last executing test programs:

6.430617463s ago: executing program 2 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = inotify_init1(0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r3, r4, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0xf7}, 0x18)
socket$nl_rdma(0x10, 0x3, 0x14)
inotify_rm_watch(r1, 0x0)

5.512615098s ago: executing program 3 (id=401):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d791c71a0da93c5ecebd3862e1e1c4937887900a3b0bf92547a362bf8d279e3f711c099988597d8c505c2a5eddce6affdce22b4851a054e62b1f1a420438ad794f3a91c7e618106ceec2704f5e6ad7c093f140fd6addad09dda16fa6f9f214bb8e670329c7dfd8837653ff4694972f"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
unshare(0x62040200)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff000000000000009500000000006b00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='svcrdma_page_overrun_err\x00', r2}, 0x18)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x80)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x0)
unshare(0x28040680)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a200, 0x0)
ppoll(&(0x7f0000000000)=[{r8, 0x120}], 0x1, 0x0, 0x0, 0x0)

5.325672339s ago: executing program 2 (id=404):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xcc}, 0x8)
r1 = socket$inet6(0xa, 0x802, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @local}}, 0x8c1, 0x5, 0x3, 0x1000, 0x8}, &(0x7f0000000440)=0x98)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)

5.277403589s ago: executing program 2 (id=408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket(0xa, 0x3, 0x3a)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r2, r3, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(0xffffffffffffffff, 0x0)
socket(0x2, 0x4, 0x0)

4.603822723s ago: executing program 3 (id=414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/15, @ANYRESOCT=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")

4.400311465s ago: executing program 0 (id=415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = inotify_init1(0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r3, r4, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0xf7}, 0x18)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(r1, 0x0)

3.50812337s ago: executing program 3 (id=416):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x100280, 0x40000000318, 0x0, 0x1, 0xfffffffffffffffe, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0))
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x48080}, 0x48080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0xffffffffffffff08)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
unshare(0x28020480)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x4, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)

3.42720673s ago: executing program 2 (id=417):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
tkill(r0, 0x13)

3.367486271s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000020000000000e1ffffff"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000200), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)

3.338139711s ago: executing program 0 (id=420):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x100280, 0x40000000318, 0x0, 0x1, 0xfffffffffffffffe, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0))
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x48080}, 0x48080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0xffffffffffffff08)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
unshare(0x28020480)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x4, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, 0x0, 0x0)

3.009093743s ago: executing program 4 (id=426):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = inotify_init()
socket$netlink(0x10, 0x3, 0x8)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4a9)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x8500017e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)
r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r3, &(0x7f0000000140)=""/92, 0x5c, 0x3)
unshare(0x2c020400)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030500000000fbdbdf25ee000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r6, &(0x7f0000000040)="b1e52bcc2e2b26340516175e6fc451a12e5aaee2cac3036cb523ee75134215620547092a94e901c27ec91ccbdb330be6cf3b420ed885fd83a0a8808fd63cb0d1e47c9c2f70fd4382b1c8de3312330a2d892dc622ea5ed61e5f964e7122487e8e98b9c3c7", 0x64, 0x20000000, &(0x7f00000000c0)={0x2, 0x0, @local, 0x2}, 0x10)

2.935581643s ago: executing program 4 (id=428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket(0xa, 0x3, 0x3a)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r2, r3, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(0xffffffffffffffff, 0x0)
socket(0x2, 0x4, 0x0)

2.613359035s ago: executing program 3 (id=429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = inotify_init1(0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r3, r4, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0xf7}, 0x18)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(r1, 0x0)

2.464194556s ago: executing program 0 (id=430):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="5a9a0bbfa81ec0dce392c2fa954359474a7d2447c17af34ecbe5976ac35d41911a1a69f7ced899409ae1", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x2a}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x20000, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2925, 0xffff, 0x9dff, 0xf, "9402080100"})
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
syz_open_pts(r5, 0x0)

1.923900419s ago: executing program 4 (id=431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = inotify_init1(0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
sendfile(r3, r4, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(r1, 0x0)

1.841746419s ago: executing program 1 (id=433):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
bind$can_raw(r0, 0x0, 0x0)

1.73553453s ago: executing program 1 (id=434):
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xc2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
kexec_load(0x5, 0x0, &(0x7f00000002c0), 0x0)

1.70997572s ago: executing program 1 (id=435):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x8}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40)

1.610579511s ago: executing program 0 (id=436):
io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xe]}, 0x8})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x13c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x44}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_connmark={0xbc, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x6f, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x1)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x88a4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x5, 0xfd, 0xffffffffffffffff, 0x5, 0x6, 0x8000000000000001, 0x81, 0x9}, &(0x7f0000000080)={0x8, 0x80, 0x1, 0x5, 0x8000000000000001, 0x2, 0x1b50, 0xf}, &(0x7f00000000c0)={0x4, 0x7, 0x3, 0x5, 0x7, 0x6, 0x8, 0x7}, &(0x7f0000000300)={<r6=>0x77359400}, &(0x7f0000000580)={&(0x7f0000000340)={[0x3]}, 0x8})
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100), 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCXONC(r7, 0x540a, 0x2)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r6], 0x50)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.539419311s ago: executing program 1 (id=437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030011000000080002400000001508000140000000070900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x12d)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)

1.539113611s ago: executing program 3 (id=438):
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
creat(&(0x7f0000000540)='./file0\x00', 0x0)
r0 = timerfd_create(0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000ebffffff00050000000900010073797a30000000002c000000030a01010000000000800000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048020000180080001006c6f670014000280060002403a0000000800054008ffffff0900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd70008291df2510020000000004000700000008003a000800000008003200b500000008003400010000000800320037000000000005002f000000000005003800"/94], 0x64}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004010)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='i2c_result\x00', r3}, 0x18)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone(0x800000, &(0x7f00000001c0)="f3bcba952aeb4313c6c319bd6d3015d2d6cdac9fe03a980ca0c48dcdcbbb24939eaa6cc061451aa8e2e9c1bab8c54ff7191816ec98ec94942ca239cf23397c7a5639aad4324112222428a4a73cef518fb32c6f2d36776372dd659a6990e55e8fb4a8805b5e7beaaa12ed9a5b035a7d9663e49cd3cc499b0ef1ec079eafffefad7c2100b590142949c9e9dde0b601d66cb5c902f7ba320e12e38609007c6822abd39af897b72a9f6d156151d5b411b176251a666c569ed0df6f648f5dbeaf541ef339b910ffd1183fb53fca21595934055dae080b1a78a3ae8d02ae4c96980081e80a17e2f7449a6a5c3d757860b400d9cb21089831fb", 0xf6, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000001400)="6fdda8ef3b23c7fb23757f42693d4d1fc627697038f5d9b59551a82dd26fd63f0f713cbf7c2424ec28dd62fe035418c8630e69c54027ed64885cb8adc56b2c4ae16e9c4981a56bf9c8215f43b75392582f235c4b8a8af6b13efaff2d3ea8c19b360ad549d839296b32a327484c98adf4bebe55df01824133b5d6577e1ae605e5df13d0ad15b788f68039edf0b3b5d343bfea107b6872adac0b117fade7bae602c0cd03")
getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18)
write(r0, &(0x7f0000000400)="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", 0x1000)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1)

1.124748714s ago: executing program 1 (id=439):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x1a4243c, &(0x7f0000003f40)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffff0b}, 0x18)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000d5300)={0x8, [{<r5=>0x0}, {}, {}, {0x0, <r6=>0x0}, {}, {}, {}, {<r7=>0x0}, {}, {<r8=>0x0, <r9=>0x0}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {0x0, <r12=>0x0}, {}, {}, {0x0, <r13=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {}, {}, {}, {}, {<r16=>0x0}, {<r17=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r18=>0x0}, {}, {<r19=>0x0}, {}, {<r20=>0x0}, {}, {}, {}, {0x0, <r21=>0x0}, {}, {<r22=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {}, {}, {}, {0x0, <r24=>0x0}, {}, {}, {}, {}, {}, {}, {<r25=>0x0}, {}, {}, {0x0, <r26=>0x0}, {}, {}, {}, {<r27=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r28=>0x0}, {}, {}, {}, {}, {0x0, <r29=>0x0}, {}, {}, {}, {}, {0x0, <r30=>0x0}, {}, {}, {}, {<r31=>0x0}, {}, {<r32=>0x0}, {0x0, <r33=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r34=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r35=>0x0}, {}, {}, {}, {}, {0x0, <r36=>0x0}, {}, {}, {<r37=>0x0}, {}, {}, {<r38=>0x0}, {}, {}, {0x0, <r39=>0x0}, {0x0, <r40=>0x0}, {}, {<r41=>0x0}, {}, {0x0, <r42=>0x0}, {}, {}, {}, {}, {}, {0x0, <r43=>0x0}, {0x0, <r44=>0x0}, {<r45=>0x0, <r46=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r47=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r48=>0x0}, {}, {}, {}, {<r49=>0x0}, {}, {0x0, <r50=>0x0}], 0x6, "986ac63f3a5b75"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000d7300)={<r51=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000d7500)={0x5, [{}, {}, {}, {0x0, r50}, {}, {0x0, r21}, {r16, <r52=>0x0}, {}, {}, {}, {}, {r22}, {0x0, <r53=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r54=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r55=>0x0}, {}, {r20}, {}, {}, {}, {0x0, r30}, {}, {}, {r38, <r56=>0x0}, {}, {r25}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r46}, {}, {}, {r41}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r39}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r32}, {0x0, r44}, {}, {}, {}, {}, {}, {}, {<r57=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {0x0, r28}, {}, {}, {}, {r34}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r35}, {}, {<r58=>0x0}, {}, {0x0, r33}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r27}, {}, {r45}, {}, {}, {r31}, {}, {}, {0x0, <r59=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {r10}, {<r60=>0x0}, {0x0, r48}, {0x0, <r61=>0x0}, {<r62=>0x0, r29}, {}, {}, {}, {}, {r49}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {0x0, r42}, {<r63=>0x0, r15}, {0x0, r36}, {}, {r51}], 0x7f, "82c5a292a4bb6c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c2100)={0x2, [{}, {}, {}, {}, {}, {}, {0x0, r53}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r60}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r64=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r60}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r56}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r43}, {r58, <r65=>0x0}], 0x8e, "82f5c2833b5229"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c3100)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {r55}, {}, {}, {}, {0x0, r40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r52}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r54}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r62}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r61}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r37}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r57}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {0x0, r65}, {}, {}, {}, {}, {}, {}, {}, {r63}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r34}, {}, {}, {}, {}, {0x0, r59}, {}, {}, {}, {}, {}, {}, {}, {r51, r64}], 0xa9, "dc279663e1459c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000d5000))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000d5200)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000d6400))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r66=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r66, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={0xffffffffffffffff, <r67=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r67, &(0x7f0000000540)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000200), 0x0)

979.700384ms ago: executing program 4 (id=440):
unshare(0x20000400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000})
io_uring_enter(r0, 0x769f, 0x2000000, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}]})
unshare(0x20000400) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) (async)
io_uring_enter(r0, 0x769f, 0x2000000, 0x0, 0x0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}]}) (async)

815.350646ms ago: executing program 4 (id=441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000002000000000000009500000000000000c205a9c15f15856c9edce63e64"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000})
close_range(r7, r7, 0x0)
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>0x0, 0xa1, 0x80, 0x6, 0x8, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0x13, 0xcf, [@multicast1, @loopback, @loopback, @multicast1]}, @rr={0x7, 0x23, 0x7f, [@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, @broadcast, @rand_addr=0x64010100, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2]}, @lsrr={0x83, 0x7, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0x15, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x5, [{@rand_addr=0x64010102, 0x1da7}, {@multicast2, 0xc01}, {@local, 0xd8}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x26, 0x6, 0x9, 0x1000, r5, 0x5, '\x00', r8, r6, 0x0, 0x5, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500000800002c00128009000100626f6e64000000001c00028005000100040000000600190070040000060018"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40044)

696.990416ms ago: executing program 1 (id=442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket(0xa, 0x3, 0x3a)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
sendfile(r2, r3, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)
inotify_rm_watch(0xffffffffffffffff, 0x0)
socket(0x2, 0x4, 0x0)

632.880056ms ago: executing program 3 (id=443):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = inotify_init1(0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
sendfile(r3, r4, 0x0, 0x200)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
inotify_rm_watch(r1, 0x0)

365.561588ms ago: executing program 0 (id=444):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x35320, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0xf)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0xc00477b1d856f647)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

303.478168ms ago: executing program 2 (id=445):
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xc2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
kexec_load(0x5, 0x0, &(0x7f00000002c0), 0x0)

137.24905ms ago: executing program 2 (id=446):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="5a9a0bbfa81ec0dce392c2fa954359474a7d2447c17af34ecbe5976ac35d41911a1a69f7ced899409ae1", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x2a}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x20000, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2925, 0xffff, 0x9dff, 0xf, "9402080100"})
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
syz_open_pts(r5, 0x0)

0s ago: executing program 4 (id=447):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x100280, 0x40000000318, 0x0, 0x1, 0xfffffffffffffffe, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0))
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x48080}, 0x48080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0xffffffffffffff08)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
unshare(0x28020480)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x4, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ticast addr
[   42.048750][ T3536] syz.0.14 (3536) used greatest stack depth: 9696 bytes left
[   42.179147][ T3613] loop4: detected capacity change from 0 to 7
[   42.186030][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.206583][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.214470][ T3307]  loop4: unable to read partition table
[   42.241565][ T3614] pim6reg: entered allmulticast mode
[   42.268356][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.286131][ T3613] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.399285][ T3613] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.407327][ T3613]  loop4: unable to read partition table
[   42.407435][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.447523][ T3614] pim6reg: left allmulticast mode
[   42.453166][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.461369][ T3613] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   42.478310][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.497791][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.526606][ T3622] netlink: 'syz.4.22': attribute type 10 has an invalid length.
[   42.539904][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   42.551854][ T3622] bond0: (slave dummy0): Releasing backup interface
[   42.573034][ T3622] team0: Port device dummy0 added
[   42.586139][ T3625] loop1: detected capacity change from 0 to 512
[   42.599113][ T3622] netlink: 'syz.4.22': attribute type 10 has an invalid length.
[   42.609666][ T3625] EXT4-fs: Ignoring removed nobh option
[   42.635437][ T3622] team0: Port device dummy0 removed
[   42.648312][ T3625] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.23: corrupted inode contents
[   42.660555][ T3622] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   42.849266][ T3625] EXT4-fs (loop1): Remounting filesystem read-only
[   42.879162][ T3003]  loop4: unable to read partition table
[   42.892767][ T3625] EXT4-fs (loop1): 1 truncate cleaned up
[   42.921179][ T3625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.966713][ T3003]  loop4: unable to read partition table
[   42.980150][ T3631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24'.
[   42.993927][ T3631] IPVS: Error connecting to the multicast addr
[   43.046851][ T3625] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.081274][ T3625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.195515][ T3612] syz.0.20 (3612) used greatest stack depth: 7240 bytes left
[   43.302287][ T3638] loop2: detected capacity change from 0 to 512
[   43.345961][ T3642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'.
[   43.365462][ T3638] EXT4-fs: Ignoring removed nobh option
[   43.408359][ T3642] IPVS: Error connecting to the multicast addr
[   43.456959][ T3638] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.27: corrupted inode contents
[   43.569827][ T3653] loop4: detected capacity change from 0 to 512
[   43.588253][ T3638] EXT4-fs (loop2): Remounting filesystem read-only
[   43.676772][ T3653] EXT4-fs: Ignoring removed nobh option
[   43.898170][ T3638] EXT4-fs (loop2): 1 truncate cleaned up
[   43.919779][ T3653] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.30: corrupted inode contents
[   43.931868][ T3653] EXT4-fs (loop4): Remounting filesystem read-only
[   43.939247][ T3653] EXT4-fs (loop4): 1 truncate cleaned up
[   43.945579][ T3653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.958594][ T3653] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.969780][ T3653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.981888][ T3638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.034207][ T3638] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.081329][ T3638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.471330][    C0] hrtimer: interrupt took 31131 ns
[   45.136978][   T29] kauditd_printk_skb: 634 callbacks suppressed
[   45.136998][   T29] audit: type=1326 audit(1762605514.014:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.206182][   T29] audit: type=1326 audit(1762605514.014:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.229644][   T29] audit: type=1326 audit(1762605514.014:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.253063][   T29] audit: type=1326 audit(1762605514.014:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.276496][   T29] audit: type=1326 audit(1762605514.014:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.300068][   T29] audit: type=1326 audit(1762605514.014:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.323247][   T29] audit: type=1326 audit(1762605514.014:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.346751][   T29] audit: type=1326 audit(1762605514.014:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.370313][   T29] audit: type=1326 audit(1762605514.014:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7447c15e7 code=0x7ffc0000
[   45.393710][   T29] audit: type=1326 audit(1762605514.014:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   45.774533][ T3695] loop4: detected capacity change from 0 to 7
[   45.785011][ T3694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'.
[   45.808865][ T3307]  loop4: unable to read partition table
[   45.829547][ T3694] IPVS: Error connecting to the multicast addr
[   45.836126][ T3695]  loop4: unable to read partition table
[   45.879430][ T3696] pim6reg: entered allmulticast mode
[   45.891362][ T3695] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   45.972987][ T3003]  loop4: unable to read partition table
[   45.993585][ T3706] pim6reg: entered allmulticast mode
[   46.006450][ T3695] pim6reg: left allmulticast mode
[   46.031410][ T3706] pim6reg: left allmulticast mode
[   46.578743][ T3395] IPVS: starting estimator thread 0...
[   46.585862][ T3717] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   46.608931][ T3717] team0: Port device dummy0 added
[   46.628449][ T3717] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   46.649885][ T3717] team0: Port device dummy0 removed
[   46.657484][ T3003]  loop4: unable to read partition table
[   46.658581][ T3717] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   46.672137][ T3718] IPVS: using max 2208 ests per chain, 110400 per kthread
[   46.832360][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'.
[   46.877862][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'.
[   46.899673][ T3726] Zero length message leads to an empty skb
[   46.905806][ T3395] IPVS: starting estimator thread 0...
[   46.909024][ T3726] netlink: 'syz.1.51': attribute type 10 has an invalid length.
[   46.929365][ T3726] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   46.998312][ T3733] IPVS: using max 2064 ests per chain, 103200 per kthread
[   47.038485][ T3739] SELinux: failed to load policy
[   47.083786][ T3748] netlink: 'syz.4.59': attribute type 10 has an invalid length.
[   47.095513][ T3748] bond0: (slave dummy0): Releasing backup interface
[   47.112963][ T3748] team0: Port device dummy0 added
[   47.144069][ T3748] netlink: 'syz.4.59': attribute type 10 has an invalid length.
[   47.165005][ T3748] team0: Port device dummy0 removed
[   47.172984][ T3751] loop4: detected capacity change from 0 to 7
[   47.181658][ T3748] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   47.234066][ T3752] pim6reg: entered allmulticast mode
[   47.328727][ T3752] pim6reg: left allmulticast mode
[   47.498483][ T3323] buffer_io_error: 56 callbacks suppressed
[   47.498523][ T3323] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.513197][ T3323] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.521673][ T3323]  loop4: unable to read partition table
[   47.528728][ T3751] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.540223][ T3751] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.548459][ T3751]  loop4: unable to read partition table
[   47.557535][ T3751] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   47.571093][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.583948][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.595296][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.604008][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.615689][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.624134][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   47.774398][ T3003]  loop4: unable to read partition table
[   47.791985][ T3762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'.
[   47.815229][ T3003]  loop4: unable to read partition table
[   47.921879][ T3003]  loop4: unable to read partition table
[   47.934398][ T3774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   47.940387][ T3773] loop1: detected capacity change from 0 to 512
[   47.951067][ T3773] EXT4-fs: Ignoring removed nobh option
[   47.978733][ T3773] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.67: corrupted inode contents
[   47.999445][ T3774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   48.010499][ T3773] EXT4-fs (loop1): Remounting filesystem read-only
[   48.028961][ T3773] EXT4-fs (loop1): 1 truncate cleaned up
[   48.043489][ T3773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.082607][ T3003]  loop4: unable to read partition table
[   48.099966][ T3773] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.177736][ T3773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.237219][ T3783] SELinux: failed to load policy
[   48.309231][ T3794] loop4: detected capacity change from 0 to 7
[   48.324663][ T3794]  loop4: unable to read partition table
[   48.345011][ T3794] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   48.404198][ T3794] pim6reg: entered allmulticast mode
[   48.499365][ T3003]  loop4: unable to read partition table
[   48.543188][ T3803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'.
[   49.050697][ T3794] pim6reg: left allmulticast mode
[   49.315903][ T1042] IPVS: starting estimator thread 0...
[   49.322314][ T3817] netlink: 'syz.2.79': attribute type 10 has an invalid length.
[   49.347208][ T3817] team0: Port device dummy0 added
[   49.364277][ T3817] netlink: 'syz.2.79': attribute type 10 has an invalid length.
[   49.388854][ T3817] team0: Port device dummy0 removed
[   49.406294][ T3818] IPVS: using max 2016 ests per chain, 100800 per kthread
[   49.419299][ T3817] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   49.724075][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   49.780001][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   49.845473][ T3837] SELinux: failed to load policy
[   49.978861][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'.
[   50.229233][   T29] kauditd_printk_skb: 793 callbacks suppressed
[   50.229250][   T29] audit: type=1326 audit(1762605519.104:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.275122][ T3843] tmpfs: Bad value for 'mpol'
[   50.326696][   T29] audit: type=1326 audit(1762605519.104:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.350159][   T29] audit: type=1326 audit(1762605519.104:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.368714][ T3845] tmpfs: Bad value for 'mpol'
[   50.373978][   T29] audit: type=1326 audit(1762605519.104:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.401620][   T29] audit: type=1326 audit(1762605519.104:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.424957][   T29] audit: type=1326 audit(1762605519.104:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.448951][   T29] audit: type=1326 audit(1762605519.104:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.472476][   T29] audit: type=1326 audit(1762605519.104:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.484927][ T3859] loop4: detected capacity change from 0 to 7
[   50.496029][   T29] audit: type=1326 audit(1762605519.104:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.525290][   T29] audit: type=1326 audit(1762605519.104:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   50.551620][ T3323]  loop4: unable to read partition table
[   50.562215][ T3859]  loop4: unable to read partition table
[   50.570973][ T3859] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   50.592036][ T3863] netlink: 'syz.4.93': attribute type 10 has an invalid length.
[   50.602207][ T3863] bond0: (slave dummy0): Releasing backup interface
[   50.611489][ T3863] team0: Port device dummy0 added
[   50.620343][ T3857] pim6reg: entered allmulticast mode
[   50.641139][ T3003]  loop4: unable to read partition table
[   50.641668][ T3857] pim6reg: left allmulticast mode
[   50.652526][ T3868] netlink: 'syz.4.93': attribute type 10 has an invalid length.
[   50.674474][ T3868] team0: Port device dummy0 removed
[   50.682147][ T3868] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   50.790653][ T3003]  loop4: unable to read partition table
[   50.833317][ T3877] __nla_validate_parse: 1 callbacks suppressed
[   50.833408][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'.
[   50.856812][ T3003]  loop4: unable to read partition table
[   50.877199][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'.
[   50.879792][ T3876] pim6reg: entered allmulticast mode
[   50.934468][ T3876] pim6reg: left allmulticast mode
[   50.946713][ T3881] pim6reg: entered allmulticast mode
[   50.962505][ T3881] pim6reg: left allmulticast mode
[   50.995293][ T3887] netlink: 'syz.3.99': attribute type 10 has an invalid length.
[   51.012813][ T3887] team0: Port device dummy0 added
[   51.026377][ T3423] IPVS: starting estimator thread 0...
[   51.050797][ T3887] team0: Port device dummy0 removed
[   51.079285][ T3887] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   51.136458][ T3888] IPVS: using max 2304 ests per chain, 115200 per kthread
[   51.178207][ T3893] SELinux: failed to load policy
[   51.227963][ T3895] loop3: detected capacity change from 0 to 512
[   51.246680][ T3895] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.259765][ T3895] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.308244][ T3895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.316813][ T3895] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.531489][ T3895] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   51.549915][ T3895] EXT4-fs (loop3): mount failed
[   51.593680][ T3871] syz.0.95 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   51.604635][ T3871] CPU: 0 UID: 0 PID: 3871 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.604708][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   51.604721][ T3871] Call Trace:
[   51.604727][ T3871]  <TASK>
[   51.604735][ T3871]  __dump_stack+0x1d/0x30
[   51.604765][ T3871]  dump_stack_lvl+0xe8/0x140
[   51.604785][ T3871]  dump_stack+0x15/0x1b
[   51.604838][ T3871]  dump_header+0x81/0x220
[   51.604861][ T3871]  oom_kill_process+0x342/0x400
[   51.604904][ T3871]  out_of_memory+0x979/0xb80
[   51.605010][ T3871]  try_charge_memcg+0x610/0xa10
[   51.605053][ T3871]  charge_memcg+0x51/0xc0
[   51.605141][ T3871]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   51.605169][ T3871]  __read_swap_cache_async+0x17b/0x2d0
[   51.605196][ T3871]  swap_cluster_readahead+0x262/0x3c0
[   51.605222][ T3871]  swapin_readahead+0xde/0x6f0
[   51.605276][ T3871]  ? css_rstat_updated+0xb7/0x240
[   51.605295][ T3871]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[   51.605332][ T3871]  ? __rcu_read_unlock+0x4f/0x70
[   51.605438][ T3871]  ? __rcu_read_unlock+0x4f/0x70
[   51.605472][ T3871]  ? swap_cache_get_folio+0x277/0x280
[   51.605499][ T3871]  do_swap_page+0x2ae/0x2370
[   51.605528][ T3871]  ? _raw_spin_unlock+0x26/0x50
[   51.605555][ T3871]  ? finish_task_switch+0xad/0x2b0
[   51.605615][ T3871]  ? __pfx_default_wake_function+0x10/0x10
[   51.605704][ T3871]  handle_mm_fault+0x9a5/0x2be0
[   51.605791][ T3871]  ? vma_start_read+0x141/0x1f0
[   51.605829][ T3871]  do_user_addr_fault+0x630/0x1080
[   51.605853][ T3871]  ? fpregs_restore_userregs+0xe2/0x1d0
[   51.605945][ T3871]  ? switch_fpu_return+0xe/0x20
[   51.605975][ T3871]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.606002][ T3871]  exc_page_fault+0x62/0xa0
[   51.606035][ T3871]  asm_exc_page_fault+0x26/0x30
[   51.606083][ T3871] RIP: 0033:0x7f1b1b4e1f88
[   51.606098][ T3871] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[   51.606136][ T3871] RSP: 002b:00007ffd52764f00 EFLAGS: 00010293
[   51.606161][ T3871] RAX: 0000000000000000 RBX: 00007f1b1b705fa0 RCX: 00007f1b1b4e1f85
[   51.606178][ T3871] RDX: 00007ffd52764f40 RSI: 0000000000000000 RDI: 0000000000000000
[   51.606194][ T3871] RBP: 00007f1b1b707da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   51.606209][ T3871] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000c953
[   51.606235][ T3871] R13: 00007f1b1b706090 R14: ffffffffffffffff R15: 00007ffd52765080
[   51.606258][ T3871]  </TASK>
[   51.850400][ T3871] memory: usage 307196kB, limit 307200kB, failcnt 473
[   51.854708][ T3003]  loop4: unable to read partition table
[   51.857245][ T3871] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[   51.870942][ T3871] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   51.878308][ T3871] Memory cgroup stats for /syz0:
[   52.056673][ T3871] cache 0
[   52.064628][ T3871] rss 4096
[   52.067856][ T3871] shmem 0
[   52.070805][ T3871] mapped_file 0
[   52.074360][ T3871] dirty 0
[   52.077347][ T3871] writeback 4096
[   52.080991][ T3871] workingset_refault_anon 199
[   52.085677][ T3871] workingset_refault_file 1997
[   52.090678][ T3871] swap 188416
[   52.093984][ T3871] swapcached 12288
[   52.097753][ T3871] pgpgin 41271
[   52.101135][ T3871] pgpgout 41268
[   52.104664][ T3871] pgfault 7201
[   52.108092][ T3871] pgmajfault 130
[   52.111653][ T3871] inactive_anon 12288
[   52.115642][ T3871] active_anon 0
[   52.119246][ T3871] inactive_file 0
[   52.123011][ T3871] active_file 0
[   52.126699][ T3871] unevictable 0
[   52.130201][ T3871] hierarchical_memory_limit 314572800
[   52.135588][ T3871] hierarchical_memsw_limit 9223372036854771712
[   52.141801][ T3871] total_cache 0
[   52.145282][ T3871] total_rss 4096
[   52.149047][ T3871] total_shmem 0
[   52.152525][ T3871] total_mapped_file 0
[   52.156553][ T3871] total_dirty 0
[   52.160030][ T3871] total_writeback 4096
[   52.164186][ T3871] total_workingset_refault_anon 199
[   52.169440][ T3871] total_workingset_refault_file 1997
[   52.174857][ T3871] total_swap 188416
[   52.178758][ T3871] total_swapcached 12288
[   52.183005][ T3871] total_pgpgin 41271
[   52.186940][ T3871] total_pgpgout 41268
[   52.190933][ T3871] total_pgfault 7201
[   52.194839][ T3871] total_pgmajfault 130
[   52.198963][ T3871] total_inactive_anon 12288
[   52.203478][ T3871] total_active_anon 0
[   52.207503][ T3871] total_inactive_file 0
[   52.211674][ T3871] total_active_file 0
[   52.215674][ T3871] total_unevictable 0
[   52.219688][ T3871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.95,pid=3871,uid=0
[   52.234266][ T3871] Memory cgroup out of memory: Killed process 3871 (syz.0.95) total-vm:95932kB, anon-rss:1132kB, file-rss:22704kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   52.448714][ T3915] loop3: detected capacity change from 0 to 512
[   52.455386][ T3915] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.612246][ T3915] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.619661][ T3915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.628177][ T3915] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.648111][ T3915] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   52.664826][ T3915] EXT4-fs (loop3): mount failed
[   52.673959][ T3919] pim6reg: entered allmulticast mode
[   52.703238][ T3003] buffer_io_error: 128 callbacks suppressed
[   52.703257][ T3003] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.736072][ T3919] pim6reg: left allmulticast mode
[   52.744236][ T3003] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.752219][ T3003]  loop4: unable to read partition table
[   52.771314][ T3003] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.780790][ T3003] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.788720][ T3003]  loop4: unable to read partition table
[   52.809161][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.821066][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.830476][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.838689][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.847224][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.869820][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   52.893454][ T3930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.110'.
[   52.909268][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'.
[   52.943618][ T3935] loop1: detected capacity change from 0 to 512
[   52.950386][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'.
[   52.960211][ T3935] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.984163][ T3935] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.024884][ T3935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.033722][ T3935] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.090630][ T3943] loop3: detected capacity change from 0 to 512
[   53.098058][ T3943] EXT4-fs: Ignoring removed nobh option
[   53.116711][ T3935] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   53.135350][ T3935] EXT4-fs (loop1): mount failed
[   53.157203][ T3943] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.114: corrupted inode contents
[   53.176497][ T3943] EXT4-fs (loop3): Remounting filesystem read-only
[   53.198559][ T3943] EXT4-fs (loop3): 1 truncate cleaned up
[   53.217953][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.242389][ T3943] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.294658][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.343760][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   53.409976][ T3003]  loop4: unable to read partition table
[   53.415881][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   53.470539][ T3954] SELinux: failed to load policy
[   54.409939][ T3972] SELinux: failed to load policy
[   54.469050][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'.
[   54.478259][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'.
[   54.479428][ T3978] loop4: detected capacity change from 0 to 7
[   54.502553][ T3908]  loop4: unable to read partition table
[   54.510657][ T3978]  loop4: unable to read partition table
[   54.518060][ T3978] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   54.539661][ T3978] pim6reg: entered allmulticast mode
[   54.562831][ T3983] pim6reg: entered allmulticast mode
[   54.577924][ T3983] pim6reg: left allmulticast mode
[   54.604148][ T3978] pim6reg: left allmulticast mode
[   54.835029][ T3993] loop0: detected capacity change from 0 to 512
[   54.841813][ T3993] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.850525][ T3993] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.857655][ T3993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.866158][ T3993] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.888446][ T3993] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.903476][ T3993] EXT4-fs (loop0): mount failed
[   54.956408][ T3998] loop0: detected capacity change from 0 to 512
[   54.963131][ T3998] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.995559][ T3998] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.003007][ T3998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.011615][ T3998] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   55.027511][ T3998] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   55.042818][ T3998] EXT4-fs (loop0): mount failed
[   55.137871][ T4003] pim6reg: entered allmulticast mode
[   55.154431][ T4003] pim6reg: left allmulticast mode
[   55.244346][ T3976] syz.3.124 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   55.258506][ T3976] CPU: 1 UID: 0 PID: 3976 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.258607][ T3976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   55.258620][ T3976] Call Trace:
[   55.258627][ T3976]  <TASK>
[   55.258693][ T3976]  __dump_stack+0x1d/0x30
[   55.258715][ T3976]  dump_stack_lvl+0xe8/0x140
[   55.258733][ T3976]  dump_stack+0x15/0x1b
[   55.258750][ T3976]  dump_header+0x81/0x220
[   55.258766][ T3976]  oom_kill_process+0x342/0x400
[   55.258846][ T3976]  out_of_memory+0x979/0xb80
[   55.258948][ T3976]  try_charge_memcg+0x610/0xa10
[   55.258979][ T3976]  obj_cgroup_charge_pages+0xa6/0x150
[   55.259060][ T3976]  __memcg_kmem_charge_page+0x9f/0x170
[   55.259131][ T3976]  __alloc_frozen_pages_noprof+0x188/0x360
[   55.259152][ T3976]  alloc_pages_mpol+0xb3/0x260
[   55.259172][ T3976]  ? alloc_pages_noprof+0x61/0x130
[   55.259192][ T3976]  alloc_pages_noprof+0x90/0x130
[   55.259212][ T3976]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   55.259334][ T3976]  __kvmalloc_node_noprof+0x483/0x670
[   55.259438][ T3976]  ? ip_set_alloc+0x24/0x30
[   55.259609][ T3976]  ? ip_set_alloc+0x24/0x30
[   55.259714][ T3976]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   55.259747][ T3976]  ip_set_alloc+0x24/0x30
[   55.259855][ T3976]  hash_netiface_create+0x282/0x740
[   55.259952][ T3976]  ? __pfx_hash_netiface_create+0x10/0x10
[   55.259989][ T3976]  ip_set_create+0x3cc/0x970
[   55.260017][ T3976]  ? __nla_parse+0x40/0x60
[   55.260040][ T3976]  nfnetlink_rcv_msg+0x4c6/0x590
[   55.260122][ T3976]  netlink_rcv_skb+0x123/0x220
[   55.260153][ T3976]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   55.260184][ T3976]  nfnetlink_rcv+0x167/0x16c0
[   55.260329][ T3976]  ? kmem_cache_free+0xe4/0x3d0
[   55.260427][ T3976]  ? __kfree_skb+0x109/0x150
[   55.260461][ T3976]  ? nlmon_xmit+0x4f/0x60
[   55.260483][ T3976]  ? consume_skb+0x49/0x150
[   55.260570][ T3976]  ? nlmon_xmit+0x4f/0x60
[   55.260592][ T3976]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   55.260627][ T3976]  ? __dev_queue_xmit+0x1200/0x2000
[   55.260643][ T3976]  ? __dev_queue_xmit+0x182/0x2000
[   55.260711][ T3976]  ? ref_tracker_free+0x37d/0x3e0
[   55.260754][ T3976]  ? __netlink_deliver_tap+0x4dc/0x500
[   55.260788][ T3976]  netlink_unicast+0x5c0/0x690
[   55.260818][ T3976]  netlink_sendmsg+0x58b/0x6b0
[   55.260867][ T3976]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.260885][ T3976]  __sock_sendmsg+0x145/0x180
[   55.260908][ T3976]  ____sys_sendmsg+0x31e/0x4e0
[   55.260993][ T3976]  ___sys_sendmsg+0x17b/0x1d0
[   55.261020][ T3976]  __x64_sys_sendmsg+0xd4/0x160
[   55.261098][ T3976]  x64_sys_call+0x191e/0x3000
[   55.261151][ T3976]  do_syscall_64+0xd2/0x200
[   55.261170][ T3976]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   55.261250][ T3976]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   55.261282][ T3976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.261302][ T3976] RIP: 0033:0x7f34284cf6c9
[   55.261316][ T3976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.261332][ T3976] RSP: 002b:00007f3426f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.261350][ T3976] RAX: ffffffffffffffda RBX: 00007f3428725fa0 RCX: 00007f34284cf6c9
[   55.261407][ T3976] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[   55.261424][ T3976] RBP: 00007f3428551f91 R08: 0000000000000000 R09: 0000000000000000
[   55.261441][ T3976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.261457][ T3976] R13: 00007f3428726038 R14: 00007f3428725fa0 R15: 00007ffd14291d98
[   55.261481][ T3976]  </TASK>
[   55.261488][ T3976] memory: usage 307200kB, limit 307200kB, failcnt 237
[   55.300626][   T29] kauditd_printk_skb: 478 callbacks suppressed
[   55.300698][   T29] audit: type=1326 audit(1762605524.174:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   55.300771][ T3976] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[   55.566398][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'.
[   55.573462][ T3976] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   55.582489][ T4009] IPVS: Error connecting to the multicast addr
[   55.589481][ T3976] Memory cgroup stats for /syz3:
[   55.675631][ T3003]  loop4: unable to read partition table
[   55.675876][ T3976] cache 0
[   55.689308][ T3976] rss 0
[   55.692101][ T3976] shmem 0
[   55.695168][ T3976] mapped_file 0
[   55.698779][ T3976] dirty 0
[   55.701980][ T3976] writeback 0
[   55.705329][ T3976] workingset_refault_anon 18
[   55.710070][ T3976] workingset_refault_file 252
[   55.714765][ T3976] swap 212992
[   55.718110][ T3976] swapcached 4096
[   55.721758][ T3976] pgpgin 5990
[   55.725289][ T3976] pgpgout 5989
[   55.728771][ T3976] pgfault 8223
[   55.732687][ T3976] pgmajfault 18
[   55.736162][ T3976] inactive_anon 4096
[   55.740395][ T3976] active_anon 0
[   55.743908][ T3976] inactive_file 0
[   55.747595][ T3976] active_file 0
[   55.751152][ T3976] unevictable 0
[   55.754630][ T3976] hierarchical_memory_limit 314572800
[   55.760040][ T3976] hierarchical_memsw_limit 9223372036854771712
[   55.764460][ T3003]  loop4: unable to read partition table
[   55.766207][ T3976] total_cache 0
[   55.766248][ T3976] total_rss 0
[   55.766257][ T3976] total_shmem 0
[   55.766266][ T3976] total_mapped_file 0
[   55.786496][ T3976] total_dirty 0
[   55.789975][ T3976] total_writeback 0
[   55.793966][ T3976] total_workingset_refault_anon 18
[   55.799230][ T3976] total_workingset_refault_file 252
[   55.804491][ T3976] total_swap 212992
[   55.808363][ T3976] total_swapcached 4096
[   55.812588][ T3976] total_pgpgin 5990
[   55.816603][ T3976] total_pgpgout 5989
[   55.820711][ T3976] total_pgfault 8223
[   55.824634][ T3976] total_pgmajfault 18
[   55.828666][ T3976] total_inactive_anon 4096
[   55.833099][ T3976] total_active_anon 0
[   55.837134][ T3976] total_inactive_file 0
[   55.841319][ T3976] total_active_file 0
[   55.845408][ T3976] total_unevictable 0
[   55.849446][ T3976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.124,pid=3975,uid=0
[   55.864000][ T3976] Memory cgroup out of memory: Killed process 3975 (syz.3.124) total-vm:94088kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   55.916022][ T3003]  loop4: unable to read partition table
[   56.090583][   T29] audit: type=1326 audit(1762605524.964:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.133711][   T29] audit: type=1326 audit(1762605524.964:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.157247][   T29] audit: type=1326 audit(1762605524.964:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.180890][   T29] audit: type=1326 audit(1762605524.964:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.204547][   T29] audit: type=1326 audit(1762605524.964:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.228066][   T29] audit: type=1326 audit(1762605524.964:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b1b4b15e7 code=0x7ffc0000
[   56.251373][   T29] audit: type=1326 audit(1762605524.964:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.275417][   T29] audit: type=1326 audit(1762605524.964:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.299890][   T29] audit: type=1326 audit(1762605524.964:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b1b4af6c9 code=0x7ffc0000
[   56.666361][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   56.677702][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   56.837837][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'.
[   56.852591][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'.
[   56.938877][ T4046] loop4: detected capacity change from 0 to 512
[   56.966721][ T4046] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.978751][ T4046] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.012075][ T4046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.020665][ T4046] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   57.167373][ T4046] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   57.333443][ T4046] EXT4-fs (loop4): mount failed
[   57.361020][ T4059] pim6reg: entered allmulticast mode
[   57.366596][ T4061] pim6reg: left allmulticast mode
[   57.658579][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   57.667766][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   57.772955][ T4076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'.
[   57.782172][ T4076] IPVS: Error connecting to the multicast addr
[   58.056440][ T4055] syz.3.144 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   58.067484][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.067558][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   58.067573][ T4055] Call Trace:
[   58.067580][ T4055]  <TASK>
[   58.067589][ T4055]  __dump_stack+0x1d/0x30
[   58.067646][ T4055]  dump_stack_lvl+0xe8/0x140
[   58.067667][ T4055]  dump_stack+0x15/0x1b
[   58.067692][ T4055]  dump_header+0x81/0x220
[   58.067776][ T4055]  oom_kill_process+0x342/0x400
[   58.067817][ T4055]  out_of_memory+0x979/0xb80
[   58.067909][ T4055]  try_charge_memcg+0x610/0xa10
[   58.067954][ T4055]  charge_memcg+0x51/0xc0
[   58.067983][ T4055]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   58.068012][ T4055]  __read_swap_cache_async+0x17b/0x2d0
[   58.068114][ T4055]  swap_cluster_readahead+0x262/0x3c0
[   58.068151][ T4055]  swapin_readahead+0xde/0x6f0
[   58.068181][ T4055]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[   58.068223][ T4055]  ? __rcu_read_unlock+0x34/0x70
[   58.068287][ T4055]  ? __rcu_read_unlock+0x4f/0x70
[   58.068315][ T4055]  ? swap_cache_get_folio+0x277/0x280
[   58.068338][ T4055]  do_swap_page+0x2ae/0x2370
[   58.068365][ T4055]  ? css_rstat_updated+0xb7/0x240
[   58.068394][ T4055]  ? __pfx_default_wake_function+0x10/0x10
[   58.068506][ T4055]  handle_mm_fault+0x9a5/0x2be0
[   58.068533][ T4055]  ? vma_start_read+0x141/0x1f0
[   58.068660][ T4055]  do_user_addr_fault+0x630/0x1080
[   58.068692][ T4055]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   58.068811][ T4055]  exc_page_fault+0x62/0xa0
[   58.068848][ T4055]  asm_exc_page_fault+0x26/0x30
[   58.068875][ T4055] RIP: 0033:0x7f3428391127
[   58.068895][ T4055] Code: 2f fb ff ff eb a6 b8 01 00 00 00 48 81 c4 b8 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 80 3d 82 6c 39 00 00 <48> 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0
[   58.068961][ T4055] RSP: 002b:00007ffd14291ef8 EFLAGS: 00010202
[   58.068979][ T4055] RAX: 0000000000000001 RBX: 00007f3428725fa0 RCX: 000000000000e290
[   58.068997][ T4055] RDX: 0000000000000011 RSI: 00007ffd14291ee0 RDI: 00007f3428726038
[   58.069014][ T4055] RBP: 00007f3428727da0 R08: 00007f3428725fa0 R09: 7fffffffffffffff
[   58.069030][ T4055] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000e29d
[   58.069047][ T4055] R13: 00007f3428726090 R14: ffffffffffffffff R15: 00007ffd14292010
[   58.069071][ T4055]  </TASK>
[   58.069078][ T4055] memory: usage 307200kB, limit 307200kB, failcnt 540
[   58.300205][ T4055] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[   58.308166][ T4055] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   58.315463][ T4055] Memory cgroup stats for /syz3:
[   58.315783][ T4055] cache 0
[   58.323723][ T4055] rss 0
[   58.326513][ T4055] shmem 0
[   58.329491][ T4055] mapped_file 0
[   58.332964][ T4055] dirty 0
[   58.335914][ T4055] writeback 0
[   58.339279][ T4055] workingset_refault_anon 59
[   58.343895][ T4055] workingset_refault_file 947
[   58.348604][ T4055] swap 212992
[   58.351911][ T4055] swapcached 4096
[   58.355621][ T4055] pgpgin 6836
[   58.358945][ T4055] pgpgout 6835
[   58.362373][ T4055] pgfault 8531
[   58.365754][ T4055] pgmajfault 43
[   58.369266][ T4055] inactive_anon 0
[   58.372997][ T4055] active_anon 4096
[   58.376746][ T4055] inactive_file 0
[   58.380503][ T4055] active_file 0
[   58.383958][ T4055] unevictable 0
[   58.387459][ T4055] hierarchical_memory_limit 314572800
[   58.392839][ T4055] hierarchical_memsw_limit 9223372036854771712
[   58.399254][ T4055] total_cache 0
[   58.402724][ T4055] total_rss 0
[   58.406040][ T4055] total_shmem 0
[   58.409526][ T4055] total_mapped_file 0
[   58.413722][ T4055] total_dirty 0
[   58.417222][ T4055] total_writeback 0
[   58.421108][ T4055] total_workingset_refault_anon 59
[   58.426443][ T4055] total_workingset_refault_file 947
[   58.431676][ T4055] total_swap 212992
[   58.435584][ T4055] total_swapcached 4096
[   58.439782][ T4055] total_pgpgin 6836
[   58.443609][ T4055] total_pgpgout 6835
[   58.447522][ T4055] total_pgfault 8531
[   58.451427][ T4055] total_pgmajfault 43
[   58.455498][ T4055] total_inactive_anon 0
[   58.459676][ T4055] total_active_anon 4096
[   58.463927][ T4055] total_inactive_file 0
[   58.468111][ T4055] total_active_file 0
[   58.472105][ T4055] total_unevictable 0
[   58.476090][ T4055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.144,pid=4055,uid=0
[   58.490856][ T4055] Memory cgroup out of memory: Killed process 4055 (syz.3.144) total-vm:94088kB, anon-rss:1260kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   58.538015][ T4084] validate_nla: 1 callbacks suppressed
[   58.538033][ T4084] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[   58.561143][ T4084] bond0: (slave dummy0): Releasing backup interface
[   58.611114][ T4087] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[   58.628671][ T4084] team0: Port device dummy0 added
[   58.638863][ T4087] team0: Port device dummy0 removed
[   58.646918][ T4087] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.797712][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'.
[   58.812991][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'.
[   58.822163][ T4100] IPVS: Error connecting to the multicast addr
[   59.697405][ T4109] SELinux: failed to load policy
[   59.844083][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'.
[   60.184804][ T4139] loop4: detected capacity change from 0 to 7
[   60.198750][ T3307] buffer_io_error: 66 callbacks suppressed
[   60.198767][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.245367][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.257917][ T4141] pim6reg: entered allmulticast mode
[   60.262125][ T3307]  loop4: unable to read partition table
[   60.275869][ T4139] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.297451][ T4139] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.305589][ T4139]  loop4: unable to read partition table
[   60.312649][   T29] kauditd_printk_skb: 798 callbacks suppressed
[   60.312688][   T29] audit: type=1326 audit(1762605529.184:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.363184][ T4139] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   60.376563][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.384961][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.393534][   T29] audit: type=1326 audit(1762605529.184:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.418572][   T29] audit: type=1326 audit(1762605529.184:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.442142][   T29] audit: type=1326 audit(1762605529.184:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.465790][   T29] audit: type=1326 audit(1762605529.184:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.490618][   T29] audit: type=1326 audit(1762605529.184:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.514411][   T29] audit: type=1326 audit(1762605529.184:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.539932][   T29] audit: type=1326 audit(1762605529.224:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.563583][   T29] audit: type=1326 audit(1762605529.224:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7447bf6c9 code=0x7ffc0000
[   60.587154][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.587105][   T29] audit: type=1326 audit(1762605529.224:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7447f1f85 code=0x7ffc0000
[   60.595251][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.636534][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.681550][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.704570][ T4139] pim6reg: left allmulticast mode
[   60.924552][ T4159] pim6reg: entered allmulticast mode
[   60.940512][ T4159] pim6reg: left allmulticast mode
[   60.982616][ T3003]  loop4: unable to read partition table
[   61.085953][ T3003]  loop4: unable to read partition table
[   61.136954][ T4167] IPVS: Error connecting to the multicast addr
[   61.215451][ T4171] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   61.225485][ T4171] SELinux: failed to load policy
[   61.495852][ T4177] loop2: detected capacity change from 0 to 512
[   61.511056][ T4177] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.524252][ T4177] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.532397][ T4177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.541095][ T4177] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   61.564195][ T4177] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   61.569831][ T4180] loop3: detected capacity change from 0 to 512
[   61.586827][ T4180] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.592155][ T4177] EXT4-fs (loop2): mount failed
[   61.619204][ T4180] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.642047][ T3003]  loop4: unable to read partition table
[   61.651194][ T4180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.659775][ T4180] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   61.687762][ T4180] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   61.725084][ T4180] EXT4-fs (loop3): mount failed
[   61.734436][ T4191] pim6reg: entered allmulticast mode
[   61.811095][ T4194] __nla_validate_parse: 6 callbacks suppressed
[   61.811112][ T4194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'.
[   61.827741][ T3003]  loop4: unable to read partition table
[   61.830876][ T4194] IPVS: Error connecting to the multicast addr
[   61.929352][ T4199] SELinux:  policydb magic number 0xfff70003 does not match expected magic number 0xf97cff8c
[   61.939851][ T4199] SELinux: failed to load policy
[   62.111037][ T4208] pim6reg: entered allmulticast mode
[   62.128454][ T4208] pim6reg: left allmulticast mode
[   62.515787][ T4185] syz.4.185 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   62.530108][ T4185] CPU: 0 UID: 0 PID: 4185 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.530144][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   62.530185][ T4185] Call Trace:
[   62.530195][ T4185]  <TASK>
[   62.530204][ T4185]  __dump_stack+0x1d/0x30
[   62.530234][ T4185]  dump_stack_lvl+0xe8/0x140
[   62.530263][ T4185]  dump_stack+0x15/0x1b
[   62.530288][ T4185]  dump_header+0x81/0x220
[   62.530314][ T4185]  oom_kill_process+0x342/0x400
[   62.530419][ T4185]  out_of_memory+0x979/0xb80
[   62.530454][ T4185]  try_charge_memcg+0x610/0xa10
[   62.530497][ T4185]  obj_cgroup_charge_pages+0xa6/0x150
[   62.530527][ T4185]  __memcg_kmem_charge_page+0x9f/0x170
[   62.530641][ T4185]  __alloc_frozen_pages_noprof+0x188/0x360
[   62.530676][ T4185]  alloc_pages_mpol+0xb3/0x260
[   62.530705][ T4185]  ? alloc_pages_noprof+0x61/0x130
[   62.530786][ T4185]  alloc_pages_noprof+0x90/0x130
[   62.530808][ T4185]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   62.530859][ T4185]  __kvmalloc_node_noprof+0x483/0x670
[   62.530985][ T4185]  ? ip_set_alloc+0x24/0x30
[   62.531117][ T4185]  ? ip_set_alloc+0x24/0x30
[   62.531167][ T4185]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   62.531261][ T4185]  ip_set_alloc+0x24/0x30
[   62.531372][ T4185]  hash_netiface_create+0x282/0x740
[   62.531412][ T4185]  ? __pfx_hash_netiface_create+0x10/0x10
[   62.531502][ T4185]  ip_set_create+0x3cc/0x970
[   62.531541][ T4185]  nfnetlink_rcv_msg+0x4c6/0x590
[   62.531675][ T4185]  netlink_rcv_skb+0x123/0x220
[   62.531721][ T4185]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   62.531773][ T4185]  nfnetlink_rcv+0x167/0x16c0
[   62.531889][ T4185]  ? kmem_cache_free+0xe4/0x3d0
[   62.531929][ T4185]  ? __kfree_skb+0x109/0x150
[   62.531961][ T4185]  ? nlmon_xmit+0x4f/0x60
[   62.532042][ T4185]  ? consume_skb+0x49/0x150
[   62.532089][ T4185]  ? nlmon_xmit+0x4f/0x60
[   62.532183][ T4185]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   62.532297][ T4185]  ? __dev_queue_xmit+0x1200/0x2000
[   62.532318][ T4185]  ? __dev_queue_xmit+0x182/0x2000
[   62.532341][ T4185]  ? ref_tracker_free+0x37d/0x3e0
[   62.532489][ T4185]  ? __netlink_deliver_tap+0x4dc/0x500
[   62.532542][ T4185]  netlink_unicast+0x5c0/0x690
[   62.532584][ T4185]  netlink_sendmsg+0x58b/0x6b0
[   62.532605][ T4185]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.532695][ T4185]  __sock_sendmsg+0x145/0x180
[   62.532722][ T4185]  ____sys_sendmsg+0x31e/0x4e0
[   62.532767][ T4185]  ___sys_sendmsg+0x17b/0x1d0
[   62.532838][ T4185]  __x64_sys_sendmsg+0xd4/0x160
[   62.532863][ T4185]  x64_sys_call+0x191e/0x3000
[   62.532892][ T4185]  do_syscall_64+0xd2/0x200
[   62.532957][ T4185]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   62.533038][ T4185]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   62.533073][ T4185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.533098][ T4185] RIP: 0033:0x7fe7447bf6c9
[   62.533168][ T4185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.533190][ T4185] RSP: 002b:00007fe74321f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.533217][ T4185] RAX: ffffffffffffffda RBX: 00007fe744a15fa0 RCX: 00007fe7447bf6c9
[   62.533231][ T4185] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[   62.533248][ T4185] RBP: 00007fe744841f91 R08: 0000000000000000 R09: 0000000000000000
[   62.533264][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.533281][ T4185] R13: 00007fe744a16038 R14: 00007fe744a15fa0 R15: 00007ffd0c210868
[   62.533307][ T4185]  </TASK>
[   62.533394][ T4185] memory: usage 307200kB, limit 307200kB, failcnt 361
[   62.884862][ T4185] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[   62.892912][ T4185] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   62.900511][ T4185] Memory cgroup stats for /syz4:
[   62.901835][ T3003]  loop4: unable to read partition table
[   62.914096][ T4185] cache 0
[   62.917094][ T4185] rss 0
[   62.919935][ T4185] shmem 0
[   62.922890][ T4185] mapped_file 0
[   62.926646][ T4185] dirty 0
[   62.929601][ T4185] writeback 0
[   62.932919][ T4185] workingset_refault_anon 62
[   62.937666][ T4185] workingset_refault_file 498
[   62.942455][ T4185] swap 196608
[   62.945792][ T4185] swapcached 4096
[   62.949539][ T4185] pgpgin 23353
[   62.953162][ T4185] pgpgout 23352
[   62.956838][ T4185] pgfault 8339
[   62.960944][ T4185] pgmajfault 37
[   62.964463][ T4185] inactive_anon 4096
[   62.968529][ T4185] active_anon 0
[   62.972074][ T4185] inactive_file 0
[   62.975726][ T4185] active_file 0
[   62.979241][ T4185] unevictable 0
[   62.982743][ T4185] hierarchical_memory_limit 314572800
[   62.988174][ T4185] hierarchical_memsw_limit 9223372036854771712
[   62.994345][ T4185] total_cache 0
[   62.997893][ T4185] total_rss 0
[   63.001233][ T4185] total_shmem 0
[   63.005868][ T4185] total_mapped_file 0
[   63.010120][ T4185] total_dirty 0
[   63.013739][ T4185] total_writeback 0
[   63.017633][ T4185] total_workingset_refault_anon 62
[   63.022760][ T4185] total_workingset_refault_file 498
[   63.028250][ T4185] total_swap 196608
[   63.032231][ T4185] total_swapcached 4096
[   63.036502][ T4185] total_pgpgin 23353
[   63.040417][ T4185] total_pgpgout 23352
[   63.044480][ T4185] total_pgfault 8339
[   63.048424][ T4185] total_pgmajfault 37
[   63.052515][ T4185] total_inactive_anon 4096
[   63.057293][ T4185] total_active_anon 0
[   63.061387][ T4185] total_inactive_file 0
[   63.065564][ T4185] total_active_file 0
[   63.069761][ T4185] total_unevictable 0
[   63.073850][ T4185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.185,pid=4183,uid=0
[   63.088587][ T4185] Memory cgroup out of memory: Killed process 4183 (syz.4.185) total-vm:96004kB, anon-rss:1132kB, file-rss:22576kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   63.182822][ T4221] syzkaller0: entered promiscuous mode
[   63.188372][ T4221] syzkaller0: entered allmulticast mode
[   63.211281][ T4222] pim6reg: entered allmulticast mode
[   63.228823][ T4222] pim6reg: left allmulticast mode
[   63.312789][ T3003]  loop4: unable to read partition table
[   63.342938][ T3003]  loop4: unable to read partition table
[   63.358156][ T4228] SELinux: failed to load policy
[   63.377312][ T4229] pim6reg: entered allmulticast mode
[   63.392543][ T4229] pim6reg: left allmulticast mode
[   63.444382][ T4238] SELinux:  policydb magic number 0xfff70003 does not match expected magic number 0xf97cff8c
[   63.487432][ T4238] SELinux: failed to load policy
[   63.532970][ T4242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'.
[   63.575580][ T4242] IPVS: Error connecting to the multicast addr
[   63.586180][ T3003]  loop4: unable to read partition table
[   63.611323][ T3003]  loop4: unable to read partition table
[   63.935798][ T4252] netlink: 19 bytes leftover after parsing attributes in process `syz.1.204'.
[   64.106311][ T3003]  loop4: unable to read partition table
[   64.302420][ T4260] SELinux: failed to load policy
[   64.391723][ T4266] SELinux: failed to load policy
[   64.474624][ T4279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.510488][ T4283] loop4: detected capacity change from 0 to 512
[   64.521259][ T4283] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.537705][ T4283] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.545507][ T4279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.556800][ T4283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.565248][ T4283] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.577131][ T4286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'.
[   64.601797][ T4279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.613567][ T4283] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.628986][ T4286] IPVS: Error connecting to the multicast addr
[   64.629299][ T4283] EXT4-fs (loop4): mount failed
[   64.689981][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.739927][ T4296] syz.4.217 uses obsolete (PF_INET,SOCK_PACKET)
[   64.785409][ T1722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.797731][ T1722] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.810269][ T1722] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.089245][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'.
[   65.315439][ T4315] pim6reg: left allmulticast mode
[   65.370564][ T4319] pim6reg: entered allmulticast mode
[   65.376588][ T1722] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.399964][   T29] kauditd_printk_skb: 814 callbacks suppressed
[   65.399982][   T29] audit: type=1326 audit(1762605534.274:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34284cf6c9 code=0x7ffc0000
[   65.493157][   T29] audit: type=1326 audit(1762605534.284:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.516625][   T29] audit: type=1326 audit(1762605534.284:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.540240][   T29] audit: type=1326 audit(1762605534.284:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.563696][   T29] audit: type=1326 audit(1762605534.284:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.587096][   T29] audit: type=1326 audit(1762605534.284:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.610661][   T29] audit: type=1326 audit(1762605534.284:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.634205][   T29] audit: type=1326 audit(1762605534.284:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd93e615e7 code=0x7ffc0000
[   65.657710][   T29] audit: type=1326 audit(1762605534.284:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.681174][   T29] audit: type=1326 audit(1762605534.284:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   65.837243][ T4319] pim6reg: left allmulticast mode
[   66.282434][ T4347] xt_TPROXY: Can be used only with -p tcp or -p udp
[   66.524346][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.234'.
[   66.537160][ T4359] netlink: 148 bytes leftover after parsing attributes in process `syz.4.234'.
[   67.078753][ T4369] loop4: detected capacity change from 0 to 7
[   67.085791][ T3307] buffer_io_error: 124 callbacks suppressed
[   67.085869][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.101385][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.109331][ T3307]  loop4: unable to read partition table
[   67.158002][ T4370] pim6reg: entered allmulticast mode
[   67.176124][ T4369] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.186328][ T4369] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.194332][ T4369]  loop4: unable to read partition table
[   67.236666][ T4369] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   67.237186][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.294880][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.303788][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   67.314181][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.343246][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.343445][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'.
[   67.363487][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.370347][ T4370] pim6reg: left allmulticast mode
[   67.532167][ T4379] IPVS: Error connecting to the multicast addr
[   67.563844][ T4387] netlink: 48 bytes leftover after parsing attributes in process `syz.2.241'.
[   67.622321][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'.
[   67.731799][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   67.787251][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   67.901365][ T4396] loop1: detected capacity change from 0 to 512
[   67.974956][ T4396] EXT4-fs: Ignoring removed oldalloc option
[   68.124851][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.149252][ T4396] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   68.183348][ T4404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.246'.
[   68.255138][ T4396] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.245: bg 0: block 217: padding at end of block bitmap is not set
[   68.436778][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.617544][ T4413] pim6reg: entered allmulticast mode
[   69.145129][ T4426] loop4: detected capacity change from 0 to 512
[   69.152746][ T4426] EXT4-fs: Ignoring removed nobh option
[   69.170416][ T4426] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.253: corrupted inode contents
[   69.185136][ T4426] EXT4-fs (loop4): Remounting filesystem read-only
[   69.195170][ T4426] EXT4-fs (loop4): 1 truncate cleaned up
[   69.205574][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.231720][ T4426] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.283909][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.320200][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'.
[   69.342123][ T4433] IPVS: Error connecting to the multicast addr
[   69.541514][ T4448] loop4: detected capacity change from 0 to 7
[   69.602476][ T4448]  loop4: unable to read partition table
[   69.636402][ T4448] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   69.650763][ T4454] pim6reg: entered allmulticast mode
[   69.850624][ T4448] pim6reg: left allmulticast mode
[   70.546865][   T29] kauditd_printk_skb: 950 callbacks suppressed
[   70.546879][   T29] audit: type=1400 audit(1762605539.424:4609): avc:  denied  { bind } for  pid=4462 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.631065][   T29] audit: type=1400 audit(1762605539.444:4610): avc:  denied  { write } for  pid=4462 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.650389][   T29] audit: type=1400 audit(1762605539.474:4611): avc:  denied  { ioctl } for  pid=4462 comm="syz.1.264" path="socket:[8647]" dev="sockfs" ino=8647 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.755306][   T29] audit: type=1400 audit(1762605539.624:4612): avc:  denied  { write } for  pid=4471 comm="syz.2.266" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   70.826933][   T29] audit: type=1400 audit(1762605539.674:4613): avc:  denied  { write } for  pid=4462 comm="syz.1.264" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   70.850394][   T29] audit: type=1400 audit(1762605539.674:4614): avc:  denied  { read write } for  pid=4462 comm="syz.1.264" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   70.874918][   T29] audit: type=1400 audit(1762605539.674:4615): avc:  denied  { open } for  pid=4462 comm="syz.1.264" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   70.991082][ T4477] loop2: detected capacity change from 0 to 512
[   70.998921][ T4477] EXT4-fs: Ignoring removed nobh option
[   71.011318][   T29] audit: type=1400 audit(1762605539.854:4616): avc:  denied  { lock } for  pid=4475 comm="syz.3.267" path="socket:[8661]" dev="sockfs" ino=8661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.034559][   T29] audit: type=1326 audit(1762605539.854:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   71.058260][   T29] audit: type=1326 audit(1762605539.854:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   71.146846][ T4477] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.268: corrupted inode contents
[   71.185079][ T4480] loop3: detected capacity change from 0 to 2048
[   71.193036][ T4477] EXT4-fs (loop2): Remounting filesystem read-only
[   71.203137][ T4477] EXT4-fs (loop2): 1 truncate cleaned up
[   71.212412][ T4477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.226620][ T4477] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.239404][ T4477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.328026][ T4480] Alternate GPT is invalid, using primary GPT.
[   71.334537][ T4480]  loop3: p1 p2 p3
[   71.338397][ T4480] loop3: partition table partially beyond EOD, truncated
[   71.438370][ T4486] SELinux: failed to load policy
[   71.485960][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[   71.521030][ T4491] pim6reg: left allmulticast mode
[   71.552496][ T4492] loop4: detected capacity change from 0 to 512
[   71.598354][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.665951][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'.
[   71.687447][ T4492] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.710965][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'.
[   72.151680][ T4516] loop3: detected capacity change from 0 to 512
[   72.167032][ T4516] EXT4-fs: Ignoring removed nobh option
[   72.193581][ T4516] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.280: corrupted inode contents
[   72.226078][ T4516] EXT4-fs (loop3): Remounting filesystem read-only
[   72.247033][ T4516] EXT4-fs (loop3): 1 truncate cleaned up
[   72.253196][ T4516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.282486][ T4516] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.303457][ T4516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.354185][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.471259][ T4526] loop3: detected capacity change from 0 to 2048
[   72.552553][ T4526] Alternate GPT is invalid, using primary GPT.
[   72.558945][ T4526]  loop3: p1 p2 p3
[   72.562696][ T4526] loop3: partition table partially beyond EOD, truncated
[   72.707405][ T4534] netlink: 'syz.4.287': attribute type 32 has an invalid length.
[   72.823834][ T4541] loop3: detected capacity change from 0 to 128
[   72.831817][ T4541] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   72.845383][ T4541] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   72.882469][ T4541] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   72.891210][ T4541] FAT-fs (loop3): Filesystem has been set read-only
[   72.985182][ T4547] loop4: detected capacity change from 0 to 512
[   73.027892][ T4547] EXT4-fs: Ignoring removed nobh option
[   73.065525][ T4547] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.292: corrupted inode contents
[   73.122405][ T4547] EXT4-fs (loop4): Remounting filesystem read-only
[   73.135420][ T4547] EXT4-fs (loop4): 1 truncate cleaned up
[   73.159831][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.199947][ T4547] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.234970][ T4547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.349641][ T4556] __nla_validate_parse: 1 callbacks suppressed
[   73.349662][ T4556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.294'.
[   73.524798][ T4575] loop1: detected capacity change from 0 to 512
[   73.539412][ T4575] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.566613][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option
[   73.581895][ T4575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   73.590490][ T4575] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   73.629430][ T4575] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   73.661799][ T4583] loop4: detected capacity change from 0 to 2048
[   73.669151][ T4575] EXT4-fs (loop1): mount failed
[   73.703269][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.727026][ T4583] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.774607][ T4591] FAULT_INJECTION: forcing a failure.
[   73.774607][ T4591] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   73.787795][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.787826][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   73.787842][ T4591] Call Trace:
[   73.787851][ T4591]  <TASK>
[   73.787863][ T4591]  __dump_stack+0x1d/0x30
[   73.787893][ T4591]  dump_stack_lvl+0xe8/0x140
[   73.787915][ T4591]  dump_stack+0x15/0x1b
[   73.787932][ T4591]  should_fail_ex+0x265/0x280
[   73.787953][ T4591]  should_fail+0xb/0x20
[   73.788006][ T4591]  should_fail_usercopy+0x1a/0x20
[   73.788031][ T4591]  _copy_from_user+0x1c/0xb0
[   73.788139][ T4591]  ___sys_sendmsg+0xc1/0x1d0
[   73.788246][ T4591]  __x64_sys_sendmsg+0xd4/0x160
[   73.788270][ T4591]  x64_sys_call+0x191e/0x3000
[   73.788300][ T4591]  do_syscall_64+0xd2/0x200
[   73.788351][ T4591]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   73.788380][ T4591]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   73.788499][ T4591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.788528][ T4591] RIP: 0033:0x7f825fa2f6c9
[   73.788548][ T4591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.788568][ T4591] RSP: 002b:00007f825e48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.788587][ T4591] RAX: ffffffffffffffda RBX: 00007f825fc85fa0 RCX: 00007f825fa2f6c9
[   73.788655][ T4591] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[   73.788672][ T4591] RBP: 00007f825e48f090 R08: 0000000000000000 R09: 0000000000000000
[   73.788700][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.788717][ T4591] R13: 00007f825fc86038 R14: 00007f825fc85fa0 R15: 00007ffc05aaa528
[   73.788742][ T4591]  </TASK>
[   73.794644][ T4589] loop1: detected capacity change from 0 to 512
[   73.985370][ T4594] can: request_module (can-proto-3) failed.
[   73.992630][ T4594] netlink: 'syz.2.308': attribute type 1 has an invalid length.
[   73.998202][ T4589] EXT4-fs: Ignoring removed nobh option
[   74.043585][ T4589] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.305: corrupted inode contents
[   74.059600][ T4601] pim6reg: entered allmulticast mode
[   74.065233][ T4589] EXT4-fs (loop1): Remounting filesystem read-only
[   74.084604][ T4589] EXT4-fs (loop1): 1 truncate cleaned up
[   74.097115][ T4589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.121983][ T4601] pim6reg: left allmulticast mode
[   74.135974][ T4589] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.171856][ T4589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.228603][ T4611] loop2: detected capacity change from 0 to 512
[   74.262839][ T4611] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   74.292470][ T3542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set
[   74.330243][ T3542] EXT4-fs (loop4): Remounting filesystem read-only
[   74.336985][ T3597] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   74.685932][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.741957][ T4631] netlink: 148 bytes leftover after parsing attributes in process `syz.4.319'.
[   74.872076][ T4639] loop1: detected capacity change from 0 to 512
[   74.879056][ T4639] EXT4-fs: Ignoring removed nobh option
[   74.897948][ T4639] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.324: corrupted inode contents
[   74.914638][ T4639] EXT4-fs (loop1): Remounting filesystem read-only
[   74.921348][ T4640] loop0: detected capacity change from 0 to 128
[   74.934726][ T4639] EXT4-fs (loop1): 1 truncate cleaned up
[   74.938869][ T4640] =======================================================
[   74.938869][ T4640] WARNING: The mand mount option has been deprecated and
[   74.938869][ T4640]          and is ignored by this kernel. Remove the mand
[   74.938869][ T4640]          option from the mount to silence this warning.
[   74.938869][ T4640] =======================================================
[   74.947002][ T4639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.988224][ T4639] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.998939][ T4640] vfat: Unknown parameter '�'
[   75.004130][ T4639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.136505][ T4651] FAULT_INJECTION: forcing a failure.
[   75.136505][ T4651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.149843][ T4651] CPU: 1 UID: 0 PID: 4651 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.149874][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   75.149897][ T4651] Call Trace:
[   75.149906][ T4651]  <TASK>
[   75.149916][ T4651]  __dump_stack+0x1d/0x30
[   75.149951][ T4651]  dump_stack_lvl+0xe8/0x140
[   75.149976][ T4651]  dump_stack+0x15/0x1b
[   75.149999][ T4651]  should_fail_ex+0x265/0x280
[   75.150025][ T4651]  should_fail+0xb/0x20
[   75.150078][ T4651]  should_fail_usercopy+0x1a/0x20
[   75.150100][ T4651]  _copy_from_iter+0xd2/0xe80
[   75.150129][ T4651]  ? __rcu_read_unlock+0x4f/0x70
[   75.150155][ T4651]  ? mntput_no_expire+0x6f/0x440
[   75.150191][ T4651]  ? __rcu_read_unlock+0x4f/0x70
[   75.150225][ T4651]  rawv6_sendmsg+0x81f/0xf70
[   75.150277][ T4651]  ? __pfx_rawv6_sendmsg+0x10/0x10
[   75.150311][ T4651]  inet_sendmsg+0xc5/0xd0
[   75.150455][ T4651]  __sock_sendmsg+0x102/0x180
[   75.150489][ T4651]  __sys_sendto+0x268/0x330
[   75.150549][ T4651]  __x64_sys_sendto+0x76/0x90
[   75.150580][ T4651]  x64_sys_call+0x2d14/0x3000
[   75.150606][ T4651]  do_syscall_64+0xd2/0x200
[   75.150655][ T4651]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   75.150690][ T4651]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   75.150800][ T4651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.150825][ T4651] RIP: 0033:0x7efd93e5f6c9
[   75.150845][ T4651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.150869][ T4651] RSP: 002b:00007efd928c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   75.150915][ T4651] RAX: ffffffffffffffda RBX: 00007efd940b5fa0 RCX: 00007efd93e5f6c9
[   75.151008][ T4651] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000003
[   75.151023][ T4651] RBP: 00007efd928c7090 R08: 0000000000000000 R09: fffffffffffffdfd
[   75.151040][ T4651] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001
[   75.151056][ T4651] R13: 00007efd940b6038 R14: 00007efd940b5fa0 R15: 00007ffe60b983d8
[   75.151082][ T4651]  </TASK>
[   75.398157][ T4657] loop1: detected capacity change from 0 to 2048
[   75.418710][ T4657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.435028][ T4657] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.720760][ T4669] netlink: 148 bytes leftover after parsing attributes in process `syz.0.331'.
[   75.792243][   T29] kauditd_printk_skb: 947 callbacks suppressed
[   75.792261][   T29] audit: type=1400 audit(1762605544.664:5555): avc:  denied  { setattr } for  pid=4670 comm="syz.4.332" name="file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   76.055597][ T4678] SELinux: failed to load policy
[   76.103249][ T4681] loop3: detected capacity change from 0 to 512
[   76.120866][ T4681] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   76.191239][ T4685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.338'.
[   76.200767][   T29] audit: type=1400 audit(1762605544.704:5556): avc:  denied  { ioctl } for  pid=4670 comm="syz.4.332" path="socket:[9430]" dev="sockfs" ino=9430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.225881][   T29] audit: type=1400 audit(1762605545.084:5557): avc:  denied  { write } for  pid=4680 comm="syz.3.337" path="socket:[9460]" dev="sockfs" ino=9460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.303021][   T29] audit: type=1400 audit(1762605545.174:5558): avc:  denied  { read write } for  pid=4690 comm="syz.0.340" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.326654][   T29] audit: type=1400 audit(1762605545.174:5559): avc:  denied  { open } for  pid=4690 comm="syz.0.340" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.410892][ T3597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 345: padding at end of block bitmap is not set
[   76.454134][ T3597] EXT4-fs (loop1): Remounting filesystem read-only
[   76.460859][ T3542] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   76.515919][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'.
[   76.692578][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.933144][ T4719] netlink: 'syz.0.347': attribute type 32 has an invalid length.
[   76.992324][ T4724] FAULT_INJECTION: forcing a failure.
[   76.992324][ T4724] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.005588][ T4724] CPU: 1 UID: 0 PID: 4724 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.005623][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   77.005666][ T4724] Call Trace:
[   77.005671][ T4724]  <TASK>
[   77.005723][ T4724]  __dump_stack+0x1d/0x30
[   77.005792][ T4724]  dump_stack_lvl+0xe8/0x140
[   77.005820][ T4724]  dump_stack+0x15/0x1b
[   77.005844][ T4724]  should_fail_ex+0x265/0x280
[   77.005907][ T4724]  should_fail+0xb/0x20
[   77.005923][ T4724]  should_fail_usercopy+0x1a/0x20
[   77.005955][ T4724]  _copy_from_user+0x1c/0xb0
[   77.006043][ T4724]  ___sys_sendmsg+0xc1/0x1d0
[   77.006087][ T4724]  __x64_sys_sendmsg+0xd4/0x160
[   77.006183][ T4724]  x64_sys_call+0x191e/0x3000
[   77.006280][ T4724]  do_syscall_64+0xd2/0x200
[   77.006312][ T4724]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   77.006381][ T4724]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   77.006434][ T4724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.006457][ T4724] RIP: 0033:0x7f1b1b4af6c9
[   77.006505][ T4724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.006571][ T4724] RSP: 002b:00007f1b19f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.006638][ T4724] RAX: ffffffffffffffda RBX: 00007f1b1b705fa0 RCX: 00007f1b1b4af6c9
[   77.006655][ T4724] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[   77.006671][ T4724] RBP: 00007f1b19f17090 R08: 0000000000000000 R09: 0000000000000000
[   77.006811][ T4724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.006827][ T4724] R13: 00007f1b1b706038 R14: 00007f1b1b705fa0 R15: 00007ffd52764e08
[   77.006852][ T4724]  </TASK>
[   77.087252][   T29] audit: type=1400 audit(1762605545.864:5560): avc:  denied  { ioctl } for  pid=4722 comm="syz.0.349" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   77.224927][   T29] audit: type=1326 audit(1762605546.094:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34284cf6c9 code=0x7ffc0000
[   77.254425][ T4732] loop3: detected capacity change from 0 to 512
[   77.261381][ T4732] EXT4-fs: Ignoring removed nobh option
[   77.267050][   T29] audit: type=1326 audit(1762605546.124:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34284cf6c9 code=0x7ffc0000
[   77.290661][   T29] audit: type=1326 audit(1762605546.124:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34284cf6c9 code=0x7ffc0000
[   77.314242][   T29] audit: type=1326 audit(1762605546.124:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34284cf6c9 code=0x7ffc0000
[   77.398873][ T4732] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.351: corrupted inode contents
[   77.424939][ T4732] EXT4-fs (loop3): Remounting filesystem read-only
[   77.439926][ T4732] EXT4-fs (loop3): 1 truncate cleaned up
[   77.452612][ T4732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.479526][ T4732] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.524214][ T4732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.742080][ T4740] loop1: detected capacity change from 0 to 2048
[   77.849335][ T4740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.906468][ T4740] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.125946][ T4752] loop0: detected capacity change from 0 to 2048
[   78.159648][ T4752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.176440][ T4752] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.624198][ T3597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 345: padding at end of block bitmap is not set
[   78.676289][ T3597] EXT4-fs (loop1): Remounting filesystem read-only
[   78.684910][ T3550] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   78.903456][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.106398][ T3566] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:36: bg 0: block 345: padding at end of block bitmap is not set
[   79.142977][ T3566] EXT4-fs (loop0): Remounting filesystem read-only
[   79.154265][ T3551] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   79.387354][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.470418][ T4788] SELinux: failed to load policy
[   79.763735][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'.
[   79.900311][ T4805] IPVS: Error connecting to the multicast addr
[   79.901208][ T4782] syz.2.365 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   79.920708][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.2.365 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.920764][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   79.920781][ T4782] Call Trace:
[   79.920790][ T4782]  <TASK>
[   79.920875][ T4782]  __dump_stack+0x1d/0x30
[   79.920907][ T4782]  dump_stack_lvl+0xe8/0x140
[   79.920936][ T4782]  dump_stack+0x15/0x1b
[   79.920954][ T4782]  dump_header+0x81/0x220
[   79.920978][ T4782]  oom_kill_process+0x342/0x400
[   79.921024][ T4782]  out_of_memory+0x979/0xb80
[   79.921072][ T4782]  try_charge_memcg+0x610/0xa10
[   79.921190][ T4782]  obj_cgroup_charge_pages+0xa6/0x150
[   79.921221][ T4782]  __memcg_kmem_charge_page+0x9f/0x170
[   79.921252][ T4782]  __alloc_frozen_pages_noprof+0x188/0x360
[   79.921285][ T4782]  alloc_pages_mpol+0xb3/0x260
[   79.921315][ T4782]  ? alloc_pages_noprof+0xf4/0x130
[   79.921374][ T4782]  alloc_pages_noprof+0x90/0x130
[   79.921404][ T4782]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   79.921475][ T4782]  __kvmalloc_node_noprof+0x483/0x670
[   79.921526][ T4782]  ? ip_set_alloc+0x24/0x30
[   79.921573][ T4782]  ? ip_set_alloc+0x24/0x30
[   79.921617][ T4782]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   79.921673][ T4782]  ip_set_alloc+0x24/0x30
[   79.921711][ T4782]  hash_netiface_create+0x282/0x740
[   79.921756][ T4782]  ? __pfx_hash_netiface_create+0x10/0x10
[   79.921815][ T4782]  ip_set_create+0x3cc/0x970
[   79.921854][ T4782]  ? __nla_parse+0x40/0x60
[   79.921885][ T4782]  nfnetlink_rcv_msg+0x4c6/0x590
[   79.921958][ T4782]  netlink_rcv_skb+0x123/0x220
[   79.922004][ T4782]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   79.922048][ T4782]  nfnetlink_rcv+0x167/0x16c0
[   79.922126][ T4782]  ? kmem_cache_free+0xe4/0x3d0
[   79.922168][ T4782]  ? __kfree_skb+0x109/0x150
[   79.922201][ T4782]  ? nlmon_xmit+0x4f/0x60
[   79.922230][ T4782]  ? consume_skb+0x49/0x150
[   79.922302][ T4782]  ? nlmon_xmit+0x4f/0x60
[   79.922374][ T4782]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   79.922418][ T4782]  ? __dev_queue_xmit+0x1200/0x2000
[   79.922444][ T4782]  ? __dev_queue_xmit+0x182/0x2000
[   79.922513][ T4782]  ? ref_tracker_free+0x37d/0x3e0
[   79.922570][ T4782]  ? __netlink_deliver_tap+0x4dc/0x500
[   79.922650][ T4782]  netlink_unicast+0x5c0/0x690
[   79.922703][ T4782]  netlink_sendmsg+0x58b/0x6b0
[   79.922758][ T4782]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.922786][ T4782]  __sock_sendmsg+0x145/0x180
[   79.922819][ T4782]  ____sys_sendmsg+0x31e/0x4e0
[   79.922872][ T4782]  ___sys_sendmsg+0x17b/0x1d0
[   79.923063][ T4782]  __x64_sys_sendmsg+0xd4/0x160
[   79.923097][ T4782]  x64_sys_call+0x191e/0x3000
[   79.923129][ T4782]  do_syscall_64+0xd2/0x200
[   79.923213][ T4782]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   79.923253][ T4782]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   79.923303][ T4782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.923333][ T4782] RIP: 0033:0x7f825fa2f6c9
[   79.923352][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.923426][ T4782] RSP: 002b:00007f825e48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.923459][ T4782] RAX: ffffffffffffffda RBX: 00007f825fc85fa0 RCX: 00007f825fa2f6c9
[   79.923477][ T4782] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[   79.923494][ T4782] RBP: 00007f825fab1f91 R08: 0000000000000000 R09: 0000000000000000
[   79.923511][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.923605][ T4782] R13: 00007f825fc86038 R14: 00007f825fc85fa0 R15: 00007ffc05aaa528
[   79.923627][ T4782]  </TASK>
[   79.923635][ T4782] memory: usage 307200kB, limit 307200kB, failcnt 273
[   80.278560][ T4782] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[   80.286503][ T4782] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[   80.293796][ T4782] Memory cgroup stats for /syz2:
[   80.310173][ T4782] cache 0
[   80.318159][ T4782] rss 4096
[   80.321297][ T4782] shmem 0
[   80.324245][ T4782] mapped_file 0
[   80.327833][ T4782] dirty 0
[   80.330844][ T4782] writeback 0
[   80.334133][ T4782] workingset_refault_anon 90
[   80.338811][ T4782] workingset_refault_file 12720
[   80.343681][ T4782] swap 188416
[   80.347018][ T4782] swapcached 20480
[   80.350790][ T4782] pgpgin 126665
[   80.354336][ T4782] pgpgout 126660
[   80.358060][ T4782] pgfault 34088
[   80.361532][ T4782] pgmajfault 77
[   80.365033][ T4782] inactive_anon 8192
[   80.368955][ T4782] active_anon 12288
[   80.372846][ T4782] inactive_file 0
[   80.376601][ T4782] active_file 0
[   80.380078][ T4782] unevictable 0
[   80.383551][ T4782] hierarchical_memory_limit 314572800
[   80.388952][ T4782] hierarchical_memsw_limit 9223372036854771712
[   80.395317][ T4782] total_cache 0
[   80.399022][ T4782] total_rss 4096
[   80.402640][ T4782] total_shmem 0
[   80.406135][ T4782] total_mapped_file 0
[   80.410152][ T4782] total_dirty 0
[   80.413621][ T4782] total_writeback 0
[   80.417477][ T4782] total_workingset_refault_anon 90
[   80.422641][ T4782] total_workingset_refault_file 12720
[   80.428063][ T4782] total_swap 188416
[   80.431891][ T4782] total_swapcached 20480
[   80.436149][ T4782] total_pgpgin 126665
[   80.440188][ T4782] total_pgpgout 126660
[   80.444271][ T4782] total_pgfault 34088
[   80.448313][ T4782] total_pgmajfault 77
[   80.452307][ T4782] total_inactive_anon 8192
[   80.456824][ T4782] total_active_anon 12288
[   80.461173][ T4782] total_inactive_file 0
[   80.465342][ T4782] total_active_file 0
[   80.469374][ T4782] total_unevictable 0
[   80.473377][ T4782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.365,pid=4780,uid=0
[   80.487993][ T4782] Memory cgroup out of memory: Killed process 4780 (syz.2.365) total-vm:93956kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   80.553039][ T4814] loop0: detected capacity change from 0 to 512
[   80.561452][ T4814] EXT4-fs: Ignoring removed mblk_io_submit option
[   80.573969][ T4814] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.601309][ T4814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.610035][ T4814] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.727075][ T4814] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   80.782658][ T4814] EXT4-fs (loop0): mount failed
[   80.813849][ T4819] SELinux:  policydb magic number 0xfff70003 does not match expected magic number 0xf97cff8c
[   80.832743][ T4819] SELinux: failed to load policy
[   80.922230][   T29] kauditd_printk_skb: 435 callbacks suppressed
[   80.922245][   T29] audit: type=1400 audit(1762605549.794:5997): avc:  denied  { read } for  pid=4824 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   80.951313][ T4827] loop4: detected capacity change from 0 to 7
[   80.958262][ T3307] buffer_io_error: 16 callbacks suppressed
[   80.958277][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   80.979500][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   80.987504][ T3307]  loop4: unable to read partition table
[   81.028204][ T4830] netlink: 'syz.3.380': attribute type 10 has an invalid length.
[   81.036895][ T4827] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.044935][ T4827] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.052870][ T4827]  loop4: unable to read partition table
[   81.109917][ T4827] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   81.111070][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.144305][ T4830] bond0: (slave dummy0): Releasing backup interface
[   81.154514][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.162616][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.170990][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.179157][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.187414][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   81.190125][ T4830] team0: Port device dummy0 added
[   81.266285][   T29] audit: type=1326 audit(1762605550.134:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.289711][   T29] audit: type=1326 audit(1762605550.134:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.313147][   T29] audit: type=1326 audit(1762605550.134:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.336724][   T29] audit: type=1326 audit(1762605550.134:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.340411][ T4837] FAULT_INJECTION: forcing a failure.
[   81.340411][ T4837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.360196][   T29] audit: type=1326 audit(1762605550.134:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.373383][ T4837] CPU: 1 UID: 0 PID: 4837 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   81.373449][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   81.373465][ T4837] Call Trace:
[   81.373475][ T4837]  <TASK>
[   81.373488][ T4837]  __dump_stack+0x1d/0x30
[   81.373601][ T4837]  dump_stack_lvl+0xe8/0x140
[   81.373631][ T4837]  dump_stack+0x15/0x1b
[   81.373657][ T4837]  should_fail_ex+0x265/0x280
[   81.373687][ T4837]  should_fail+0xb/0x20
[   81.373711][ T4837]  should_fail_usercopy+0x1a/0x20
[   81.373810][ T4837]  _copy_from_user+0x1c/0xb0
[   81.373848][ T4837]  do_replace+0x8a/0x320
[   81.373925][ T4837]  do_ebt_set_ctl+0x12e/0xac0
[   81.373965][ T4837]  ? __rcu_read_unlock+0x4f/0x70
[   81.374002][ T4837]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[   81.374108][ T4837]  ? ip4_datagram_release_cb+0x351/0x380
[   81.374140][ T4837]  ? lock_sock_nested+0x112/0x140
[   81.374178][ T4837]  ? _raw_spin_unlock_bh+0x36/0x40
[   81.374226][ T4837]  ? release_sock+0x116/0x150
[   81.374265][ T4837]  ? sockopt_release_sock+0x42/0x50
[   81.374353][ T4837]  ? do_ip_setsockopt+0x1af3/0x2240
[   81.374418][ T4837]  nf_setsockopt+0x199/0x1b0
[   81.374455][ T4837]  ip_setsockopt+0x102/0x110
[   81.374500][ T4837]  sock_common_setsockopt+0x69/0x80
[   81.374595][ T4837]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   81.374633][ T4837]  __sys_setsockopt+0x184/0x200
[   81.374714][ T4837]  __x64_sys_setsockopt+0x64/0x80
[   81.374767][ T4837]  x64_sys_call+0x20ec/0x3000
[   81.374801][ T4837]  do_syscall_64+0xd2/0x200
[   81.374858][ T4837]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   81.374902][ T4837]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   81.374951][ T4837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.374983][ T4837] RIP: 0033:0x7efd93e5f6c9
[   81.375055][ T4837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.375081][ T4837] RSP: 002b:00007efd928c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.375108][ T4837] RAX: ffffffffffffffda RBX: 00007efd940b5fa0 RCX: 00007efd93e5f6c9
[   81.375126][ T4837] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[   81.375165][ T4837] RBP: 00007efd928c7090 R08: 0000000000000108 R09: 0000000000000000
[   81.375177][ T4837] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[   81.375189][ T4837] R13: 00007efd940b6038 R14: 00007efd940b5fa0 R15: 00007ffe60b983d8
[   81.375208][ T4837]  </TASK>
[   81.478155][ T4831] pim6reg: entered allmulticast mode
[   81.480325][   T29] audit: type=1326 audit(1762605550.134:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.600344][ T4827] pim6reg: left allmulticast mode
[   81.604212][   T29] audit: type=1326 audit(1762605550.134:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.696472][   T29] audit: type=1326 audit(1762605550.134:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   81.719914][   T29] audit: type=1326 audit(1762605550.134:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f825fa2f6c9 code=0x7ffc0000
[   82.019441][ T4851] loop0: detected capacity change from 0 to 512
[   82.036898][ T4851] EXT4-fs: Ignoring removed nobh option
[   82.059676][ T4851] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.386: corrupted inode contents
[   82.086408][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[   82.100591][ T4851] EXT4-fs (loop0): 1 truncate cleaned up
[   82.106858][ T4851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.120106][ T4851] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.131745][ T4851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.717531][ T4864] loop4: detected capacity change from 0 to 512
[   82.741024][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.769887][ T4864] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.794447][ T4864] /dev/loop4: Can't open blockdev
[   83.030273][ T4875] pim6reg: entered allmulticast mode
[   83.042680][ T4875] pim6reg: left allmulticast mode
[   83.125632][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'.
[   83.241152][ T4882] loop2: detected capacity change from 0 to 512
[   83.264079][ T4882] EXT4-fs: Ignoring removed nobh option
[   83.361307][ T4882] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.396: corrupted inode contents
[   83.396705][ T4882] EXT4-fs (loop2): Remounting filesystem read-only
[   83.407102][ T4882] EXT4-fs (loop2): 1 truncate cleaned up
[   83.417473][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.442986][ T4882] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.454063][ T4882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.619516][ T4896] pim6reg: entered allmulticast mode
[   83.631491][ T4896] pim6reg: left allmulticast mode
[   83.872906][ T4874] syz.4.394 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   83.887106][ T4874] CPU: 1 UID: 0 PID: 4874 Comm: syz.4.394 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   83.887130][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   83.887142][ T4874] Call Trace:
[   83.887149][ T4874]  <TASK>
[   83.887157][ T4874]  __dump_stack+0x1d/0x30
[   83.887177][ T4874]  dump_stack_lvl+0xe8/0x140
[   83.887197][ T4874]  dump_stack+0x15/0x1b
[   83.887230][ T4874]  dump_header+0x81/0x220
[   83.887247][ T4874]  oom_kill_process+0x342/0x400
[   83.887278][ T4874]  out_of_memory+0x979/0xb80
[   83.887309][ T4874]  try_charge_memcg+0x610/0xa10
[   83.887382][ T4874]  obj_cgroup_charge_pages+0xa6/0x150
[   83.887402][ T4874]  __memcg_kmem_charge_page+0x9f/0x170
[   83.887422][ T4874]  __alloc_frozen_pages_noprof+0x188/0x360
[   83.887506][ T4874]  alloc_pages_mpol+0xb3/0x260
[   83.887527][ T4874]  alloc_pages_noprof+0x90/0x130
[   83.887555][ T4874]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   83.887667][ T4874]  __kvmalloc_node_noprof+0x483/0x670
[   83.887699][ T4874]  ? ip_set_alloc+0x24/0x30
[   83.887728][ T4874]  ? ip_set_alloc+0x24/0x30
[   83.887756][ T4874]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   83.887912][ T4874]  ip_set_alloc+0x24/0x30
[   83.887950][ T4874]  hash_netiface_create+0x282/0x740
[   83.887983][ T4874]  ? __pfx_hash_netiface_create+0x10/0x10
[   83.888063][ T4874]  ip_set_create+0x3cc/0x970
[   83.888094][ T4874]  nfnetlink_rcv_msg+0x4c6/0x590
[   83.888146][ T4874]  netlink_rcv_skb+0x123/0x220
[   83.888177][ T4874]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   83.888237][ T4874]  nfnetlink_rcv+0x167/0x16c0
[   83.888262][ T4874]  ? kmem_cache_free+0xe4/0x3d0
[   83.888292][ T4874]  ? __kfree_skb+0x109/0x150
[   83.888339][ T4874]  ? nlmon_xmit+0x4f/0x60
[   83.888361][ T4874]  ? consume_skb+0x49/0x150
[   83.888396][ T4874]  ? nlmon_xmit+0x4f/0x60
[   83.888418][ T4874]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   83.888453][ T4874]  ? __dev_queue_xmit+0x1200/0x2000
[   83.888469][ T4874]  ? __dev_queue_xmit+0x182/0x2000
[   83.888501][ T4874]  ? ref_tracker_free+0x37d/0x3e0
[   83.888540][ T4874]  ? __netlink_deliver_tap+0x4dc/0x500
[   83.888576][ T4874]  netlink_unicast+0x5c0/0x690
[   83.888626][ T4874]  netlink_sendmsg+0x58b/0x6b0
[   83.888646][ T4874]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.888689][ T4874]  __sock_sendmsg+0x145/0x180
[   83.888714][ T4874]  ____sys_sendmsg+0x31e/0x4e0
[   83.888787][ T4874]  ___sys_sendmsg+0x17b/0x1d0
[   83.888825][ T4874]  __x64_sys_sendmsg+0xd4/0x160
[   83.888847][ T4874]  x64_sys_call+0x191e/0x3000
[   83.888926][ T4874]  do_syscall_64+0xd2/0x200
[   83.889023][ T4874]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   83.889052][ T4874]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   83.889149][ T4874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.889170][ T4874] RIP: 0033:0x7fe7447bf6c9
[   83.889184][ T4874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.889201][ T4874] RSP: 002b:00007fe74321f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.889242][ T4874] RAX: ffffffffffffffda RBX: 00007fe744a15fa0 RCX: 00007fe7447bf6c9
[   83.889254][ T4874] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[   83.889265][ T4874] RBP: 00007fe744841f91 R08: 0000000000000000 R09: 0000000000000000
[   83.889277][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.889288][ T4874] R13: 00007fe744a16038 R14: 00007fe744a15fa0 R15: 00007ffd0c210868
[   83.889306][ T4874]  </TASK>
[   83.889312][ T4874] memory: usage 307200kB, limit 307200kB, failcnt 916
[   84.233616][ T4874] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0
[   84.241544][ T4874] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[   84.248865][ T4874] Memory cgroup stats for /syz4:
[   84.249283][ T4874] cache 0
[   84.257241][ T4874] rss 0
[   84.260031][ T4874] shmem 0
[   84.262960][ T4874] mapped_file 0
[   84.266489][ T4874] dirty 0
[   84.269437][ T4874] writeback 0
[   84.272751][ T4874] workingset_refault_anon 167
[   84.277491][ T4874] workingset_refault_file 1908
[   84.282297][ T4874] swap 471040
[   84.285647][ T4874] swapcached 0
[   84.289067][ T4874] pgpgin 35798
[   84.292513][ T4874] pgpgout 35798
[   84.295969][ T4874] pgfault 22525
[   84.299550][ T4874] pgmajfault 119
[   84.303105][ T4874] inactive_anon 0
[   84.306940][ T4874] active_anon 0
[   84.310435][ T4874] inactive_file 0
[   84.314096][ T4874] active_file 0
[   84.317587][ T4874] unevictable 0
[   84.321082][ T4874] hierarchical_memory_limit 314572800
[   84.326565][ T4874] hierarchical_memsw_limit 9223372036854771712
[   84.332728][ T4874] total_cache 0
[   84.336276][ T4874] total_rss 0
[   84.339573][ T4874] total_shmem 0
[   84.343027][ T4874] total_mapped_file 0
[   84.347107][ T4874] total_dirty 0
[   84.350716][ T4874] total_writeback 0
[   84.354658][ T4874] total_workingset_refault_anon 167
[   84.359971][ T4874] total_workingset_refault_file 1908
[   84.365286][ T4874] total_swap 471040
[   84.369149][ T4874] total_swapcached 0
[   84.373075][ T4874] total_pgpgin 35798
[   84.377089][ T4874] total_pgpgout 35798
[   84.381167][ T4874] total_pgfault 22525
[   84.385165][ T4874] total_pgmajfault 119
[   84.389268][ T4874] total_inactive_anon 0
[   84.393439][ T4874] total_active_anon 0
[   84.397572][ T4874] total_inactive_file 0
[   84.401798][ T4874] total_active_file 0
[   84.405830][ T4874] total_unevictable 0
[   84.409937][ T4874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.394,pid=4873,uid=0
[   84.424569][ T4874] Memory cgroup out of memory: Killed process 4873 (syz.4.394) total-vm:94088kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   84.553131][ T4901] loop0: detected capacity change from 0 to 512
[   84.562663][ T4901] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.575874][ T4901] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.587437][ T4901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.595928][ T4901] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.608645][ T4901] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.623722][ T4901] EXT4-fs (loop0): mount failed
[   84.775400][ T4920] pim6reg: entered allmulticast mode
[   84.814287][ T4920] pim6reg: left allmulticast mode
[   84.822217][ T4923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'.
[   84.837909][ T4923] IPVS: Error connecting to the multicast addr
[   84.841251][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'.
[   84.890869][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'.
[   85.073607][ T4933] pim6reg: entered allmulticast mode
[   85.101457][ T4933] pim6reg: left allmulticast mode
[   85.158623][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'.
[   85.192822][ T4937] IPVS: Error connecting to the multicast addr
[   85.465349][ T4943] loop3: detected capacity change from 0 to 512
[   85.481589][ T4943] EXT4-fs: Ignoring removed nobh option
[   85.524969][ T4943] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.414: corrupted inode contents
[   85.543236][ T4914] syz.2.408 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   85.554522][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   85.554553][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   85.554565][ T4914] Call Trace:
[   85.554572][ T4914]  <TASK>
[   85.554580][ T4914]  __dump_stack+0x1d/0x30
[   85.554658][ T4914]  dump_stack_lvl+0xe8/0x140
[   85.554694][ T4914]  dump_stack+0x15/0x1b
[   85.554718][ T4914]  dump_header+0x81/0x220
[   85.554742][ T4914]  oom_kill_process+0x342/0x400
[   85.554841][ T4914]  out_of_memory+0x979/0xb80
[   85.554886][ T4914]  try_charge_memcg+0x610/0xa10
[   85.554925][ T4914]  charge_memcg+0x51/0xc0
[   85.554954][ T4914]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   85.554990][ T4914]  __read_swap_cache_async+0x17b/0x2d0
[   85.555034][ T4914]  swap_cluster_readahead+0x262/0x3c0
[   85.555068][ T4914]  swapin_readahead+0xde/0x6f0
[   85.555098][ T4914]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[   85.555199][ T4914]  ? __rcu_read_unlock+0x34/0x70
[   85.555230][ T4914]  ? __rcu_read_unlock+0x4f/0x70
[   85.555265][ T4914]  ? swap_cache_get_folio+0x277/0x280
[   85.555353][ T4914]  do_swap_page+0x2ae/0x2370
[   85.555381][ T4914]  ? css_rstat_updated+0xb7/0x240
[   85.555401][ T4914]  ? __pfx_default_wake_function+0x10/0x10
[   85.555431][ T4914]  handle_mm_fault+0x9a5/0x2be0
[   85.555524][ T4914]  ? vma_start_read+0x141/0x1f0
[   85.555564][ T4914]  do_user_addr_fault+0x630/0x1080
[   85.555619][ T4914]  exc_page_fault+0x62/0xa0
[   85.555738][ T4914]  asm_exc_page_fault+0x26/0x30
[   85.555765][ T4914] RIP: 0033:0x7f825fa57460
[   85.555782][ T4914] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00
[   85.555805][ T4914] RSP: 002b:00007ffc05aaa618 EFLAGS: 00010202
[   85.555825][ T4914] RAX: 00000000fffffffa RBX: 00007f825fc85fa0 RCX: 0000000000000000
[   85.555893][ T4914] RDX: 00007ffc05aaa660 RSI: 0000000000000000 RDI: 0000000000000000
[   85.555944][ T4914] RBP: 00007f825fc87da0 R08: 000000001d5c21cf R09: 7fffffffffffffff
[   85.555961][ T4914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000014e20
[   85.555977][ T4914] R13: 00007ffc05aaa780 R14: ffffffffffffffff R15: 00007ffc05aaa7a0
[   85.555997][ T4914]  </TASK>
[   85.556004][ T4914] memory: usage 307200kB, limit 307200kB, failcnt 612
[   85.697538][ T4951] pim6reg: entered allmulticast mode
[   85.701413][ T4914] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[   85.701432][ T4914] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[   85.714694][ T4951] pim6reg: left allmulticast mode
[   85.725723][ T4914] Memory cgroup stats for /syz2:
[   85.725924][ T4914] cache 0
[   85.778500][ T4943] EXT4-fs (loop3): Remounting filesystem read-only
[   85.782338][ T4914] rss 0
[   85.788722][ T4943] EXT4-fs (loop3): 1 truncate cleaned up
[   85.795763][ T4914] shmem 0
[   85.795775][ T4914] mapped_file 0
[   85.795784][ T4914] dirty 0
[   85.795792][ T4914] writeback 4096
[   85.805778][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.808184][ T4914] workingset_refault_anon 240
[   85.819029][ T4943] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.822652][ T4914] workingset_refault_file 13361
[   85.832154][ T4943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.834001][ T4914] swap 208896
[   85.834012][ T4914] swapcached 8192
[   85.834022][ T4914] pgpgin 128154
[   85.896276][ T4914] pgpgout 128152
[   85.899880][ T4914] pgfault 35511
[   85.903354][ T4914] pgmajfault 168
[   85.907015][ T4914] inactive_anon 4096
[   85.911018][ T4914] active_anon 0
[   85.914496][ T4914] inactive_file 0
[   85.918212][ T4914] active_file 0
[   85.921687][ T4914] unevictable 0
[   85.925156][ T4914] hierarchical_memory_limit 314572800
[   85.929345][ T4954] loop4: detected capacity change from 0 to 7
[   85.930606][ T4914] hierarchical_memsw_limit 9223372036854771712
[   85.942859][ T4914] total_cache 0
[   85.946383][ T4914] total_rss 0
[   85.949788][ T4914] total_shmem 0
[   85.953294][ T3307]  loop4: unable to read partition table
[   85.953317][ T4914] total_mapped_file 0
[   85.963044][ T4914] total_dirty 0
[   85.966451][ T3307] buffer_io_error: 7 callbacks suppressed
[   85.966471][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   85.966575][ T4914] total_writeback 4096
[   85.979155][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   85.980124][ T4914] total_workingset_refault_anon 240
[   85.990051][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   85.992021][ T4914] total_workingset_refault_file 13361
[   86.008678][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.010500][ T4914] total_swap 208896
[   86.022260][ T4914] total_swapcached 8192
[   86.026534][ T4914] total_pgpgin 128154
[   86.028798][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.030521][ T4914] total_pgpgout 128152
[   86.030532][ T4914] total_pgfault 35511
[   86.030542][ T4914] total_pgmajfault 168
[   86.045326][   T29] kauditd_printk_skb: 550 callbacks suppressed
[   86.045345][   T29] audit: type=1326 audit(1762605554.914:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.046765][ T4914] total_inactive_anon 4096
[   86.046777][ T4914] total_active_anon 0
[   86.050957][   T29] audit: type=1326 audit(1762605554.914:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.057078][ T4914] total_inactive_file 0
[   86.057091][ T4914] total_active_file 0
[   86.057101][ T4914] total_unevictable 0
[   86.057110][ T4914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.408,pid=4914,uid=0
[   86.080716][   T29] audit: type=1326 audit(1762605554.914:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.085325][ T4914] Memory cgroup out of memory: Killed process 4914 (syz.2.408) total-vm:94088kB, anon-rss:1260kB, file-rss:22584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   86.089363][   T29] audit: type=1326 audit(1762605554.914:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.187730][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.209654][   T29] audit: type=1326 audit(1762605554.994:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.235077][   T29] audit: type=1326 audit(1762605554.994:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.258506][   T29] audit: type=1326 audit(1762605554.994:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.266516][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.281903][   T29] audit: type=1326 audit(1762605555.014:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.313367][   T29] audit: type=1326 audit(1762605555.044:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd93e91f85 code=0x7ffc0000
[   86.336933][   T29] audit: type=1326 audit(1762605555.044:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd93e5f6c9 code=0x7ffc0000
[   86.376426][ T4954] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.384409][ T4954] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.392608][ T4954]  loop4: unable to read partition table
[   86.436282][ T4954] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   86.463087][ T4955] pim6reg: entered allmulticast mode
[   86.488164][ T3307] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.543173][ T4915] syz.2.408 (4915) used greatest stack depth: 6320 bytes left
[   86.564919][ T4963] loop4: detected capacity change from 0 to 512
[   86.577628][ T4956] pim6reg: left allmulticast mode
[   86.583134][ T4963] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.594312][ T4963] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.617763][ T4963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   86.626488][ T4963] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   86.672339][ T4963] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   86.688675][ T4963] EXT4-fs (loop4): mount failed
[   86.817231][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   86.857861][ T4983] IPVS: Error connecting to the multicast addr
[   86.896097][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'.
[   87.059871][ T4996] loop4: detected capacity change from 0 to 7
[   87.086781][ T3307]  loop4: unable to read partition table
[   87.096546][ T4996]  loop4: unable to read partition table
[   87.116282][ T4996] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   87.129576][ T5000] pim6reg: entered allmulticast mode
[   87.166600][ T4999] pim6reg: entered allmulticast mode
[   87.185466][ T4999] pim6reg: left allmulticast mode
[   87.252450][ T4996] pim6reg: left allmulticast mode
[   87.433793][ T5007] pim6reg: entered allmulticast mode
[   87.446591][ T5007] pim6reg: left allmulticast mode
[   87.835216][ T3003]  loop4: unable to read partition table
[   87.894220][ T3003]  loop4: unable to read partition table
[   88.057744][ T3003]  loop4: unable to read partition table
[   88.127256][ T5017] pim6reg: entered allmulticast mode
[   88.153945][ T5017] pim6reg: left allmulticast mode
[   88.225236][ T3003]  loop4: unable to read partition table
[   88.285905][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'.
[   88.521318][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'.
[   88.542207][ T5033] IPVS: Error connecting to the multicast addr
[   88.589535][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'.
[   88.648897][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'.
[   88.948178][ T3003]  loop4: unable to read partition table
[   89.375341][ T5056] pim6reg: entered allmulticast mode
[   89.402248][ T5056] pim6reg: left allmulticast mode
[   89.428547][ T5059] loop4: detected capacity change from 0 to 7
[   89.452788][ T5059]  loop4: unable to read partition table
[   89.469598][ T5059] loop_reread_partitions: partition scan of loop4 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   89.514088][ T5063] pim6reg: entered allmulticast mode
[   89.544417][ T5059] pim6reg: left allmulticast mode
[   89.986580][ T3003]  loop4: unable to read partition table
[   90.153629][ T3003]  loop4: unable to read partition table
[   90.185630][ T5053] ==================================================================
[   90.193980][ T5053] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[   90.201819][ T5053] 
[   90.204245][ T5053] write to 0xffffea0004709818 of 8 bytes by task 4988 on cpu 0:
[   90.211877][ T5053]  __filemap_remove_folio+0x1a5/0x2a0
[   90.217278][ T5053]  filemap_remove_folio+0x6d/0x1d0
[   90.222422][ T5053]  truncate_inode_folio+0x42/0x50
[   90.227550][ T5053]  shmem_undo_range+0x244/0xa80
[   90.232419][ T5053]  shmem_evict_inode+0x134/0x520
[   90.237359][ T5053]  evict+0x2e3/0x550
[   90.241256][ T5053]  iput+0x4ed/0x650
[   90.245074][ T5053]  dentry_unlink_inode+0x24f/0x260
[   90.250205][ T5053]  __dentry_kill+0x18d/0x4b0
[   90.254814][ T5053]  dput+0x5e/0xd0
[   90.258489][ T5053]  __fput+0x444/0x650
[   90.262542][ T5053]  ____fput+0x1c/0x30
[   90.266551][ T5053]  task_work_run+0x131/0x1a0
[   90.271186][ T5053]  do_exit+0x483/0x15c0
[   90.275362][ T5053]  do_group_exit+0xff/0x140
[   90.280002][ T5053]  get_signal+0xe58/0xf70
[   90.284356][ T5053]  arch_do_signal_or_restart+0x96/0x440
[   90.289910][ T5053]  irqentry_exit_to_user_mode+0x5b/0xa0
[   90.295512][ T5053]  irqentry_exit+0x12/0x50
[   90.299958][ T5053]  exc_general_protection+0x15b/0x1f0
[   90.305338][ T5053]  asm_exc_general_protection+0x26/0x30
[   90.310988][ T5053] 
[   90.313313][ T5053] read to 0xffffea0004709818 of 8 bytes by task 5053 on cpu 1:
[   90.320854][ T5053]  folio_mapping+0xa1/0xe0
[   90.325287][ T5053]  evict_folios+0x2b4b/0x3590
[   90.329979][ T5053]  try_to_shrink_lruvec+0x5b5/0x950
[   90.335190][ T5053]  shrink_lruvec+0x22e/0x1b50
[   90.339908][ T5053]  shrink_node+0x686/0x2120
[   90.344460][ T5053]  do_try_to_free_pages+0x3f6/0xcd0
[   90.349675][ T5053]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[   90.355598][ T5053]  try_charge_memcg+0x383/0xa10
[   90.360468][ T5053]  obj_cgroup_charge_pages+0xa6/0x150
[   90.365860][ T5053]  __memcg_kmem_charge_page+0x9f/0x170
[   90.371334][ T5053]  __alloc_frozen_pages_noprof+0x188/0x360
[   90.377429][ T5053]  alloc_pages_mpol+0xb3/0x260
[   90.382295][ T5053]  alloc_pages_noprof+0x90/0x130
[   90.387280][ T5053]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   90.393212][ T5053]  __kvmalloc_node_noprof+0x483/0x670
[   90.398851][ T5053]  ip_set_alloc+0x24/0x30
[   90.403272][ T5053]  hash_netiface_create+0x282/0x740
[   90.408502][ T5053]  ip_set_create+0x3cc/0x970
[   90.413107][ T5053]  nfnetlink_rcv_msg+0x4c6/0x590
[   90.418063][ T5053]  netlink_rcv_skb+0x123/0x220
[   90.422844][ T5053]  nfnetlink_rcv+0x167/0x16c0
[   90.427542][ T5053]  netlink_unicast+0x5c0/0x690
[   90.432328][ T5053]  netlink_sendmsg+0x58b/0x6b0
[   90.437129][ T5053]  __sock_sendmsg+0x145/0x180
[   90.441845][ T5053]  ____sys_sendmsg+0x31e/0x4e0
[   90.446646][ T5053]  ___sys_sendmsg+0x17b/0x1d0
[   90.451416][ T5053]  __x64_sys_sendmsg+0xd4/0x160
[   90.456358][ T5053]  x64_sys_call+0x191e/0x3000
[   90.461053][ T5053]  do_syscall_64+0xd2/0x200
[   90.465579][ T5053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.471484][ T5053] 
[   90.473913][ T5053] value changed: 0xffff88811a9604d8 -> 0x0000000000000000
[   90.481112][ T5053] 
[   90.483534][ T5053] Reported by Kernel Concurrency Sanitizer on:
[   90.489685][ T5053] CPU: 1 UID: 0 PID: 5053 Comm: syz.1.442 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.499331][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   90.509445][ T5053] ==================================================================
[   90.519719][ T3003]  loop4: unable to read partition table
[   90.651377][ T5053] syz.1.442 (5053) used greatest stack depth: 6072 bytes left