last executing test programs: 4.448689441s ago: executing program 0 (id=1823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x10, 0xffffffffffffffff, 0x69077000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e800500"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_setup(0x70d6, &(0x7f0000000a40)={0x0, 0x3db0, 0x4, 0x1, 0x148, 0x0, r1}) 4.087825957s ago: executing program 0 (id=1830): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x4000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="10fcffffff030000529f00000000000003e9ffffff00"/32]) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="050300061400091c6202a0ffffffff006003000000007f14143488a87f4386dd62cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000000000000000000000c16dfec98de65a73535715e56ccd11434d3eef823f2eb8a846a7f4e879d7fc1470ecc2d117500e7030aae8809fc0b4c5b2969f0b8706b91c8923312e009176b01002dd52684930fd5d468cedd55bcc5e498f807e7ac0ee72824f6708c8ce0c7b2415b3b43928cf3eb81396566ee34c477f8a26316069bff5aba6e11069e76fe5784435b4ab938afc835577d68244d3267553cc5fcd44cc699fa078a2db28072eb18f3e79c44276fb4d60edb31784567804d5a60bf1cbc214b6ca842247b3b638d36c80d09e84c86d38"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.179383801s ago: executing program 1 (id=1835): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.892642885s ago: executing program 3 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) 2.862015866s ago: executing program 3 (id=1841): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000604cfad1a5cff81cd1e6186806202bb6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r8, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00"], 0x0) capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYBLOB="e771d76a44253021cc259161541a9d0c538e437ebb1d86c45e87e7ebcd28b8245e9c6a916fe5bb05d6208edddde48ece7e3d230dec65a76da4e970a3fbde4e9d8b01423899deb83741686face17e002207bfcb3621ade36212cb76d5f3eeb0d8bb90cb2346e7a7229327c15cd8be7e0675fcbeb336a3e945"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="19"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 2.860680316s ago: executing program 0 (id=1842): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES8=0x0, @ANYRESDEC=r4, @ANYRES32=r3], &(0x7f0000000880)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x20040000}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f00000004c0)) readv(r9, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x268, 0x311, 0x0, 0x268, 0x380, 0x460, 0x460, 0x380, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x188, 0x2b0, 0x0, {0x9401}, [@common=@srh1={{0x90}, {0x18, 0x4, 0x2, 0x9, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00', [0xff, 0xffffffff], [0xffffff00, 0xfffe01, 0xff000000, 0xff], [0xff000000, 0xff0000ff, 0xff000000, 0xff000000], 0x4000, 0x10}}, @common=@inet=@set3={{0x50}, {{0x0, 0x0, 0x2}, {0x1, 0x5a}, {0x2, 0x6}, 0x9}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modules_dep_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0xe4030000}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x800000000, 0x3, 0x5, 0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x2004, r12, 0xa) 2.379211673s ago: executing program 1 (id=1854): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x9a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff02000000000000000000000000000100000e220064907802000000020000000100dd0000bb577147f8c63bab95cc025fa900000000000000d8630bf2addfd0edf624319edb8e36339e135d1f14ff6cb8d91538c6c53fafd6fea68a0e45b4000000000000000000000000000600000000000000"], 0x0) 1.863541342s ago: executing program 1 (id=1855): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff"]}, 0x104) 1.565470086s ago: executing program 3 (id=1856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getgid() 1.552375796s ago: executing program 4 (id=1857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000001c0007"], 0x30}}, 0x20088004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x60, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1212}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9305}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000fefffffffffffbff03000000000000000200400000000000000000000000668295a900000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000002b"], 0xfc}}, 0x20040880) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 1.503699237s ago: executing program 0 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f00000087c0), &(0x7f0000008800), &(0x7f0000008840)) 1.437413148s ago: executing program 0 (id=1860): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.436788188s ago: executing program 3 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getgid() 1.330764879s ago: executing program 3 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x148) close(r3) r4 = timerfd_create(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0500"]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.320619449s ago: executing program 1 (id=1863): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={0x0}}, 0x0) 1.238179951s ago: executing program 0 (id=1865): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioprio_set$pid(0x2, 0x0, 0x2004) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000000)=""/52) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) tkill(r0, 0x13) 1.237540931s ago: executing program 2 (id=1866): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3c", 0x75}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b", 0x79}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394", 0x14}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.235659271s ago: executing program 4 (id=1867): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000604cfad1a5cff81cd1e6186806202bb6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r8, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00"], 0x0) capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYBLOB="e771d76a44253021cc259161541a9d0c538e437ebb1d86c45e87e7ebcd28b8245e9c6a916fe5bb05d6208edddde48ece7e3d230dec65a76da4e970a3fbde4e9d8b01423899deb83741686face17e002207bfcb3621ade36212cb76d5f3eeb0d8bb90cb2346e7a7229327c15cd8be7e0675fcbeb336a3e945e2d61d65f771abe9f82d81d170760463712bcdc6"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="19"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 1.206460691s ago: executing program 2 (id=1868): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000046557b30b0c9d5c150f381fee9eaa3f21dde3027101346eb9feb35f522d9568ac16eb6b3ed6aff9653341f91bf3c3843310bb5359b75a6ffe7720159ac84f68cda4b8abb87"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) sendmmsg$sock(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="8e", 0x1}], 0x1}}], 0x1, 0xc80c0) 1.172505332s ago: executing program 2 (id=1869): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x9a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff02000000000000000000000000000100000e220064907802000000020000000100dd0000bb577147f8c63bab95cc025fa900000000000000d8630bf2addfd0edf624319edb8e36339e135d1f14ff6cb8d91538c6c53fafd6fea68a0e45b4000000000000000000000000000600000000000000"], 0x0) 1.120463393s ago: executing program 2 (id=1870): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0xb, 0x321880) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000600)=0x1) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000780)={0x0, 0x2b7a, 0x400, 0x2, 0x5f}, &(0x7f0000000240)=0x0, &(0x7f00000004c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000300)=""/53, 0x35, 0x0, &(0x7f0000000380)=""/29, 0x1d}}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000600000002004e210a01010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14143100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e61fee7da77127dddce55c4ed4102004e216401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200"/911], 0x390) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x1276, 0x13500, 0xfffffffe, 0x304, 0x0, r6}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r6, 0x1) 975.281385ms ago: executing program 2 (id=1871): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() unshare(0x40020000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r5, 0x20, 0x0, 0x8) unshare(0x8000000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r6) keyctl$instantiate(0xc, r7, 0x0, 0x0, r7) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYRESOCT=r6], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r9}, 0x38) fcntl$dupfd(r8, 0x0, r8) 864.068857ms ago: executing program 3 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x2, @short={0x2, 0x0, 0xaaa1}}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd7000fedbdf2501000000060006004e220000140002007767300000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="24000300b08073e8d44e91e3da922c8e0bcd5abb080069e269c8e9d835b114293a4ddc6e060006004e240000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000480)=0xf35, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0x6c}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) 819.897037ms ago: executing program 1 (id=1873): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff"]}, 0x104) 203.297267ms ago: executing program 4 (id=1874): socket(0x10, 0x3, 0x6) socket(0x1, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x148a4, &(0x7f0000000600)=ANY=[@ANYBLOB="b260e7a562dc2a5632608755964262e13421cd38058ffa80267488d1dee4e959f0f8c674c9afdde689e90ac880eb49604879c6b3aaaade2a54c4ee1487eb8e8bc42fbc68eb84be4d0c420e84ea24bc148b10dcbd9157e4d444"], 0x0, 0x700, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="5000000002010300000800000000000002000000300001802c00018014000300fc02000000000000000000000000000910000400000000000000000000000000000000000c0019"], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@md5={0x1, "5b47473cc8589677b19c504ae7ac1281"}, 0x11, 0x2) 143.558838ms ago: executing program 1 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) 116.472308ms ago: executing program 2 (id=1876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) ioperm(0x1, 0x9, 0xfffffffffffffff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) (async) ioperm(0x1, 0x9, 0xfffffffffffffff8) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) (async) 87.953228ms ago: executing program 4 (id=1877): unshare(0x20000400) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffe01}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = getpgrp(0x0) syz_open_procfs(r5, &(0x7f0000000080)='net/anycast6\x00') shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) 30.937789ms ago: executing program 4 (id=1878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_open_dev$mouse(&(0x7f0000000000), 0x4000000000049, 0x200000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=1879): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x9a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff02000000000000000000000000000100000e220064907802000000020000000100dd0000bb577147f8c63bab95cc025fa900000000000000d8630bf2addfd0edf624319edb8e36339e135d1f14ff6cb8d91538c6c53fafd6fea68a0e45b4000000000000000000000000000600000000000000"], 0x0) kernel console output (not intermixed with test programs): ystem 00000000-0000-0000-0000-000000000000. [ 105.394544][ T6995] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1258'. [ 105.501935][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 105.570988][ T6987] Invalid logical block size (1073741824) [ 105.584116][ T7006] Cannot find del_set index 3 as target [ 105.594472][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 105.622528][ T7008] lo speed is unknown, defaulting to 1000 [ 105.646986][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 105.771466][ T7021] FAULT_INJECTION: forcing a failure. [ 105.771466][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 105.784293][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.4.1268 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 105.784334][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.784352][ T7021] Call Trace: [ 105.784403][ T7021] [ 105.784413][ T7021] __dump_stack+0x1d/0x30 [ 105.784450][ T7021] dump_stack_lvl+0xe8/0x140 [ 105.784478][ T7021] dump_stack+0x15/0x1b [ 105.784502][ T7021] should_fail_ex+0x265/0x280 [ 105.784546][ T7021] should_failslab+0x8c/0xb0 [ 105.784634][ T7021] kmem_cache_alloc_noprof+0x50/0x310 [ 105.784670][ T7021] ? security_inode_alloc+0x37/0x100 [ 105.784716][ T7021] security_inode_alloc+0x37/0x100 [ 105.784757][ T7021] inode_init_always_gfp+0x4b7/0x500 [ 105.784932][ T7021] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 105.785039][ T7021] alloc_inode+0x58/0x170 [ 105.785088][ T7021] new_inode+0x1d/0xe0 [ 105.785121][ T7021] shmem_get_inode+0x244/0x750 [ 105.785152][ T7021] shmem_tmpfile+0x3d/0x110 [ 105.785197][ T7021] vfs_tmpfile+0x226/0x4d0 [ 105.785238][ T7021] do_tmpfile+0xa8/0x190 [ 105.785273][ T7021] path_openat+0x1dd7/0x2170 [ 105.785417][ T7021] ? _parse_integer_limit+0x170/0x190 [ 105.785470][ T7021] ? _parse_integer+0x27/0x40 [ 105.785509][ T7021] ? kstrtoull+0x111/0x140 [ 105.785549][ T7021] ? kstrtouint+0x76/0xc0 [ 105.785589][ T7021] do_filp_open+0x109/0x230 [ 105.785655][ T7021] do_sys_openat2+0xa6/0x110 [ 105.785698][ T7021] __x64_sys_open+0xe6/0x110 [ 105.785832][ T7021] x64_sys_call+0x14d4/0x2fb0 [ 105.785889][ T7021] do_syscall_64+0xd2/0x200 [ 105.785914][ T7021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.785952][ T7021] ? clear_bhb_loop+0x40/0x90 [ 105.786024][ T7021] ? clear_bhb_loop+0x40/0x90 [ 105.786052][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.786138][ T7021] RIP: 0033:0x7fe09a20e929 [ 105.786160][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.786185][ T7021] RSP: 002b:00007fe098877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 105.786281][ T7021] RAX: ffffffffffffffda RBX: 00007fe09a435fa0 RCX: 00007fe09a20e929 [ 105.786298][ T7021] RDX: 0000000000000040 RSI: 0000000000551083 RDI: 0000200000000040 [ 105.786386][ T7021] RBP: 00007fe098877090 R08: 0000000000000000 R09: 0000000000000000 [ 105.786399][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.786412][ T7021] R13: 0000000000000000 R14: 00007fe09a435fa0 R15: 00007ffdca5725d8 [ 105.786442][ T7021] [ 106.125567][ T7025] 9pnet_fd: Insufficient options for proto=fd [ 106.150469][ T7025] loop4: detected capacity change from 0 to 512 [ 106.166554][ T7025] EXT4-fs: Ignoring removed nobh option [ 106.186600][ T7025] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1269: corrupted inode contents [ 106.230414][ T7025] EXT4-fs (loop4): Remounting filesystem read-only [ 106.240258][ T7025] EXT4-fs (loop4): 1 truncate cleaned up [ 106.246572][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.259222][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.259269][ T7025] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.269981][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.304359][ T7025] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.369721][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 106.385325][ T7032] loop1: detected capacity change from 0 to 512 [ 106.450252][ T7046] loop3: detected capacity change from 0 to 512 [ 106.457845][ T7032] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 106.468402][ T7025] loop4: detected capacity change from 0 to 256 [ 106.476292][ T7032] System zones: 0-2, 18-18, 34-35 [ 106.490945][ T7032] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.1272: iget: bad i_size value: 5910974510929920 [ 106.501025][ T7025] lo speed is unknown, defaulting to 1000 [ 106.523278][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.549225][ T7046] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.573185][ T7032] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1272: Bad quota inode: 4, type: 1 [ 106.694176][ T7032] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.700720][ T7049] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 106.718154][ T7032] EXT4-fs (loop1): mount failed [ 106.752347][ T7053] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 106.760605][ T7053] __nla_validate_parse: 1 callbacks suppressed [ 106.760622][ T7053] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1278'. [ 106.849723][ T7049] batman_adv: batadv0: Adding interface: team0 [ 106.856046][ T7049] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.881639][ T7049] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 107.291049][ T7053] team0: entered promiscuous mode [ 107.296241][ T7053] team_slave_0: entered promiscuous mode [ 107.302137][ T7053] team_slave_1: entered promiscuous mode [ 107.357873][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.357903][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.358873][ T7053] batman_adv: batadv0: Interface activated: team0 [ 107.380356][ T7053] batman_adv: batadv0: Interface deactivated: team0 [ 107.387073][ T7053] batman_adv: batadv0: Removing interface: team0 [ 107.404312][ T7053] bridge0: port 4(team0) entered blocking state [ 107.410805][ T7053] bridge0: port 4(team0) entered disabled state [ 107.433520][ T7053] team0: entered allmulticast mode [ 107.438923][ T7066] loop3: detected capacity change from 0 to 512 [ 107.444927][ T7053] team_slave_0: entered allmulticast mode [ 107.451021][ T7053] team_slave_1: entered allmulticast mode [ 107.467234][ T7053] bridge0: port 4(team0) entered blocking state [ 107.468037][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.473719][ T7053] bridge0: port 4(team0) entered forwarding state [ 107.474037][ T7063] tipc: Cannot configure node identity twice [ 107.492912][ T7068] loop1: detected capacity change from 0 to 1024 [ 107.539881][ T7066] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.562241][ T7072] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1284'. [ 107.588392][ T7066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.600001][ T7068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.620945][ T7068] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.312106][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.342161][ T7097] loop1: detected capacity change from 0 to 512 [ 108.360646][ T7097] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.368819][ T7097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 108.377718][ T7097] System zones: 0-1, 15-15, 18-18, 34-34 [ 108.384822][ T7097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.391672][ T7097] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.406368][ T7097] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 108.421904][ T7097] EXT4-fs (loop1): 1 truncate cleaned up [ 108.428195][ T7097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.453465][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.549809][ T7108] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 108.566275][ T7109] tipc: Cannot configure node identity twice [ 108.612690][ T7113] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1297'. [ 108.636702][ T7115] loop4: detected capacity change from 0 to 1024 [ 108.651244][ T7115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.731533][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.534974][ T7148] loop3: detected capacity change from 0 to 512 [ 109.551079][ T7148] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 109.559245][ T7148] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 109.573619][ T7148] System zones: 0-1, 15-15, 18-18, 34-34 [ 109.580160][ T7148] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.586774][ T7148] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 109.596455][ T7155] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.601498][ T7148] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 109.618174][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 109.624284][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.653606][ T7156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1312'. [ 109.665426][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.690894][ T7155] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.691885][ T7160] loop3: detected capacity change from 0 to 164 [ 109.751937][ T7155] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.780015][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 109.780089][ T29] audit: type=1326 audit(1750154796.658:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 109.811298][ T29] audit: type=1326 audit(1750154796.688:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 109.812364][ T7155] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.834797][ T29] audit: type=1326 audit(1750154796.688:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 109.834837][ T29] audit: type=1326 audit(1750154796.688:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 109.834940][ T29] audit: type=1326 audit(1750154796.688:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 109.834979][ T29] audit: type=1326 audit(1750154796.688:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 109.835052][ T29] audit: type=1326 audit(1750154796.688:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 109.962682][ T29] audit: type=1326 audit(1750154796.718:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 109.986358][ T29] audit: type=1326 audit(1750154796.718:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 110.010208][ T29] audit: type=1326 audit(1750154796.718:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 110.073565][ T7155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.088507][ T7155] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.101892][ T7155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.115110][ T7155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.171250][ T7178] netlink: 'syz.0.1322': attribute type 21 has an invalid length. [ 110.179735][ T7178] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1322'. [ 110.213435][ T7182] loop1: detected capacity change from 0 to 512 [ 110.231228][ T7182] EXT4-fs (loop1): 1 orphan inode deleted [ 110.237546][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.250963][ T7182] ext4 filesystem being mounted at /syzcgroup/cpu/syz1/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 110.263628][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 110.276428][ T7182] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.309531][ T7189] netlink: 'syz.1.1326': attribute type 13 has an invalid length. [ 110.313746][ T7187] loop2: detected capacity change from 0 to 256 [ 110.317451][ T7189] netlink: 'syz.1.1326': attribute type 27 has an invalid length. [ 110.384142][ T7193] loop4: detected capacity change from 0 to 1024 [ 110.402663][ T7193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.415539][ T7193] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.432684][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.603422][ T7243] loop2: detected capacity change from 0 to 1024 [ 111.635938][ T7243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.652329][ T7243] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.183712][ T7272] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1356'. [ 112.195456][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.231769][ T7278] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.284307][ T7283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1357'. [ 112.296880][ T7278] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.361068][ T7286] Cannot find del_set index 0 as target [ 112.369925][ T7286] hub 4-0:1.0: USB hub found [ 112.374802][ T7286] hub 4-0:1.0: 8 ports detected [ 112.383321][ T7278] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.452370][ T7278] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.495538][ T7302] loop3: detected capacity change from 0 to 1024 [ 112.523200][ T7278] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.535061][ T7302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.537710][ T7278] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.556976][ T7302] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.567767][ T7278] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.584461][ T7278] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.630202][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 113.578777][ T7323] loop2: detected capacity change from 0 to 1024 [ 113.587019][ T7323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.595905][ T7323] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.650004][ T7323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 113.687952][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.698503][ T7323] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1373: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.736379][ T7323] EXT4-fs (loop2): Remounting filesystem read-only [ 113.750022][ T7323] EXT4-fs (loop2): 1 orphan inode deleted [ 113.766261][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 113.766334][ T7323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.810203][ T7354] tipc: Cannot configure node identity twice [ 113.819613][ T7323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.964675][ T7371] loop1: detected capacity change from 0 to 1024 [ 113.990820][ T7371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.993751][ T7379] loop4: detected capacity change from 0 to 764 [ 114.011556][ T7379] iso9660: Unknown parameter '000000000000000000000030177777777777777777777701777777777777777777777' [ 114.027132][ T7371] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.030056][ T7379] loop4: detected capacity change from 0 to 1024 [ 114.052618][ T7379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.165942][ T7389] FAULT_INJECTION: forcing a failure. [ 114.165942][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 114.178784][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.2.1400 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 114.178822][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.178883][ T7389] Call Trace: [ 114.178891][ T7389] [ 114.178971][ T7389] __dump_stack+0x1d/0x30 [ 114.178998][ T7389] dump_stack_lvl+0xe8/0x140 [ 114.179023][ T7389] dump_stack+0x15/0x1b [ 114.179048][ T7389] should_fail_ex+0x265/0x280 [ 114.179213][ T7389] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 114.179248][ T7389] ? proc_thread_self_get_link+0xb0/0x130 [ 114.179274][ T7389] should_failslab+0x8c/0xb0 [ 114.179302][ T7389] __kmalloc_cache_noprof+0x4c/0x320 [ 114.179334][ T7389] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 114.179359][ T7389] proc_thread_self_get_link+0xb0/0x130 [ 114.179407][ T7389] pick_link+0x47a/0x830 [ 114.179436][ T7389] step_into+0x7b6/0x820 [ 114.179479][ T7389] ? inode_permission+0x106/0x310 [ 114.179511][ T7389] link_path_walk+0x571/0x900 [ 114.179599][ T7389] path_openat+0x1de/0x2170 [ 114.179632][ T7389] ? _parse_integer_limit+0x170/0x190 [ 114.179742][ T7389] do_filp_open+0x109/0x230 [ 114.179793][ T7389] do_sys_openat2+0xa6/0x110 [ 114.179829][ T7389] __x64_sys_openat+0xf2/0x120 [ 114.179924][ T7389] x64_sys_call+0x1af/0x2fb0 [ 114.179953][ T7389] do_syscall_64+0xd2/0x200 [ 114.179977][ T7389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.180035][ T7389] ? clear_bhb_loop+0x40/0x90 [ 114.180062][ T7389] ? clear_bhb_loop+0x40/0x90 [ 114.180168][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.180196][ T7389] RIP: 0033:0x7fd8da4ed290 [ 114.180215][ T7389] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 114.180240][ T7389] RSP: 002b:00007fd8d8b56f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 114.180264][ T7389] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd8da4ed290 [ 114.180348][ T7389] RDX: 0000000000000002 RSI: 00007fd8d8b56fa0 RDI: 00000000ffffff9c [ 114.180364][ T7389] RBP: 00007fd8d8b56fa0 R08: 0000000000000000 R09: 0000000000000000 [ 114.180381][ T7389] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 114.180403][ T7389] R13: 0000000000000000 R14: 00007fd8da715fa0 R15: 00007fff4972d128 [ 114.180428][ T7389] [ 114.418599][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 114.687686][ T7409] loop2: detected capacity change from 0 to 128 [ 114.719268][ T7409] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.732818][ T7409] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.795360][ T7379] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.819584][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 114.819602][ T29] audit: type=1326 audit(1750154801.698:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe09a20d290 code=0x7ffc0000 [ 114.849443][ T29] audit: type=1326 audit(1750154801.698:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe09a20d677 code=0x7ffc0000 [ 114.873998][ T29] audit: type=1326 audit(1750154801.698:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 114.897939][ T29] audit: type=1326 audit(1750154801.698:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 114.921537][ T29] audit: type=1326 audit(1750154801.728:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 114.945189][ T29] audit: type=1326 audit(1750154801.728:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 114.968760][ T29] audit: type=1326 audit(1750154801.728:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 114.992353][ T29] audit: type=1326 audit(1750154801.728:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 115.015884][ T29] audit: type=1326 audit(1750154801.728:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 115.039437][ T29] audit: type=1326 audit(1750154801.728:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 115.063604][ T7428] macvlan0: entered allmulticast mode [ 115.069050][ T7428] veth1_vlan: entered allmulticast mode [ 115.073845][ T7409] xt_CT: No such helper "snmp_trap" [ 115.091476][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.110172][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.166441][ T7436] loop1: detected capacity change from 0 to 512 [ 115.208207][ T7436] EXT4-fs (loop1): 1 orphan inode deleted [ 115.216954][ T7436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.229621][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 115.242401][ T7431] FAULT_INJECTION: forcing a failure. [ 115.242401][ T7431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.253671][ T7436] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.255657][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.3.1413 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 115.255699][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.255717][ T7431] Call Trace: [ 115.255726][ T7431] [ 115.255736][ T7431] __dump_stack+0x1d/0x30 [ 115.255780][ T7431] dump_stack_lvl+0xe8/0x140 [ 115.255807][ T7431] dump_stack+0x15/0x1b [ 115.255831][ T7431] should_fail_ex+0x265/0x280 [ 115.255914][ T7431] should_fail+0xb/0x20 [ 115.255953][ T7431] should_fail_usercopy+0x1a/0x20 [ 115.255998][ T7431] _copy_to_iter+0x24b/0xe30 [ 115.256079][ T7431] copy_page_to_iter+0x18f/0x2d0 [ 115.256106][ T7431] filemap_read+0x530/0xa00 [ 115.256170][ T7431] generic_file_read_iter+0x79/0x330 [ 115.256325][ T7431] ? __import_iovec+0x321/0x540 [ 115.256357][ T7431] do_iter_readv_writev+0x421/0x4c0 [ 115.256445][ T7431] vfs_readv+0x1ea/0x690 [ 115.256489][ T7431] __x64_sys_preadv+0xfd/0x1c0 [ 115.256517][ T7431] x64_sys_call+0x1503/0x2fb0 [ 115.256616][ T7431] do_syscall_64+0xd2/0x200 [ 115.256641][ T7431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.256678][ T7431] ? clear_bhb_loop+0x40/0x90 [ 115.256706][ T7431] ? clear_bhb_loop+0x40/0x90 [ 115.256769][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.256821][ T7431] RIP: 0033:0x7f8d5880e929 [ 115.256850][ T7431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.256875][ T7431] RSP: 002b:00007f8d56e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 115.256906][ T7431] RAX: ffffffffffffffda RBX: 00007f8d58a35fa0 RCX: 00007f8d5880e929 [ 115.256931][ T7431] RDX: 0000000000000005 RSI: 00002000000015c0 RDI: 0000000000000005 [ 115.256953][ T7431] RBP: 00007f8d56e77090 R08: 000000000000003f R09: 0000000000000000 [ 115.256970][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.256987][ T7431] R13: 0000000000000000 R14: 00007f8d58a35fa0 R15: 00007ffc2bde32e8 [ 115.257014][ T7431] [ 115.259935][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.334339][ T7436] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1412: iget: bad i_size value: 360287970189639690 [ 115.515526][ T7455] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1412: iget: bad i_size value: 360287970189639690 [ 115.528740][ T7444] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1412: iget: bad i_size value: 360287970189639690 [ 115.583337][ T7462] loop3: detected capacity change from 0 to 1024 [ 115.622502][ T7462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.636213][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.641855][ T7462] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.732933][ T7479] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 116.310220][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.353715][ T7491] loop2: detected capacity change from 0 to 1024 [ 116.363787][ T7491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.375681][ T7491] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.407047][ T7508] loop3: detected capacity change from 0 to 256 [ 116.427788][ T7491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 116.450621][ T7491] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1435: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.491252][ T7491] EXT4-fs (loop2): Remounting filesystem read-only [ 116.510664][ T7491] EXT4-fs (loop2): 1 orphan inode deleted [ 116.523408][ T7491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.571409][ T7491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.623102][ T7529] loop2: detected capacity change from 0 to 1024 [ 116.642565][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.671466][ T7529] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.682599][ T7532] loop1: detected capacity change from 0 to 512 [ 116.702102][ T7532] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 116.710131][ T7532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 116.739452][ T7532] System zones: 0-1, 15-15, 18-18, 34-34 [ 116.745322][ T7532] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.768203][ T7515] netlink: 'syz.3.1444': attribute type 10 has an invalid length. [ 116.778480][ T7515] batman_adv: batadv0: Adding interface: team0 [ 116.784725][ T7515] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.809969][ T7515] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.855297][ T7532] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 116.870012][ T7532] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 117.460040][ T7532] EXT4-fs (loop1): 1 truncate cleaned up [ 117.492043][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.492823][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.568555][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.620925][ T7555] loop1: detected capacity change from 0 to 128 [ 117.652100][ T7555] vfat: Unknown parameter 'ÿÿÿÿ' [ 117.660004][ T7549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.787227][ T7577] loop4: detected capacity change from 0 to 256 [ 117.863507][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1469'. [ 117.907124][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 117.948941][ T7593] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 118.031449][ T7600] loop4: detected capacity change from 0 to 512 [ 118.054055][ T7600] EXT4-fs (loop4): 1 orphan inode deleted [ 118.069957][ T389] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 118.090064][ T7600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.118514][ T7600] ext4 filesystem being mounted at /syzcgroup/cpu/syz4/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 118.387217][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 118.499238][ T7638] block device autoloading is deprecated and will be removed. [ 118.542992][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 118.581914][ T7638] bridge_slave_1: left allmulticast mode [ 118.587683][ T7638] bridge_slave_1: left promiscuous mode [ 118.593516][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.997243][ T7638] bridge_slave_0: left allmulticast mode [ 119.003267][ T7638] bridge_slave_0: left promiscuous mode [ 119.009122][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.066461][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.089856][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.223971][ T7674] netlink: 'syz.0.1497': attribute type 13 has an invalid length. [ 119.308209][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 119.346980][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 119.358653][ T7683] loop3: detected capacity change from 0 to 256 [ 119.392621][ T7683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.435041][ T7683] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.445113][ T7683] FAT-fs (loop3): Filesystem has been set read-only [ 119.446618][ T7689] loop0: detected capacity change from 0 to 1024 [ 119.491648][ T7689] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.533404][ T7689] lo speed is unknown, defaulting to 1000 [ 119.665577][ T7683] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 119.712701][ T7697] vhci_hcd: invalid port number 96 [ 119.717909][ T7697] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 119.730274][ T7701] syzkaller0: entered promiscuous mode [ 119.735815][ T7701] syzkaller0: entered allmulticast mode [ 119.790654][ T7708] netlink: 'syz.2.1512': attribute type 13 has an invalid length. [ 119.850659][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 119.850695][ T29] audit: type=1326 audit(1750154806.727:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 119.852013][ T7713] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 119.856932][ T29] audit: type=1326 audit(1750154806.727:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8da4ed290 code=0x7ffc0000 [ 119.880533][ T7713] audit: out of memory in audit_log_start [ 119.888136][ T29] audit: type=1326 audit(1750154806.727:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd8da4ed3df code=0x7ffc0000 [ 119.940925][ T29] audit: type=1326 audit(1750154806.727:11735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 120.028002][ T29] audit: type=1326 audit(1750154806.787:11736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd8da4ed3df code=0x7ffc0000 [ 120.051916][ T29] audit: type=1326 audit(1750154806.787:11737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd8da4ed58a code=0x7ffc0000 [ 120.075501][ T29] audit: type=1326 audit(1750154806.787:11738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 120.099321][ T29] audit: type=1326 audit(1750154806.787:11739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 120.259331][ T7733] loop3: detected capacity change from 0 to 256 [ 120.277188][ T7733] openvswitch: netlink: Message has 6 unknown bytes. [ 120.351200][ T7738] loop0: detected capacity change from 0 to 2048 [ 120.477395][ T7743] tipc: Cannot configure node identity twice [ 120.676667][ T7757] loop0: detected capacity change from 0 to 512 [ 120.757996][ T7757] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.765994][ T7757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 120.777561][ T7757] System zones: 0-1, 15-15, 18-18, 34-34 [ 120.808679][ T7757] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.824159][ T7757] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.838949][ T7757] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 120.898056][ T7757] EXT4-fs (loop0): 1 truncate cleaned up [ 121.053086][ T7765] loop0: detected capacity change from 0 to 256 [ 121.105228][ T7753] Set syz1 is full, maxelem 65536 reached [ 121.229752][ T7769] loop0: detected capacity change from 0 to 8192 [ 121.254377][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'. [ 121.532587][ T7798] loop2: detected capacity change from 0 to 256 [ 121.533424][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 122.635690][ T7840] loop0: detected capacity change from 0 to 256 [ 122.823136][ T7855] loop4: detected capacity change from 0 to 1024 [ 122.841484][ T7853] loop0: detected capacity change from 0 to 512 [ 122.860434][ T7853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.877297][ T7855] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.889968][ T7853] EXT4-fs (loop0): 1 truncate cleaned up [ 123.373203][ T7869] netlink: 'syz.1.1566': attribute type 13 has an invalid length. [ 123.381176][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'. [ 123.754267][ T7877] loop3: detected capacity change from 0 to 512 [ 123.771662][ T7879] loop4: detected capacity change from 0 to 512 [ 123.775381][ T7877] ext4: Unknown parameter 'permit_directio' [ 123.833391][ T7879] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 123.841538][ T7879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 123.859781][ T7879] System zones: 0-1, 15-15, 18-18, 34-34 [ 123.866142][ T7879] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.872938][ T7877] loop3: detected capacity change from 0 to 512 [ 123.873864][ T7879] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.893823][ T7879] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 123.901036][ T7879] EXT4-fs (loop4): 1 truncate cleaned up [ 123.945933][ T7895] FAULT_INJECTION: forcing a failure. [ 123.945933][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.946929][ T7877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.959038][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.4.1575 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 123.959130][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.959148][ T7895] Call Trace: [ 123.959159][ T7895] [ 123.959168][ T7895] __dump_stack+0x1d/0x30 [ 123.959197][ T7895] dump_stack_lvl+0xe8/0x140 [ 123.959226][ T7895] dump_stack+0x15/0x1b [ 123.959295][ T7895] should_fail_ex+0x265/0x280 [ 123.959339][ T7895] should_fail+0xb/0x20 [ 123.959376][ T7895] should_fail_usercopy+0x1a/0x20 [ 123.959440][ T7895] _copy_from_iter+0xcf/0xe40 [ 123.959528][ T7895] ? __build_skb_around+0x1a0/0x200 [ 123.959570][ T7895] ? __alloc_skb+0x223/0x320 [ 123.959622][ T7895] netlink_sendmsg+0x471/0x6b0 [ 123.959652][ T7895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.959679][ T7895] __sock_sendmsg+0x142/0x180 [ 123.959712][ T7895] ____sys_sendmsg+0x31e/0x4e0 [ 123.959788][ T7895] ___sys_sendmsg+0x17b/0x1d0 [ 123.959855][ T7895] __x64_sys_sendmsg+0xd4/0x160 [ 123.959898][ T7895] x64_sys_call+0x2999/0x2fb0 [ 123.959918][ T7895] do_syscall_64+0xd2/0x200 [ 123.959999][ T7895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.960041][ T7895] ? clear_bhb_loop+0x40/0x90 [ 123.960082][ T7895] ? clear_bhb_loop+0x40/0x90 [ 123.960110][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.960223][ T7895] RIP: 0033:0x7fe09a20e929 [ 123.960248][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.960274][ T7895] RSP: 002b:00007fe098877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.960305][ T7895] RAX: ffffffffffffffda RBX: 00007fe09a435fa0 RCX: 00007fe09a20e929 [ 123.960368][ T7895] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006 [ 123.960386][ T7895] RBP: 00007fe098877090 R08: 0000000000000000 R09: 0000000000000000 [ 123.960401][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.960418][ T7895] R13: 0000000000000000 R14: 00007fe09a435fa0 R15: 00007ffdca5725d8 [ 123.960445][ T7895] [ 124.090388][ T7899] loop2: detected capacity change from 0 to 1024 [ 124.192009][ T7901] loop4: detected capacity change from 0 to 512 [ 124.218757][ T7901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.260117][ T7906] loop0: detected capacity change from 0 to 1024 [ 124.266764][ T7877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 124.276897][ T7877] System zones: 0-2, 18-18, 34-34 [ 124.282392][ T7901] EXT4-fs (loop4): 1 truncate cleaned up [ 124.299013][ T7877] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.347864][ T7906] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.230455][ T7922] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 125.281177][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 125.318781][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.336371][ T7927] loop2: detected capacity change from 0 to 1024 [ 125.359670][ T7927] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.409471][ T7923] bond1 (unregistering): Released all slaves [ 125.473704][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 125.473721][ T29] audit: type=1400 audit(1750154812.347:12082): avc: denied { create } for pid=7921 comm="syz.2.1584" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 125.567265][ T7935] loop3: detected capacity change from 0 to 256 [ 125.630648][ T29] audit: type=1326 audit(1750154812.507:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.671805][ T29] audit: type=1326 audit(1750154812.507:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.695347][ T29] audit: type=1326 audit(1750154812.537:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.718970][ T29] audit: type=1326 audit(1750154812.537:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.742624][ T29] audit: type=1326 audit(1750154812.537:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.766386][ T29] audit: type=1326 audit(1750154812.537:12088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.790117][ T29] audit: type=1326 audit(1750154812.537:12089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.813987][ T29] audit: type=1326 audit(1750154812.537:12090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 125.837727][ T29] audit: type=1326 audit(1750154812.537:12091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 126.117737][ T7956] loop4: detected capacity change from 0 to 512 [ 126.253401][ T7956] EXT4-fs (loop4): 1 orphan inode deleted [ 126.259862][ T7956] ext4 filesystem being mounted at /syzcgroup/cpu/syz4/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 126.447244][ T7964] loop0: detected capacity change from 0 to 512 [ 126.473631][ T7964] EXT4-fs (loop0): 1 orphan inode deleted [ 126.484466][ T7964] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 126.529005][ T7939] syz.3.1589 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 126.543210][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.3.1589 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 126.543241][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.543254][ T7939] Call Trace: [ 126.543260][ T7939] [ 126.543269][ T7939] __dump_stack+0x1d/0x30 [ 126.543312][ T7939] dump_stack_lvl+0xe8/0x140 [ 126.543338][ T7939] dump_stack+0x15/0x1b [ 126.543407][ T7939] dump_header+0x81/0x220 [ 126.543505][ T7939] oom_kill_process+0x334/0x3f0 [ 126.543543][ T7939] out_of_memory+0x979/0xb80 [ 126.543657][ T7939] try_charge_memcg+0x5e6/0x9e0 [ 126.543690][ T7939] obj_cgroup_charge_pages+0xa6/0x150 [ 126.543737][ T7939] __memcg_kmem_charge_page+0x9f/0x170 [ 126.543772][ T7939] __alloc_frozen_pages_noprof+0x188/0x360 [ 126.543823][ T7939] alloc_pages_mpol+0xb3/0x250 [ 126.543862][ T7939] alloc_pages_noprof+0x90/0x130 [ 126.543902][ T7939] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 126.543949][ T7939] __kvmalloc_node_noprof+0x30f/0x4e0 [ 126.544044][ T7939] ? ip_set_alloc+0x1f/0x30 [ 126.544081][ T7939] ? ip_set_alloc+0x1f/0x30 [ 126.544149][ T7939] ? __kmalloc_cache_noprof+0x189/0x320 [ 126.544179][ T7939] ip_set_alloc+0x1f/0x30 [ 126.544269][ T7939] hash_netiface_create+0x282/0x740 [ 126.544303][ T7939] ? __pfx_hash_netiface_create+0x10/0x10 [ 126.544378][ T7939] ip_set_create+0x3cc/0x960 [ 126.544584][ T7939] ? __nla_parse+0x40/0x60 [ 126.544604][ T7939] nfnetlink_rcv_msg+0x4c3/0x590 [ 126.544653][ T7939] ? selinux_capable+0x1f9/0x270 [ 126.544796][ T7939] netlink_rcv_skb+0x123/0x220 [ 126.544913][ T7939] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.545022][ T7939] nfnetlink_rcv+0x16b/0x1690 [ 126.545075][ T7939] ? __kfree_skb+0x109/0x150 [ 126.545117][ T7939] ? nlmon_xmit+0x4f/0x60 [ 126.545144][ T7939] ? consume_skb+0x49/0x150 [ 126.545181][ T7939] ? nlmon_xmit+0x4f/0x60 [ 126.545320][ T7939] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 126.545364][ T7939] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 126.545412][ T7939] ? __dev_queue_xmit+0x182/0x1fb0 [ 126.545447][ T7939] ? ref_tracker_free+0x37d/0x3e0 [ 126.545520][ T7939] ? __netlink_deliver_tap+0x4dc/0x500 [ 126.545566][ T7939] netlink_unicast+0x59e/0x670 [ 126.545658][ T7939] netlink_sendmsg+0x58b/0x6b0 [ 126.545680][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.545756][ T7939] __sock_sendmsg+0x142/0x180 [ 126.545805][ T7939] ____sys_sendmsg+0x31e/0x4e0 [ 126.545843][ T7939] ___sys_sendmsg+0x17b/0x1d0 [ 126.545944][ T7939] __x64_sys_sendmsg+0xd4/0x160 [ 126.545967][ T7939] x64_sys_call+0x2999/0x2fb0 [ 126.545990][ T7939] do_syscall_64+0xd2/0x200 [ 126.546008][ T7939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.546054][ T7939] ? clear_bhb_loop+0x40/0x90 [ 126.546076][ T7939] ? clear_bhb_loop+0x40/0x90 [ 126.546099][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.546121][ T7939] RIP: 0033:0x7f8d5880e929 [ 126.546137][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.546156][ T7939] RSP: 002b:00007f8d56e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.546241][ T7939] RAX: ffffffffffffffda RBX: 00007f8d58a35fa0 RCX: 00007f8d5880e929 [ 126.546254][ T7939] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 126.546281][ T7939] RBP: 00007f8d58890b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.546294][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.546306][ T7939] R13: 0000000000000000 R14: 00007f8d58a35fa0 R15: 00007ffc2bde32e8 [ 126.546326][ T7939] [ 126.546336][ T7939] memory: usage 307192kB, limit 307200kB, failcnt 618 [ 126.624019][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 126.628732][ T7939] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 126.628750][ T7939] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 126.927763][ T7939] Memory cgroup stats for /syz3: [ 126.938532][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 126.955939][ T7939] cache 90112 [ 126.959258][ T7939] rss 4096 [ 126.962339][ T7939] shmem 0 [ 126.965286][ T7939] mapped_file 65536 [ 126.969133][ T7939] dirty 0 [ 126.972156][ T7939] writeback 0 [ 126.975463][ T7939] workingset_refault_anon 198 [ 126.980157][ T7939] workingset_refault_file 1013 [ 126.984958][ T7939] swap 212992 [ 126.988259][ T7939] swapcached 0 [ 126.991705][ T7939] pgpgin 54551 [ 126.995096][ T7939] pgpgout 54528 [ 126.998566][ T7939] pgfault 78487 [ 127.002154][ T7939] pgmajfault 125 [ 127.005739][ T7939] inactive_anon 4096 [ 127.009709][ T7939] active_anon 0 [ 127.013235][ T7939] inactive_file 90112 [ 127.017251][ T7939] active_file 0 [ 127.020854][ T7939] unevictable 0 [ 127.024342][ T7939] hierarchical_memory_limit 314572800 [ 127.029777][ T7939] hierarchical_memsw_limit 9223372036854771712 [ 127.035994][ T7939] total_cache 90112 [ 127.039832][ T7939] total_rss 4096 [ 127.043441][ T7939] total_shmem 0 [ 127.046922][ T7939] total_mapped_file 65536 [ 127.051295][ T7939] total_dirty 0 [ 127.054839][ T7939] total_writeback 0 [ 127.058682][ T7939] total_workingset_refault_anon 198 [ 127.063933][ T7939] total_workingset_refault_file 1013 [ 127.069279][ T7939] total_swap 212992 [ 127.073117][ T7939] total_swapcached 0 [ 127.077055][ T7939] total_pgpgin 54551 [ 127.081022][ T7939] total_pgpgout 54528 [ 127.085027][ T7939] total_pgfault 78487 [ 127.089089][ T7939] total_pgmajfault 125 [ 127.093309][ T7939] total_inactive_anon 4096 [ 127.097749][ T7939] total_active_anon 0 [ 127.101785][ T7939] total_inactive_file 90112 [ 127.106370][ T7939] total_active_file 0 [ 127.110385][ T7939] total_unevictable 0 [ 127.114433][ T7939] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1589,pid=7938,uid=0 [ 127.129275][ T7939] Memory cgroup out of memory: Killed process 7938 (syz.3.1589) total-vm:93884kB, anon-rss:1064kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 127.189619][ T7974] loop0: detected capacity change from 0 to 2048 [ 127.214339][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 127.231790][ T7981] FAULT_INJECTION: forcing a failure. [ 127.231790][ T7981] name failslab, interval 1, probability 0, space 0, times 0 [ 127.244620][ T7981] CPU: 1 UID: 0 PID: 7981 Comm: syz.4.1603 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 127.244662][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.244680][ T7981] Call Trace: [ 127.244688][ T7981] [ 127.244704][ T7981] __dump_stack+0x1d/0x30 [ 127.244733][ T7981] dump_stack_lvl+0xe8/0x140 [ 127.244761][ T7981] dump_stack+0x15/0x1b [ 127.244828][ T7981] should_fail_ex+0x265/0x280 [ 127.244869][ T7981] ? audit_log_d_path+0x8d/0x150 [ 127.244983][ T7981] should_failslab+0x8c/0xb0 [ 127.245013][ T7981] __kmalloc_cache_noprof+0x4c/0x320 [ 127.245129][ T7981] audit_log_d_path+0x8d/0x150 [ 127.245170][ T7981] audit_log_d_path_exe+0x42/0x70 [ 127.245263][ T7981] audit_log_task+0x1e9/0x250 [ 127.245297][ T7981] ? __rcu_read_unlock+0x4f/0x70 [ 127.245403][ T7981] audit_seccomp+0x61/0x100 [ 127.245443][ T7981] ? __seccomp_filter+0x68c/0x10d0 [ 127.245473][ T7981] __seccomp_filter+0x69d/0x10d0 [ 127.245506][ T7981] ? __se_sys_mbind+0xa39/0xac0 [ 127.245652][ T7981] __secure_computing+0x82/0x150 [ 127.245682][ T7981] syscall_trace_enter+0xcf/0x1e0 [ 127.245713][ T7981] do_syscall_64+0xac/0x200 [ 127.245735][ T7981] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.245796][ T7981] ? clear_bhb_loop+0x40/0x90 [ 127.245823][ T7981] ? clear_bhb_loop+0x40/0x90 [ 127.245851][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.245878][ T7981] RIP: 0033:0x7fe09a20d33c [ 127.245930][ T7981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.245956][ T7981] RSP: 002b:00007fe098877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.245979][ T7981] RAX: ffffffffffffffda RBX: 00007fe09a435fa0 RCX: 00007fe09a20d33c [ 127.245995][ T7981] RDX: 000000000000000f RSI: 00007fe0988770a0 RDI: 0000000000000006 [ 127.246011][ T7981] RBP: 00007fe098877090 R08: 0000000000000000 R09: 0000000000000002 [ 127.246065][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.246081][ T7981] R13: 0000000000000000 R14: 00007fe09a435fa0 R15: 00007ffdca5725d8 [ 127.246107][ T7981] [ 127.471550][ T7652] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 127.481471][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 127.481529][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.481544][ T7652] Call Trace: [ 127.481551][ T7652] [ 127.481560][ T7652] __dump_stack+0x1d/0x30 [ 127.481602][ T7652] dump_stack_lvl+0xe8/0x140 [ 127.481626][ T7652] dump_stack+0x15/0x1b [ 127.481647][ T7652] dump_header+0x81/0x220 [ 127.481684][ T7652] oom_kill_process+0x334/0x3f0 [ 127.481745][ T7652] out_of_memory+0x979/0xb80 [ 127.481787][ T7652] try_charge_memcg+0x5e6/0x9e0 [ 127.481879][ T7652] charge_memcg+0x51/0xc0 [ 127.481918][ T7652] __mem_cgroup_charge+0x28/0xb0 [ 127.482024][ T7652] shmem_get_folio_gfp+0x470/0xd60 [ 127.482072][ T7652] shmem_write_begin+0xa8/0x190 [ 127.482147][ T7652] generic_perform_write+0x184/0x490 [ 127.482174][ T7652] shmem_file_write_iter+0xc5/0xf0 [ 127.482196][ T7652] __kernel_write_iter+0x256/0x4c0 [ 127.482266][ T7652] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 127.482382][ T7652] dump_user_range+0x407/0x8c0 [ 127.482432][ T7652] elf_core_dump+0x1dc2/0x1f80 [ 127.482463][ T7652] ? 0xffffffffff600000 [ 127.482531][ T7652] do_coredump+0x1dfa/0x27b0 [ 127.482564][ T7652] ? __account_obj_stock+0x211/0x350 [ 127.482603][ T7652] ? __sigqueue_free+0xf4/0x130 [ 127.482629][ T7652] ? kmem_cache_free+0xdf/0x300 [ 127.482667][ T7652] ? proc_coredump_connector+0x114/0x220 [ 127.482693][ T7652] get_signal+0xd85/0xf70 [ 127.482736][ T7652] arch_do_signal_or_restart+0x96/0x480 [ 127.482848][ T7652] irqentry_exit_to_user_mode+0x5e/0xa0 [ 127.482993][ T7652] irqentry_exit+0x12/0x50 [ 127.483019][ T7652] asm_exc_page_fault+0x26/0x30 [ 127.483092][ T7652] RIP: 0033:0x7fba68a5f837 [ 127.483112][ T7652] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 127.483175][ T7652] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 127.483193][ T7652] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 127.483207][ T7652] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 127.483222][ T7652] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.483235][ T7652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.483249][ T7652] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 127.483271][ T7652] [ 127.483279][ T7652] memory: usage 307200kB, limit 307200kB, failcnt 18588 [ 127.730273][ T7652] memory+swap: usage 431580kB, limit 9007199254740988kB, failcnt 0 [ 127.738434][ T7652] kmem: usage 4788kB, limit 9007199254740988kB, failcnt 0 [ 127.745596][ T7652] Memory cgroup stats for /syz1: [ 127.746799][ T7652] cache 308420608 [ 127.755433][ T7652] rss 1015808 [ 127.758745][ T7652] shmem 308420608 [ 127.762479][ T7652] mapped_file 0 [ 127.766006][ T7652] dirty 0 [ 127.768963][ T7652] writeback 0 [ 127.772310][ T7652] workingset_refault_anon 334 [ 127.777090][ T7652] workingset_refault_file 811 [ 127.781804][ T7652] swap 127365120 [ 127.785430][ T7652] swapcached 241664 [ 127.789361][ T7652] pgpgin 146934 [ 127.792880][ T7652] pgpgout 71331 [ 127.796363][ T7652] pgfault 86120 [ 127.799838][ T7652] pgmajfault 318 [ 127.803596][ T7652] inactive_anon 107614208 [ 127.808066][ T7652] active_anon 202051584 [ 127.812331][ T7652] inactive_file 0 [ 127.815983][ T7652] active_file 4096 [ 127.819746][ T7652] unevictable 0 [ 127.823248][ T7652] hierarchical_memory_limit 314572800 [ 127.828712][ T7652] hierarchical_memsw_limit 9223372036854771712 [ 127.834907][ T7652] total_cache 308420608 [ 127.839166][ T7652] total_rss 1015808 [ 127.843118][ T7652] total_shmem 308420608 [ 127.847301][ T7652] total_mapped_file 0 [ 127.851360][ T7652] total_dirty 0 [ 127.854880][ T7652] total_writeback 0 [ 127.858705][ T7652] total_workingset_refault_anon 334 [ 127.863991][ T7652] total_workingset_refault_file 811 [ 127.869209][ T7652] total_swap 127365120 [ 127.873369][ T7652] total_swapcached 241664 [ 127.877723][ T7652] total_pgpgin 146934 [ 127.881754][ T7652] total_pgpgout 71331 [ 127.885817][ T7652] total_pgfault 86120 [ 127.889896][ T7652] total_pgmajfault 318 [ 127.894025][ T7652] total_inactive_anon 107614208 [ 127.899002][ T7652] total_active_anon 202051584 [ 127.903732][ T7652] total_inactive_file 0 [ 127.907908][ T7652] total_active_file 4096 [ 127.912200][ T7652] total_unevictable 0 [ 127.916250][ T7652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7652,uid=0 [ 127.930999][ T7652] Memory cgroup out of memory: Killed process 7652 (syz.1.1485) total-vm:89772kB, anon-rss:1076kB, file-rss:53404kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 128.020944][ T7989] binfmt_misc: register: failed to install interpreter file ./file0 [ 128.198732][ T8013] xt_hashlimit: max too large, truncated to 1048576 [ 128.265666][ T8013] syzkaller0: entered promiscuous mode [ 128.271267][ T8013] syzkaller0: entered allmulticast mode [ 128.317479][ T8013] loop2: detected capacity change from 0 to 512 [ 128.325241][ T8013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.337591][ T8013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 128.359939][ T8013] EXT4-fs (loop2): 1 truncate cleaned up [ 128.520618][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 128.998217][ T8050] loop4: detected capacity change from 0 to 1024 [ 129.025205][ T8050] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.874243][ T8056] loop2: detected capacity change from 0 to 512 [ 129.886752][ T3308] EXT4-fs unmount: 30 callbacks suppressed [ 129.886767][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.905442][ T8060] xt_hashlimit: size too large, truncated to 1048576 [ 129.913854][ T8056] EXT4-fs (loop2): 1 orphan inode deleted [ 129.920008][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.941781][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 130.070480][ T8056] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 130.103423][ T8056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.109787][ T7634] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 130.122428][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 130.122463][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.122479][ T7634] Call Trace: [ 130.122488][ T7634] [ 130.122498][ T7634] __dump_stack+0x1d/0x30 [ 130.122529][ T7634] dump_stack_lvl+0xe8/0x140 [ 130.122553][ T7634] dump_stack+0x15/0x1b [ 130.122585][ T7634] dump_header+0x81/0x220 [ 130.122625][ T7634] oom_kill_process+0x334/0x3f0 [ 130.122729][ T7634] out_of_memory+0x979/0xb80 [ 130.122769][ T7634] try_charge_memcg+0x5e6/0x9e0 [ 130.122804][ T7634] charge_memcg+0x51/0xc0 [ 130.122899][ T7634] __mem_cgroup_charge+0x28/0xb0 [ 130.122940][ T7634] shmem_get_folio_gfp+0x470/0xd60 [ 130.122988][ T7634] shmem_write_begin+0xa8/0x190 [ 130.123091][ T7634] generic_perform_write+0x184/0x490 [ 130.123122][ T7634] shmem_file_write_iter+0xc5/0xf0 [ 130.123168][ T7634] __kernel_write_iter+0x256/0x4c0 [ 130.123213][ T7634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 130.123246][ T7634] dump_user_range+0x407/0x8c0 [ 130.123296][ T7634] elf_core_dump+0x1dc2/0x1f80 [ 130.123340][ T7634] ? 0xffffffffff600000 [ 130.123400][ T7634] do_coredump+0x1dfa/0x27b0 [ 130.123464][ T7634] ? __account_obj_stock+0x211/0x350 [ 130.123504][ T7634] ? __sigqueue_free+0xf4/0x130 [ 130.123531][ T7634] ? kmem_cache_free+0xdf/0x300 [ 130.123612][ T7634] ? proc_coredump_connector+0x114/0x220 [ 130.123642][ T7634] get_signal+0xd85/0xf70 [ 130.123689][ T7634] arch_do_signal_or_restart+0x96/0x480 [ 130.123721][ T7634] irqentry_exit_to_user_mode+0x5e/0xa0 [ 130.123820][ T7634] irqentry_exit+0x12/0x50 [ 130.123926][ T7634] asm_exc_page_fault+0x26/0x30 [ 130.123951][ T7634] RIP: 0033:0x7fba68a5f837 [ 130.123969][ T7634] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 130.123990][ T7634] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 130.124009][ T7634] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 130.124024][ T7634] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 130.124119][ T7634] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.124134][ T7634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.124150][ T7634] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 130.124173][ T7634] [ 130.124181][ T7634] memory: usage 307200kB, limit 307200kB, failcnt 20836 [ 130.372032][ T7634] memory+swap: usage 425964kB, limit 9007199254740988kB, failcnt 0 [ 130.379960][ T7634] kmem: usage 4576kB, limit 9007199254740988kB, failcnt 0 [ 130.387740][ T7634] Memory cgroup stats for /syz1: [ 131.091631][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 131.221068][ T7634] cache 306753536 [ 131.224792][ T7634] rss 1167360 [ 131.228114][ T7634] shmem 306753536 [ 131.231780][ T7634] mapped_file 0 [ 131.235305][ T7634] dirty 0 [ 131.238311][ T7634] writeback 262144 [ 131.242192][ T7634] workingset_refault_anon 432 [ 131.246891][ T7634] workingset_refault_file 946 [ 131.251647][ T7634] swap 127127552 [ 131.255227][ T7634] swapcached 552960 [ 131.259126][ T7634] pgpgin 151592 [ 131.262624][ T7634] pgpgout 76251 [ 131.266108][ T7634] pgfault 86422 [ 131.269598][ T7634] pgmajfault 373 [ 131.273168][ T7634] inactive_anon 250294272 [ 131.277513][ T7634] active_anon 56467456 [ 131.281693][ T7634] inactive_file 0 [ 131.285403][ T7634] active_file 4096 [ 131.289137][ T7634] unevictable 0 [ 131.292621][ T7634] hierarchical_memory_limit 314572800 [ 131.298045][ T7634] hierarchical_memsw_limit 9223372036854771712 [ 131.304260][ T7634] total_cache 306753536 [ 131.308426][ T7634] total_rss 1167360 [ 131.312355][ T7634] total_shmem 306753536 [ 131.316530][ T7634] total_mapped_file 0 [ 131.320520][ T7634] total_dirty 0 [ 131.324044][ T7634] total_writeback 262144 [ 131.328305][ T7634] total_workingset_refault_anon 432 [ 131.333540][ T7634] total_workingset_refault_file 946 [ 131.338849][ T7634] total_swap 127127552 [ 131.342960][ T7634] total_swapcached 552960 [ 131.347314][ T7634] total_pgpgin 151592 [ 131.351433][ T7634] total_pgpgout 76251 [ 131.355423][ T7634] total_pgfault 86422 [ 131.359494][ T7634] total_pgmajfault 373 [ 131.363601][ T7634] total_inactive_anon 250294272 [ 131.368472][ T7634] total_active_anon 56467456 [ 131.373108][ T7634] total_inactive_file 0 [ 131.377323][ T7634] total_active_file 4096 [ 131.381613][ T7634] total_unevictable 0 [ 131.385607][ T7634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7663,uid=0 [ 131.400378][ T7634] Memory cgroup out of memory: Killed process 7663 (syz.1.1485) total-vm:89772kB, anon-rss:1076kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 131.466724][ T8093] loop2: detected capacity change from 0 to 1024 [ 131.510925][ T8093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.538113][ T8093] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.540765][ T8098] loop3: detected capacity change from 0 to 512 [ 131.993100][ T8098] EXT4-fs (loop3): 1 orphan inode deleted [ 132.000577][ T8098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.101535][ T8098] ext4 filesystem being mounted at /syzcgroup/cpu/syz3/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 132.332070][ T12] __quota_error: 73 callbacks suppressed [ 132.332089][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.347766][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 132.398772][ T8098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.431231][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.717437][ T8143] loop0: detected capacity change from 0 to 512 [ 132.745965][ T8143] EXT4-fs (loop0): 1 orphan inode deleted [ 132.762792][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.771942][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.772648][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 132.785611][ T8143] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 132.866215][ T8143] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.018861][ T29] audit: type=1326 audit(1750154819.886:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.049136][ T8168] loop3: detected capacity change from 0 to 512 [ 133.057318][ T8168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.061936][ T29] audit: type=1326 audit(1750154819.886:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.090779][ T29] audit: type=1326 audit(1750154819.916:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.114335][ T29] audit: type=1326 audit(1750154819.916:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.137865][ T29] audit: type=1326 audit(1750154819.916:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.161457][ T29] audit: type=1326 audit(1750154819.916:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.185092][ T29] audit: type=1326 audit(1750154819.916:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.208695][ T29] audit: type=1326 audit(1750154819.916:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 133.233550][ T8168] EXT4-fs (loop3): 1 truncate cleaned up [ 133.239734][ T8168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.310963][ T8164] FAULT_INJECTION: forcing a failure. [ 133.310963][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 133.323818][ T8164] CPU: 1 UID: 0 PID: 8164 Comm: syz.0.1672 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 133.323854][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.323870][ T8164] Call Trace: [ 133.323878][ T8164] [ 133.323887][ T8164] __dump_stack+0x1d/0x30 [ 133.323913][ T8164] dump_stack_lvl+0xe8/0x140 [ 133.323937][ T8164] dump_stack+0x15/0x1b [ 133.323958][ T8164] should_fail_ex+0x265/0x280 [ 133.323993][ T8164] should_failslab+0x8c/0xb0 [ 133.324015][ T8164] kmem_cache_alloc_noprof+0x50/0x310 [ 133.324040][ T8164] ? __mpol_dup+0x42/0x1b0 [ 133.324076][ T8164] __mpol_dup+0x42/0x1b0 [ 133.324105][ T8164] mpol_set_shared_policy+0x80/0x860 [ 133.324140][ T8164] ? kmem_cache_alloc_noprof+0x186/0x310 [ 133.324174][ T8164] ? __rcu_read_unlock+0x4f/0x70 [ 133.324204][ T8164] shmem_set_policy+0x3d/0x50 [ 133.324244][ T8164] mbind_range+0x23d/0x440 [ 133.324261][ T8164] ? mas_find+0x4ea/0x610 [ 133.324279][ T8164] __se_sys_mbind+0x648/0xac0 [ 133.324318][ T8164] __x64_sys_mbind+0x78/0x90 [ 133.324360][ T8164] x64_sys_call+0x14af/0x2fb0 [ 133.324380][ T8164] do_syscall_64+0xd2/0x200 [ 133.324396][ T8164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.324427][ T8164] ? clear_bhb_loop+0x40/0x90 [ 133.324452][ T8164] ? clear_bhb_loop+0x40/0x90 [ 133.324477][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.324496][ T8164] RIP: 0033:0x7f5f3921e929 [ 133.324510][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.324527][ T8164] RSP: 002b:00007f5f37887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 133.324544][ T8164] RAX: ffffffffffffffda RBX: 00007f5f39445fa0 RCX: 00007f5f3921e929 [ 133.324582][ T8164] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 133.324598][ T8164] RBP: 00007f5f37887090 R08: 0000000000000000 R09: 0000000000000000 [ 133.324614][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.324629][ T8164] R13: 0000000000000000 R14: 00007f5f39445fa0 R15: 00007fff657ad5b8 [ 133.324652][ T8164] [ 133.352130][ T7650] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 133.552544][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 133.552724][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.552756][ T7650] Call Trace: [ 133.552763][ T7650] [ 133.552769][ T7650] __dump_stack+0x1d/0x30 [ 133.552797][ T7650] dump_stack_lvl+0xe8/0x140 [ 133.552819][ T7650] dump_stack+0x15/0x1b [ 133.552835][ T7650] dump_header+0x81/0x220 [ 133.552942][ T7650] oom_kill_process+0x334/0x3f0 [ 133.552981][ T7650] out_of_memory+0x979/0xb80 [ 133.553058][ T7650] try_charge_memcg+0x5e6/0x9e0 [ 133.553093][ T7650] charge_memcg+0x51/0xc0 [ 133.553134][ T7650] __mem_cgroup_charge+0x28/0xb0 [ 133.553289][ T7650] shmem_get_folio_gfp+0x470/0xd60 [ 133.553336][ T7650] shmem_write_begin+0xa8/0x190 [ 133.553379][ T7650] generic_perform_write+0x184/0x490 [ 133.553412][ T7650] shmem_file_write_iter+0xc5/0xf0 [ 133.553488][ T7650] __kernel_write_iter+0x256/0x4c0 [ 133.553524][ T7650] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 133.553613][ T7650] dump_user_range+0x407/0x8c0 [ 133.553664][ T7650] elf_core_dump+0x1dc2/0x1f80 [ 133.553695][ T7650] ? 0xffffffffff600000 [ 133.553734][ T7650] do_coredump+0x1dfa/0x27b0 [ 133.553771][ T7650] ? __account_obj_stock+0x211/0x350 [ 133.553858][ T7650] ? __sigqueue_free+0xf4/0x130 [ 133.553886][ T7650] ? kmem_cache_free+0xdf/0x300 [ 133.553920][ T7650] ? proc_coredump_connector+0x114/0x220 [ 133.553950][ T7650] get_signal+0xd85/0xf70 [ 133.554067][ T7650] arch_do_signal_or_restart+0x96/0x480 [ 133.554115][ T7650] irqentry_exit_to_user_mode+0x5e/0xa0 [ 133.554145][ T7650] irqentry_exit+0x12/0x50 [ 133.554175][ T7650] asm_exc_page_fault+0x26/0x30 [ 133.554199][ T7650] RIP: 0033:0x7fba68a5f837 [ 133.554250][ T7650] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 133.554266][ T7650] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 133.554284][ T7650] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 133.554299][ T7650] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 133.554313][ T7650] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 133.554325][ T7650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.554336][ T7650] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 133.554356][ T7650] [ 133.554380][ T7650] memory: usage 307200kB, limit 307200kB, failcnt 21281 [ 133.554442][ T7650] memory+swap: usage 431772kB, limit 9007199254740988kB, failcnt 0 [ 133.554455][ T7650] kmem: usage 4616kB, limit 9007199254740988kB, failcnt 0 [ 133.554465][ T7650] Memory cgroup stats for /syz1: [ 133.579008][ T7650] cache 308187136 [ 133.720488][ T8178] loop0: detected capacity change from 0 to 256 [ 133.724976][ T7650] rss 1417216 [ 133.724986][ T7650] shmem 308187136 [ 133.724995][ T7650] mapped_file 0 [ 133.725003][ T7650] dirty 0 [ 133.740241][ T8178] vfat: Unknown parameter 'GPL' [ 133.749071][ T7650] writeback 0 [ 133.856866][ T7650] workingset_refault_anon 523 [ 133.861704][ T7650] workingset_refault_file 1042 [ 133.866559][ T7650] swap 127561728 [ 133.870152][ T7650] swapcached 253952 [ 133.874016][ T7650] pgpgin 167116 [ 133.877603][ T7650] pgpgout 91470 [ 133.881115][ T7650] pgfault 86952 [ 133.884618][ T7650] pgmajfault 410 [ 133.888174][ T7650] inactive_anon 308514816 [ 133.892595][ T7650] active_anon 1327104 [ 133.896635][ T7650] inactive_file 4096 [ 133.900582][ T7650] active_file 0 [ 133.904072][ T7650] unevictable 0 [ 133.907626][ T7650] hierarchical_memory_limit 314572800 [ 133.913180][ T7650] hierarchical_memsw_limit 9223372036854771712 [ 133.919347][ T7650] total_cache 308187136 [ 133.923600][ T7650] total_rss 1417216 [ 133.927421][ T7650] total_shmem 308187136 [ 133.931714][ T7650] total_mapped_file 0 [ 133.935712][ T7650] total_dirty 0 [ 133.939199][ T7650] total_writeback 0 [ 133.943074][ T7650] total_workingset_refault_anon 523 [ 133.948302][ T7650] total_workingset_refault_file 1042 [ 133.953642][ T7650] total_swap 127561728 [ 133.957723][ T7650] total_swapcached 253952 [ 133.962108][ T7650] total_pgpgin 167116 [ 133.966130][ T7650] total_pgpgout 91470 [ 133.970169][ T7650] total_pgfault 86952 [ 133.974168][ T7650] total_pgmajfault 410 [ 133.978388][ T7650] total_inactive_anon 308514816 [ 133.983260][ T7650] total_active_anon 1327104 [ 133.987769][ T7650] total_inactive_file 4096 [ 133.992216][ T7650] total_active_file 0 [ 133.996210][ T7650] total_unevictable 0 [ 134.000251][ T7650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7653,uid=0 [ 134.014984][ T7650] Memory cgroup out of memory: Killed process 7653 (syz.1.1485) total-vm:89772kB, anon-rss:1204kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 134.075721][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.208414][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 134.273959][ T8210] FAULT_INJECTION: forcing a failure. [ 134.273959][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.287234][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.2.1690 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 134.287261][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.287276][ T8210] Call Trace: [ 134.287284][ T8210] [ 134.287293][ T8210] __dump_stack+0x1d/0x30 [ 134.287318][ T8210] dump_stack_lvl+0xe8/0x140 [ 134.287343][ T8210] dump_stack+0x15/0x1b [ 134.287378][ T8210] should_fail_ex+0x265/0x280 [ 134.287407][ T8210] should_fail+0xb/0x20 [ 134.287441][ T8210] should_fail_usercopy+0x1a/0x20 [ 134.287545][ T8210] _copy_to_user+0x20/0xa0 [ 134.287581][ T8210] simple_read_from_buffer+0xb5/0x130 [ 134.287614][ T8210] proc_fail_nth_read+0x100/0x140 [ 134.287639][ T8210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.287705][ T8210] vfs_read+0x1a0/0x6f0 [ 134.287737][ T8210] ? __cond_resched+0x4e/0x90 [ 134.287787][ T8210] ksys_read+0xda/0x1a0 [ 134.287825][ T8210] __x64_sys_read+0x40/0x50 [ 134.287937][ T8210] x64_sys_call+0x2d77/0x2fb0 [ 134.287960][ T8210] do_syscall_64+0xd2/0x200 [ 134.287980][ T8210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.288083][ T8210] ? clear_bhb_loop+0x40/0x90 [ 134.288108][ T8210] ? clear_bhb_loop+0x40/0x90 [ 134.288129][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.288149][ T8210] RIP: 0033:0x7fd8da4ed33c [ 134.288163][ T8210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.288191][ T8210] RSP: 002b:00007fd8d8b57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.288235][ T8210] RAX: ffffffffffffffda RBX: 00007fd8da715fa0 RCX: 00007fd8da4ed33c [ 134.288247][ T8210] RDX: 000000000000000f RSI: 00007fd8d8b570a0 RDI: 0000000000000006 [ 134.288258][ T8210] RBP: 00007fd8d8b57090 R08: 0000000000000000 R09: 0000000000000000 [ 134.288295][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.288310][ T8210] R13: 0000000000000000 R14: 00007fd8da715fa0 R15: 00007fff4972d128 [ 134.288335][ T8210] [ 134.504356][ T7650] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 134.514297][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 134.514384][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.514400][ T7650] Call Trace: [ 134.514409][ T7650] [ 134.514418][ T7650] __dump_stack+0x1d/0x30 [ 134.514445][ T7650] dump_stack_lvl+0xe8/0x140 [ 134.514463][ T7650] dump_stack+0x15/0x1b [ 134.514553][ T7650] dump_header+0x81/0x220 [ 134.514585][ T7650] oom_kill_process+0x334/0x3f0 [ 134.514705][ T7650] out_of_memory+0x979/0xb80 [ 134.514747][ T7650] try_charge_memcg+0x5e6/0x9e0 [ 134.514784][ T7650] charge_memcg+0x51/0xc0 [ 134.514820][ T7650] __mem_cgroup_charge+0x28/0xb0 [ 134.514861][ T7650] shmem_get_folio_gfp+0x470/0xd60 [ 134.514911][ T7650] shmem_write_begin+0xa8/0x190 [ 134.515026][ T7650] generic_perform_write+0x184/0x490 [ 134.515058][ T7650] shmem_file_write_iter+0xc5/0xf0 [ 134.515087][ T7650] __kernel_write_iter+0x256/0x4c0 [ 134.515177][ T7650] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.515210][ T7650] dump_user_range+0x407/0x8c0 [ 134.515257][ T7650] elf_core_dump+0x1dc2/0x1f80 [ 134.515282][ T7650] ? 0xffffffffff600000 [ 134.515326][ T7650] do_coredump+0x1dfa/0x27b0 [ 134.515405][ T7650] ? __account_obj_stock+0x211/0x350 [ 134.515482][ T7650] ? __sigqueue_free+0xf4/0x130 [ 134.515520][ T7650] ? kmem_cache_free+0xdf/0x300 [ 134.515548][ T7650] ? proc_coredump_connector+0x114/0x220 [ 134.515577][ T7650] get_signal+0xd85/0xf70 [ 134.515681][ T7650] arch_do_signal_or_restart+0x96/0x480 [ 134.515728][ T7650] irqentry_exit_to_user_mode+0x5e/0xa0 [ 134.515761][ T7650] irqentry_exit+0x12/0x50 [ 134.515789][ T7650] asm_exc_page_fault+0x26/0x30 [ 134.515868][ T7650] RIP: 0033:0x7fba68a5f837 [ 134.515887][ T7650] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 134.515907][ T7650] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 134.515924][ T7650] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 134.515938][ T7650] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 134.515995][ T7650] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 134.516008][ T7650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.516022][ T7650] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 134.516044][ T7650] [ 134.516051][ T7650] memory: usage 307200kB, limit 307200kB, failcnt 21769 [ 134.721132][ T8215] loop2: detected capacity change from 0 to 512 [ 134.727621][ T7650] memory+swap: usage 419168kB, limit 9007199254740988kB, failcnt 0 [ 134.752793][ T8215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.754687][ T7650] kmem: usage 4608kB, limit 9007199254740988kB, failcnt 0 [ 134.754705][ T7650] Memory cgroup stats for /syz1: [ 134.812873][ T8215] EXT4-fs (loop2): 1 truncate cleaned up [ 134.815827][ T7650] cache 300589056 [ 134.827226][ T7650] rss 1155072 [ 134.830583][ T7650] shmem 300589056 [ 134.834285][ T7650] mapped_file 0 [ 134.837812][ T7650] dirty 0 [ 134.840834][ T7650] writeback 147456 [ 134.844657][ T7650] workingset_refault_anon 523 [ 134.849347][ T7650] workingset_refault_file 1042 [ 134.854218][ T7650] swap 123805696 [ 134.857772][ T7650] swapcached 397312 [ 134.861620][ T7650] pgpgin 167945 [ 134.862056][ T8215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.865074][ T7650] pgpgout 94183 [ 134.865084][ T7650] pgfault 86954 [ 134.865094][ T7650] pgmajfault 410 [ 134.887809][ T7650] inactive_anon 299384832 [ 134.892202][ T7650] active_anon 2117632 [ 134.896214][ T7650] inactive_file 0 [ 134.899861][ T7650] active_file 4096 [ 134.903641][ T7650] unevictable 0 [ 134.907124][ T7650] hierarchical_memory_limit 314572800 [ 134.912573][ T7650] hierarchical_memsw_limit 9223372036854771712 [ 134.918746][ T7650] total_cache 300589056 [ 134.922953][ T7650] total_rss 1155072 [ 134.926769][ T7650] total_shmem 300589056 [ 134.931031][ T7650] total_mapped_file 0 [ 134.935091][ T7650] total_dirty 0 [ 134.938574][ T7650] total_writeback 147456 [ 134.942912][ T7650] total_workingset_refault_anon 523 [ 134.942923][ T7650] total_workingset_refault_file 1042 [ 134.942933][ T7650] total_swap 123805696 [ 134.957718][ T7650] total_swapcached 397312 [ 134.957729][ T7650] total_pgpgin 167945 [ 134.966096][ T7650] total_pgpgout 94183 [ 134.970104][ T7650] total_pgfault 86954 [ 134.974140][ T7650] total_pgmajfault 410 [ 134.978230][ T7650] total_inactive_anon 299384832 [ 134.983184][ T7650] total_active_anon 2117632 [ 134.987701][ T7650] total_inactive_file 0 [ 134.991911][ T7650] total_active_file 4096 [ 134.996180][ T7650] total_unevictable 0 [ 135.000183][ T7650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7650,uid=0 [ 135.014993][ T7650] Memory cgroup out of memory: Killed process 7650 (syz.1.1485) total-vm:89772kB, anon-rss:1076kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 135.275736][ T8244] loop0: detected capacity change from 0 to 164 [ 135.559327][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.684366][ T8280] loop2: detected capacity change from 0 to 164 [ 135.791043][ T8295] loop4: detected capacity change from 0 to 512 [ 135.801633][ T8295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.829815][ T8295] EXT4-fs (loop4): 1 truncate cleaned up [ 135.837384][ T8295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.170702][ T8332] loop3: detected capacity change from 0 to 164 [ 136.183683][ T8329] loop2: detected capacity change from 0 to 512 [ 136.231921][ T8329] EXT4-fs (loop2): 1 orphan inode deleted [ 136.242218][ T8329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.255372][ T3435] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 136.268622][ T8329] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 136.313602][ T8329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.632436][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.677477][ T8371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.729028][ T8374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1750'. [ 136.776884][ T8371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.815315][ T8368] 9pnet_fd: Insufficient options for proto=fd [ 136.896574][ T8371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.049396][ T8371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.205260][ T8371] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.228897][ T8371] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.251501][ T8371] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.287672][ T8371] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.393370][ T8382] loop3: detected capacity change from 0 to 512 [ 137.434450][ T8382] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 137.442515][ T8382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 137.492596][ T8388] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1752'. [ 137.514481][ T8382] System zones: 0-1, 15-15, 18-18, 34-34 [ 137.521236][ T8382] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.562288][ T8382] __quota_error: 502 callbacks suppressed [ 137.562305][ T8382] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 137.631155][ T8382] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.646022][ T8382] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 137.697976][ T8382] EXT4-fs (loop3): 1 truncate cleaned up [ 137.735140][ T8382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.817133][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.871541][ T8410] loop3: detected capacity change from 0 to 1024 [ 137.937474][ T8410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.958714][ T8410] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.204297][ T8368] loop1: detected capacity change from 0 to 512 [ 138.235052][ T8421] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1766'. [ 138.330337][ T8368] EXT4-fs: Ignoring removed nobh option [ 138.567086][ T8433] loop2: detected capacity change from 0 to 512 [ 138.651303][ T7654] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 138.661307][ T7654] CPU: 0 UID: 0 PID: 7654 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 138.661463][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.661480][ T7654] Call Trace: [ 138.661488][ T7654] [ 138.661571][ T7654] __dump_stack+0x1d/0x30 [ 138.661597][ T7654] dump_stack_lvl+0xe8/0x140 [ 138.661624][ T7654] dump_stack+0x15/0x1b [ 138.661645][ T7654] dump_header+0x81/0x220 [ 138.661682][ T7654] oom_kill_process+0x334/0x3f0 [ 138.661803][ T7654] out_of_memory+0x979/0xb80 [ 138.661882][ T7654] try_charge_memcg+0x5e6/0x9e0 [ 138.661920][ T7654] charge_memcg+0x51/0xc0 [ 138.662010][ T7654] __mem_cgroup_charge+0x28/0xb0 [ 138.662053][ T7654] shmem_get_folio_gfp+0x470/0xd60 [ 138.662103][ T7654] shmem_write_begin+0xa8/0x190 [ 138.662223][ T7654] generic_perform_write+0x184/0x490 [ 138.662256][ T7654] shmem_file_write_iter+0xc5/0xf0 [ 138.662358][ T7654] __kernel_write_iter+0x256/0x4c0 [ 138.662398][ T7654] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 138.662527][ T7654] dump_user_range+0x407/0x8c0 [ 138.662634][ T7654] elf_core_dump+0x1dc2/0x1f80 [ 138.662666][ T7654] ? 0xffffffffff600000 [ 138.662703][ T7654] do_coredump+0x1dfa/0x27b0 [ 138.662739][ T7654] ? __account_obj_stock+0x211/0x350 [ 138.662802][ T7654] ? bpf_prog_0605f9f479290f07+0x3e/0x40 [ 138.662888][ T7654] ? __sigqueue_free+0xf4/0x130 [ 138.662917][ T7654] ? kmem_cache_free+0xdf/0x300 [ 138.663023][ T7654] ? proc_coredump_connector+0x114/0x220 [ 138.663051][ T7654] get_signal+0xd85/0xf70 [ 138.663130][ T7654] arch_do_signal_or_restart+0x96/0x480 [ 138.663183][ T7654] irqentry_exit_to_user_mode+0x5e/0xa0 [ 138.663222][ T7654] irqentry_exit+0x12/0x50 [ 138.663257][ T7654] asm_exc_page_fault+0x26/0x30 [ 138.663280][ T7654] RIP: 0033:0x7fba68a5f837 [ 138.663342][ T7654] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 138.663362][ T7654] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 138.663381][ T7654] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 138.663396][ T7654] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 138.663409][ T7654] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 138.663424][ T7654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.663439][ T7654] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 138.663479][ T7654] [ 138.907592][ T7654] memory: usage 307200kB, limit 307200kB, failcnt 22454 [ 138.914607][ T7654] memory+swap: usage 431360kB, limit 9007199254740988kB, failcnt 0 [ 138.922582][ T7654] kmem: usage 4336kB, limit 9007199254740988kB, failcnt 0 [ 138.929725][ T7654] Memory cgroup stats for /syz1: [ 139.002718][ T7654] cache 308064256 [ 139.002881][ T8433] EXT4-fs (loop2): 1 orphan inode deleted [ 139.007693][ T7654] rss 1327104 [ 139.007703][ T7654] shmem 308064256 [ 139.007757][ T7654] mapped_file 0 [ 139.007764][ T7654] dirty 0 [ 139.007769][ T7654] writeback 16384 [ 139.007775][ T7654] workingset_refault_anon 678 [ 139.007782][ T7654] workingset_refault_file 1251 [ 139.007789][ T7654] swap 127139840 [ 139.007795][ T7654] swapcached 679936 [ 139.007802][ T7654] pgpgin 190706 [ 139.007810][ T7654] pgpgout 115006 [ 139.022203][ T389] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.024473][ T7654] pgfault 87764 [ 139.027692][ T389] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 139.042355][ T8433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.044109][ T7654] pgmajfault 450 [ 139.047828][ T8433] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 139.051444][ T7654] inactive_anon 299175936 [ 139.057153][ T8433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.058461][ T7654] active_anon 10883072 [ 139.058473][ T7654] inactive_file 0 [ 139.132979][ T7654] active_file 4096 [ 139.136710][ T7654] unevictable 0 [ 139.140186][ T7654] hierarchical_memory_limit 314572800 [ 139.145595][ T7654] hierarchical_memsw_limit 9223372036854771712 [ 139.151775][ T7654] total_cache 308064256 [ 139.156123][ T7654] total_rss 1327104 [ 139.160298][ T7654] total_shmem 308064256 [ 139.164512][ T7654] total_mapped_file 0 [ 139.168538][ T7654] total_dirty 0 [ 139.172009][ T7654] total_writeback 16384 [ 139.176191][ T7654] total_workingset_refault_anon 678 [ 139.181493][ T7654] total_workingset_refault_file 1251 [ 139.186824][ T7654] total_swap 127139840 [ 139.190987][ T7654] total_swapcached 679936 [ 139.195365][ T7654] total_pgpgin 190706 [ 139.199356][ T7654] total_pgpgout 115006 [ 139.203465][ T7654] total_pgfault 87764 [ 139.207455][ T7654] total_pgmajfault 450 [ 139.211615][ T7654] total_inactive_anon 299175936 [ 139.216519][ T7654] total_active_anon 10883072 [ 139.221142][ T7654] total_inactive_file 0 [ 139.225394][ T7654] total_active_file 4096 [ 139.229653][ T7654] total_unevictable 0 [ 139.233823][ T7654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7647,uid=0 [ 139.248572][ T7654] Memory cgroup out of memory: Killed process 7647 (syz.1.1485) total-vm:89772kB, anon-rss:1076kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 139.262144][ T29] audit: type=1326 audit(1750154826.045:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.289357][ T29] audit: type=1326 audit(1750154826.045:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.313084][ T29] audit: type=1326 audit(1750154826.045:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.336693][ T29] audit: type=1326 audit(1750154826.045:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.360362][ T29] audit: type=1326 audit(1750154826.045:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.383944][ T29] audit: type=1326 audit(1750154826.045:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.407470][ T29] audit: type=1326 audit(1750154826.045:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.431031][ T29] audit: type=1326 audit(1750154826.045:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5f3921e929 code=0x7ffc0000 [ 139.442436][ T8447] loop0: detected capacity change from 0 to 512 [ 139.515519][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.543655][ T8447] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 139.551639][ T8447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 139.582224][ T8447] System zones: 0-1, 15-15, 18-18, 34-34 [ 139.588130][ T8447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.651494][ T8447] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 139.666170][ T8447] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 139.694970][ T8447] EXT4-fs (loop0): 1 truncate cleaned up [ 139.739706][ T8447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.873620][ T8368] EXT4-fs (loop1): unable to read superblock [ 139.915695][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.005362][ T8461] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1779'. [ 140.328160][ T8482] loop4: detected capacity change from 0 to 164 [ 140.347763][ T8479] loop1: detected capacity change from 0 to 1024 [ 140.390943][ T8484] loop4: detected capacity change from 0 to 512 [ 140.400599][ T8484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.415226][ T8484] EXT4-fs (loop4): 1 truncate cleaned up [ 140.421452][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.933674][ T8479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.068384][ T8479] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.869096][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.019140][ T8515] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1794'. [ 142.127184][ T8523] 9pnet_fd: Insufficient options for proto=fd [ 142.142213][ T8523] loop3: detected capacity change from 0 to 512 [ 142.148957][ T8523] EXT4-fs: Ignoring removed nobh option [ 142.186905][ T8523] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1799: corrupted inode contents [ 142.206243][ T8419] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 142.234144][ T8523] EXT4-fs (loop3): Remounting filesystem read-only [ 142.257919][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.281936][ T8523] EXT4-fs (loop3): 1 truncate cleaned up [ 142.293725][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.304355][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.353880][ T8523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.395474][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 142.415627][ T8543] loop0: detected capacity change from 0 to 512 [ 142.418420][ T8523] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.437253][ T8523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.477213][ T8543] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 142.480581][ T7634] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.485363][ T8543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 142.503415][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 142.503450][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.503464][ T7634] Call Trace: [ 142.503470][ T7634] [ 142.503477][ T7634] __dump_stack+0x1d/0x30 [ 142.503518][ T7634] dump_stack_lvl+0xe8/0x140 [ 142.503602][ T7634] dump_stack+0x15/0x1b [ 142.503621][ T7634] dump_header+0x81/0x220 [ 142.503704][ T7634] oom_kill_process+0x334/0x3f0 [ 142.503743][ T7634] out_of_memory+0x979/0xb80 [ 142.503824][ T7634] try_charge_memcg+0x5e6/0x9e0 [ 142.503858][ T7634] charge_memcg+0x51/0xc0 [ 142.503890][ T7634] __mem_cgroup_charge+0x28/0xb0 [ 142.503982][ T7634] shmem_get_folio_gfp+0x470/0xd60 [ 142.504025][ T7634] shmem_write_begin+0xa8/0x190 [ 142.504063][ T7634] generic_perform_write+0x184/0x490 [ 142.504095][ T7634] shmem_file_write_iter+0xc5/0xf0 [ 142.504129][ T7634] __kernel_write_iter+0x256/0x4c0 [ 142.504167][ T7634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 142.504197][ T7634] dump_user_range+0x407/0x8c0 [ 142.504307][ T7634] elf_core_dump+0x1dc2/0x1f80 [ 142.504338][ T7634] ? 0xffffffffff600000 [ 142.504366][ T7634] do_coredump+0x1dfa/0x27b0 [ 142.504392][ T7634] ? __account_obj_stock+0x211/0x350 [ 142.504432][ T7634] ? __sigqueue_free+0xf4/0x130 [ 142.504525][ T7634] ? kmem_cache_free+0xdf/0x300 [ 142.504572][ T7634] ? proc_coredump_connector+0x114/0x220 [ 142.504630][ T7634] get_signal+0xd85/0xf70 [ 142.504675][ T7634] arch_do_signal_or_restart+0x96/0x480 [ 142.504698][ T7634] irqentry_exit_to_user_mode+0x5e/0xa0 [ 142.504730][ T7634] irqentry_exit+0x12/0x50 [ 142.504773][ T7634] asm_exc_page_fault+0x26/0x30 [ 142.504791][ T7634] RIP: 0033:0x7fba68a5f837 [ 142.504870][ T7634] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 142.504889][ T7634] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 142.504906][ T7634] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 142.504918][ T7634] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 142.504956][ T7634] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 142.504971][ T7634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.504987][ T7634] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 142.505011][ T7634] [ 142.505024][ T7634] memory: usage 307200kB, limit 307200kB, failcnt 23808 [ 142.518393][ T8543] System zones: [ 142.527777][ T7634] memory+swap: usage 431808kB, limit 9007199254740988kB, failcnt 0 [ 142.530971][ T8543] 0-1 [ 142.534047][ T7634] kmem: usage 3760kB, limit 9007199254740988kB, failcnt 0 [ 142.538252][ T8543] , 15-15 [ 142.542882][ T7634] Memory cgroup stats for [ 142.547026][ T8543] , 18-18 [ 142.551354][ T7634] /syz1: [ 142.556218][ T8543] , 34-34 [ 142.582608][ T8543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 142.597114][ T7634] cache 309473280 [ 142.622859][ T8543] __quota_error: 77 callbacks suppressed [ 142.622879][ T8543] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 142.625135][ T7634] rss 1024000 [ 142.654237][ T8543] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 142.655885][ T7634] shmem 309465088 [ 142.661434][ T8543] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 142.665845][ T7634] mapped_file 0 [ 142.665856][ T7634] dirty 0 [ 142.665903][ T7634] writeback 192512 [ 142.665911][ T7634] workingset_refault_anon 690 [ 142.665921][ T7634] workingset_refault_file 1332 [ 142.665931][ T7634] swap 127598592 [ 142.665939][ T7634] swapcached 221184 [ 142.665947][ T7634] pgpgin 202071 [ 142.665954][ T7634] pgpgout 126211 [ 142.665963][ T7634] pgfault 88325 [ 142.751780][ T7634] pgmajfault 456 [ 142.751791][ T7634] inactive_anon 301826048 [ 142.773711][ T8543] EXT4-fs (loop0): 1 truncate cleaned up [ 142.776116][ T7634] active_anon 8359936 [ 142.776128][ T7634] inactive_file 12288 [ 142.784877][ T8543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.786437][ T7634] active_file 0 [ 142.786447][ T7634] unevictable 0 [ 142.922139][ T7634] hierarchical_memory_limit 314572800 [ 142.927617][ T7634] hierarchical_memsw_limit 9223372036854771712 [ 142.933988][ T7634] total_cache 309473280 [ 142.938162][ T7634] total_rss 1024000 [ 142.942005][ T7634] total_shmem 309465088 [ 142.946218][ T7634] total_mapped_file 0 [ 142.950241][ T7634] total_dirty 0 [ 142.953756][ T7634] total_writeback 192512 [ 142.958055][ T7634] total_workingset_refault_anon 690 [ 142.963322][ T7634] total_workingset_refault_file 1332 [ 142.968647][ T7634] total_swap 127598592 [ 142.972763][ T7634] total_swapcached 221184 [ 142.977104][ T7634] total_pgpgin 202071 [ 142.981187][ T7634] total_pgpgout 126211 [ 142.985405][ T7634] total_pgfault 88325 [ 142.989426][ T7634] total_pgmajfault 456 [ 142.993532][ T7634] total_inactive_anon 301826048 [ 142.998404][ T7634] total_active_anon 8359936 [ 143.003053][ T7634] total_inactive_file 12288 [ 143.007576][ T7634] total_active_file 0 [ 143.011583][ T7634] total_unevictable 0 [ 143.015614][ T7634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7666,uid=0 [ 143.030532][ T7634] Memory cgroup out of memory: Killed process 7666 (syz.1.1485) total-vm:89772kB, anon-rss:948kB, file-rss:56188kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 143.056762][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.143048][ T8569] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.194083][ T29] audit: type=1326 audit(1750154830.064:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.220308][ T8576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1816'. [ 143.234084][ T8569] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.246189][ T29] audit: type=1326 audit(1750154830.094:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.269954][ T29] audit: type=1326 audit(1750154830.094:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.293719][ T29] audit: type=1326 audit(1750154830.094:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.317401][ T29] audit: type=1326 audit(1750154830.094:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.341101][ T29] audit: type=1326 audit(1750154830.094:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.364830][ T29] audit: type=1326 audit(1750154830.094:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.388537][ T29] audit: type=1326 audit(1750154830.094:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe09a20e929 code=0x7ffc0000 [ 143.452702][ T29] audit: type=1326 audit(1750154830.194:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da4ee929 code=0x7ffc0000 [ 143.486287][ T8569] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.536319][ T8569] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.646874][ T8569] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.663167][ T8569] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.675433][ T8569] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.688700][ T8569] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.750647][ T8591] loop0: detected capacity change from 0 to 512 [ 143.786057][ T8591] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 143.794026][ T8591] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 143.802561][ T8591] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.831888][ T8591] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.855041][ T8591] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 143.869794][ T8591] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 143.946344][ T8591] EXT4-fs (loop0): 1 truncate cleaned up [ 143.978995][ T8606] infiniband syz!: set active [ 143.983851][ T8606] infiniband syz!: added team_slave_0 [ 143.989839][ T8591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.010750][ T8606] RDS/IB: syz!: added [ 144.014936][ T8606] smc: adding ib device syz! with port count 1 [ 144.021235][ T8606] smc: ib device syz! port 1 has pnetid [ 144.098081][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.126046][ T7625] syz.1.1485 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 144.136044][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.1.1485 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 144.136131][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.136148][ T7625] Call Trace: [ 144.136156][ T7625] [ 144.136166][ T7625] __dump_stack+0x1d/0x30 [ 144.136191][ T7625] dump_stack_lvl+0xe8/0x140 [ 144.136251][ T7625] dump_stack+0x15/0x1b [ 144.136270][ T7625] dump_header+0x81/0x220 [ 144.136311][ T7625] oom_kill_process+0x334/0x3f0 [ 144.136396][ T7625] out_of_memory+0x979/0xb80 [ 144.136436][ T7625] try_charge_memcg+0x5e6/0x9e0 [ 144.136472][ T7625] charge_memcg+0x51/0xc0 [ 144.136509][ T7625] __mem_cgroup_charge+0x28/0xb0 [ 144.136595][ T7625] shmem_get_folio_gfp+0x470/0xd60 [ 144.136648][ T7625] shmem_write_begin+0xa8/0x190 [ 144.136691][ T7625] generic_perform_write+0x184/0x490 [ 144.136729][ T7625] shmem_file_write_iter+0xc5/0xf0 [ 144.136756][ T7625] __kernel_write_iter+0x256/0x4c0 [ 144.136794][ T7625] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 144.136868][ T7625] dump_user_range+0x407/0x8c0 [ 144.136914][ T7625] elf_core_dump+0x1dc2/0x1f80 [ 144.136963][ T7625] ? 0xffffffffff600000 [ 144.136998][ T7625] do_coredump+0x1dfa/0x27b0 [ 144.137034][ T7625] ? __account_obj_stock+0x211/0x350 [ 144.137112][ T7625] ? __sigqueue_free+0xf4/0x130 [ 144.137136][ T7625] ? kmem_cache_free+0xdf/0x300 [ 144.137165][ T7625] ? proc_coredump_connector+0x114/0x220 [ 144.137201][ T7625] get_signal+0xd85/0xf70 [ 144.137243][ T7625] arch_do_signal_or_restart+0x96/0x480 [ 144.137275][ T7625] irqentry_exit_to_user_mode+0x5e/0xa0 [ 144.137314][ T7625] irqentry_exit+0x12/0x50 [ 144.137399][ T7625] asm_exc_page_fault+0x26/0x30 [ 144.137424][ T7625] RIP: 0033:0x7fba68a5f837 [ 144.137443][ T7625] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 11 13 1c 00 48 8d 3d 17 13 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 144.137551][ T7625] RSP: 002b:00007fba671e8120 EFLAGS: 00010202 [ 144.137565][ T7625] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fba68b9e929 [ 144.137577][ T7625] RDX: 00007fba671e8140 RSI: 00007fba671e8270 RDI: 000000000000000b [ 144.137599][ T7625] RBP: 00007fba68c20b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.137616][ T7625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.137632][ T7625] R13: 0000000000000000 R14: 00007fba68dc5fa0 R15: 00007ffd1380c208 [ 144.137657][ T7625] [ 144.137670][ T7625] memory: usage 307200kB, limit 307200kB, failcnt 24962 [ 144.385851][ T7625] memory+swap: usage 428784kB, limit 9007199254740988kB, failcnt 0 [ 144.393777][ T7625] kmem: usage 3860kB, limit 9007199254740988kB, failcnt 0 [ 144.401033][ T7625] Memory cgroup stats for /syz1: [ 144.410671][ T8617] loop0: detected capacity change from 0 to 1024 [ 144.439587][ T8619] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1829'. [ 144.474544][ T8617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.491959][ T7625] cache 306999296 [ 144.495745][ T7625] rss 1069056 [ 144.499055][ T7625] shmem 306995200 [ 144.502813][ T7625] mapped_file 0 [ 144.506306][ T7625] dirty 0 [ 144.509309][ T7625] writeback 778240 [ 144.512498][ T8617] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.513099][ T7625] workingset_refault_anon 690 [ 144.528491][ T7625] workingset_refault_file 1482 [ 144.533402][ T7625] swap 126763008 [ 144.537149][ T7625] swapcached 1056768 [ 144.541118][ T7625] pgpgin 205203 [ 144.544638][ T7625] pgpgout 129730 [ 144.548194][ T7625] pgfault 88467 [ 144.551850][ T7625] pgmajfault 459 [ 144.555433][ T7625] inactive_anon 295809024 [ 144.559805][ T7625] active_anon 12406784 [ 144.563902][ T7625] inactive_file 0 [ 144.567566][ T7625] active_file 8192 [ 144.571391][ T7625] unevictable 0 [ 144.574995][ T7625] hierarchical_memory_limit 314572800 [ 144.580381][ T7625] hierarchical_memsw_limit 9223372036854771712 [ 144.586569][ T7625] total_cache 306999296 [ 144.590741][ T7625] total_rss 1069056 [ 144.594591][ T7625] total_shmem 306995200 [ 144.598763][ T7625] total_mapped_file 0 [ 144.602806][ T7625] total_dirty 0 [ 144.606334][ T7625] total_writeback 778240 [ 144.610591][ T7625] total_workingset_refault_anon 690 [ 144.615874][ T7625] total_workingset_refault_file 1482 [ 144.621188][ T7625] total_swap 126763008 [ 144.625297][ T7625] total_swapcached 1056768 [ 144.629733][ T7625] total_pgpgin 205203 [ 144.633746][ T7625] total_pgpgout 129730 [ 144.637923][ T7625] total_pgfault 88467 [ 144.642040][ T7625] total_pgmajfault 459 [ 144.646286][ T7625] total_inactive_anon 295809024 [ 144.651568][ T7625] total_active_anon 12406784 [ 144.656306][ T7625] total_inactive_file 0 [ 144.660479][ T7625] total_active_file 8192 [ 144.664844][ T7625] total_unevictable 0 [ 144.668922][ T7625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1485,pid=7634,uid=0 [ 144.683748][ T7625] Memory cgroup out of memory: Killed process 7634 (syz.1.1485) total-vm:89772kB, anon-rss:1076kB, file-rss:56400kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 145.324518][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.361912][ T8650] loop3: detected capacity change from 0 to 512 [ 145.393953][ T8650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.425512][ T8660] ip6t_srh: unknown srh match flags 4000 [ 145.433496][ T8650] EXT4-fs (loop3): 1 truncate cleaned up [ 145.439740][ T8650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.446708][ T8659] loop2: detected capacity change from 0 to 512 [ 145.504570][ T8659] EXT4-fs (loop2): 1 orphan inode deleted [ 145.510898][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.533174][ T389] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 145.565832][ T8659] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 145.600122][ T8659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.761681][ T8679] loop4: detected capacity change from 0 to 1024 [ 145.775162][ T8679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.787387][ T8679] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.423327][ T8419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 146.621927][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.632214][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.731207][ T8702] loop0: detected capacity change from 0 to 512 [ 146.755445][ T8702] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 146.774176][ T8702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 146.792797][ T8702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.801473][ T8702] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm wg1: attempt to clear invalid blocks 1024 len 1 [ 146.824640][ T8702] EXT4-fs (loop0): Remounting filesystem read-only [ 146.839948][ T8702] EXT4-fs (loop0): 1 truncate cleaned up [ 146.846164][ T8702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 146.929243][ T8711] 9pnet_fd: Insufficient options for proto=fd [ 146.933553][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 146.985193][ T8711] loop3: detected capacity change from 0 to 512 [ 147.006447][ T8719] loop4: detected capacity change from 0 to 512 [ 147.016351][ T8719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.029691][ T8711] EXT4-fs: Ignoring removed nobh option [ 147.046788][ T8711] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1862: corrupted inode contents [ 147.065263][ T8719] EXT4-fs (loop4): 1 truncate cleaned up [ 147.090100][ T8711] EXT4-fs (loop3): Remounting filesystem read-only [ 147.098112][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.110446][ T8711] EXT4-fs (loop3): 1 truncate cleaned up [ 147.116674][ T8711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.129393][ T3435] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.139961][ T3435] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.171699][ T8711] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.182354][ T3435] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 147.193957][ T8711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.412911][ T8739] lo speed is unknown, defaulting to 1000 [ 147.638828][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 147.638846][ T29] audit: type=1326 audit(1750154834.504:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 147.705725][ T29] audit: type=1326 audit(1750154834.504:12999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 147.729344][ T29] audit: type=1326 audit(1750154834.534:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 147.752828][ T29] audit: type=1326 audit(1750154834.534:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 147.776242][ T29] audit: type=1326 audit(1750154834.534:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 147.799644][ T29] audit: type=1326 audit(1750154834.544:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 147.823193][ T29] audit: type=1326 audit(1750154834.544:13004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 147.846599][ T29] audit: type=1326 audit(1750154834.544:13005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8d5880e929 code=0x7ffc0000 [ 147.869913][ T29] audit: type=1326 audit(1750154834.554:13006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d588058e7 code=0x7ffc0000 [ 147.893369][ T29] audit: type=1326 audit(1750154834.554:13007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d587aab19 code=0x7ffc0000 [ 147.984693][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.010763][ T8744] loop4: detected capacity change from 0 to 164 [ 148.103365][ T8746] smc: net device bond0 applied user defined pnetid SYZ0 [ 148.164820][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 148.177868][ T8753] smc: net device bond0 erased user defined pnetid SYZ0 [ 148.186168][ T8754] ================================================================== [ 148.194303][ T8754] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 148.201631][ T8754] [ 148.203969][ T8754] write to 0xffff888104350a00 of 8 bytes by task 8745 on cpu 1: [ 148.211616][ T8754] mas_wmb_replace+0xe45/0x14a0 [ 148.216499][ T8754] mas_wr_store_entry+0x1773/0x2b50 [ 148.221749][ T8754] mas_store_prealloc+0x74d/0x9e0 [ 148.226826][ T8754] vma_iter_store_new+0x1c5/0x200 [ 148.231891][ T8754] vma_complete+0x125/0x580 [ 148.236429][ T8754] __split_vma+0x591/0x650 [ 148.240871][ T8754] vma_modify+0x21e/0xc80 [ 148.245241][ T8754] vma_modify_flags+0x101/0x130 [ 148.250139][ T8754] mprotect_fixup+0x2cc/0x570 [ 148.254852][ T8754] do_mprotect_pkey+0x6d6/0x980 [ 148.259744][ T8754] __x64_sys_mprotect+0x48/0x60 [ 148.264639][ T8754] x64_sys_call+0x2794/0x2fb0 [ 148.269351][ T8754] do_syscall_64+0xd2/0x200 [ 148.273879][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.279813][ T8754] [ 148.282164][ T8754] read to 0xffff888104350a00 of 8 bytes by task 8754 on cpu 0: [ 148.289743][ T8754] mas_state_walk+0x485/0x650 [ 148.294450][ T8754] mas_walk+0x30/0x120 [ 148.298543][ T8754] lock_vma_under_rcu+0xa2/0x2f0 [ 148.303505][ T8754] do_user_addr_fault+0x233/0x1090 [ 148.308650][ T8754] exc_page_fault+0x62/0xa0 [ 148.313181][ T8754] asm_exc_page_fault+0x26/0x30 [ 148.318060][ T8754] [ 148.320400][ T8754] value changed: 0xffff888104350d06 -> 0xffff888104350a00 [ 148.327519][ T8754] [ 148.329853][ T8754] Reported by Kernel Concurrency Sanitizer on: [ 148.336018][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.2.1876 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 148.348458][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.358533][ T8754] ==================================================================