ T5957] Reported by Kernel Concurrency Sanitizer on: [ 93.583543][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.2.903 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.593190][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.603254][ T5957] ==================================================================