last executing test programs: 2.992117723s ago: executing program 2 (id=1215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000230900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280280001800b00010074756e6e656c00000400028008000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) 2.958540603s ago: executing program 2 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) 2.649369289s ago: executing program 2 (id=1218): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0xc2f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 2.457897723s ago: executing program 2 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 2.318923246s ago: executing program 2 (id=1231): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfeac, 0x8) 2.250158187s ago: executing program 2 (id=1234): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x44, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3035, 0x1558, 0x20, 0x0, 0x0) 2.184824648s ago: executing program 3 (id=1236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.657019688s ago: executing program 3 (id=1244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfeac, 0x8) 1.58866737s ago: executing program 3 (id=1245): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = dup(r1) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 1.453952472s ago: executing program 3 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) 1.428423013s ago: executing program 0 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x2008000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x9}, 0x18) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16, @ANYBLOB="bf4400000000000000000c0000"], 0x2ac}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r7 = syz_io_uring_setup(0x466d, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x3, 0x377}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x70, 0x0, r10, 0x0, 0x0, r10, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.380991224s ago: executing program 3 (id=1254): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b000200000000001000000000000000000008000180"], 0x20}}, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x40) 1.338479365s ago: executing program 0 (id=1257): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001640)}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/131, 0x83}, {0x0}], 0x2, 0xffffff8d, 0x3) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="94b61df5857c33cecf2cd4b2149fab59d2169eb64386deacc134b8a67c1ca2aeb191edc8d28e2e9a3b2f4924d4308794", @ANYRES8=r2, @ANYBLOB="000226bd7000fcdbdf250d00000005002e000000000008000300", @ANYRESOCT=r0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000004) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000b40)={0x0, 0x1, 0x6, @remote}, 0x10) 1.05920997s ago: executing program 3 (id=1262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x44, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3035, 0x1558, 0x20, 0x0, 0x0) 713.388177ms ago: executing program 4 (id=1266): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x2008000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c0000"], 0x2ac}}, 0x0) 623.580738ms ago: executing program 4 (id=1268): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000003fffffff}, 0x60) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='\x06\x00\xe5\x8eK\x98\x99\xbd\x85\x9b\xfa\xf1\x16FE\xc0\xda\xd3\xe2\xed\x9b\xca\xeeN\x16\ran\'e\x01\xdc\x88 Z\xd0\xc5\xdf \xb5[\x8d\x8e\xe7`\xad}\x03J\xf5q\xb2w\x0e\f\xf3\\\xc0r\x89\xd31\xb6\x95IG\x92IrY\xab\xbe\x86\x02\x9f\xec\xec\x88A\xda=\x95\xf0K\x03\x96\xfbgQ\xdd\xfdA\xe9\xba\x04\x94e\x1e\xf8\xbfX\xa3\xc8\xa1\\|\x18\x9f\xd5ss\t\xcbl\x15B\x15\x06\xedoQ\xcap}\xa9\x80\x8b\xbe\xd7\xef\x1c\xa0^\xdf<\xc4\xfd\x91_\xfc\xf2\xc8\xf1\x12KmuP\xa1\x90r\x8c\x9dO\xb0J\n\x04U\x9a\x80j({\f\x80z\xaa\xdc\x06\xae\x17\f\fK\xb9D\xb3\v\xb8\x02\x80WU\r\x1cv\x0fy\xbd\x9f\xa9e8\x1d\x05\xdf\x05Z\xc0\xdc\v\v}i\x92\xb6\xc9r\xc8?\v\x95\x91J\xb2nA\xc9Z|\xe2\x037\xee\x83\xe3\xd7Z\xf2\x1e\xe4\x9e\x9e') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfff, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4000000000000}, 0x2000, 0x4, 0x7, 0x0, 0x40000, 0x0, 0x6c08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100008b95"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&') r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x1, 0x1, 0x1, 0x0, 0x4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x69ccbfdc}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r14 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r13, @ANYRES16=r11, @ANYBLOB="000128bd7000fbdbdf253100000008000300", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00Z<\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="0800010027000000080001004500000008005200", @ANYRES32=r14, @ANYBLOB="0c009900ffff000080000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 623.004638ms ago: executing program 1 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x81, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0x1, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x5, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x64, 0xff, 0x24, 0x5, 0xe7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x9, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0xb, 0x5, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x3, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x3, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x6, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x5, 0x7fffffff, 0x0, 0x6, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x1, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xfffffffd, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x7, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x400, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0xb, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x2, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x6, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x2, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0xc0, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0x7, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x1, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x80000002, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0xfffffff8, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 508.372481ms ago: executing program 1 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 443.026822ms ago: executing program 0 (id=1271): r0 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @random="6b07b975d59b"}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) 392.584523ms ago: executing program 1 (id=1272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 349.853523ms ago: executing program 0 (id=1273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfeac, 0x8) 201.119737ms ago: executing program 4 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) shutdown(r2, 0x1) 174.980957ms ago: executing program 4 (id=1275): socket$packet(0x11, 0xa, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = dup(r1) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 174.469177ms ago: executing program 0 (id=1276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 158.655868ms ago: executing program 1 (id=1277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) 126.668138ms ago: executing program 1 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x2008000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c0000"], 0x2ac}}, 0x0) 109.703429ms ago: executing program 4 (id=1279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000230900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280280001800b00010074756e6e656c00000400028008000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) 97.801078ms ago: executing program 1 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000500030000010008000200000f0f00fe4286b987386d3c0c339b42d5433b5a70919b277c38e233af72cc56910f62713918e5ca4e31826577169dadde2b90890c39d3f76c0a1210d6b24aebf0f41d7401effd5b0d8a747f77bfdcf2f447d988833f2c63f81c32ca9ca2d32a99de4b3fe5d559ec829a197b7c5a0d2b013f3c9a83b4ee062e1a65e632f7dd24af6ceec1aef55855f9348e791d9dd7dbc80b539964b4bacca7195aa27e009b4852734b02e1c501dbd48d66027bbc05c1726cfac492427fc44a5cab079c2e6f288a4bc435de499880418e503f502f6164b172056bb39eeaf606b7"], 0xe8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000003c0)={0x8, r3, 'id1\x00'}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbJKmTfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBLSJ4EVQ8CHrp2Zd68+rLVf8LD2KpmhYrHiQym9l02+ymSZrsVvfzgck+z8xsnue78/I8u/MwE0DPGk3/5CIOR8T7ScRwNj+JiIF6qj/i5Np6t1aWD8TKcjGJ1dVXf0vq69xcWS5G03tSB7PMoxHx3TsRR3Iby60uLs0UyuXSfJYfr81eGK8uLh09P1uYLk2X5o5PTE4eO/HMieO7F+sfPy4duvbBS09+efKvtx+5+t73SZyMQ9my5jh2y2iMZp/JQPoR3uHF3S6sy5JuV4AdSQ/NvrWjPA7HcPTVUwDAf9mbEbEKAPSYRPsPAD2m8TvAzZXlYmPq7i8SnXX9hYjYvxb/rWxaW9KfXbPbX78OOnQzuePKSBIRI7tQ/mhEfPr165+nU+zRdUiAVt66HBFnR0Y3nv+TDWMWtuupTZbty15H75rv/Aed803a/3m2Vf8vt97/iRb9n8EWx+5O3PP4P7ALhWwi7f89vza27a7+3/qgtZG+LPe/ep9vIDl3vlxKz23/j4ixGBhM8xOblDF24+8b7ZY19/9+//CNz9Ly09fba+R+6R+88z1ThVrhfmJudv1yxGP9reJP1rd/0qb/e3qLZbz83LuftFuWxp/G25g2xh/Z6KS9sXol4omW2//2iLZk0/GJ4/XdYbyxU7Tw1U8fD7Urv3n7p1NafuO7QCek239o8/hHkubxmtXtl/HDleFv2y27d/yt9/99yWv1dKMfcalQq81PROxLXtk4/9jt9zbyjfXT+Mceb338b7b/p98Jz24x/v5rv36x8/j3Vhr/1La2//YTV2/N9LUrf2vbf7KeGsvmbOX8t9UK3s9nBwAAAAAAAAAAAAAAAAAAAAAAAABblYuIQ5Hk8uvpXC6fX3uG98MxlCtXqrUj5yoLc1NRf1b2SAzkGre6HG66H+pEdj/8Rv7YXfmnI+KhiPho8EDSuI/iVJdjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGg22e/5/6ebDbtQMA9sz+blcAAOg47T8A9B7tPwD0Hu0/APQe7T8A9B7tPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvs9KlT6bT658pyMc1PXVxcmKlcPDpVqs7kZxeK+WJl/kJ+ulKZLpfyxcrsvf5fuVK5MBlzC5fGa6Vqbby6uHRmtrIwVztzfrYwXTpTGuhIVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwPdXFpZlCuVyal9hBYvXBqEb3E33Z7vSg1KejieTBqMYuJ7p8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l/gnAAD//xdTIa8=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x42}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000b95f0e207df854d2ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r12, &(0x7f0000004200)='t', 0x1) sendfile(r12, r11, 0x0, 0x7ffff019) fallocate(r10, 0x0, 0x0, 0x1001f0) 43.234699ms ago: executing program 0 (id=1281): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001640)}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/131, 0x83}, {0x0}], 0x2, 0xffffff8d, 0x3) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="94b61df5857c33cecf2cd4b2149fab59d2169eb64386deacc134b8a67c1ca2aeb191edc8d28e2e9a3b2f4924d4308794", @ANYRES8=r2, @ANYBLOB="000226bd7000fcdbdf250d00000005002e000000000008000300", @ANYRESOCT=r0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000004) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000b40)={0x0, 0x1, 0x6, @remote}, 0x10) 0s ago: executing program 4 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r3 = memfd_create(0x0, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r9, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000000)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) kernel console output (not intermixed with test programs): ffc0000 [ 93.927494][ T29] audit: type=1326 audit(1758670852.618:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 93.954008][ T29] audit: type=1326 audit(1758670852.618:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 93.980551][ T29] audit: type=1326 audit(1758670852.618:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 94.006880][ T29] audit: type=1326 audit(1758670852.618:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 94.031602][ T29] audit: type=1326 audit(1758670852.628:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 94.057754][ T29] audit: type=1326 audit(1758670852.628:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 94.087774][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.189106][ T5044] random: crng reseeded on system resumption [ 94.288975][ T5020] Process accounting resumed [ 94.328153][ T5055] loop1: detected capacity change from 0 to 2048 [ 94.395561][ T5055] /dev/loop1: Can't open blockdev [ 95.275169][ T5074] random: crng reseeded on system resumption [ 95.321199][ T5074] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 95.342798][ T5075] loop0: detected capacity change from 0 to 2048 [ 95.353894][ T5074] : (slave dummy0): Releasing backup interface [ 95.372608][ T5078] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 95.374511][ T5074] team0: Port device dummy0 added [ 95.392724][ T5077] FAULT_INJECTION: forcing a failure. [ 95.392724][ T5077] name failslab, interval 1, probability 0, space 0, times 0 [ 95.407199][ T5077] CPU: 1 UID: 0 PID: 5077 Comm: syz.3.585 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.407272][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.407287][ T5077] Call Trace: [ 95.407295][ T5077] [ 95.407304][ T5077] __dump_stack+0x1d/0x30 [ 95.407329][ T5077] dump_stack_lvl+0xe8/0x140 [ 95.407351][ T5077] dump_stack+0x15/0x1b [ 95.407418][ T5077] should_fail_ex+0x265/0x280 [ 95.407444][ T5077] should_failslab+0x8c/0xb0 [ 95.407472][ T5077] kmem_cache_alloc_node_noprof+0x57/0x320 [ 95.407557][ T5077] ? __alloc_skb+0x101/0x320 [ 95.407642][ T5077] __alloc_skb+0x101/0x320 [ 95.407663][ T5077] ? audit_log_start+0x365/0x6c0 [ 95.407698][ T5077] audit_log_start+0x380/0x6c0 [ 95.407735][ T5077] audit_seccomp+0x48/0x100 [ 95.407764][ T5077] ? __seccomp_filter+0x68c/0x10d0 [ 95.407787][ T5077] __seccomp_filter+0x69d/0x10d0 [ 95.407811][ T5077] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.407841][ T5077] ? vfs_write+0x7e8/0x960 [ 95.407930][ T5077] ? __rcu_read_unlock+0x4f/0x70 [ 95.407954][ T5077] ? __fget_files+0x184/0x1c0 [ 95.407984][ T5077] __secure_computing+0x82/0x150 [ 95.408007][ T5077] syscall_trace_enter+0xcf/0x1e0 [ 95.408079][ T5077] do_syscall_64+0xac/0x200 [ 95.408118][ T5077] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.408143][ T5077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.408216][ T5077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.408239][ T5077] RIP: 0033:0x7f51039aeec9 [ 95.408335][ T5077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.408354][ T5077] RSP: 002b:00007f5102417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e5 [ 95.408374][ T5077] RAX: ffffffffffffffda RBX: 00007f5103c05fa0 RCX: 00007f51039aeec9 [ 95.408408][ T5077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 95.408420][ T5077] RBP: 00007f5102417090 R08: 0000000000000000 R09: 0000000000000000 [ 95.408432][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.408471][ T5077] R13: 00007f5103c06038 R14: 00007f5103c05fa0 R15: 00007ffdadb328c8 [ 95.408492][ T5077] [ 95.659981][ T5078] team0: Port device dummy0 removed [ 95.670567][ T5078] : (slave dummy0): Enslaving as an active interface with an up link [ 95.729684][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.734198][ T5083] random: crng reseeded on system resumption [ 95.778091][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.845851][ T5093] blktrace: Concurrent blktraces are not allowed on loop3 [ 95.889784][ T5094] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 95.899140][ T5094] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 95.941892][ T5098] loop1: detected capacity change from 0 to 2048 [ 95.960965][ T5098] EXT4-fs: Ignoring removed orlov option [ 95.971516][ T5098] /dev/loop1: Can't open blockdev [ 96.610157][ T5086] Process accounting resumed [ 96.659291][ T5110] random: crng reseeded on system resumption [ 96.683802][ T5105] loop3: detected capacity change from 0 to 8192 [ 96.701334][ T5105] /dev/loop3: Can't open blockdev [ 96.725328][ T5108] loop4: detected capacity change from 0 to 8192 [ 96.744250][ T5108] syz.4.597: attempt to access beyond end of device [ 96.744250][ T5108] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 96.758491][ T5108] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 96.766612][ T5108] FAT-fs (loop4): Filesystem has been set read-only [ 96.809232][ T5114] random: crng reseeded on system resumption [ 96.887752][ T5125] random: crng reseeded on system resumption [ 96.918525][ T5121] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 96.926832][ T5121] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 96.947102][ T5128] loop1: detected capacity change from 0 to 2048 [ 96.965476][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.998115][ T5125] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 97.009775][ T5125] bond0: (slave dummy0): Releasing backup interface [ 97.020627][ T5125] team0: Port device dummy0 added [ 97.036184][ T5137] loop0: detected capacity change from 0 to 2048 [ 97.043721][ T5125] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 97.053379][ T5137] EXT4-fs: Ignoring removed orlov option [ 97.059899][ T5125] team0: Port device dummy0 removed [ 97.067829][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.076060][ T5125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.107602][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.234780][ T5145] random: crng reseeded on system resumption [ 97.354194][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.472961][ T5149] loop1: detected capacity change from 0 to 8192 [ 97.494529][ T5149] syz.1.613: attempt to access beyond end of device [ 97.494529][ T5149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 97.510547][ T5149] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 97.518784][ T5149] FAT-fs (loop1): Filesystem has been set read-only [ 97.582794][ T5159] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 97.591262][ T5159] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 97.747610][ T5169] random: crng reseeded on system resumption [ 97.803578][ T5167] loop0: detected capacity change from 0 to 2048 [ 97.881404][ T5171] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 97.895232][ T5171] bond0: (slave dummy0): Releasing backup interface [ 97.904943][ T5171] team0: Port device dummy0 added [ 97.927755][ T5169] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 97.946152][ T5169] team0: Port device dummy0 removed [ 97.963411][ T5169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.984220][ T5135] Process accounting resumed [ 98.085413][ T5176] loop1: detected capacity change from 0 to 164 [ 98.104788][ T5176] iso9660: Unknown parameter 'ÿd' [ 98.187825][ T5183] random: crng reseeded on system resumption [ 98.229301][ T5167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.246671][ T5178] loop3: detected capacity change from 0 to 2048 [ 98.258925][ T5178] EXT4-fs: Ignoring removed orlov option [ 98.283752][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 98.283767][ T29] audit: type=1326 audit(1758670857.038:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.348827][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.374024][ T5178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.410382][ T5187] loop4: detected capacity change from 0 to 8192 [ 98.417968][ T29] audit: type=1326 audit(1758670857.068:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.443758][ T29] audit: type=1326 audit(1758670857.068:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.470626][ T29] audit: type=1326 audit(1758670857.068:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.496598][ T29] audit: type=1326 audit(1758670857.068:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.521832][ T29] audit: type=1326 audit(1758670857.068:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.546321][ T29] audit: type=1326 audit(1758670857.068:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.571486][ T29] audit: type=1326 audit(1758670857.068:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.573530][ T5193] netlink: 'syz.0.630': attribute type 1 has an invalid length. [ 98.597039][ T29] audit: type=1326 audit(1758670857.068:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.616206][ T5187] syz.4.629: attempt to access beyond end of device [ 98.616206][ T5187] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.632807][ T29] audit: type=1326 audit(1758670857.068:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da6d1eec9 code=0x7ffc0000 [ 98.675285][ T5187] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 98.684109][ T5187] FAT-fs (loop4): Filesystem has been set read-only [ 98.721020][ T5195] netlink: 664 bytes leftover after parsing attributes in process `syz.1.631'. [ 98.809526][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.881136][ T5206] netlink: 124 bytes leftover after parsing attributes in process `syz.3.634'. [ 98.904335][ T5206] loop3: detected capacity change from 0 to 128 [ 98.916635][ T5206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5206 comm=syz.3.634 [ 98.930921][ T5206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5206 comm=syz.3.634 [ 98.956444][ T5212] random: crng reseeded on system resumption [ 98.994287][ T5213] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.389423][ T5221] loop3: detected capacity change from 0 to 2048 [ 99.424494][ T5221] EXT4-fs: Ignoring removed orlov option [ 99.546004][ T5221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.691100][ T5199] syz.0.633 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 99.702235][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.0.633 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.702262][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.702295][ T5199] Call Trace: [ 99.702303][ T5199] [ 99.702312][ T5199] __dump_stack+0x1d/0x30 [ 99.702333][ T5199] dump_stack_lvl+0xe8/0x140 [ 99.702367][ T5199] dump_stack+0x15/0x1b [ 99.702392][ T5199] dump_header+0x81/0x220 [ 99.702480][ T5199] oom_kill_process+0x342/0x400 [ 99.702517][ T5199] out_of_memory+0x979/0xb80 [ 99.702647][ T5199] try_charge_memcg+0x5e6/0x9e0 [ 99.702684][ T5199] charge_memcg+0x51/0xc0 [ 99.702706][ T5199] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 99.702738][ T5199] __read_swap_cache_async+0x1df/0x350 [ 99.702779][ T5199] swap_cluster_readahead+0x277/0x3e0 [ 99.702889][ T5199] swapin_readahead+0xde/0x6f0 [ 99.702933][ T5199] ? __filemap_get_folio+0x4f7/0x6b0 [ 99.702995][ T5199] ? swap_cache_get_folio+0x77/0x200 [ 99.703037][ T5199] do_swap_page+0x301/0x2430 [ 99.703084][ T5199] ? css_rstat_updated+0xb7/0x240 [ 99.703115][ T5199] ? __pfx_default_wake_function+0x10/0x10 [ 99.703210][ T5199] handle_mm_fault+0x9a5/0x2c20 [ 99.703272][ T5199] do_user_addr_fault+0x636/0x1090 [ 99.703318][ T5199] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 99.703354][ T5199] exc_page_fault+0x62/0xa0 [ 99.703425][ T5199] asm_exc_page_fault+0x26/0x30 [ 99.703521][ T5199] RIP: 0033:0x7f4da6d46c60 [ 99.703538][ T5199] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 99.703555][ T5199] RSP: 002b:00007fff49234f58 EFLAGS: 00010206 [ 99.703570][ T5199] RAX: 00000000fffffffa RBX: 00007f4da6f75fa0 RCX: 0000000000000000 [ 99.703586][ T5199] RDX: 00007fff49234fa0 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.703602][ T5199] RBP: 00007f4da6f77da0 R08: 0000000020097b59 R09: 7fffffffffffffff [ 99.703642][ T5199] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001850a [ 99.703728][ T5199] R13: 00007f4da6f76180 R14: ffffffffffffffff R15: 00007fff492350e0 [ 99.703746][ T5199] [ 99.936294][ T5199] memory: usage 307200kB, limit 307200kB, failcnt 277 [ 99.943956][ T5199] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 99.952639][ T5199] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 99.960865][ T5199] Memory cgroup stats for /syz0: [ 99.981382][ T5199] cache 0 [ 99.989758][ T5199] rss 4096 [ 99.993071][ T5199] shmem 0 [ 99.996240][ T5199] mapped_file 0 [ 99.999955][ T5199] dirty 0 [ 100.003154][ T5199] writeback 0 [ 100.006740][ T5199] workingset_refault_anon 81 [ 100.011637][ T5199] workingset_refault_file 1072 [ 100.017047][ T5199] swap 204800 [ 100.020678][ T5199] swapcached 8192 [ 100.024471][ T5199] pgpgin 38952 [ 100.027995][ T5199] pgpgout 38949 [ 100.031946][ T5199] pgfault 35876 [ 100.036154][ T5199] pgmajfault 361 [ 100.040142][ T5199] inactive_anon 4096 [ 100.044334][ T5199] active_anon 0 [ 100.047409][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.048239][ T5199] inactive_file 0 [ 100.048250][ T5199] active_file 4096 [ 100.065693][ T5199] unevictable 0 [ 100.069231][ T5199] hierarchical_memory_limit 314572800 [ 100.074801][ T5199] hierarchical_memsw_limit 9223372036854771712 [ 100.081221][ T5199] total_cache 0 [ 100.084724][ T5199] total_rss 4096 [ 100.088355][ T5199] total_shmem 0 [ 100.091845][ T5199] total_mapped_file 0 [ 100.096472][ T5199] total_dirty 0 [ 100.100725][ T5199] total_writeback 0 [ 100.104892][ T5199] total_workingset_refault_anon 81 [ 100.110238][ T5199] total_workingset_refault_file 1072 [ 100.116129][ T5199] total_swap 204800 [ 100.120009][ T5199] total_swapcached 8192 [ 100.124620][ T5199] total_pgpgin 38952 [ 100.128832][ T5199] total_pgpgout 38949 [ 100.133183][ T5199] total_pgfault 35876 [ 100.138423][ T5199] total_pgmajfault 361 [ 100.142522][ T5199] total_inactive_anon 4096 [ 100.147275][ T5199] total_active_anon 0 [ 100.152506][ T5199] total_inactive_file 0 [ 100.156957][ T5199] total_active_file 4096 [ 100.161666][ T5199] total_unevictable 0 [ 100.166018][ T5199] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.633,pid=5199,uid=0 [ 100.182433][ T5199] Memory cgroup out of memory: Killed process 5199 (syz.0.633) total-vm:96136kB, anon-rss:128kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 100.226560][ T5230] loop1: detected capacity change from 0 to 512 [ 100.234256][ T5230] EXT4-fs: Ignoring removed nobh option [ 100.244470][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.644: corrupted inode contents [ 100.257919][ T5230] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.644: mark_inode_dirty error [ 100.270998][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.644: corrupted inode contents [ 100.342391][ T5230] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.644: mark_inode_dirty error [ 100.360163][ T5238] netlink: 664 bytes leftover after parsing attributes in process `syz.3.646'. [ 100.397071][ T5230] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.644: Failed to acquire dquot type 0 [ 100.415652][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.644: corrupted inode contents [ 100.443053][ T5230] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.644: mark_inode_dirty error [ 100.474211][ T5240] netlink: 664 bytes leftover after parsing attributes in process `syz.3.647'. [ 100.483132][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.644: corrupted inode contents [ 100.515242][ T5230] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.644: mark_inode_dirty error [ 100.533006][ T5244] random: crng reseeded on system resumption [ 100.553705][ T5244] bond0: (slave dummy0): Releasing backup interface [ 100.561962][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.644: corrupted inode contents [ 100.564445][ T5244] team0: Port device dummy0 added [ 100.581889][ T5230] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 100.616327][ T5230] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.644: corrupted inode contents [ 100.630173][ T5244] team0: Port device dummy0 removed [ 100.641856][ T5244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.655450][ T5230] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.644: mark_inode_dirty error [ 100.673456][ T5230] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 100.700740][ T5230] EXT4-fs (loop1): 1 truncate cleaned up [ 100.710022][ T5230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.730778][ T5230] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.856888][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.943620][ T5266] random: crng reseeded on system resumption [ 101.004374][ T5272] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.012242][ T5268] loop1: detected capacity change from 0 to 2048 [ 101.052545][ T5268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 101.076375][ T5268] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.655: inline data xattr refers to an external xattr inode [ 101.103047][ T5280] random: crng reseeded on system resumption [ 101.132460][ T5279] netlink: 664 bytes leftover after parsing attributes in process `syz.0.661'. [ 101.166405][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 101.331634][ T5280] validate_nla: 6 callbacks suppressed [ 101.331654][ T5280] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 101.352445][ T5280] bond0: (slave dummy0): Releasing backup interface [ 101.371495][ T5280] team0: Port device dummy0 added [ 101.388649][ T5285] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 101.398438][ T5281] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 101.414752][ T5285] bond0: (slave dummy0): Releasing backup interface [ 101.426158][ T5285] team0: Port device dummy0 added [ 101.438117][ T5281] team0: Port device dummy0 removed [ 101.446488][ T5281] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.499162][ T5285] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 101.527068][ T5285] team0: Port device dummy0 removed [ 101.571640][ T5285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.638127][ T5298] random: crng reseeded on system resumption [ 101.781354][ T5311] netlink: 664 bytes leftover after parsing attributes in process `syz.4.674'. [ 101.796066][ T5310] Process accounting resumed [ 102.106627][ T5332] random: crng reseeded on system resumption [ 102.251379][ T5340] netlink: 664 bytes leftover after parsing attributes in process `syz.3.687'. [ 102.318242][ T5344] blktrace: Concurrent blktraces are not allowed on loop9 [ 102.415482][ T5351] loop4: detected capacity change from 0 to 2048 [ 102.422512][ T5351] EXT4-fs: Ignoring removed orlov option [ 102.452571][ T5355] random: crng reseeded on system resumption [ 102.469793][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.504625][ T5349] loop2: detected capacity change from 0 to 8192 [ 102.581253][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.778725][ T5370] loop4: detected capacity change from 0 to 2048 [ 102.817550][ T5370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 102.849498][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 102.891524][ T5380] random: crng reseeded on system resumption [ 102.901752][ T5368] loop3: detected capacity change from 0 to 2048 [ 102.921230][ T5382] netlink: 664 bytes leftover after parsing attributes in process `syz.4.703'. [ 102.921394][ T5368] EXT4-fs: Ignoring removed orlov option [ 102.963158][ T5368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.980311][ T5388] random: crng reseeded on system resumption [ 103.219529][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.234347][ T5392] loop2: detected capacity change from 0 to 8192 [ 103.242389][ T5403] loop4: detected capacity change from 0 to 2048 [ 103.301456][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 103.346635][ T5412] random: crng reseeded on system resumption [ 103.362984][ T5413] netlink: 664 bytes leftover after parsing attributes in process `syz.0.718'. [ 103.420116][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 103.505209][ T5423] netlink: 'syz.2.723': attribute type 6 has an invalid length. [ 103.517174][ T5423] netlink: 124 bytes leftover after parsing attributes in process `syz.2.723'. [ 103.541663][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 103.541683][ T29] audit: type=1326 audit(1758670862.288:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.575318][ T5423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5423 comm=syz.2.723 [ 103.588403][ T5423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5423 comm=syz.2.723 [ 103.625930][ T29] audit: type=1326 audit(1758670862.288:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.649672][ T29] audit: type=1326 audit(1758670862.298:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.674514][ T29] audit: type=1326 audit(1758670862.298:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.700298][ T29] audit: type=1326 audit(1758670862.298:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.726828][ T29] audit: type=1326 audit(1758670862.298:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.752920][ T29] audit: type=1326 audit(1758670862.298:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.777229][ T29] audit: type=1326 audit(1758670862.298:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.802040][ T29] audit: type=1326 audit(1758670862.298:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.826889][ T29] audit: type=1326 audit(1758670862.298:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 103.855439][ T5431] netlink: 664 bytes leftover after parsing attributes in process `syz.0.726'. [ 103.920304][ T5433] loop2: detected capacity change from 0 to 2048 [ 103.955003][ T5435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.728'. [ 103.984925][ T5433] loop2: p1 < > p4 < > [ 104.133684][ T5443] random: crng reseeded on system resumption [ 104.145932][ T5441] loop2: detected capacity change from 0 to 2048 [ 104.196175][ T5441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 104.304253][ T5451] FAULT_INJECTION: forcing a failure. [ 104.304253][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.317951][ T5451] CPU: 0 UID: 0 PID: 5451 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.318060][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.318078][ T5451] Call Trace: [ 104.318085][ T5451] [ 104.318094][ T5451] __dump_stack+0x1d/0x30 [ 104.318122][ T5451] dump_stack_lvl+0xe8/0x140 [ 104.318204][ T5451] dump_stack+0x15/0x1b [ 104.318223][ T5451] should_fail_ex+0x265/0x280 [ 104.318252][ T5451] should_fail+0xb/0x20 [ 104.318277][ T5451] should_fail_usercopy+0x1a/0x20 [ 104.318400][ T5451] strncpy_from_user+0x25/0x230 [ 104.318465][ T5451] ? kmem_cache_alloc_noprof+0x186/0x310 [ 104.318503][ T5451] ? getname_flags+0x80/0x3b0 [ 104.318579][ T5451] getname_flags+0xae/0x3b0 [ 104.318668][ T5451] user_path_at+0x28/0x130 [ 104.318775][ T5451] __se_sys_pivot_root+0xd0/0x710 [ 104.318817][ T5451] __x64_sys_pivot_root+0x31/0x40 [ 104.318926][ T5451] x64_sys_call+0x144/0x2ff0 [ 104.318954][ T5451] do_syscall_64+0xd2/0x200 [ 104.319077][ T5451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.319111][ T5451] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.319152][ T5451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.319183][ T5451] RIP: 0033:0x7f4da6d1eec9 [ 104.319203][ T5451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.319275][ T5451] RSP: 002b:00007f4da5787038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 104.319299][ T5451] RAX: ffffffffffffffda RBX: 00007f4da6f75fa0 RCX: 00007f4da6d1eec9 [ 104.319326][ T5451] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000340 [ 104.319340][ T5451] RBP: 00007f4da5787090 R08: 0000000000000000 R09: 0000000000000000 [ 104.319380][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.319396][ T5451] R13: 00007f4da6f76038 R14: 00007f4da6f75fa0 R15: 00007fff49234e68 [ 104.319420][ T5451] [ 104.543612][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 104.557702][ T5420] Process accounting resumed [ 104.700001][ T5469] random: crng reseeded on system resumption [ 104.710886][ T5454] loop4: detected capacity change from 0 to 8192 [ 104.746860][ T5473] random: crng reseeded on system resumption [ 104.789946][ T5477] loop0: detected capacity change from 0 to 1024 [ 104.799398][ T5477] EXT4-fs: Ignoring removed orlov option [ 104.805436][ T5477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.816973][ T5476] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 104.830440][ T5473] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 104.840289][ T5473] bond0: (slave dummy0): Releasing backup interface [ 104.842109][ T5477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.863091][ T5473] team0: Port device dummy0 added [ 104.870026][ T5473] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 104.881289][ T5473] team0: Port device dummy0 removed [ 104.889934][ T5473] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.134829][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.406441][ T5505] random: crng reseeded on system resumption [ 105.467408][ T5506] loop3: detected capacity change from 0 to 2048 [ 105.556758][ T5512] loop3: p1 < > p4 < > [ 105.589018][ T5506] loop3: p1 < > p4 < > [ 105.685490][ T5479] Process accounting resumed [ 105.808410][ T5521] netlink: 'syz.4.764': attribute type 6 has an invalid length. [ 105.978630][ T5533] loop2: detected capacity change from 0 to 128 [ 105.995450][ T5533] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.048458][ T5533] syz.2.771: attempt to access beyond end of device [ 106.048458][ T5533] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 106.076963][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.134004][ T5543] blktrace: Concurrent blktraces are not allowed on loop5 [ 106.187686][ T5543] loop2: detected capacity change from 0 to 2048 [ 106.194869][ T5543] EXT4-fs: Ignoring removed orlov option [ 106.219467][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.402543][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.522913][ T5561] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 106.714252][ T5568] loop0: detected capacity change from 0 to 128 [ 106.723029][ T5570] random: crng reseeded on system resumption [ 106.731466][ T5568] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.779700][ T5570] netlink: 'syz.1.786': attribute type 10 has an invalid length. [ 106.780949][ T5574] netlink: 'syz.4.788': attribute type 6 has an invalid length. [ 106.797113][ T5570] bond0: (slave dummy0): Releasing backup interface [ 106.803201][ T5568] syz.0.785: attempt to access beyond end of device [ 106.803201][ T5568] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 106.823870][ T5570] team0: Port device dummy0 added [ 106.832053][ T5574] netlink: 124 bytes leftover after parsing attributes in process `syz.4.788'. [ 106.863676][ T5536] Process accounting resumed [ 106.869346][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 106.870805][ T5575] netlink: 'syz.1.786': attribute type 10 has an invalid length. [ 106.904288][ T5574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5574 comm=syz.4.788 [ 106.918381][ T5574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5574 comm=syz.4.788 [ 106.938150][ T5575] team0: Port device dummy0 removed [ 106.948539][ T5577] blktrace: Concurrent blktraces are not allowed on loop7 [ 106.950531][ T5575] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.016785][ T5577] loop3: detected capacity change from 0 to 2048 [ 107.033222][ T5577] EXT4-fs: Ignoring removed orlov option [ 107.058136][ T5577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.100734][ T5592] random: crng reseeded on system resumption [ 107.258977][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.331260][ T5603] loop3: detected capacity change from 0 to 128 [ 107.331657][ T5604] !yz!: rxe_newlink: already configured on team_slave_0 [ 107.348524][ T5603] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.359314][ T5557] syz.2.781 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 107.370283][ T5557] CPU: 1 UID: 0 PID: 5557 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.370311][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.370324][ T5557] Call Trace: [ 107.370331][ T5557] [ 107.370339][ T5557] __dump_stack+0x1d/0x30 [ 107.370369][ T5557] dump_stack_lvl+0xe8/0x140 [ 107.370395][ T5557] dump_stack+0x15/0x1b [ 107.370416][ T5557] dump_header+0x81/0x220 [ 107.370483][ T5557] oom_kill_process+0x342/0x400 [ 107.370586][ T5557] out_of_memory+0x979/0xb80 [ 107.370626][ T5557] try_charge_memcg+0x5e6/0x9e0 [ 107.370666][ T5557] charge_memcg+0x51/0xc0 [ 107.370685][ T5557] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 107.370836][ T5557] __read_swap_cache_async+0x1df/0x350 [ 107.370912][ T5557] swap_cluster_readahead+0x376/0x3e0 [ 107.370957][ T5557] swapin_readahead+0xde/0x6f0 [ 107.370993][ T5557] ? __filemap_get_folio+0x4f7/0x6b0 [ 107.371036][ T5557] ? __rcu_read_unlock+0x34/0x70 [ 107.371117][ T5557] ? swap_cache_get_folio+0x77/0x200 [ 107.371155][ T5557] do_swap_page+0x301/0x2430 [ 107.371186][ T5557] ? css_rstat_updated+0xb7/0x240 [ 107.371222][ T5557] ? __pfx_default_wake_function+0x10/0x10 [ 107.371249][ T5557] handle_mm_fault+0x9a5/0x2c20 [ 107.371369][ T5557] do_user_addr_fault+0x636/0x1090 [ 107.371412][ T5557] exc_page_fault+0x62/0xa0 [ 107.371445][ T5557] asm_exc_page_fault+0x26/0x30 [ 107.371532][ T5557] RIP: 0033:0x7ff0fb0dedf0 [ 107.371551][ T5557] Code: ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 41 83 c7 01 <45> 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 00 00 48 83 [ 107.371652][ T5557] RSP: 002b:00007ffea0be23c0 EFLAGS: 00010202 [ 107.371670][ T5557] RAX: 000000110c238000 RBX: 00007ff0fbf85720 RCX: 0000000000000005 [ 107.371682][ T5557] RDX: 0000000000001aee RSI: 0000000000000e6b RDI: 0000000000000020 [ 107.371756][ T5557] RBP: ffffffff81d39aee R08: 00007ff0fb456038 R09: 00007ff0fb442000 [ 107.371773][ T5557] R10: 00007ff0fac6f008 R11: 000000000000000d R12: 000000000000000d [ 107.371789][ T5557] R13: 0000000000000000 R14: ffffffff81d39868 R15: 000000000000001f [ 107.371806][ T5557] ? avc_has_perm_noaudit+0x28/0x200 [ 107.371898][ T5557] ? avc_perm_nonode+0x9e/0xe0 [ 107.371936][ T5557] [ 107.371945][ T5557] memory: usage 307200kB, limit 307200kB, failcnt 387 [ 107.427110][ T5603] syz.3.800: attempt to access beyond end of device [ 107.427110][ T5603] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 107.428249][ T5557] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 107.428264][ T5557] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 107.428278][ T5557] Memory cgroup stats for /syz2: [ 107.642598][ T5557] cache 4096 [ 107.664198][ T5557] rss 0 [ 107.667107][ T5557] shmem 0 [ 107.670058][ T5557] mapped_file 0 [ 107.673872][ T5557] dirty 0 [ 107.677100][ T5557] writeback 0 [ 107.681157][ T5557] workingset_refault_anon 239 [ 107.686161][ T5557] workingset_refault_file 4120 [ 107.691169][ T5557] swap 204800 [ 107.695166][ T5557] swapcached 0 [ 107.699619][ T5557] pgpgin 41262 [ 107.704047][ T5557] pgpgout 41261 [ 107.708831][ T5557] pgfault 32200 [ 107.712540][ T5557] pgmajfault 629 [ 107.717236][ T5557] inactive_anon 0 [ 107.721754][ T5557] active_anon 0 [ 107.725385][ T5557] inactive_file 0 [ 107.729120][ T5557] active_file 4096 [ 107.734284][ T5557] unevictable 0 [ 107.739366][ T5557] hierarchical_memory_limit 314572800 [ 107.745255][ T5557] hierarchical_memsw_limit 9223372036854771712 [ 107.751783][ T5557] total_cache 4096 [ 107.755949][ T5557] total_rss 0 [ 107.759682][ T5557] total_shmem 0 [ 107.763660][ T5557] total_mapped_file 0 [ 107.767963][ T5557] total_dirty 0 [ 107.772159][ T5557] total_writeback 0 [ 107.776434][ T5557] total_workingset_refault_anon 239 [ 107.782536][ T5557] total_workingset_refault_file 4120 [ 107.788570][ T5557] total_swap 204800 [ 107.795211][ T5557] total_swapcached 0 [ 107.800090][ T5557] total_pgpgin 41262 [ 107.804884][ T5557] total_pgpgout 41261 [ 107.809472][ T5557] total_pgfault 32200 [ 107.815706][ T5557] total_pgmajfault 629 [ 107.820749][ T5557] total_inactive_anon 0 [ 107.825210][ T5557] total_active_anon 0 [ 107.829384][ T5557] total_inactive_file 0 [ 107.834192][ T5557] total_active_file 4096 [ 107.839648][ T5557] total_unevictable 0 [ 107.844295][ T5557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.781,pid=5557,uid=0 [ 107.859413][ T5557] Memory cgroup out of memory: Killed process 5557 (syz.2.781) total-vm:93956kB, anon-rss:128kB, file-rss:22120kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 107.877114][ T413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.982403][ T5613] netlink: 664 bytes leftover after parsing attributes in process `syz.3.804'. [ 108.133737][ T5626] random: crng reseeded on system resumption [ 108.146846][ T5628] loop0: detected capacity change from 0 to 128 [ 108.155271][ T5628] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.172709][ T5626] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 108.200353][ T5626] bond0: (slave dummy0): Releasing backup interface [ 108.209414][ T5628] syz.0.811: attempt to access beyond end of device [ 108.209414][ T5628] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 108.224631][ T5633] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 108.245770][ T5626] team0: Port device dummy0 added [ 108.253877][ T413] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.264440][ T5633] team0: Port device dummy0 removed [ 108.288923][ T5633] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.333137][ T5641] netlink: 664 bytes leftover after parsing attributes in process `syz.0.817'. [ 108.451722][ T5657] loop2: detected capacity change from 0 to 128 [ 108.463934][ T5658] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.475027][ T5657] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.514396][ T5657] syz.2.824: attempt to access beyond end of device [ 108.514396][ T5657] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 108.548999][ T388] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.648836][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 108.648851][ T29] audit: type=1326 audit(1758670867.398:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.690373][ T29] audit: type=1326 audit(1758670867.398:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.715475][ T29] audit: type=1326 audit(1758670867.398:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.741186][ T29] audit: type=1326 audit(1758670867.398:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.767342][ T29] audit: type=1326 audit(1758670867.398:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.793750][ T29] audit: type=1326 audit(1758670867.398:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0fb1fd710 code=0x7ffc0000 [ 108.820613][ T29] audit: type=1326 audit(1758670867.398:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0fb2006f7 code=0x7ffc0000 [ 108.846764][ T29] audit: type=1326 audit(1758670867.398:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0fb1feec9 code=0x7ffc0000 [ 108.873554][ T29] audit: type=1326 audit(1758670867.398:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0fb2006f7 code=0x7ffc0000 [ 108.899923][ T29] audit: type=1326 audit(1758670867.398:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.2.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0fb1fdb2a code=0x7ffc0000 [ 108.950715][ T5674] loop1: detected capacity change from 0 to 512 [ 108.973171][ T5674] EXT4-fs: Ignoring removed nobh option [ 108.979846][ T5670] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.996806][ T5676] netlink: 664 bytes leftover after parsing attributes in process `syz.2.831'. [ 109.010085][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.830: corrupted inode contents [ 109.031925][ T5674] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.830: mark_inode_dirty error [ 109.050892][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.830: corrupted inode contents [ 109.069147][ T5674] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.830: mark_inode_dirty error [ 109.102352][ T5674] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.830: Failed to acquire dquot type 0 [ 109.152811][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.830: corrupted inode contents [ 109.169134][ T5674] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.830: mark_inode_dirty error [ 109.216772][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.830: corrupted inode contents [ 109.218436][ T5651] syz.3.821 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 109.242491][ T5674] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.830: mark_inode_dirty error [ 109.245995][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.3.821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.246022][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.246111][ T5651] Call Trace: [ 109.246121][ T5651] [ 109.246133][ T5651] __dump_stack+0x1d/0x30 [ 109.246164][ T5651] dump_stack_lvl+0xe8/0x140 [ 109.246190][ T5651] dump_stack+0x15/0x1b [ 109.246215][ T5651] dump_header+0x81/0x220 [ 109.246262][ T5651] oom_kill_process+0x342/0x400 [ 109.246380][ T5651] out_of_memory+0x979/0xb80 [ 109.246466][ T5651] try_charge_memcg+0x5e6/0x9e0 [ 109.246512][ T5651] obj_cgroup_charge_pages+0xa6/0x150 [ 109.246624][ T5651] __memcg_kmem_charge_page+0x9f/0x170 [ 109.246685][ T5651] __alloc_frozen_pages_noprof+0x188/0x360 [ 109.246742][ T5651] alloc_pages_mpol+0xb3/0x250 [ 109.246789][ T5651] alloc_pages_noprof+0x90/0x130 [ 109.246866][ T5651] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 109.246972][ T5651] __kvmalloc_node_noprof+0x30f/0x4e0 [ 109.247076][ T5651] ? ip_set_alloc+0x1f/0x30 [ 109.247107][ T5651] ? ip_set_alloc+0x1f/0x30 [ 109.247188][ T5651] ? __kmalloc_cache_noprof+0x189/0x320 [ 109.247232][ T5651] ip_set_alloc+0x1f/0x30 [ 109.247261][ T5651] hash_netiface_create+0x282/0x740 [ 109.247332][ T5651] ? __pfx_hash_netiface_create+0x10/0x10 [ 109.247367][ T5651] ip_set_create+0x3cc/0x960 [ 109.247455][ T5651] ? __nla_parse+0x40/0x60 [ 109.247528][ T5651] nfnetlink_rcv_msg+0x4c6/0x590 [ 109.247605][ T5651] netlink_rcv_skb+0x120/0x220 [ 109.247640][ T5651] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 109.247691][ T5651] nfnetlink_rcv+0x16b/0x1690 [ 109.247751][ T5651] ? nlmon_xmit+0x4f/0x60 [ 109.247792][ T5651] ? consume_skb+0x49/0x150 [ 109.247826][ T5651] ? nlmon_xmit+0x4f/0x60 [ 109.247868][ T5651] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 109.247987][ T5651] ? __dev_queue_xmit+0x1200/0x2000 [ 109.248026][ T5651] ? __dev_queue_xmit+0x182/0x2000 [ 109.248066][ T5651] ? ref_tracker_free+0x37d/0x3e0 [ 109.248135][ T5651] ? __netlink_deliver_tap+0x4dc/0x500 [ 109.248177][ T5651] netlink_unicast+0x5c0/0x690 [ 109.248212][ T5651] netlink_sendmsg+0x58b/0x6b0 [ 109.248292][ T5651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.248330][ T5651] __sock_sendmsg+0x145/0x180 [ 109.248378][ T5651] ____sys_sendmsg+0x31e/0x4e0 [ 109.248427][ T5651] ___sys_sendmsg+0x17b/0x1d0 [ 109.248563][ T5651] __x64_sys_sendmsg+0xd4/0x160 [ 109.248609][ T5651] x64_sys_call+0x191e/0x2ff0 [ 109.248706][ T5651] do_syscall_64+0xd2/0x200 [ 109.248747][ T5651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.248782][ T5651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.248827][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.248904][ T5651] RIP: 0033:0x7f51039aeec9 [ 109.248929][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.248956][ T5651] RSP: 002b:00007f5102417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.248994][ T5651] RAX: ffffffffffffffda RBX: 00007f5103c05fa0 RCX: 00007f51039aeec9 [ 109.249012][ T5651] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 109.249109][ T5651] RBP: 00007f5103a31f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.249127][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.249172][ T5651] R13: 00007f5103c06038 R14: 00007f5103c05fa0 R15: 00007ffdadb328c8 [ 109.249200][ T5651] [ 109.249210][ T5651] memory: usage 307200kB, limit 307200kB, failcnt 583 [ 109.264014][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.830: corrupted inode contents [ 109.269067][ T5651] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 109.269092][ T5651] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 109.269104][ T5651] Memory cgroup stats for /syz3: [ 109.303357][ T5651] cache 0 [ 109.310084][ T5674] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 109.312775][ T5651] rss 4096 [ 109.312786][ T5651] shmem 0 [ 109.318329][ T5674] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.830: corrupted inode contents [ 109.323633][ T5651] mapped_file 0 [ 109.323647][ T5651] dirty 0 [ 109.323654][ T5651] writeback 0 [ 109.323663][ T5651] workingset_refault_anon 250 [ 109.323672][ T5651] workingset_refault_file 2633 [ 109.323680][ T5651] swap 192512 [ 109.323688][ T5651] swapcached 16384 [ 109.323695][ T5651] pgpgin 25803 [ 109.323703][ T5651] pgpgout 25799 [ 109.323738][ T5651] pgfault 28554 [ 109.323746][ T5651] pgmajfault 565 [ 109.323754][ T5651] inactive_anon 12288 [ 109.323762][ T5651] active_anon 4096 [ 109.323770][ T5651] inactive_file 0 [ 109.323778][ T5651] active_file 0 [ 109.323786][ T5651] unevictable 0 [ 109.323795][ T5651] hierarchical_memory_limit 314572800 [ 109.323863][ T5651] hierarchical_memsw_limit 9223372036854771712 [ 109.323874][ T5651] total_cache 0 [ 109.323882][ T5651] total_rss 4096 [ 109.333303][ T5674] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.830: mark_inode_dirty error [ 109.335885][ T5651] total_shmem 0 [ 109.342148][ T5674] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 109.347064][ T5651] total_mapped_file 0 [ 109.354599][ T5674] EXT4-fs (loop1): 1 truncate cleaned up [ 109.359157][ T5651] total_dirty 0 [ 109.366528][ T5674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.371089][ T5651] total_writeback 0 [ 109.371101][ T5651] total_workingset_refault_anon 250 [ 109.377797][ T5674] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.383601][ T5651] total_workingset_refault_file 2633 [ 109.887455][ T5651] total_swap 192512 [ 109.891785][ T5651] total_swapcached 16384 [ 109.896607][ T5651] total_pgpgin 25808 [ 109.900771][ T5651] total_pgpgout 25804 [ 109.905007][ T5651] total_pgfault 28557 [ 109.909249][ T5651] total_pgmajfault 565 [ 109.913968][ T5651] total_inactive_anon 12288 [ 109.918723][ T5651] total_active_anon 4096 [ 109.923229][ T5651] total_inactive_file 0 [ 109.927603][ T5651] total_active_file 0 [ 109.931665][ T5651] total_unevictable 0 [ 109.935893][ T5651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.821,pid=5650,uid=0 [ 109.951377][ T5651] Memory cgroup out of memory: Killed process 5650 (syz.3.821) total-vm:93956kB, anon-rss:128kB, file-rss:22120kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 109.999421][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.041677][ T5693] loop1: detected capacity change from 0 to 128 [ 110.049078][ T5693] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.078685][ T5693] syz.1.836: attempt to access beyond end of device [ 110.078685][ T5693] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 110.115940][ T413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.125614][ T5695] loop2: detected capacity change from 0 to 2048 [ 110.164001][ T5695] loop2: p1 < > p4 < > [ 110.229770][ T5709] netlink: 664 bytes leftover after parsing attributes in process `syz.0.842'. [ 110.277459][ T5688] Process accounting resumed [ 110.298950][ T5718] random: crng reseeded on system resumption [ 110.313088][ T5718] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 110.342433][ T5718] bond0: (slave dummy0): Releasing backup interface [ 110.360534][ T5718] team0: Port device dummy0 added [ 110.437388][ T5720] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 110.513141][ T5720] team0: Port device dummy0 removed [ 110.521379][ T5720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.622265][ T5723] loop1: detected capacity change from 0 to 128 [ 110.646465][ T5723] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.683126][ T5723] syz.1.848: attempt to access beyond end of device [ 110.683126][ T5723] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 110.724050][ T413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 110.766757][ T5725] netlink: 'syz.1.849': attribute type 6 has an invalid length. [ 110.798242][ T5725] netlink: 124 bytes leftover after parsing attributes in process `syz.1.849'. [ 110.838763][ T5725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5725 comm=syz.1.849 [ 110.853438][ T5725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5725 comm=syz.1.849 [ 111.202345][ T5738] netlink: 664 bytes leftover after parsing attributes in process `syz.0.855'. [ 111.432846][ T5748] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 111.441150][ T5748] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 111.502819][ T5750] loop4: detected capacity change from 0 to 2048 [ 111.537403][ T5750] EXT4-fs: Ignoring removed orlov option [ 111.595038][ T5750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.857923][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.041817][ T5742] Process accounting resumed [ 112.092261][ T5763] netlink: 'syz.3.864': attribute type 6 has an invalid length. [ 112.145824][ T5763] netlink: 124 bytes leftover after parsing attributes in process `syz.3.864'. [ 112.190274][ T5763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5763 comm=syz.3.864 [ 112.203845][ T5763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5763 comm=syz.3.864 [ 112.995698][ T5769] netlink: 664 bytes leftover after parsing attributes in process `syz.0.867'. [ 113.423687][ T5777] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 113.432432][ T5777] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 113.460085][ T5773] loop0: detected capacity change from 0 to 512 [ 113.512277][ T5773] EXT4-fs: Ignoring removed nobh option [ 113.547523][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.869: corrupted inode contents [ 113.629279][ T5773] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.869: mark_inode_dirty error [ 113.660553][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.869: corrupted inode contents [ 113.733678][ T5773] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.869: mark_inode_dirty error [ 113.760921][ T5773] __quota_error: 116 callbacks suppressed [ 113.760983][ T5773] Quota error (device loop0): write_blk: dquota write failed [ 113.788189][ T5773] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 113.806045][ T5790] netlink: 'syz.2.875': attribute type 6 has an invalid length. [ 113.821375][ T5773] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.869: Failed to acquire dquot type 0 [ 113.824104][ T5790] netlink: 124 bytes leftover after parsing attributes in process `syz.2.875'. [ 113.836656][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.869: corrupted inode contents [ 113.859538][ T5791] loop4: detected capacity change from 0 to 2048 [ 113.859568][ T5773] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.869: mark_inode_dirty error [ 113.885544][ T5790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5790 comm=syz.2.875 [ 113.898865][ T5790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5790 comm=syz.2.875 [ 113.912421][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.869: corrupted inode contents [ 113.928670][ T5773] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.869: mark_inode_dirty error [ 113.940553][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.869: corrupted inode contents [ 113.954593][ T5773] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 113.965219][ T5773] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.869: corrupted inode contents [ 113.966045][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.992141][ T5773] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.869: mark_inode_dirty error [ 114.006537][ T5795] random: crng reseeded on system resumption [ 114.016142][ T5773] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 114.052433][ T5773] EXT4-fs (loop0): 1 truncate cleaned up [ 114.066263][ T5773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.080298][ T29] audit: type=1326 audit(1758670872.838:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.105148][ T29] audit: type=1326 audit(1758670872.838:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.130264][ T29] audit: type=1326 audit(1758670872.838:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.133513][ T5773] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.154480][ T29] audit: type=1326 audit(1758670872.838:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.189985][ T29] audit: type=1326 audit(1758670872.838:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.218220][ T29] audit: type=1326 audit(1758670872.838:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.243004][ T29] audit: type=1326 audit(1758670872.838:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.267282][ T29] audit: type=1326 audit(1758670872.838:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 114.361232][ T5799] random: crng reseeded on system resumption [ 114.447152][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.521640][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.541528][ T5806] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 114.549774][ T5806] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 114.573867][ T5785] Process accounting resumed [ 114.595137][ T5817] random: crng reseeded on system resumption [ 114.614230][ T5819] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 114.622975][ T5819] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 114.738814][ T5834] loop4: detected capacity change from 0 to 512 [ 114.746869][ T5834] EXT4-fs: Ignoring removed nobh option [ 114.768867][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.895: corrupted inode contents [ 114.784194][ T5834] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.895: mark_inode_dirty error [ 114.799096][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.895: corrupted inode contents [ 114.815888][ T5834] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.895: mark_inode_dirty error [ 114.829747][ T5834] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.895: Failed to acquire dquot type 0 [ 114.859963][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.895: corrupted inode contents [ 114.878081][ T5834] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.895: mark_inode_dirty error [ 114.890935][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.895: corrupted inode contents [ 114.906183][ T5834] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.895: mark_inode_dirty error [ 114.919680][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.895: corrupted inode contents [ 114.933734][ T5841] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 114.941795][ T5841] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 114.950705][ T5834] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 114.961936][ T5834] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.895: corrupted inode contents [ 114.975505][ T5834] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.895: mark_inode_dirty error [ 114.987867][ T5834] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 115.008622][ T5834] EXT4-fs (loop4): 1 truncate cleaned up [ 115.016084][ T5834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.029838][ T5834] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.568006][ T5848] random: crng reseeded on system resumption [ 115.607554][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.656226][ T5854] random: crng reseeded on system resumption [ 115.675130][ T5856] loop3: detected capacity change from 0 to 128 [ 115.687067][ T5856] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.707578][ T5854] bond0: (slave dummy0): Releasing backup interface [ 115.720299][ T5854] team0: Port device dummy0 added [ 115.746519][ T5854] team0: Port device dummy0 removed [ 115.766230][ T5854] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.869790][ T5844] Process accounting resumed [ 115.879642][ T5868] loop1: detected capacity change from 0 to 128 [ 115.907944][ T5868] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.943984][ T5876] random: crng reseeded on system resumption [ 116.000120][ T5868] syz.1.910: attempt to access beyond end of device [ 116.000120][ T5868] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 116.051228][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 116.261319][ T5896] netlink: 124 bytes leftover after parsing attributes in process `syz.1.922'. [ 116.276099][ T5896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5896 comm=syz.1.922 [ 116.288973][ T5896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5896 comm=syz.1.922 [ 116.328685][ T5901] random: crng reseeded on system resumption [ 116.391036][ T5907] netlink: 664 bytes leftover after parsing attributes in process `syz.1.927'. [ 116.816679][ T5927] random: crng reseeded on system resumption [ 116.910811][ T5931] netlink: 124 bytes leftover after parsing attributes in process `syz.0.936'. [ 116.936211][ T5931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5931 comm=syz.0.936 [ 116.952298][ T5931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5931 comm=syz.0.936 [ 117.062139][ T5936] netlink: 664 bytes leftover after parsing attributes in process `syz.0.938'. [ 117.110735][ T5897] Process accounting resumed [ 117.788993][ T5968] loop1: detected capacity change from 0 to 2048 [ 117.859448][ T5968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.110891][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.397816][ T6003] loop2: detected capacity change from 0 to 512 [ 118.424065][ T6003] EXT4-fs: Ignoring removed nobh option [ 118.447899][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.964: corrupted inode contents [ 118.471861][ T6003] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.964: mark_inode_dirty error [ 118.490693][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.964: corrupted inode contents [ 118.506282][ T6003] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.964: mark_inode_dirty error [ 118.537776][ T6003] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.964: Failed to acquire dquot type 0 [ 118.601283][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.964: corrupted inode contents [ 118.633048][ T5974] Process accounting resumed [ 118.640468][ T6003] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.964: mark_inode_dirty error [ 118.668525][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.964: corrupted inode contents [ 118.708051][ T6003] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.964: mark_inode_dirty error [ 118.722455][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.964: corrupted inode contents [ 118.793949][ T6003] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 118.804521][ T6003] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.964: corrupted inode contents [ 118.901884][ T6003] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.964: mark_inode_dirty error [ 118.935653][ T6003] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 118.967969][ T6014] loop1: detected capacity change from 0 to 2048 [ 119.245818][ T6014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.391048][ T6003] EXT4-fs (loop2): 1 truncate cleaned up [ 119.402766][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.433710][ T6003] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.455089][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 119.455106][ T29] audit: type=1326 audit(1758670878.208:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.486824][ T29] audit: type=1326 audit(1758670878.208:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.510884][ T29] audit: type=1326 audit(1758670878.208:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.534397][ T29] audit: type=1326 audit(1758670878.208:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.558355][ T29] audit: type=1326 audit(1758670878.208:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.582515][ T29] audit: type=1326 audit(1758670878.208:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.606423][ T29] audit: type=1326 audit(1758670878.208:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.630513][ T29] audit: type=1326 audit(1758670878.208:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.686850][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.696852][ T29] audit: type=1326 audit(1758670878.208:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.721114][ T29] audit: type=1326 audit(1758670878.208:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 119.795605][ T6021] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.999135][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.029091][ T6027] loop1: detected capacity change from 0 to 2048 [ 120.044981][ T6027] EXT4-fs: Ignoring removed orlov option [ 120.077557][ T6027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.158942][ T6042] random: crng reseeded on system resumption [ 120.215283][ T6042] validate_nla: 4 callbacks suppressed [ 120.215373][ T6042] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 120.265304][ T6042] bond0: (slave dummy0): Releasing backup interface [ 120.283008][ T6044] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 120.300988][ T6042] team0: Port device dummy0 added [ 120.327619][ T6044] team0: Port device dummy0 removed [ 120.343748][ T6040] loop2: detected capacity change from 0 to 2048 [ 120.346388][ T6044] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.360550][ T6040] EXT4-fs: Ignoring removed orlov option [ 120.381932][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.405395][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.691671][ T6056] loop1: detected capacity change from 0 to 2048 [ 120.733413][ T6056] EXT4-fs: Ignoring removed orlov option [ 120.778210][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.790384][ T6056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.106218][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.313486][ T6069] loop1: detected capacity change from 0 to 512 [ 121.320536][ T6069] EXT4-fs: Ignoring removed nobh option [ 121.335963][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.983: corrupted inode contents [ 121.414450][ T6069] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.983: mark_inode_dirty error [ 121.460016][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.983: corrupted inode contents [ 121.496894][ T6069] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.983: mark_inode_dirty error [ 121.518020][ T6083] random: crng reseeded on system resumption [ 121.528641][ T6069] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.983: Failed to acquire dquot type 0 [ 121.548064][ T6083] netlink: 'syz.4.989': attribute type 10 has an invalid length. [ 121.567374][ T6083] bond0: (slave dummy0): Releasing backup interface [ 121.583650][ T6083] team0: Port device dummy0 added [ 121.590403][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.983: corrupted inode contents [ 121.603152][ T6086] netlink: 'syz.4.989': attribute type 10 has an invalid length. [ 121.617102][ T6069] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.983: mark_inode_dirty error [ 121.635774][ T6086] team0: Port device dummy0 removed [ 121.641769][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.983: corrupted inode contents [ 121.672175][ T6069] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.983: mark_inode_dirty error [ 121.673976][ T6086] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.703801][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.983: corrupted inode contents [ 121.776997][ T6069] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 121.810642][ T6069] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.983: corrupted inode contents [ 121.828292][ T6069] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.983: mark_inode_dirty error [ 121.841714][ T6069] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 121.854900][ T6069] EXT4-fs (loop1): 1 truncate cleaned up [ 121.862331][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.878457][ T6069] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.024077][ T6090] loop4: detected capacity change from 0 to 2048 [ 122.031101][ T6090] EXT4-fs: Ignoring removed orlov option [ 122.049007][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.138836][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.204531][ T6113] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1000'. [ 122.219714][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.244491][ T6116] random: crng reseeded on system resumption [ 122.355699][ T6129] random: crng reseeded on system resumption [ 122.435863][ T6134] loop0: detected capacity change from 0 to 512 [ 122.475273][ T6134] EXT4-fs: Ignoring removed nobh option [ 122.476987][ T6135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6135 comm=syz.1.1009 [ 122.494823][ T6135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6135 comm=syz.1.1009 [ 122.535701][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1008: corrupted inode contents [ 122.562008][ T6134] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1008: mark_inode_dirty error [ 122.584294][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1008: corrupted inode contents [ 122.618095][ T6134] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1008: mark_inode_dirty error [ 122.689699][ T6134] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1008: Failed to acquire dquot type 0 [ 122.748064][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1008: corrupted inode contents [ 122.764826][ T6147] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1013'. [ 122.787422][ T6134] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1008: mark_inode_dirty error [ 122.799346][ T6150] random: crng reseeded on system resumption [ 122.844694][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1008: corrupted inode contents [ 122.873599][ T6151] loop1: detected capacity change from 0 to 2048 [ 122.890110][ T6134] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1008: mark_inode_dirty error [ 122.922743][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1008: corrupted inode contents [ 122.954561][ T6151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.968403][ T6134] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 122.978283][ T6134] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1008: corrupted inode contents [ 123.042057][ T6134] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1008: mark_inode_dirty error [ 123.067794][ T6156] !yz!: rxe_newlink: already configured on team_slave_0 [ 123.086006][ T6134] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 123.123582][ T6134] EXT4-fs (loop0): 1 truncate cleaned up [ 123.145333][ T6134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.163071][ T6134] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.286471][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.456804][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.522961][ T6171] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1022'. [ 123.618637][ T6181] random: crng reseeded on system resumption [ 123.784677][ T6189] blktrace: Concurrent blktraces are not allowed on loop7 [ 124.039044][ T6201] random: crng reseeded on system resumption [ 124.071041][ T6202] loop4: detected capacity change from 0 to 512 [ 124.078485][ T6201] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 124.105804][ T6202] EXT4-fs: Ignoring removed nobh option [ 124.119333][ T6201] team0: Port device dummy0 added [ 124.135678][ T6204] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 124.165644][ T6204] team0: Port device dummy0 removed [ 124.193421][ T6204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.236329][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1033: corrupted inode contents [ 124.265422][ T6202] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1033: mark_inode_dirty error [ 124.318976][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1033: corrupted inode contents [ 124.351945][ T6210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6210 comm=syz.0.1037 [ 124.364834][ T6210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6210 comm=syz.0.1037 [ 124.391723][ T6202] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1033: mark_inode_dirty error [ 124.404998][ T6202] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1033: Failed to acquire dquot type 0 [ 124.417063][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1033: corrupted inode contents [ 124.430343][ T6202] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1033: mark_inode_dirty error [ 124.442513][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1033: corrupted inode contents [ 124.455925][ T6202] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1033: mark_inode_dirty error [ 124.467742][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1033: corrupted inode contents [ 124.482802][ T6202] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 124.494544][ T6212] netlink: 664 bytes leftover after parsing attributes in process `syz.1.1038'. [ 124.504037][ T6202] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1033: corrupted inode contents [ 124.523887][ T6202] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1033: mark_inode_dirty error [ 124.544225][ T6202] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 124.564052][ T6202] EXT4-fs (loop4): 1 truncate cleaned up [ 124.570371][ T6202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.591564][ T6202] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.660830][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 124.660849][ T29] audit: type=1326 audit(1758670883.408:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.692889][ T29] audit: type=1326 audit(1758670883.408:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.717172][ T29] audit: type=1326 audit(1758670883.408:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.741190][ T29] audit: type=1326 audit(1758670883.408:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.765324][ T29] audit: type=1326 audit(1758670883.408:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.789379][ T29] audit: type=1326 audit(1758670883.408:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.813693][ T29] audit: type=1326 audit(1758670883.408:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.840142][ T29] audit: type=1326 audit(1758670883.408:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.864483][ T29] audit: type=1326 audit(1758670883.408:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c526eec9 code=0x7ffc0000 [ 124.976008][ T6228] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 124.985909][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.052986][ T29] audit: type=1326 audit(1758670883.788:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6230 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51039aeec9 code=0x7ffc0000 [ 125.188138][ T6236] loop4: detected capacity change from 0 to 128 [ 125.234574][ T6236] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 125.292532][ T6236] syz.4.1045: attempt to access beyond end of device [ 125.292532][ T6236] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 125.294635][ T6238] random: crng reseeded on system resumption [ 125.405313][ T6238] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 125.424010][ T388] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 125.438239][ T6238] bond0: (slave dummy0): Releasing backup interface [ 125.463679][ T6241] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 125.478624][ T6238] team0: Port device dummy0 added [ 125.522838][ T6240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6240 comm=syz.4.1050 [ 125.536132][ T6240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6240 comm=syz.4.1050 [ 125.552969][ T6241] team0: Port device dummy0 removed [ 125.560478][ T6241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.673138][ T6243] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1051'. [ 125.815506][ T6250] !yz!: rxe_newlink: already configured on team_slave_0 [ 125.842082][ T6254] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 125.989336][ T6255] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 126.041256][ T6254] bond0: (slave dummy0): Releasing backup interface [ 126.069327][ T6254] team0: Port device dummy0 added [ 126.142060][ T6255] team0: Port device dummy0 removed [ 126.166882][ T6255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.631250][ T6266] random: crng reseeded on system resumption [ 126.666093][ T6266] netlink: 'syz.1.1059': attribute type 10 has an invalid length. [ 126.736569][ T6277] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 126.755352][ T6273] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 126.763302][ T6277] : (slave dummy0): Releasing backup interface [ 126.787593][ T6277] team0: Port device dummy0 added [ 126.812142][ T3326] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 126.824227][ T3326] CPU: 1 UID: 0 PID: 3326 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.824312][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.824329][ T3326] Call Trace: [ 126.824336][ T3326] [ 126.824344][ T3326] __dump_stack+0x1d/0x30 [ 126.824365][ T3326] dump_stack_lvl+0xe8/0x140 [ 126.824386][ T3326] dump_stack+0x15/0x1b [ 126.824421][ T3326] dump_header+0x81/0x220 [ 126.824473][ T3326] oom_kill_process+0x342/0x400 [ 126.824512][ T3326] out_of_memory+0x979/0xb80 [ 126.824594][ T3326] try_charge_memcg+0x5e6/0x9e0 [ 126.824628][ T3326] charge_memcg+0x51/0xc0 [ 126.824649][ T3326] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 126.824672][ T3326] __read_swap_cache_async+0x1df/0x350 [ 126.824779][ T3326] swap_cluster_readahead+0x376/0x3e0 [ 126.824865][ T3326] swapin_readahead+0xde/0x6f0 [ 126.824901][ T3326] ? __filemap_get_folio+0x4f7/0x6b0 [ 126.824922][ T3326] ? swap_cache_get_folio+0x77/0x200 [ 126.825028][ T3326] do_swap_page+0x301/0x2430 [ 126.825052][ T3326] ? __set_next_task_fair+0x5b/0x150 [ 126.825142][ T3326] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 126.825221][ T3326] ? finish_task_switch+0xad/0x2b0 [ 126.825242][ T3326] ? __pfx_default_wake_function+0x10/0x10 [ 126.825272][ T3326] handle_mm_fault+0x9a5/0x2c20 [ 126.825376][ T3326] do_user_addr_fault+0x636/0x1090 [ 126.825413][ T3326] ? fpregs_restore_userregs+0xe2/0x1d0 [ 126.825452][ T3326] ? switch_fpu_return+0xe/0x20 [ 126.825560][ T3326] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.825635][ T3326] exc_page_fault+0x62/0xa0 [ 126.825671][ T3326] asm_exc_page_fault+0x26/0x30 [ 126.825696][ T3326] RIP: 0033:0x7f641b081745 [ 126.825716][ T3326] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 126.825735][ T3326] RSP: 002b:00007ffe6ddd1d38 EFLAGS: 00010246 [ 126.825763][ T3326] RAX: 0000000000000000 RBX: 000000000000021f RCX: 00007f641b081743 [ 126.825784][ T3326] RDX: 00007ffe6ddd1d50 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.825834][ T3326] RBP: 00007ffe6ddd1dbc R08: 0000000027f42f8f R09: 0000000000000000 [ 126.825846][ T3326] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 126.825858][ T3326] R13: 00000000000927c0 R14: 000000000001eb79 R15: 00007ffe6ddd1e10 [ 126.825881][ T3326] [ 126.825895][ T3326] memory: usage 307200kB, limit 307200kB, failcnt 173 [ 126.837331][ T6282] loop0: detected capacity change from 0 to 2048 [ 126.849241][ T3326] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 126.849277][ T3326] kmem: usage 307024kB, limit 9007199254740988kB, failcnt 0 [ 126.863230][ T6283] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 126.865789][ T3326] Memory cgroup stats for /syz4: [ 127.122659][ T3326] cache 180224 [ 127.131952][ T3326] rss 0 [ 127.135070][ T3326] shmem 0 [ 127.138381][ T3326] mapped_file 0 [ 127.142736][ T3326] dirty 0 [ 127.145984][ T3326] writeback 0 [ 127.146427][ T6282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.149922][ T3326] workingset_refault_anon 277 [ 127.149936][ T3326] workingset_refault_file 2818 [ 127.176145][ T3326] swap 208896 [ 127.180033][ T3326] swapcached 0 [ 127.184311][ T3326] pgpgin 37624 [ 127.187963][ T3326] pgpgout 37580 [ 127.191706][ T3326] pgfault 44654 [ 127.195535][ T3326] pgmajfault 952 [ 127.199723][ T3326] inactive_anon 0 [ 127.203821][ T3326] active_anon 0 [ 127.207844][ T3326] inactive_file 0 [ 127.212203][ T3326] active_file 180224 [ 127.217398][ T3326] unevictable 0 [ 127.221035][ T3326] hierarchical_memory_limit 314572800 [ 127.226894][ T3326] hierarchical_memsw_limit 9223372036854771712 [ 127.233542][ T3326] total_cache 180224 [ 127.238237][ T3326] total_rss 0 [ 127.241891][ T3326] total_shmem 0 [ 127.245638][ T3326] total_mapped_file 0 [ 127.249926][ T3326] total_dirty 0 [ 127.253694][ T3326] total_writeback 0 [ 127.258091][ T3326] total_workingset_refault_anon 277 [ 127.263612][ T3326] total_workingset_refault_file 2818 [ 127.269246][ T3326] total_swap 208896 [ 127.273298][ T3326] total_swapcached 0 [ 127.277205][ T3326] total_pgpgin 37624 [ 127.281120][ T3326] total_pgpgout 37580 [ 127.285531][ T3326] total_pgfault 44654 [ 127.289709][ T3326] total_pgmajfault 952 [ 127.294004][ T3326] total_inactive_anon 0 [ 127.298595][ T3326] total_active_anon 0 [ 127.303006][ T3326] total_inactive_file 0 [ 127.308338][ T3326] total_active_file 180224 [ 127.313084][ T3326] total_unevictable 0 [ 127.317383][ T3326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1054,pid=6248,uid=0 [ 127.333498][ T3326] Memory cgroup out of memory: Killed process 6248 (syz.4.1054) total-vm:96004kB, anon-rss:128kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 127.353529][ T6283] team0: Port device dummy0 removed [ 127.367516][ T6283] : (slave dummy0): Enslaving as an active interface with an up link [ 127.537899][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.630582][ T6300] random: crng reseeded on system resumption [ 127.643761][ T6296] random: crng reseeded on system resumption [ 127.769592][ T6313] random: crng reseeded on system resumption [ 127.791493][ T6313] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 127.803484][ T6313] bond0: (slave dummy0): Releasing backup interface [ 127.813696][ T6314] blktrace: Concurrent blktraces are not allowed on loop7 [ 127.814827][ T6313] team0: Port device dummy0 added [ 127.844212][ T6313] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 127.872354][ T6313] team0: Port device dummy0 removed [ 127.884583][ T6313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.907967][ T6314] loop3: detected capacity change from 0 to 2048 [ 127.924092][ T6314] EXT4-fs: Ignoring removed orlov option [ 127.958139][ T6323] random: crng reseeded on system resumption [ 127.973807][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.127643][ T6330] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.243191][ T6339] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.296505][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.359001][ T6344] random: crng reseeded on system resumption [ 129.028923][ T6370] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1103'. [ 129.066765][ T6366] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 129.106070][ T6372] random: crng reseeded on system resumption [ 129.148058][ T6379] random: crng reseeded on system resumption [ 129.336182][ T6394] random: crng reseeded on system resumption [ 129.389183][ T6395] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 129.689330][ T6414] random: crng reseeded on system resumption [ 130.043355][ T6425] loop2: detected capacity change from 0 to 2048 [ 130.065193][ T6425] EXT4-fs: Ignoring removed orlov option [ 130.111536][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 130.111617][ T29] audit: type=1326 audit(1758670888.858:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.178507][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.191524][ T29] audit: type=1326 audit(1758670888.908:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.215622][ T29] audit: type=1326 audit(1758670888.908:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.239813][ T29] audit: type=1326 audit(1758670888.908:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.263974][ T29] audit: type=1326 audit(1758670888.908:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.289609][ T29] audit: type=1326 audit(1758670888.908:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.315438][ T29] audit: type=1326 audit(1758670888.908:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.342659][ T29] audit: type=1326 audit(1758670888.908:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.368573][ T29] audit: type=1326 audit(1758670888.908:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.395171][ T29] audit: type=1326 audit(1758670888.908:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 130.452509][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.547757][ T6442] random: crng reseeded on system resumption [ 130.627593][ T6450] validate_nla: 3 callbacks suppressed [ 130.627683][ T6450] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 130.660031][ T6450] bond0: (slave dummy0): Releasing backup interface [ 130.670653][ T6450] team0: Port device dummy0 added [ 130.678210][ T6450] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 130.690086][ T6450] team0: Port device dummy0 removed [ 130.699643][ T6450] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.716553][ T6454] loop2: detected capacity change from 0 to 512 [ 130.747893][ T6454] EXT4-fs: Ignoring removed nobh option [ 130.783001][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1139: corrupted inode contents [ 130.829100][ T6454] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1139: mark_inode_dirty error [ 130.882644][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1139: corrupted inode contents [ 130.928240][ T6454] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1139: mark_inode_dirty error [ 130.987494][ T6454] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1139: Failed to acquire dquot type 0 [ 131.017859][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 131.047069][ T6454] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1139: mark_inode_dirty error [ 131.060461][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 131.090310][ T6454] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1139: mark_inode_dirty error [ 131.104712][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 131.137634][ T6454] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 131.159635][ T6454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 131.211625][ T6454] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1139: mark_inode_dirty error [ 131.228836][ T6454] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 131.270188][ T6454] EXT4-fs (loop2): 1 truncate cleaned up [ 131.284321][ T6454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.304138][ T6454] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.401915][ T6473] loop4: detected capacity change from 0 to 128 [ 131.412013][ T6473] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.471935][ T6480] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.502628][ T6473] syz.4.1146: attempt to access beyond end of device [ 131.502628][ T6473] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 131.597323][ T335] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.627878][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.667717][ T6489] loop4: detected capacity change from 0 to 512 [ 131.675254][ T6489] EXT4-fs: Ignoring removed nobh option [ 131.718154][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1151: corrupted inode contents [ 131.732481][ T6489] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1151: mark_inode_dirty error [ 131.803004][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1151: corrupted inode contents [ 131.817374][ T6489] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1151: mark_inode_dirty error [ 131.830591][ T6489] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1151: Failed to acquire dquot type 0 [ 131.844105][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1151: corrupted inode contents [ 131.857675][ T6489] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1151: mark_inode_dirty error [ 131.896309][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1151: corrupted inode contents [ 131.911386][ T6489] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1151: mark_inode_dirty error [ 131.924439][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1151: corrupted inode contents [ 131.939678][ T6489] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 131.950126][ T6489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1151: corrupted inode contents [ 131.995038][ T6489] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1151: mark_inode_dirty error [ 132.008644][ T6489] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 132.025593][ T6489] EXT4-fs (loop4): 1 truncate cleaned up [ 132.032431][ T6489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.073749][ T6507] netlink: 'syz.2.1159': attribute type 10 has an invalid length. [ 132.085053][ T6507] : (slave dummy0): Releasing backup interface [ 132.105115][ T6507] team0: Port device dummy0 added [ 132.118438][ T6507] netlink: 'syz.2.1159': attribute type 10 has an invalid length. [ 132.137124][ T6489] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.146758][ T6471] syz.3.1145 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 132.164424][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.3.1145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.164466][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.164481][ T6471] Call Trace: [ 132.164489][ T6471] [ 132.164516][ T6471] __dump_stack+0x1d/0x30 [ 132.164540][ T6471] dump_stack_lvl+0xe8/0x140 [ 132.164562][ T6471] dump_stack+0x15/0x1b [ 132.164580][ T6471] dump_header+0x81/0x220 [ 132.164616][ T6471] oom_kill_process+0x342/0x400 [ 132.164678][ T6471] out_of_memory+0x979/0xb80 [ 132.164716][ T6471] try_charge_memcg+0x5e6/0x9e0 [ 132.164795][ T6471] obj_cgroup_charge_pages+0xa6/0x150 [ 132.164869][ T6471] __memcg_kmem_charge_page+0x9f/0x170 [ 132.164906][ T6471] __alloc_frozen_pages_noprof+0x188/0x360 [ 132.164948][ T6471] alloc_pages_mpol+0xb3/0x250 [ 132.165033][ T6471] alloc_pages_noprof+0x90/0x130 [ 132.165070][ T6471] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 132.165120][ T6471] __kvmalloc_node_noprof+0x30f/0x4e0 [ 132.165195][ T6471] ? ip_set_alloc+0x1f/0x30 [ 132.165218][ T6471] ? ip_set_alloc+0x1f/0x30 [ 132.165336][ T6471] ? __kmalloc_cache_noprof+0x189/0x320 [ 132.165371][ T6471] ip_set_alloc+0x1f/0x30 [ 132.165395][ T6471] hash_netiface_create+0x282/0x740 [ 132.165424][ T6471] ? __pfx_hash_netiface_create+0x10/0x10 [ 132.165449][ T6471] ip_set_create+0x3cc/0x960 [ 132.165560][ T6471] ? __nla_parse+0x40/0x60 [ 132.165636][ T6471] nfnetlink_rcv_msg+0x4c6/0x590 [ 132.165679][ T6471] netlink_rcv_skb+0x120/0x220 [ 132.165758][ T6471] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.165786][ T6471] nfnetlink_rcv+0x16b/0x1690 [ 132.165809][ T6471] ? nlmon_xmit+0x4f/0x60 [ 132.165915][ T6471] ? consume_skb+0x49/0x150 [ 132.165941][ T6471] ? nlmon_xmit+0x4f/0x60 [ 132.165973][ T6471] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 132.166004][ T6471] ? __dev_queue_xmit+0x1200/0x2000 [ 132.166033][ T6471] ? __dev_queue_xmit+0x182/0x2000 [ 132.166111][ T6471] ? ref_tracker_free+0x37d/0x3e0 [ 132.166169][ T6471] ? __netlink_deliver_tap+0x4dc/0x500 [ 132.166206][ T6471] netlink_unicast+0x5c0/0x690 [ 132.166236][ T6471] netlink_sendmsg+0x58b/0x6b0 [ 132.166267][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.166339][ T6471] __sock_sendmsg+0x145/0x180 [ 132.166377][ T6471] ____sys_sendmsg+0x31e/0x4e0 [ 132.166413][ T6471] ___sys_sendmsg+0x17b/0x1d0 [ 132.166497][ T6471] __x64_sys_sendmsg+0xd4/0x160 [ 132.166531][ T6471] x64_sys_call+0x191e/0x2ff0 [ 132.166555][ T6471] do_syscall_64+0xd2/0x200 [ 132.166605][ T6471] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.166633][ T6471] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.166666][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.166690][ T6471] RIP: 0033:0x7f51039aeec9 [ 132.166744][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.166763][ T6471] RSP: 002b:00007f5102417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.166841][ T6471] RAX: ffffffffffffffda RBX: 00007f5103c05fa0 RCX: 00007f51039aeec9 [ 132.166854][ T6471] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 132.166867][ T6471] RBP: 00007f5103a31f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.166880][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.166924][ T6471] R13: 00007f5103c06038 R14: 00007f5103c05fa0 R15: 00007ffdadb328c8 [ 132.166945][ T6471] [ 132.166952][ T6471] memory: usage 307200kB, limit 307200kB, failcnt 783 [ 132.536018][ T6471] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 132.545319][ T6471] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 132.554207][ T6471] Memory cgroup stats for /syz3: [ 132.554935][ T6507] team0: Port device dummy0 removed [ 132.587436][ T6507] : (slave dummy0): Enslaving as an active interface with an up link [ 132.606466][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.629197][ T6471] cache 0 [ 132.633913][ T6471] rss 0 [ 132.637114][ T6471] shmem 0 [ 132.640610][ T6471] mapped_file 0 [ 132.644976][ T6471] dirty 0 [ 132.648409][ T6471] writeback 0 [ 132.652010][ T6471] workingset_refault_anon 416 [ 132.656977][ T6471] workingset_refault_file 4124 [ 132.662040][ T6471] swap 208896 [ 132.665813][ T6471] swapcached 8192 [ 132.669946][ T6471] pgpgin 40476 [ 132.673587][ T6471] pgpgout 40474 [ 132.677103][ T6471] pgfault 44806 [ 132.680661][ T6471] pgmajfault 974 [ 132.684297][ T6471] inactive_anon 0 [ 132.688053][ T6471] active_anon 8192 [ 132.691813][ T6471] inactive_file 0 [ 132.695609][ T6471] active_file 0 [ 132.699439][ T6471] unevictable 0 [ 132.703262][ T6471] hierarchical_memory_limit 314572800 [ 132.709121][ T6471] hierarchical_memsw_limit 9223372036854771712 [ 132.715373][ T6471] total_cache 0 [ 132.719201][ T6471] total_rss 0 [ 132.722895][ T6471] total_shmem 0 [ 132.726513][ T6471] total_mapped_file 0 [ 132.731257][ T6471] total_dirty 0 [ 132.735423][ T6471] total_writeback 0 [ 132.739694][ T6471] total_workingset_refault_anon 416 [ 132.746545][ T6471] total_workingset_refault_file 4124 [ 132.752328][ T6471] total_swap 208896 [ 132.756320][ T6471] total_swapcached 8192 [ 132.760684][ T6471] total_pgpgin 40481 [ 132.764651][ T6471] total_pgpgout 40479 [ 132.768813][ T6471] total_pgfault 44811 [ 132.773184][ T6471] total_pgmajfault 974 [ 132.777636][ T6471] total_inactive_anon 0 [ 132.782165][ T6471] total_active_anon 8192 [ 132.786564][ T6471] total_inactive_file 0 [ 132.790738][ T6471] total_active_file 0 [ 132.791067][ T6511] loop2: detected capacity change from 0 to 128 [ 132.795259][ T6471] total_unevictable 0 [ 132.795275][ T6471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1145,pid=6470,uid=0 [ 132.822706][ T6511] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 132.823919][ T6471] Memory cgroup out of memory: Killed process 6470 (syz.3.1145) total-vm:94088kB, anon-rss:0kB, file-rss:21588kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 132.926007][ T6511] syz.2.1161: attempt to access beyond end of device [ 132.926007][ T6511] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 132.980298][ T388] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 133.057621][ T6523] random: crng reseeded on system resumption [ 133.070789][ T6525] loop2: detected capacity change from 0 to 512 [ 133.078209][ T6525] EXT4-fs: Ignoring removed nobh option [ 133.093309][ T6523] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 133.116383][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1167: corrupted inode contents [ 133.129199][ T6523] bond0: (slave dummy0): Releasing backup interface [ 133.136937][ T6525] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1167: mark_inode_dirty error [ 133.153485][ T6531] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 133.174815][ T6523] team0: Port device dummy0 added [ 133.191892][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1167: corrupted inode contents [ 133.215149][ T6531] team0: Port device dummy0 removed [ 133.221555][ T6525] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1167: mark_inode_dirty error [ 133.241498][ T6531] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.257609][ T6525] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1167: Failed to acquire dquot type 0 [ 133.270464][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1167: corrupted inode contents [ 133.305322][ T6525] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1167: mark_inode_dirty error [ 133.327007][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1167: corrupted inode contents [ 133.372566][ T6539] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 133.384547][ T6539] bond0: (slave dummy0): Releasing backup interface [ 133.384988][ T6525] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1167: mark_inode_dirty error [ 133.406724][ T6539] team0: Port device dummy0 added [ 133.416925][ T6539] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 133.448142][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1167: corrupted inode contents [ 133.460923][ T6539] team0: Port device dummy0 removed [ 133.468309][ T6525] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 133.470314][ T6539] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.481805][ T6525] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1167: corrupted inode contents [ 133.515049][ T6525] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1167: mark_inode_dirty error [ 133.526787][ T6525] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 133.543778][ T6525] EXT4-fs (loop2): 1 truncate cleaned up [ 133.550969][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.576926][ T6525] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.622303][ T6548] random: crng reseeded on system resumption [ 133.679009][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.949147][ T6565] !yz!: rxe_newlink: already configured on team_slave_0 [ 134.159362][ T6573] random: crng reseeded on system resumption [ 134.178349][ T6577] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 134.207706][ T6575] blktrace: Concurrent blktraces are not allowed on loop3 [ 134.228202][ T6578] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 134.247364][ T6577] : (slave dummy0): Releasing backup interface [ 134.268250][ T6575] loop1: detected capacity change from 0 to 2048 [ 134.281845][ T6577] team0: Port device dummy0 added [ 134.294015][ T6575] EXT4-fs: Ignoring removed orlov option [ 134.300646][ T6578] team0: Port device dummy0 removed [ 134.367009][ T6578] : (slave dummy0): Enslaving as an active interface with an up link [ 134.399715][ T6573] bond0: (slave dummy0): Releasing backup interface [ 134.410754][ T6573] team0: Port device dummy0 added [ 134.427424][ T6579] team0: Port device dummy0 removed [ 134.436543][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.473373][ T6579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.558944][ T6585] random: crng reseeded on system resumption [ 134.692317][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.905803][ T6607] bond0: (slave dummy0): Releasing backup interface [ 134.919261][ T6607] team0: Port device dummy0 added [ 134.929537][ T6610] random: crng reseeded on system resumption [ 134.955368][ T6607] team0: Port device dummy0 removed [ 134.980193][ T6607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.007756][ T6615] random: crng reseeded on system resumption [ 135.029872][ T6615] bond0: (slave dummy0): Releasing backup interface [ 135.040497][ T6615] team0: Port device dummy0 added [ 135.064908][ T6615] team0: Port device dummy0 removed [ 135.072801][ T6615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.118759][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 135.118797][ T29] audit: type=1400 audit(1758670893.868:5066): avc: denied { getopt } for pid=6618 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.183192][ T29] audit: type=1326 audit(1758670893.918:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.209975][ T29] audit: type=1326 audit(1758670893.918:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.235727][ T29] audit: type=1326 audit(1758670893.918:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.260599][ T29] audit: type=1326 audit(1758670893.918:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.285715][ T29] audit: type=1326 audit(1758670893.918:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.312748][ T29] audit: type=1326 audit(1758670893.918:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.346814][ T29] audit: type=1326 audit(1758670893.918:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.377359][ T29] audit: type=1326 audit(1758670893.918:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.406841][ T29] audit: type=1326 audit(1758670893.918:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f641b04eec9 code=0x7ffc0000 [ 135.612184][ T6645] random: crng reseeded on system resumption [ 135.703085][ T6636] !yz!: rxe_newlink: already configured on team_slave_0 [ 135.766640][ T6652] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1214'. [ 135.888191][ T6656] FAULT_INJECTION: forcing a failure. [ 135.888191][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 135.902623][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.3.1217 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.902707][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.902719][ T6656] Call Trace: [ 135.902727][ T6656] [ 135.902735][ T6656] __dump_stack+0x1d/0x30 [ 135.902804][ T6656] dump_stack_lvl+0xe8/0x140 [ 135.902827][ T6656] dump_stack+0x15/0x1b [ 135.902850][ T6656] should_fail_ex+0x265/0x280 [ 135.902879][ T6656] should_failslab+0x8c/0xb0 [ 135.902955][ T6656] kmem_cache_alloc_noprof+0x50/0x310 [ 135.903035][ T6656] ? ep_insert+0x2cf/0xdb0 [ 135.903071][ T6656] ep_insert+0x2cf/0xdb0 [ 135.903141][ T6656] ? security_capable+0x83/0x90 [ 135.903240][ T6656] do_epoll_ctl+0x686/0x8a0 [ 135.903271][ T6656] __x64_sys_epoll_ctl+0xcb/0x100 [ 135.903305][ T6656] x64_sys_call+0x706/0x2ff0 [ 135.903326][ T6656] do_syscall_64+0xd2/0x200 [ 135.903443][ T6656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.903471][ T6656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.903505][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.903530][ T6656] RIP: 0033:0x7f51039aeec9 [ 135.903549][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.903645][ T6656] RSP: 002b:00007f5102417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 135.903663][ T6656] RAX: ffffffffffffffda RBX: 00007f5103c05fa0 RCX: 00007f51039aeec9 [ 135.903676][ T6656] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 135.903691][ T6656] RBP: 00007f5102417090 R08: 0000000000000000 R09: 0000000000000000 [ 135.903706][ T6656] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 135.903723][ T6656] R13: 00007f5103c06038 R14: 00007f5103c05fa0 R15: 00007ffdadb328c8 [ 135.903747][ T6656] [ 136.387824][ T6668] mmap: syz.4.1221 (6668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.483217][ T6680] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1227'. [ 136.544439][ T6690] validate_nla: 6 callbacks suppressed [ 136.544458][ T6690] netlink: 'syz.0.1232': attribute type 10 has an invalid length. [ 136.590765][ T6690] bond0: (slave dummy0): Releasing backup interface [ 136.601924][ T6690] team0: Port device dummy0 added [ 136.629411][ T6690] netlink: 'syz.0.1232': attribute type 10 has an invalid length. [ 136.657533][ T6690] team0: Port device dummy0 removed [ 136.676312][ T6690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.703127][ T6701] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 136.762992][ T6698] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 136.788961][ T6701] bond0: (slave dummy0): Releasing backup interface [ 136.823734][ T6701] team0: Port device dummy0 added [ 136.954840][ T6698] team0: Port device dummy0 removed [ 137.006165][ T6698] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.057231][ T6714] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1242'. [ 137.134100][ T6716] random: crng reseeded on system resumption [ 137.208253][ T6716] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 137.242557][ T6716] bond0: (slave dummy0): Releasing backup interface [ 137.273977][ T6721] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 137.279700][ T6716] team0: Port device dummy0 added [ 137.313205][ T6721] team0: Port device dummy0 removed [ 137.335136][ T6721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.459756][ T6737] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1253'. [ 137.596000][ T6750] random: crng reseeded on system resumption [ 137.734148][ T6755] FAULT_INJECTION: forcing a failure. [ 137.734148][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 137.747131][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.4.1261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.747160][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.747174][ T6755] Call Trace: [ 137.747181][ T6755] [ 137.747190][ T6755] __dump_stack+0x1d/0x30 [ 137.747261][ T6755] dump_stack_lvl+0xe8/0x140 [ 137.747282][ T6755] dump_stack+0x15/0x1b [ 137.747300][ T6755] should_fail_ex+0x265/0x280 [ 137.747326][ T6755] should_failslab+0x8c/0xb0 [ 137.747354][ T6755] __kmalloc_noprof+0xa5/0x3e0 [ 137.747404][ T6755] ? io_alloc_ocqe+0x51/0x250 [ 137.747431][ T6755] ? __fget_files+0x184/0x1c0 [ 137.747518][ T6755] io_alloc_ocqe+0x51/0x250 [ 137.747547][ T6755] io_cqe_overflow_locked+0x26/0x40 [ 137.747622][ T6755] __io_submit_flush_completions+0x258/0xa00 [ 137.747718][ T6755] ? __pfx_io_rw_fail+0x10/0x10 [ 137.747744][ T6755] ? io_queue_async+0x232/0x450 [ 137.747814][ T6755] io_submit_sqes+0xec8/0x1060 [ 137.747847][ T6755] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 137.747876][ T6755] ? 0xffffffff81000000 [ 137.747890][ T6755] ? __rcu_read_unlock+0x4f/0x70 [ 137.747913][ T6755] ? get_pid_task+0x96/0xd0 [ 137.748003][ T6755] ? proc_fail_nth_write+0x13b/0x160 [ 137.748035][ T6755] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.748064][ T6755] ? vfs_write+0x7e8/0x960 [ 137.748161][ T6755] ? __rcu_read_unlock+0x4f/0x70 [ 137.748183][ T6755] ? __fget_files+0x184/0x1c0 [ 137.748210][ T6755] ? fput+0x8f/0xc0 [ 137.748243][ T6755] __x64_sys_io_uring_enter+0x78/0x90 [ 137.748349][ T6755] x64_sys_call+0x2de1/0x2ff0 [ 137.748374][ T6755] do_syscall_64+0xd2/0x200 [ 137.748462][ T6755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.748547][ T6755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.748579][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.748602][ T6755] RIP: 0033:0x7f641b04eec9 [ 137.748684][ T6755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.748703][ T6755] RSP: 002b:00007f6419aaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.748723][ T6755] RAX: ffffffffffffffda RBX: 00007f641b2a5fa0 RCX: 00007f641b04eec9 [ 137.748736][ T6755] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 137.748788][ T6755] RBP: 00007f6419aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 137.748800][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.748812][ T6755] R13: 00007f641b2a6038 R14: 00007f641b2a5fa0 R15: 00007ffe6ddd19f8 [ 137.748832][ T6755] [ 138.103010][ T6765] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1266'. [ 138.343557][ T6774] random: crng reseeded on system resumption [ 138.380878][ T6777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6777 comm=syz.0.1271 [ 138.394797][ T6777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6777 comm=syz.0.1271 [ 138.460703][ T6779] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 138.500256][ T6779] bond0: (slave dummy0): Releasing backup interface [ 138.510880][ T6781] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 138.525095][ T6779] team0: Port device dummy0 added [ 138.551074][ T6781] team0: Port device dummy0 removed [ 138.584054][ T6781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.704942][ T6793] netlink: 664 bytes leftover after parsing attributes in process `syz.1.1278'. [ 138.941196][ T6804] loop1: detected capacity change from 0 to 2048 [ 138.954996][ T6805] !yz!: rxe_newlink: already configured on team_slave_0 [ 139.001212][ T6804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.156005][ T6696] ================================================================== [ 139.165708][ T6696] BUG: KCSAN: data-race in try_to_compact_pages / try_to_compact_pages [ 139.174367][ T6696] [ 139.176828][ T6696] read-write to 0xffff88823fffacf0 of 4 bytes by task 6757 on cpu 1: [ 139.185522][ T6696] try_to_compact_pages+0x1be/0x940 [ 139.190843][ T6696] __alloc_pages_direct_compact+0x65/0x1d0 [ 139.196688][ T6696] __alloc_pages_slowpath+0x360/0x5f0 [ 139.202618][ T6696] __alloc_frozen_pages_noprof+0x270/0x360 [ 139.208551][ T6696] alloc_pages_mpol+0xb3/0x250 [ 139.214232][ T6696] alloc_frozen_pages_noprof+0x90/0x110 [ 139.220949][ T6696] ___kmalloc_large_node+0x52/0x100 [ 139.226207][ T6696] __kmalloc_large_node_noprof+0x16/0xa0 [ 139.232121][ T6696] __kmalloc_noprof+0x2ab/0x3e0 [ 139.237425][ T6696] io_import_reg_vec+0x645/0xe80 [ 139.243036][ T6696] io_sendmsg_zc+0x91/0x550 [ 139.247772][ T6696] __io_issue_sqe+0xfb/0x2e0 [ 139.252479][ T6696] io_issue_sqe+0x53/0x970 [ 139.257463][ T6696] io_submit_sqes+0x675/0x1060 [ 139.262840][ T6696] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 139.268852][ T6696] __x64_sys_io_uring_enter+0x78/0x90 [ 139.274887][ T6696] x64_sys_call+0x2de1/0x2ff0 [ 139.279888][ T6696] do_syscall_64+0xd2/0x200 [ 139.284674][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.291138][ T6696] [ 139.293656][ T6696] write to 0xffff88823fffacf0 of 4 bytes by task 6696 on cpu 0: [ 139.302102][ T6696] try_to_compact_pages+0x207/0x940 [ 139.309021][ T6696] __alloc_pages_direct_compact+0x65/0x1d0 [ 139.315645][ T6696] __alloc_pages_slowpath+0x360/0x5f0 [ 139.321187][ T6696] __alloc_frozen_pages_noprof+0x270/0x360 [ 139.327996][ T6696] alloc_pages_mpol+0xb3/0x250 [ 139.333641][ T6696] alloc_frozen_pages_noprof+0x90/0x110 [ 139.340092][ T6696] ___kmalloc_large_node+0x52/0x100 [ 139.345689][ T6696] __kmalloc_large_node_noprof+0x16/0xa0 [ 139.352244][ T6696] __kmalloc_noprof+0x2ab/0x3e0 [ 139.357932][ T6696] io_import_reg_vec+0x645/0xe80 [ 139.363357][ T6696] io_sendmsg_zc+0x91/0x550 [ 139.368811][ T6696] __io_issue_sqe+0xfb/0x2e0 [ 139.373640][ T6696] io_issue_sqe+0x53/0x970 [ 139.381110][ T6696] io_submit_sqes+0x675/0x1060 [ 139.386262][ T6696] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 139.392457][ T6696] __x64_sys_io_uring_enter+0x78/0x90 [ 139.400332][ T6696] x64_sys_call+0x2de1/0x2ff0 [ 139.406053][ T6696] do_syscall_64+0xd2/0x200 [ 139.412261][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.420027][ T6696] [ 139.422474][ T6696] value changed: 0x00000005 -> 0x00000004 [ 139.429242][ T6696] [ 139.431848][ T6696] Reported by Kernel Concurrency Sanitizer on: [ 139.439023][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.2.1234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.449293][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.461176][ T6696] ================================================================== [ 139.734223][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.025301][ T6802] syz.4.1282: vmalloc error: size 1073745920, failed to allocated page array size 2097160, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 140.046990][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.047024][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.047040][ T6802] Call Trace: [ 140.047048][ T6802] [ 140.047058][ T6802] __dump_stack+0x1d/0x30 [ 140.047123][ T6802] dump_stack_lvl+0xe8/0x140 [ 140.047147][ T6802] dump_stack+0x15/0x1b [ 140.047193][ T6802] warn_alloc+0x12b/0x1a0 [ 140.047297][ T6802] ? ip_set_alloc+0x1f/0x30 [ 140.047319][ T6802] __vmalloc_node_range_noprof+0x497/0xe00 [ 140.047367][ T6802] __kvmalloc_node_noprof+0x30f/0x4e0 [ 140.047473][ T6802] ? ip_set_alloc+0x1f/0x30 [ 140.047508][ T6802] ? ip_set_alloc+0x1f/0x30 [ 140.047533][ T6802] ? __kmalloc_cache_noprof+0x189/0x320 [ 140.047563][ T6802] ip_set_alloc+0x1f/0x30 [ 140.047587][ T6802] hash_netiface_create+0x282/0x740 [ 140.047667][ T6802] ? __pfx_hash_netiface_create+0x10/0x10 [ 140.047698][ T6802] ip_set_create+0x3cc/0x960 [ 140.047742][ T6802] ? __nla_parse+0x40/0x60 [ 140.047777][ T6802] nfnetlink_rcv_msg+0x4c6/0x590 [ 140.047864][ T6802] netlink_rcv_skb+0x120/0x220 [ 140.047895][ T6802] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.047998][ T6802] nfnetlink_rcv+0x16b/0x1690 [ 140.048018][ T6802] ? nlmon_xmit+0x4f/0x60 [ 140.048049][ T6802] ? consume_skb+0x49/0x150 [ 140.048072][ T6802] ? nlmon_xmit+0x4f/0x60 [ 140.048159][ T6802] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 140.048196][ T6802] ? __dev_queue_xmit+0x1200/0x2000 [ 140.048231][ T6802] ? __dev_queue_xmit+0x182/0x2000 [ 140.048267][ T6802] ? ref_tracker_free+0x37d/0x3e0 [ 140.048332][ T6802] ? __netlink_deliver_tap+0x4dc/0x500 [ 140.048370][ T6802] netlink_unicast+0x5c0/0x690 [ 140.048423][ T6802] netlink_sendmsg+0x58b/0x6b0 [ 140.048452][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.048486][ T6802] __sock_sendmsg+0x145/0x180 [ 140.048527][ T6802] ____sys_sendmsg+0x31e/0x4e0 [ 140.048640][ T6802] ___sys_sendmsg+0x17b/0x1d0 [ 140.048687][ T6802] __x64_sys_sendmsg+0xd4/0x160 [ 140.048718][ T6802] x64_sys_call+0x191e/0x2ff0 [ 140.048773][ T6802] do_syscall_64+0xd2/0x200 [ 140.048807][ T6802] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.048830][ T6802] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.048920][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.049019][ T6802] RIP: 0033:0x7f641b04eec9 [ 140.049036][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.049058][ T6802] RSP: 002b:00007f6419aaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.049076][ T6802] RAX: ffffffffffffffda RBX: 00007f641b2a5fa0 RCX: 00007f641b04eec9 [ 140.049090][ T6802] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 140.049105][ T6802] RBP: 00007f641b0d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.049119][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.049130][ T6802] R13: 00007f641b2a6038 R14: 00007f641b2a5fa0 R15: 00007ffe6ddd19f8 [ 140.049203][ T6802] [ 140.049211][ T6802] Mem-Info: [ 140.396057][ T6802] active_anon:38 inactive_anon:39 isolated_anon:0 [ 140.396057][ T6802] active_file:653 inactive_file:132 isolated_file:0 [ 140.396057][ T6802] unevictable:0 dirty:4 writeback:2 [ 140.396057][ T6802] slab_reclaimable:1960 slab_unreclaimable:651150 [ 140.396057][ T6802] mapped:25984 shmem:0 pagetables:1140 [ 140.396057][ T6802] sec_pagetables:0 bounce:0 [ 140.396057][ T6802] kernel_misc_reclaimable:0 [ 140.396057][ T6802] free:1270307 free_pcp:179 free_cma:0 [ 140.457327][ T6802] Node 0 active_anon:152kB inactive_anon:156kB active_file:3772kB inactive_file:528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104632kB dirty:16kB writeback:8kB shmem:0kB kernel_stack:3168kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.484932][ T6802] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.515249][ T6802] lowmem_reserve[]: 0 2883 7862 7862 [ 140.520708][ T6802] Node 0 DMA32 free:1510968kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.550885][ T6802] lowmem_reserve[]: 0 0 4978 4978 [ 140.556112][ T6802] Node 0 Normal free:3084932kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:268kB inactive_anon:156kB active_file:4352kB inactive_file:528kB unevictable:0kB writepending:24kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:1860kB local_pcp:0kB free_cma:0kB [ 140.588309][ T6802] lowmem_reserve[]: 0 0 0 0 [ 140.593291][ T6802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.606732][ T6802] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 4*1024kB (M) 4*2048kB (M) 365*4096kB (UM) = 1511028kB [ 140.623824][ T6802] Node 0 Normal: 394*4kB (UE) 532*8kB (UE) 277*16kB (UME) 310*32kB (UME) 422*64kB (UME) 268*128kB (UME) 253*256kB (UME) 199*512kB (UME) 154*1024kB (UM) 48*2048kB (UM) 581*4096kB (U) = 2883928kB [ 140.643433][ T6802] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.652937][ T6802] 1327 total pagecache pages [ 140.657990][ T6802] 94 pages in swap cache [ 140.662953][ T6802] Free swap = 108944kB [ 140.667291][ T6802] Total swap = 124996kB [ 140.671884][ T6802] 2097051 pages RAM [ 140.675776][ T6802] 0 pages HighMem/MovableOnly [ 140.680604][ T6802] 80446 pages reserved