last executing test programs: 4m10.906428787s ago: executing program 4 (id=1375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000c40)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4000, 0x0, 0x32c) 4m10.889900977s ago: executing program 4 (id=1377): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @multicast1, 0xffff, 0x1, 'rr\x00', 0xbbe9fe5d6acb8280, 0x5, 0x10}, 0x2c) 4m10.874311468s ago: executing program 4 (id=1379): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$FIOCLEX(r1, 0x5451) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8}}]}, 0x54}}, 0x20000014) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x2000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r6, &(0x7f0000000280)=""/176, 0xb0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r8 = epoll_create(0x7f) epoll_wait(r8, &(0x7f0000000140)=[{}], 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 4m10.695757976s ago: executing program 4 (id=1383): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x202d00, 0x91) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000400"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x12, 0x2000035e, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000e9000000000000000000000000000079dbb4c292789436234f134aa847c391", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x91c, 0x8040a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x20000000001}, 0x143c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x1c3, &(0x7f00000006c0)="$eJzs2z9rE3EYB/AnNYlpHZLBSRxudApNX0GDVBADgpJBQVBsA9KTQgsBHWw3B9+EL8bBVV+JYwfhpLn8aUKEWJqcNJ/Pkoe7fPP7Qy7JE7jX998f7h+d9F71vketVIqN3UjivBSN2IiRswAAbpLzLItfWZZlt89i82tkWVb0jACAZfP9DwDr5/mLl0/anc7esySpRaSf+91+N3/Mz7d78S7SOIjtqMfvuPiBMJTXjx539raTgUZ8SU+H+dN+99Z0vhX1aMzPt/J8MsxX8nwlti7nd6Ied+fnd6bzw/Gr8aA6zlcioh4/38ZRpLEfF9lJ/lMrSR4+7czk7wyeBwAAADdBMxkb9O/VmO7fm83p85P+OM+3Swv/PzDTX5fjXrnYtQPAujr58PHwTZoeHF+hqA1f44rxxYofW/kgSxzimorRlo6P7K5if/61qF6e4UyxOWeqo9tArmP08lIXWJmzrlJEFLXh3yJicuQ4/pM3wAIX9aBY8QcRsHKTq7/omQAAAAAAAAAAAAAAAH+zivuKil4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvnTwAAAP//Fxt9XQ==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x104000, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080788cfc4f5fb51134335cbc9a8fa7530f0031bab3da35ef7b31ddb75302851efe81d5a2adacea30083fd88ec891628cf4cdca37b81216251855e4e47bcd2f82cb575dd4e26fe2e4cfd0756368f1b0b33615da9f5941243d3828750488d037bc"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfcd8, 0xd3, 0x50, 0xfe, 0x6, @multicast}, 0x10) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r8, 0x0, 0x30004001) ptrace(0x10, r6) ptrace$getregs(0xe, r6, 0xffffffffffffdcad, &(0x7f0000000000)=""/39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r4}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 4m10.651759098s ago: executing program 4 (id=1385): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x644200, 0x40) mknodat(0xffffffffffffffff, 0x0, 0x4142, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000000000000084000a258f0166bff4ef6caa4be72c5efc14d07bfdb71747c7a633a2de9e771647ff3b16d32bd45bd6bf8425517621"], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = open(&(0x7f0000010300)='./file1\x00', 0x2782, 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f00000104c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000102c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) fcntl$setlease(r2, 0x400, 0x1) close(r5) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x4, &(0x7f0000010280)=ANY=[], &(0x7f00000103c0)='GPL\x00', 0x84, 0x9d, &(0x7f0000010400)=""/157, 0x0, 0x1d, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1ff}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0xfd, 0xfd, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) close_range(r7, 0xffffffffffffffff, 0x0) 4m10.492049575s ago: executing program 4 (id=1386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 4m10.491840985s ago: executing program 32 (id=1386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 3.158705473s ago: executing program 5 (id=3956): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) stat(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000cc0)=0x1ff) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@empty, @in6=@local, 0x4e24, 0x2, 0x4e21, 0x3864, 0xa, 0x20, 0x0, 0xff, 0x0, r0}, {0x5, 0x5d, 0x6, 0x3, 0x6, 0x2cd2, 0x200, 0x2}, {0x6, 0x6, 0x2, 0x8000}, 0x6e58, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d2, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x34ff, 0x2, 0x0, 0x4, 0x2, 0xe8, 0x5}}, 0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/152) 3.157957303s ago: executing program 2 (id=3957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) setregid(0x0, 0x0) 3.129384004s ago: executing program 2 (id=3958): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800ffe000000000000000210d0000aaa8fa017242ba9380d440", 0x21) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.106988736s ago: executing program 5 (id=3960): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.997915s ago: executing program 5 (id=3963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='rpc_clnt_new_err\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2, 0xfff8}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) syz_clone3(&(0x7f00000008c0)={0x222025080, 0x0, 0x0, 0x0, {0x32}, &(0x7f0000000300)=""/212, 0xd4, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x791, &(0x7f0000000800)="$eJzs3MFrHFUYAPBvJtkmbaMbwYNeqtBCC6WbpLm0J+NFvBQKBa81JJsQMsmW7KYmsdDUmyDU5qIiiN49ehVK/QO8SUHBu1C0xoN6WdnNZtsku+m2Tbpt/P1gsu/Nvjff9+1uXmYgswH8b71Z+5FEDETExYjIN/anEXGo3uqPWN0Yt37/2kRtS6JavfR7UpsW69V881hJ4/Fo1KfEaxFxJxdx+qOdccvLK7PjWVZcaPSHKnNXhsrLK2dm5sani9PF+ZHR88PnRkfPDY/uWa0n3jt/+NaP76yt/fRd5eax3jNJjNXrjkZtexboIRuvSS7Gtu2f349gXZR0MKb3GeQBAMDuauf5PY1zs1zko2fLWVrP1sFO4AAAAOCFVO2rduqfjkcCAAAAz5kkup0BAAAAsL82/w9g897e/boPtp17b0fEYKv4vfV7iCP6IxcRR9aTLbcfJBvT4Kms3oiI22MtPn877mjOPe6xhx80D7c8Il13u7b+jLVaf9Lm+hMt1p/eze9OeErt178H8XvarH8XO4zx/Vevt/3s3rtRXvr4WKv4STN+0ib++x3Gv7n2ya12z1W/iTjZ8u9PsiXWLt8PMTQ1k7X61Wqme+ffU3fb1x9xZEf8JKlHTXav/0qH9X+4/ufs6i7xTx3f/f3fiN+3ZV7tM/FpI480Im41Hmv9tW0xjs/9/MPOyMnqZvzJNq9/6/f/3Wb9X3dY/6/f9i11OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq0ogYiCQtNNtpWihEHI2IV+NImpXKldNTpcX5ydpzEYORS6dmsuJwROQ3+kmtP1JvP+if3dYfjYhXfjm8EXQmKxYmStlkt4sHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6WhEDESSFiIijYi/8mlaKHQ7KwAAAGDPDXY7AQAAAGDfuf4HAACAg+9Jr/+TPc4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONAuXrhQ26rr969N1PqTV5cXZ0tXz0wWy7OFucWJwkRp4UphulSazoqFidLco46XRsTI+VhcGqoUy5Wh8vLK5bnS4nzl8szc+HTxcjH3TKoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcQ3UtyQtRERab6dpoRDxUkQMRi6ZmsmKwxHxckTczef6av2RbicNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAnisvr8yOZ1lx4cVuVA9WOR03Iol4DtJo0/ii8a7sNiZZjdjvfPobebQdkzYGPE2siMeZdf0RL0u3G290YS0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD7yssrs+NZVlwodzsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiv9LYmI2nYyf2Jg+7OHkr/z9ceI+ODLS58tjVcqCyO1/X8091c+b+w/+9DE68+yBgAAADjw3upgTP9mY/M6ffM6HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFPl5ZXZ8SwrLuxTo6e4UI4b3a4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Ev8FAAD//yz3thk=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xfffffffffffffe22, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x40) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYRESOCT=r2, @ANYBLOB="b4b31de0c2d3e808e44a589b228be389eac197289bd892a15f6d08bdacf10d571f3a975965291b2d8a92e401b44ed7b2dcd07bab122c3071fc40671170a0eb536824846cd76059e9e5f5ba881be286c08a845660c03bd8afc108c4ac796fa595c2ab8d9f67cf264876cd9db1d8e70a9899402860fa928602f5f667c0eba4a50e4e66deccb324e3f3a3c9d0ae2a00750d495fdf89db78783b90d91e3c5d4935313cb11b8b936f9df742c98439d91fa6b23a403d7f5b0ec3daf420d5f0298820438d040f918c12d2496bf537920a12", @ANYRESOCT=r6, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8=r4, @ANYRESDEC=r6, @ANYRESDEC=r7], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300801d00000085ddff0034000000b700000000000040c5035c1433ac2e362f0a3817ff76140095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r11, 0x7f, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 2.938483082s ago: executing program 1 (id=3964): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 2.202626875s ago: executing program 5 (id=3970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) lseek(r1, 0x91b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_clone(0x47210000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readahead(0xffffffffffffffff, 0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001200040025bd7000ffdbdf252206037f4e234e210900000004000000400000000100000007000000040000000600000003000000", @ANYRES32=r3, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x2}, 0x8080) 2.155808946s ago: executing program 0 (id=3971): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_setup(0x57e, &(0x7f0000000680)={0x0, 0x6677, 0x400, 0x0, 0x192}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 2.044624201s ago: executing program 2 (id=3972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x10000, &(0x7f00000007c0)="497fcf5bf56a31d9e997646ad64cc0fecc33b6d4621a7f", 0x17, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="2b7eff5a0761ebaf006ff43933e2987063d8011f8e06078599154fefb7796b90309e9f0d46e3c8cb7fd6634c3d18af4d0154c5bfbe8b2a0ef456649c16b77499379a7bc8a10d72aaaf55b23e902a2480aff1e33dd63a25a7438ffaa13d27ff578daf98fdc5fdccefa09ad7ce74242a8e1f1f3d5885a4a0f12bb0c491f03366c737d8bec94e372b8e8ab0fcded12b37a5c77b969e30d6278d7546a7a5260d585a54f17bb77fab735646ba5959e918ea0470da9d878d2ef92e0c71ef57557ed3ed782aef40c9232a35c0fca88aae") 2.036068962s ago: executing program 1 (id=3973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=0xffffffffffffffff, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES8=r2, @ANYRES16=r3, @ANYBLOB="c4", @ANYRESOCT=r1, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) unlink(&(0x7f0000000080)='./file1\x00') r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 2.017063663s ago: executing program 0 (id=3974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000014c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x5bf0, &(0x7f0000000540)={0x0, 0x5660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c81, 0x0) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000200)="e3") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, 0x0, &(0x7f0000001c40)=r7}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000380)={'tunl0\x00', 0x2100}) dup3(r3, r1, 0x80000) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 1.969887425s ago: executing program 0 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="1100000000000000000001"], 0xc4}}, 0x22000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) msgget$private(0x0, 0x284) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_script(r8, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) 1.968805415s ago: executing program 0 (id=3976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.686650127s ago: executing program 3 (id=3978): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x425d9b36da1673a8}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r4, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000000c0)={r5}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) 1.61769834s ago: executing program 3 (id=3979): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x633, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) close(r1) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x20000, 0x0, 0x0, 0x5d8c, 0x42, 0x0, 0xfffffffffffffffd, 0x3f}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="516aaacfd0c763298512b60b38da8a203165ea79f44052a027cd63098a040e402234411b33a0e05a4a9935319969e8367eca35ba3913c537d6cd140a6d563479d8130a744fb64caa6e2a99a7d95c6f71a6052729419cbfd21a92fc9b2806aeb9e8513d7c8751e7173f73280207b6e357b4b051334458215370bf7e20510766f38b09b8ef104a2f87ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000040b702000014000000b7030000000000007f00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000005347257f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18182709a5000000000000000000000900000000", @ANYRES32=r3, @ANYBLOB="0000000008000000025101330010000018440000faffffff00000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xd8, &(0x7f0000000380)=""/216, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x2, 0x2}, 0x10, 0x0, r4, 0x2, &(0x7f0000000a80)=[r2, r3, r5, r2, r2], &(0x7f0000000ac0)=[{0x0, 0x4, 0x5, 0x5}, {0x4, 0x3, 0x5, 0x7}], 0x10, 0x7}, 0x94) chmod(&(0x7f0000000100)='./file0\x00', 0x42) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="188517032844000000", @ANYRES16=r7, @ANYBLOB="010029bd7200fcdbdf250700000014000200fc000000000000000000000000000001080004006401010214000300fe8000000000000000000000000000aa"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.530310354s ago: executing program 3 (id=3980): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.413326169s ago: executing program 2 (id=3981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES64=r4, @ANYRES16=r4, @ANYRESOCT=r3, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r8, @ANYBLOB=',smaat=%\\/%![-,\x00'/29]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) read$nci(r7, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r10, 0x1275, 0xfffffdfd) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_clone3(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) 1.370994151s ago: executing program 2 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="1100000000000000000001"], 0xc4}}, 0x22000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) write$binfmt_script(r9, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) 1.204062068s ago: executing program 5 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r9, @ANYBLOB=',smaat=%\\/%![-,\x00'/29]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) read$nci(r8, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r11, 0x1275, 0xfffffdfd) syz_clone3(0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cbd70000000000001"], 0x30}}, 0x480c4) 1.123811541s ago: executing program 1 (id=3984): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 605.472104ms ago: executing program 3 (id=3985): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', 0x0) 250.719429ms ago: executing program 3 (id=3986): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_setup(0x57e, &(0x7f0000000680)={0x0, 0x6677, 0x400, 0x0, 0x192}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 171.530392ms ago: executing program 1 (id=3987): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="01aa07215900000000000000"], 0x50) 170.791092ms ago: executing program 5 (id=3988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 139.497614ms ago: executing program 0 (id=3989): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) 138.581144ms ago: executing program 2 (id=3990): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 115.954115ms ago: executing program 0 (id=3991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 115.118375ms ago: executing program 1 (id=3992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r4, @ANYRESOCT=r3, @ANYRESHEX=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='usrquota,defcontext=user_u,fow', @ANYRESDEC=r8, @ANYBLOB=',smaat=%\\/%![-,\x00'/29]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) read$nci(r7, &(0x7f0000000400)=""/58, 0x3a) ioctl$BLKTRACESTOP(r10, 0x1275, 0xfffffdfd) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_clone3(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01aa07215900"/15], 0x50) 549.26µs ago: executing program 3 (id=3993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) lseek(r1, 0x91b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_clone(0x47210000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readahead(0xffffffffffffffff, 0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001200040025bd7000ffdbdf252206037f4e234e210900000004000000400000000100000007000000040000000600000003000000", @ANYRES32=r3, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x2}, 0x8080) 0s ago: executing program 1 (id=3994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x81, 0x91f6, 0x0, @loopback, @loopback, 0x7, 0x7800, 0xfb, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r3, 0x2f, 0x8, 0x5, 0x5e6a, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x0, 0x3014}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000440)={@remote, 0x0}, &(0x7f0000000540)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3e, '\x00', r6, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x40c0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r8}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000740)="8b3af7c3be605e3e2966c6a55ddaffe645899f00000000fcff77fac7baddb71131796939e1641c803ccc4d48e7836a78344adf775e253b66942cf66053dc96f8be0164ee41ea8bc5354f9c1622213d04b1d0e8d30e4dfff09decd0eacf", 0xffffffffffffff2a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140640121000c00018008000140e0000002050014001f0000000500050002000000050001"], 0x6c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): .312816][T19073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.333358][T19080] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3576: corrupted inode contents [ 407.345501][T19066] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3574: corrupted inode contents [ 407.357360][T19080] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3576: mark_inode_dirty error [ 407.369105][T19080] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 407.378498][T19072] delete_channel: no stack [ 407.384835][T19080] EXT4-fs (loop2): 1 truncate cleaned up [ 407.390754][T19080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.403286][T19080] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.404443][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.436376][T19066] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3574: mark_inode_dirty error [ 407.455849][T19066] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3574: corrupted inode contents [ 407.481307][T19066] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 407.506285][T19066] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3574: corrupted inode contents [ 407.518521][T19066] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3574: mark_inode_dirty error [ 407.574868][T19066] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 407.588080][T19066] EXT4-fs (loop0): 1 truncate cleaned up [ 407.600640][T19089] netlink: 'syz.3.3578': attribute type 13 has an invalid length. [ 407.621868][T16825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.632662][T19066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.659156][T19095] loop3: detected capacity change from 0 to 512 [ 407.670257][T19095] EXT4-fs: Ignoring removed nobh option [ 407.676698][T19066] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.690741][T19094] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 407.710977][T19099] loop1: detected capacity change from 0 to 1024 [ 407.717700][T19099] ext3: Unknown parameter 'obj_type' [ 407.725919][T19099] blktrace: Concurrent blktraces are not allowed on loop2 [ 407.733839][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'. [ 407.759859][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3578: corrupted inode contents [ 408.149068][T19095] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.3578: mark_inode_dirty error [ 408.180016][T17428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.252752][T19111] netlink: 'syz.1.3583': attribute type 13 has an invalid length. [ 408.266190][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 408.276558][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3578: corrupted inode contents [ 408.317634][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 408.332043][T19115] loop1: detected capacity change from 0 to 512 [ 408.332933][T19095] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3578: mark_inode_dirty error [ 408.359701][T19114] loop2: detected capacity change from 0 to 1024 [ 408.364098][T19115] EXT4-fs: Ignoring removed nobh option [ 408.371681][ T29] audit: type=1326 audit(1763946146.287:21221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.373430][T19114] EXT4-fs: Ignoring removed nobh option [ 408.395289][ T29] audit: type=1326 audit(1763946146.287:21222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.400848][T19114] EXT4-fs: Ignoring removed bh option [ 408.430153][ T29] audit: type=1326 audit(1763946146.287:21223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.435842][T19095] Quota error (device loop3): write_blk: dquota write failed [ 408.453803][ T29] audit: type=1326 audit(1763946146.287:21224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.484852][ T29] audit: type=1326 audit(1763946146.287:21225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.508660][ T29] audit: type=1326 audit(1763946146.287:21226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.532250][ T29] audit: type=1326 audit(1763946146.287:21227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.2.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 408.532632][T19120] loop5: detected capacity change from 0 to 512 [ 408.556880][T19095] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3578: Failed to acquire dquot type 0 [ 408.563944][T19114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.607481][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3578: corrupted inode contents [ 408.627205][T19120] EXT4-fs: Ignoring removed nobh option [ 408.633146][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3583: corrupted inode contents [ 408.672498][T19115] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.3583: mark_inode_dirty error [ 408.673982][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3584: corrupted inode contents [ 408.693440][T19095] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.3578: mark_inode_dirty error [ 408.707237][T19120] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3584: mark_inode_dirty error [ 408.712760][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3583: corrupted inode contents [ 408.731279][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3584: corrupted inode contents [ 408.733910][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3578: corrupted inode contents [ 408.755341][T19120] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3584: mark_inode_dirty error [ 408.778734][T19115] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3583: mark_inode_dirty error [ 408.790489][T19120] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3584: Failed to acquire dquot type 0 [ 408.801870][T19095] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3578: mark_inode_dirty error [ 408.830709][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3584: corrupted inode contents [ 408.869005][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3578: corrupted inode contents [ 408.881394][T19120] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3584: mark_inode_dirty error [ 408.918372][T19115] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3583: Failed to acquire dquot type 0 [ 408.922263][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3584: corrupted inode contents [ 408.946313][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3583: corrupted inode contents [ 408.952929][T19095] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 408.972348][T19120] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3584: mark_inode_dirty error [ 408.983914][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3584: corrupted inode contents [ 408.994867][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 409.002328][T19120] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 409.014520][T16825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.035266][T19095] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3578: corrupted inode contents [ 409.042293][T19120] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3584: corrupted inode contents [ 409.060302][T19115] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.3583: mark_inode_dirty error [ 409.072242][T19120] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3584: mark_inode_dirty error [ 409.083921][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3583: corrupted inode contents [ 409.096104][T19120] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 409.100193][T19095] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3578: mark_inode_dirty error [ 409.105471][T19120] EXT4-fs (loop5): 1 truncate cleaned up [ 409.130617][T19095] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 409.152757][T19133] netlink: 660 bytes leftover after parsing attributes in process `syz.2.3588'. [ 409.155503][T19120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.178626][T19095] EXT4-fs (loop3): 1 truncate cleaned up [ 409.184604][T19115] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3583: mark_inode_dirty error [ 409.184931][T19095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.215742][T19120] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.230967][T19095] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.242689][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3583: corrupted inode contents [ 409.251337][T19133] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 409.334107][T19115] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 409.403839][T19115] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3583: corrupted inode contents [ 409.425729][T19137] loop2: detected capacity change from 0 to 512 [ 409.462834][T19137] EXT4-fs: Ignoring removed oldalloc option [ 409.489927][T19115] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.3583: mark_inode_dirty error [ 409.519561][T19137] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3589: inode #0: comm syz.2.3589: iget: illegal inode # [ 409.533031][T19115] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 409.535167][T19137] EXT4-fs (loop2): get orphan inode failed [ 409.555681][T19115] EXT4-fs (loop1): 1 truncate cleaned up [ 409.556383][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.561740][T19115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.590878][T19115] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.601617][T19137] EXT4-fs (loop2): mount failed [ 409.676754][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 409.688584][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 409.739312][T19150] loop2: detected capacity change from 0 to 512 [ 409.746472][T19150] EXT4-fs: Ignoring removed oldalloc option [ 409.753878][T19150] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3592: inode #0: comm syz.2.3592: iget: illegal inode # [ 409.792628][T19149] random: crng reseeded on system resumption [ 409.819606][T19149] loop5: detected capacity change from 0 to 128 [ 409.862228][T19149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.888300][T19150] EXT4-fs (loop2): get orphan inode failed [ 409.904002][T19149] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.930393][T19150] EXT4-fs (loop2): mount failed [ 409.941369][T17123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.007100][T10499] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.117067][T19166] loop2: detected capacity change from 0 to 1024 [ 410.152086][T19166] EXT4-fs: Ignoring removed nobh option [ 410.157710][T19166] EXT4-fs: Ignoring removed bh option [ 410.194440][T19166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.275082][T19162] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 410.283853][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.452508][T16825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.741798][T19185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.752502][T19185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.051705][T19194] loop0: detected capacity change from 0 to 512 [ 411.058648][T19194] EXT4-fs: Ignoring removed oldalloc option [ 411.066275][T19194] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.3608: inode #0: comm syz.0.3608: iget: illegal inode # [ 411.079689][T19194] EXT4-fs (loop0): get orphan inode failed [ 411.085694][T19194] EXT4-fs (loop0): mount failed [ 411.208861][T19197] loop1: detected capacity change from 0 to 1024 [ 411.216111][T19197] ext3: Unknown parameter 'obj_type' [ 411.224817][T19197] blktrace: Concurrent blktraces are not allowed on loop2 [ 411.255177][T19199] __nla_validate_parse: 4 callbacks suppressed [ 411.255212][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'. [ 411.271362][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'. [ 411.293919][T19201] random: crng reseeded on system resumption [ 411.333581][T19201] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3611'. [ 411.354520][T19201] loop5: detected capacity change from 0 to 128 [ 411.375442][T19203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.393004][T19201] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.503302][T19201] ext4 filesystem being mounted at /471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.579090][T10499] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.637157][T19214] loop5: detected capacity change from 0 to 2048 [ 411.643368][T19192] syz.0.3608 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 411.654489][T19192] CPU: 1 UID: 0 PID: 19192 Comm: syz.0.3608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.654519][T19192] Tainted: [W]=WARN [ 411.654525][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.654535][T19192] Call Trace: [ 411.654617][T19192] [ 411.654626][T19192] __dump_stack+0x1d/0x30 [ 411.654651][T19192] dump_stack_lvl+0xe8/0x140 [ 411.654674][T19192] dump_stack+0x15/0x1b [ 411.654693][T19192] dump_header+0x81/0x220 [ 411.654709][T19192] oom_kill_process+0x342/0x400 [ 411.654773][T19192] out_of_memory+0x979/0xb80 [ 411.654865][T19192] try_charge_memcg+0x610/0xa10 [ 411.654900][T19192] charge_memcg+0x51/0xc0 [ 411.654939][T19192] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 411.654963][T19192] __read_swap_cache_async+0x17b/0x2d0 [ 411.654994][T19192] swap_cluster_readahead+0x362/0x3c0 [ 411.655024][T19192] swapin_readahead+0xde/0x800 [ 411.655048][T19192] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 411.655075][T19192] ? __rcu_read_unlock+0x34/0x70 [ 411.655174][T19192] ? __rcu_read_unlock+0x4f/0x70 [ 411.655199][T19192] ? swap_cache_get_folio+0x277/0x280 [ 411.655216][T19192] do_swap_page+0x2ae/0x2370 [ 411.655275][T19192] ? css_rstat_updated+0xb7/0x240 [ 411.655338][T19192] ? __pfx_default_wake_function+0x10/0x10 [ 411.655369][T19192] handle_mm_fault+0x9a5/0x2be0 [ 411.655391][T19192] ? vma_start_read+0x141/0x1f0 [ 411.655430][T19192] do_user_addr_fault+0x630/0x1080 [ 411.655503][T19192] exc_page_fault+0x62/0xa0 [ 411.655547][T19192] asm_exc_page_fault+0x26/0x30 [ 411.655570][T19192] RIP: 0033:0x7f40151e59ec [ 411.655697][T19192] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 411.655713][T19192] RSP: 002b:00007ffe40228ff0 EFLAGS: 00010287 [ 411.655727][T19192] RAX: 0000000000000000 RBX: 00007f4015566090 RCX: 0000000000000000 [ 411.655765][T19192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555587e67808 [ 411.655867][T19192] RBP: 00007f4015567da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 411.655879][T19192] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000006489d [ 411.655891][T19192] R13: 00007f4015566090 R14: ffffffffffffffff R15: 00007ffe40229100 [ 411.655930][T19192] [ 411.655937][T19192] memory: usage 307200kB, limit 307200kB, failcnt 2575 [ 411.731586][T19219] loop1: detected capacity change from 0 to 2048 [ 411.735096][T19192] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 411.735113][T19192] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 411.743002][T19214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.745234][T19192] Memory cgroup stats for [ 411.751014][T19214] ext4 filesystem being mounted at /472/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.755823][T19192] /syz0: [ 411.756072][T19192] cache 0 [ 411.891956][T19223] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3614: bg 0: block 345: padding at end of block bitmap is not set [ 411.892258][T19192] rss 0 [ 411.892267][T19192] shmem 0 [ 411.900564][T19223] EXT4-fs (loop5): Remounting filesystem read-only [ 411.907466][T19192] mapped_file 0 [ 411.963075][T19219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.966536][T19192] dirty 0 [ 411.966545][T19192] writeback 0 [ 411.966551][T19192] workingset_refault_anon 712 [ 411.970065][T19219] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.982013][T19192] workingset_refault_file 4451 [ 411.982025][T19192] swap 208896 [ 411.982033][T19192] swapcached 0 [ 411.982040][T19192] pgpgin 449610 [ 411.982048][T19192] pgpgout 449608 [ 411.982055][T19192] pgfault 492588 [ 411.982063][T19192] pgmajfault 529 [ 411.982069][T19192] inactive_anon 0 [ 411.982114][T19192] active_anon 0 [ 411.982121][T19192] inactive_file 8192 [ 411.982128][T19192] active_file 0 [ 411.982136][T19192] unevictable 0 [ 411.982143][T19192] hierarchical_memory_limit 314572800 [ 411.982151][T19192] hierarchical_memsw_limit 9223372036854771712 [ 411.982160][T19192] total_cache 0 [ 411.982165][T19192] total_rss 0 [ 411.982171][T19192] total_shmem 0 [ 411.982176][T19192] total_mapped_file 0 [ 411.982183][T19192] total_dirty 0 [ 412.067856][T19224] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3615: bg 0: block 345: padding at end of block bitmap is not set [ 412.069153][T19192] total_writeback 0 [ 412.069164][T19192] total_workingset_refault_anon 712 [ 412.069181][T19192] total_workingset_refault_file 4451 [ 412.069189][T19192] total_swap 208896 [ 412.069196][T19192] total_swapcached 0 [ 412.069203][T19192] total_pgpgin 449610 [ 412.069210][T19192] total_pgpgout 449608 [ 412.069218][T19192] total_pgfault 492588 [ 412.069225][T19192] total_pgmajfault 529 [ 412.069232][T19192] total_inactive_anon 0 [ 412.069239][T19192] total_active_anon 0 [ 412.073569][T19224] EXT4-fs (loop1): Remounting filesystem read-only [ 412.076713][T19192] total_inactive_file 8192 [ 412.076724][T19192] total_active_file 0 [ 412.076733][T19192] total_unevictable 0 [ 412.076743][T19192] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3608,pid=19192,uid=0 [ 412.171115][T19192] Memory cgroup out of memory: Killed process 19192 (syz.0.3608) total-vm:93964kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 412.172163][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.213580][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.258188][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.284320][T19230] loop2: detected capacity change from 0 to 1024 [ 412.290988][T19230] ext3: Unknown parameter 'obj_type' [ 412.318664][T19233] random: crng reseeded on system resumption [ 412.325920][T19230] blktrace: Concurrent blktraces are not allowed on loop4 [ 412.333672][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3619'. [ 412.364232][T19233] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3618'. [ 412.385029][T19233] loop5: detected capacity change from 0 to 128 [ 412.403758][T19233] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.422971][T19233] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.430864][T19237] loop2: detected capacity change from 0 to 1024 [ 412.482454][T19237] ext3: Unknown parameter 'obj_type' [ 412.492397][T10499] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.492681][T19237] blktrace: Concurrent blktraces are not allowed on loop4 [ 412.532036][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3623'. [ 412.553945][T19243] netlink: 660 bytes leftover after parsing attributes in process `syz.0.3624'. [ 412.564206][T19243] syû: rxe_newlink: already configured on bond_slave_0 [ 412.694371][T19248] loop1: detected capacity change from 0 to 512 [ 412.700889][T19248] EXT4-fs: Ignoring removed nobh option [ 412.862064][T19253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.002818][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3620: corrupted inode contents [ 413.066299][T19262] random: crng reseeded on system resumption [ 413.091722][T19261] loop5: detected capacity change from 0 to 512 [ 413.128122][T19248] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.3620: mark_inode_dirty error [ 413.141922][T19266] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3628'. [ 413.153461][T19261] EXT4-fs: Ignoring removed nobh option [ 413.165590][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3620: corrupted inode contents [ 413.177602][T19262] loop3: detected capacity change from 0 to 128 [ 413.194757][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3626: corrupted inode contents [ 413.195632][T19248] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3620: mark_inode_dirty error [ 413.216927][T19261] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3626: mark_inode_dirty error [ 413.229984][T19262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.249934][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3626: corrupted inode contents [ 413.255862][T19262] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.300063][T19261] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3626: mark_inode_dirty error [ 413.313788][T19248] __quota_error: 202 callbacks suppressed [ 413.313806][T19248] Quota error (device loop1): write_blk: dquota write failed [ 413.331001][T19261] Quota error (device loop5): write_blk: dquota write failed [ 413.355058][T17123] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.369123][T19248] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 413.406069][T19261] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 413.452191][T19248] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3620: Failed to acquire dquot type 0 [ 413.472199][T19261] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3626: Failed to acquire dquot type 0 [ 413.492905][T19273] loop2: detected capacity change from 0 to 1024 [ 413.499475][ T29] audit: type=1326 audit(1763946151.417:21425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.523149][ T29] audit: type=1326 audit(1763946151.417:21426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.546733][ T29] audit: type=1326 audit(1763946151.417:21427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.570385][ T29] audit: type=1326 audit(1763946151.417:21428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.593985][ T29] audit: type=1326 audit(1763946151.417:21429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.617603][ T29] audit: type=1326 audit(1763946151.417:21430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19272 comm="syz.2.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 413.638152][T19275] loop3: detected capacity change from 0 to 1024 [ 413.643467][T19273] EXT4-fs: Ignoring removed nobh option [ 413.653169][T19273] EXT4-fs: Ignoring removed bh option [ 413.657096][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3620: corrupted inode contents [ 413.670884][T19275] ext3: Unknown parameter 'obj_type' [ 413.687575][T19275] blktrace: Concurrent blktraces are not allowed on loop6 [ 413.704584][T19273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.705319][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3629'. [ 413.741669][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3626: corrupted inode contents [ 413.743975][T19248] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.3620: mark_inode_dirty error [ 413.802491][T19261] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3626: mark_inode_dirty error [ 413.802596][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3620: corrupted inode contents [ 413.834974][T19248] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3620: mark_inode_dirty error [ 413.846301][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3626: corrupted inode contents [ 413.888385][T19282] loop3: detected capacity change from 0 to 512 [ 413.894946][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3620: corrupted inode contents [ 413.912437][T19261] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3626: mark_inode_dirty error [ 413.919746][T19282] EXT4-fs: Ignoring removed oldalloc option [ 413.942169][T19282] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3632: inode #0: comm syz.3.3632: iget: illegal inode # [ 413.956330][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3626: corrupted inode contents [ 413.982250][T19282] EXT4-fs (loop3): get orphan inode failed [ 413.988266][T19282] EXT4-fs (loop3): mount failed [ 413.998176][T19248] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 414.016222][T19261] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 414.061963][T19248] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3620: corrupted inode contents [ 414.074720][T19261] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3626: corrupted inode contents [ 414.087238][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 414.099102][T16825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.108493][T19261] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3626: mark_inode_dirty error [ 414.119987][T19248] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.3620: mark_inode_dirty error [ 414.147147][T19291] loop2: detected capacity change from 0 to 1024 [ 414.152831][T19261] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 414.153836][T19291] ext3: Unknown parameter 'obj_type' [ 414.169052][T19248] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 414.171622][T19291] blktrace: Concurrent blktraces are not allowed on loop4 [ 414.206385][T19261] EXT4-fs (loop5): 1 truncate cleaned up [ 414.212296][T19248] EXT4-fs (loop1): 1 truncate cleaned up [ 414.232455][T19248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.245403][T19261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.291035][T19248] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.301656][T19261] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.317176][T19293] syz!: rxe_newlink: already configured on team_slave_0 [ 414.371608][T19298] loop2: detected capacity change from 0 to 512 [ 414.378368][T19298] EXT4-fs: Ignoring removed oldalloc option [ 414.385947][T19298] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3638: inode #0: comm syz.2.3638: iget: illegal inode # [ 414.416712][T19298] EXT4-fs (loop2): get orphan inode failed [ 414.428159][T19298] EXT4-fs (loop2): mount failed [ 414.567607][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.591088][T19303] random: crng reseeded on system resumption [ 414.598672][T19303] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3640'. [ 414.610128][T19303] loop5: detected capacity change from 0 to 128 [ 414.617717][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.618500][T19303] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.639457][T19303] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.707685][T10499] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.766550][T19317] loop1: detected capacity change from 0 to 1024 [ 414.773212][T19317] ext3: Unknown parameter 'obj_type' [ 414.786545][T19317] blktrace: Concurrent blktraces are not allowed on loop2 [ 414.822084][T19325] loop5: detected capacity change from 0 to 512 [ 414.829225][T19325] EXT4-fs: Ignoring removed oldalloc option [ 414.838633][T19325] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.3649: inode #0: comm syz.5.3649: iget: illegal inode # [ 414.859028][T19328] loop1: detected capacity change from 0 to 2048 [ 414.862198][T19325] EXT4-fs (loop5): get orphan inode failed [ 414.871513][T19325] EXT4-fs (loop5): mount failed [ 414.880009][T19321] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 414.889004][T19328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.901407][T19328] ext4 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.016987][T19339] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3651: bg 0: block 345: padding at end of block bitmap is not set [ 415.035771][T19339] EXT4-fs (loop1): Remounting filesystem read-only [ 415.084641][T19343] loop0: detected capacity change from 0 to 512 [ 415.091285][T19343] EXT4-fs: Ignoring removed oldalloc option [ 415.099856][T19343] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.3656: inode #0: comm syz.0.3656: iget: illegal inode # [ 415.127694][T19343] EXT4-fs (loop0): get orphan inode failed [ 415.139151][T19343] EXT4-fs (loop0): mount failed [ 415.183883][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.250217][T19356] loop0: detected capacity change from 0 to 1024 [ 415.256944][T19356] ext3: Unknown parameter 'obj_type' [ 415.264690][T19356] blktrace: Concurrent blktraces are not allowed on loop0 [ 415.265772][T19358] loop1: detected capacity change from 0 to 512 [ 415.278442][T19358] EXT4-fs: Ignoring removed oldalloc option [ 415.286368][T19358] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.3662: inode #0: comm syz.1.3662: iget: illegal inode # [ 415.302685][T19358] EXT4-fs (loop1): get orphan inode failed [ 415.308711][T19358] EXT4-fs (loop1): mount failed [ 415.351929][T19363] syz!: rxe_newlink: already configured on team_slave_0 [ 415.369481][T19370] loop0: detected capacity change from 0 to 128 [ 415.420491][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 416.082165][ T4121] Bluetooth: hci0: command 0x1003 tx timeout [ 416.082204][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 416.104433][T19392] loop3: detected capacity change from 0 to 1024 [ 416.111104][T19392] ext3: Unknown parameter 'obj_type' [ 416.118765][T19392] blktrace: Concurrent blktraces are not allowed on loop6 [ 416.196483][T19398] loop3: detected capacity change from 0 to 512 [ 416.203443][T19398] EXT4-fs: Ignoring removed oldalloc option [ 416.210586][T19398] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3677: inode #0: comm syz.3.3677: iget: illegal inode # [ 416.223694][T19398] EXT4-fs (loop3): get orphan inode failed [ 416.229609][T19398] EXT4-fs (loop3): mount failed [ 416.300784][T19407] __nla_validate_parse: 17 callbacks suppressed [ 416.300841][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 416.302948][T19405] syz!: rxe_newlink: already configured on team_slave_0 [ 416.321689][T19410] loop1: detected capacity change from 0 to 128 [ 416.349067][T19410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3681'. [ 416.360667][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.389851][T19416] loop1: detected capacity change from 0 to 1024 [ 416.390060][T19416] ext3: Unknown parameter 'obj_type' [ 416.392724][T19416] blktrace: Concurrent blktraces are not allowed on loop2 [ 416.525082][T19422] vhci_hcd: invalid port number 96 [ 416.525169][T19422] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 416.551708][T19424] loop1: detected capacity change from 0 to 2048 [ 416.563874][T19424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.564004][T19424] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.653808][T19430] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3688: bg 0: block 345: padding at end of block bitmap is not set [ 416.654002][T19430] EXT4-fs (loop1): Remounting filesystem read-only [ 416.777566][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.966864][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3692'. [ 417.217069][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 417.288433][T19445] syz!: rxe_newlink: already configured on team_slave_0 [ 417.315052][T19448] netlink: 'syz.2.3695': attribute type 10 has an invalid length. [ 417.324488][T19448] bond0: (slave dummy0): Releasing backup interface [ 417.332980][T19448] netlink: 'syz.2.3695': attribute type 10 has an invalid length. [ 417.342603][T19448] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 417.372419][T19450] loop2: detected capacity change from 0 to 512 [ 417.379084][T19450] EXT4-fs: Ignoring removed oldalloc option [ 417.386391][T19450] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3696: inode #0: comm syz.2.3696: iget: illegal inode # [ 417.399766][T19450] EXT4-fs (loop2): get orphan inode failed [ 417.405948][T19450] EXT4-fs (loop2): mount failed [ 417.409391][T19434] syz.5.3691 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 417.425134][T19434] CPU: 0 UID: 0 PID: 19434 Comm: syz.5.3691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.425190][T19434] Tainted: [W]=WARN [ 417.425198][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.425214][T19434] Call Trace: [ 417.425223][T19434] [ 417.425233][T19434] __dump_stack+0x1d/0x30 [ 417.425262][T19434] dump_stack_lvl+0xe8/0x140 [ 417.425283][T19434] dump_stack+0x15/0x1b [ 417.425371][T19434] dump_header+0x81/0x220 [ 417.425396][T19434] oom_kill_process+0x342/0x400 [ 417.425489][T19434] out_of_memory+0x979/0xb80 [ 417.425525][T19434] try_charge_memcg+0x610/0xa10 [ 417.425558][T19434] obj_cgroup_charge_pages+0xa6/0x150 [ 417.425594][T19434] __memcg_kmem_charge_page+0x9f/0x170 [ 417.425638][T19434] __alloc_frozen_pages_noprof+0x188/0x360 [ 417.425685][T19434] alloc_pages_mpol+0xb3/0x260 [ 417.425709][T19434] alloc_pages_noprof+0x90/0x130 [ 417.425782][T19434] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 417.425897][T19434] __kvmalloc_node_noprof+0x483/0x670 [ 417.425995][T19434] ? ip_set_alloc+0x24/0x30 [ 417.426029][T19434] ? ip_set_alloc+0x24/0x30 [ 417.426061][T19434] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 417.426162][T19434] ip_set_alloc+0x24/0x30 [ 417.426197][T19434] hash_netiface_create+0x282/0x740 [ 417.426255][T19434] ? __pfx_hash_netiface_create+0x10/0x10 [ 417.426291][T19434] ip_set_create+0x3cc/0x970 [ 417.426322][T19434] ? __nla_parse+0x40/0x60 [ 417.426421][T19434] nfnetlink_rcv_msg+0x4c6/0x590 [ 417.426473][T19434] netlink_rcv_skb+0x123/0x220 [ 417.426523][T19434] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 417.426628][T19434] nfnetlink_rcv+0x167/0x16c0 [ 417.426655][T19434] ? kmem_cache_free+0xe4/0x3d0 [ 417.426781][T19434] ? __kfree_skb+0x109/0x150 [ 417.426820][T19434] ? nlmon_xmit+0x4f/0x60 [ 417.426849][T19434] ? consume_skb+0x49/0x150 [ 417.426902][T19434] ? nlmon_xmit+0x4f/0x60 [ 417.427003][T19434] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 417.427047][T19434] ? __dev_queue_xmit+0x1200/0x2000 [ 417.427214][T19434] ? __dev_queue_xmit+0x182/0x2000 [ 417.427277][T19434] ? kmem_cache_free+0x286/0x3d0 [ 417.427363][T19434] ? ref_tracker_free+0x37d/0x3e0 [ 417.427420][T19434] ? __netlink_deliver_tap+0x4dc/0x500 [ 417.427449][T19434] netlink_unicast+0x5c0/0x690 [ 417.427550][T19434] netlink_sendmsg+0x58b/0x6b0 [ 417.427578][T19434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.427603][T19434] __sock_sendmsg+0x145/0x180 [ 417.427636][T19434] ____sys_sendmsg+0x31e/0x4e0 [ 417.427664][T19434] ___sys_sendmsg+0x17b/0x1d0 [ 417.427739][T19434] __x64_sys_sendmsg+0xd4/0x160 [ 417.427769][T19434] x64_sys_call+0x191e/0x3000 [ 417.427799][T19434] do_syscall_64+0xd2/0x200 [ 417.427826][T19434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 417.427934][T19434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 417.428023][T19434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.428050][T19434] RIP: 0033:0x7f5d39e5f749 [ 417.428070][T19434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.428117][T19434] RSP: 002b:00007f5d388bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.428139][T19434] RAX: ffffffffffffffda RBX: 00007f5d3a0b5fa0 RCX: 00007f5d39e5f749 [ 417.428153][T19434] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 417.428167][T19434] RBP: 00007f5d39ee3f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.428181][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.428195][T19434] R13: 00007f5d3a0b6038 R14: 00007f5d3a0b5fa0 R15: 00007fffe398cb68 [ 417.428216][T19434] [ 417.428297][T19434] memory: usage 307200kB, limit 307200kB, failcnt 905 [ 417.443850][ T4121] Bluetooth: hci1: command 0x1003 tx timeout [ 417.452215][ T3638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 417.453934][T19434] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 417.523740][T19455] loop0: detected capacity change from 0 to 128 [ 417.524435][T19434] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 417.534425][T19455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3697'. [ 417.538655][T19434] Memory cgroup stats for /syz5: [ 417.827223][T19434] cache 0 [ 417.835167][T19434] rss 4096 [ 417.838207][T19434] shmem 0 [ 417.841230][T19434] mapped_file 0 [ 417.844716][T19434] dirty 0 [ 417.847656][T19434] writeback 0 [ 417.850936][T19434] workingset_refault_anon 521 [ 417.855624][T19434] workingset_refault_file 0 [ 417.860292][T19434] swap 184320 [ 417.863656][T19434] swapcached 16384 [ 417.867396][T19434] pgpgin 248525 [ 417.870859][T19434] pgpgout 248521 [ 417.874539][T19434] pgfault 280104 [ 417.878289][T19434] pgmajfault 330 [ 417.881843][T19434] inactive_anon 8192 [ 417.885760][T19434] active_anon 8192 [ 417.889479][T19434] inactive_file 0 [ 417.893132][T19434] active_file 0 [ 417.896587][T19434] unevictable 0 [ 417.897430][T19457] syzkaller0: entered promiscuous mode [ 417.900121][T19434] hierarchical_memory_limit 314572800 [ 417.900132][T19434] hierarchical_memsw_limit 9223372036854771712 [ 417.900143][T19434] total_cache 0 [ 417.905608][T19457] syzkaller0: entered allmulticast mode [ 417.926174][T19434] total_rss 4096 [ 417.929719][T19434] total_shmem 0 [ 417.933216][T19434] total_mapped_file 0 [ 417.937204][T19434] total_dirty 0 [ 417.940661][T19434] total_writeback 0 [ 417.944485][T19434] total_workingset_refault_anon 521 [ 417.949688][T19434] total_workingset_refault_file 0 [ 417.954843][T19434] total_swap 184320 [ 417.958671][T19434] total_swapcached 16384 [ 417.963061][T19434] total_pgpgin 248525 [ 417.967170][T19434] total_pgpgout 248521 [ 417.971241][T19434] total_pgfault 280104 [ 417.975455][T19434] total_pgmajfault 330 [ 417.979629][T19434] total_inactive_anon 8192 [ 417.984080][T19434] total_active_anon 8192 [ 417.988326][T19434] total_inactive_file 0 [ 417.992584][T19434] total_active_file 0 [ 417.996736][T19434] total_unevictable 0 [ 417.999808][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 418.000778][T19434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3691,pid=19433,uid=0 [ 418.024489][T19434] Memory cgroup out of memory: Killed process 19433 (syz.5.3691) total-vm:96012kB, anon-rss:1264kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 418.098361][T19471] loop0: detected capacity change from 0 to 1024 [ 418.105391][T19471] EXT4-fs: Ignoring removed nobh option [ 418.111011][T19471] EXT4-fs: Ignoring removed bh option [ 418.192535][T19471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.237601][T19479] random: crng reseeded on system resumption [ 418.248837][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3707'. [ 418.259165][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3707'. [ 418.296704][T19482] netlink: 'syz.1.3706': attribute type 13 has an invalid length. [ 418.324135][T19479] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3708'. [ 418.337976][T19484] loop5: detected capacity change from 0 to 512 [ 418.348737][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 418.348753][ T29] audit: type=1326 audit(1763946156.277:22053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19469 comm="syz.0.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 418.389113][T19484] EXT4-fs: Ignoring removed oldalloc option [ 418.422607][ T3638] Bluetooth: hci0: command 0x1003 tx timeout [ 418.430202][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.473975][T19484] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.3709: inode #0: comm syz.5.3709: iget: illegal inode # [ 418.530736][ T29] audit: type=1326 audit(1763946156.337:22054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19469 comm="syz.0.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 418.558040][T19491] netlink: 660 bytes leftover after parsing attributes in process `syz.3.3710'. [ 418.581640][T19484] EXT4-fs (loop5): get orphan inode failed [ 418.602749][T19484] EXT4-fs (loop5): mount failed [ 418.610398][T19489] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 418.628148][T19493] loop2: detected capacity change from 0 to 1024 [ 418.638146][T19493] ext3: Unknown parameter 'obj_type' [ 418.647252][T19493] blktrace: Concurrent blktraces are not allowed on loop4 [ 418.676454][ T29] audit: type=1326 audit(1763946156.607:22055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.700230][ T29] audit: type=1326 audit(1763946156.607:22056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.708137][T19495] syz!: rxe_newlink: already configured on team_slave_0 [ 418.723842][ T29] audit: type=1326 audit(1763946156.607:22057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.754408][ T29] audit: type=1326 audit(1763946156.607:22058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.778014][ T29] audit: type=1326 audit(1763946156.607:22059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.801845][ T29] audit: type=1326 audit(1763946156.607:22060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.812820][T19499] loop5: detected capacity change from 0 to 512 [ 418.825530][ T29] audit: type=1326 audit(1763946156.607:22061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.855616][ T29] audit: type=1326 audit(1763946156.607:22062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.2.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 418.866310][T19499] EXT4-fs: Ignoring removed oldalloc option [ 418.900482][T19499] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.3713: inode #0: comm syz.5.3713: iget: illegal inode # [ 418.913949][T19499] EXT4-fs (loop5): get orphan inode failed [ 418.919881][T19499] EXT4-fs (loop5): mount failed [ 418.980268][T17428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.983567][T19508] loop5: detected capacity change from 0 to 1024 [ 418.995889][T19508] ext3: Unknown parameter 'obj_type' [ 419.013230][T19508] blktrace: Concurrent blktraces are not allowed on loop10 [ 419.034004][T19513] loop3: detected capacity change from 0 to 512 [ 419.040983][T19513] EXT4-fs: Ignoring removed oldalloc option [ 419.048184][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 419.058372][T19510] syzkaller0: entered promiscuous mode [ 419.063953][T19510] syzkaller0: entered allmulticast mode [ 419.070197][T19513] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3721: inode #0: comm syz.3.3721: iget: illegal inode # [ 419.072083][T19516] loop5: detected capacity change from 0 to 1024 [ 419.083526][T19513] EXT4-fs (loop3): get orphan inode failed [ 419.095508][T19513] EXT4-fs (loop3): mount failed [ 419.101871][T19516] ext3: Unknown parameter 'obj_type' [ 419.112575][T19516] blktrace: Concurrent blktraces are not allowed on loop10 [ 419.141924][T19520] loop0: detected capacity change from 0 to 2048 [ 419.156605][T19525] loop5: detected capacity change from 0 to 512 [ 419.164103][T19525] EXT4-fs: Ignoring removed oldalloc option [ 419.172418][T19520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.185042][T19525] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.3723: inode #0: comm syz.5.3723: iget: illegal inode # [ 419.198110][T19520] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.222811][T19525] EXT4-fs (loop5): get orphan inode failed [ 419.239035][T19533] loop1: detected capacity change from 0 to 1024 [ 419.239287][T19525] EXT4-fs (loop5): mount failed [ 419.246413][T19533] EXT4-fs: Ignoring removed nobh option [ 419.255951][T19533] EXT4-fs: Ignoring removed bh option [ 419.267456][T19535] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3716: bg 0: block 345: padding at end of block bitmap is not set [ 419.271963][T19531] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 419.282511][T19535] EXT4-fs (loop0): Remounting filesystem read-only [ 419.299682][T19533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.442737][T19552] loop3: detected capacity change from 0 to 1024 [ 419.445286][T19556] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 419.454992][T19552] ext3: Unknown parameter 'obj_type' [ 419.485454][T19552] blktrace: Concurrent blktraces are not allowed on loop6 [ 419.519980][T19560] loop3: detected capacity change from 0 to 128 [ 419.525149][T19560] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.594814][T19566] vhci_hcd: invalid port number 96 [ 419.594824][T19566] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 419.734479][T19584] loop1: detected capacity change from 0 to 1024 [ 419.734718][T19584] ext3: Unknown parameter 'obj_type' [ 419.749750][T19584] blktrace: Concurrent blktraces are not allowed on loop2 [ 420.359536][T19593] loop0: detected capacity change from 0 to 512 [ 420.359790][T19593] EXT4-fs: Ignoring removed oldalloc option [ 420.361433][T19593] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.3748: inode #0: comm syz.0.3748: iget: illegal inode # [ 420.361518][T19593] EXT4-fs (loop0): get orphan inode failed [ 420.361651][T19593] EXT4-fs (loop0): mount failed [ 420.424842][T19598] loop3: detected capacity change from 0 to 128 [ 420.495996][T19587] syz.1.3747 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 420.510246][T19587] CPU: 0 UID: 0 PID: 19587 Comm: syz.1.3747 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.510284][T19587] Tainted: [W]=WARN [ 420.510291][T19587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.510303][T19587] Call Trace: [ 420.510339][T19587] [ 420.510349][T19587] __dump_stack+0x1d/0x30 [ 420.510370][T19587] dump_stack_lvl+0xe8/0x140 [ 420.510389][T19587] dump_stack+0x15/0x1b [ 420.510417][T19587] dump_header+0x81/0x220 [ 420.510438][T19587] oom_kill_process+0x342/0x400 [ 420.510488][T19587] out_of_memory+0x979/0xb80 [ 420.510525][T19587] try_charge_memcg+0x610/0xa10 [ 420.510612][T19587] obj_cgroup_charge_pages+0xa6/0x150 [ 420.510630][T19587] __memcg_kmem_charge_page+0x9f/0x170 [ 420.510648][T19587] __alloc_frozen_pages_noprof+0x188/0x360 [ 420.510721][T19587] alloc_pages_mpol+0xb3/0x260 [ 420.510742][T19587] ? alloc_pages_noprof+0x61/0x130 [ 420.510761][T19587] alloc_pages_noprof+0x90/0x130 [ 420.510779][T19587] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 420.510823][T19587] __kvmalloc_node_noprof+0x483/0x670 [ 420.510871][T19587] ? ip_set_alloc+0x24/0x30 [ 420.510904][T19587] ? ip_set_alloc+0x24/0x30 [ 420.510950][T19587] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 420.510982][T19587] ip_set_alloc+0x24/0x30 [ 420.511082][T19587] hash_netiface_create+0x282/0x740 [ 420.511135][T19587] ? __pfx_hash_netiface_create+0x10/0x10 [ 420.511241][T19587] ip_set_create+0x3cc/0x970 [ 420.511264][T19587] ? __nla_parse+0x40/0x60 [ 420.511288][T19587] nfnetlink_rcv_msg+0x4c6/0x590 [ 420.511329][T19587] netlink_rcv_skb+0x123/0x220 [ 420.511358][T19587] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 420.511454][T19587] nfnetlink_rcv+0x167/0x16c0 [ 420.511476][T19587] ? free_pgtables+0x5d3/0x610 [ 420.511570][T19587] ? __account_obj_stock+0x211/0x350 [ 420.511598][T19587] ? refill_obj_stock+0x254/0x2e0 [ 420.511617][T19587] ? __rcu_read_unlock+0x4f/0x70 [ 420.511682][T19587] ? __memcg_slab_free_hook+0xbc/0x230 [ 420.511708][T19587] ? vm_area_free+0x71/0xb0 [ 420.511800][T19587] ? kmem_cache_free+0x286/0x3d0 [ 420.511835][T19587] ? percpu_counter_add_batch+0xb6/0x130 [ 420.511873][T19587] ? __mt_destroy+0xce/0xe0 [ 420.511900][T19587] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 420.512047][T19587] ? should_fail_ex+0x30/0x280 [ 420.512093][T19587] ? selinux_nlmsg_lookup+0x99/0x890 [ 420.512200][T19587] ? __rcu_read_unlock+0x34/0x70 [ 420.512226][T19587] ? __netlink_lookup+0x266/0x2a0 [ 420.512314][T19587] netlink_unicast+0x5c0/0x690 [ 420.512351][T19587] netlink_sendmsg+0x58b/0x6b0 [ 420.512371][T19587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.512387][T19587] __sock_sendmsg+0x145/0x180 [ 420.512454][T19587] ____sys_sendmsg+0x31e/0x4e0 [ 420.512480][T19587] ___sys_sendmsg+0x17b/0x1d0 [ 420.512510][T19587] __x64_sys_sendmsg+0xd4/0x160 [ 420.512530][T19587] x64_sys_call+0x191e/0x3000 [ 420.512582][T19587] do_syscall_64+0xd2/0x200 [ 420.512604][T19587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 420.512628][T19587] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 420.512789][T19587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.512808][T19587] RIP: 0033:0x7f43cff4f749 [ 420.512822][T19587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.512841][T19587] RSP: 002b:00007f43ce9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.512862][T19587] RAX: ffffffffffffffda RBX: 00007f43d01a5fa0 RCX: 00007f43cff4f749 [ 420.512931][T19587] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 420.513006][T19587] RBP: 00007f43cffd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 420.513020][T19587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.513030][T19587] R13: 00007f43d01a6038 R14: 00007f43d01a5fa0 R15: 00007ffd0070bd18 [ 420.513045][T19587] [ 420.520849][T19604] loop3: detected capacity change from 0 to 1024 [ 420.524471][T19587] memory: usage 307200kB, limit 307200kB, failcnt 2115 [ 420.532892][T19604] ext3: Unknown parameter 'obj_type' [ 420.538384][T19587] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 420.596498][T19604] blktrace: Concurrent blktraces are not allowed on loop6 [ 420.597756][T19587] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 420.792934][T19611] FAULT_INJECTION: forcing a failure. [ 420.792934][T19611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.797833][T19587] Memory cgroup stats for [ 420.803553][T19611] CPU: 1 UID: 0 PID: 19611 Comm: syz.3.3755 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.803593][T19611] Tainted: [W]=WARN [ 420.803603][T19611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.803647][T19611] Call Trace: [ 420.803654][T19611] [ 420.803663][T19611] __dump_stack+0x1d/0x30 [ 420.803692][T19611] dump_stack_lvl+0xe8/0x140 [ 420.803716][T19611] dump_stack+0x15/0x1b [ 420.803738][T19611] should_fail_ex+0x265/0x280 [ 420.803788][T19611] should_fail+0xb/0x20 [ 420.803832][T19611] should_fail_usercopy+0x1a/0x20 [ 420.803854][T19611] _copy_from_user+0x1c/0xb0 [ 420.803903][T19611] snd_seq_write+0x1d3/0x530 [ 420.803933][T19611] ? __pfx_snd_seq_write+0x10/0x10 [ 420.803957][T19611] vfs_write+0x269/0x960 [ 420.803987][T19611] ? __rcu_read_unlock+0x4f/0x70 [ 420.804096][T19611] ? __fget_files+0x184/0x1c0 [ 420.804192][T19611] ksys_write+0xda/0x1a0 [ 420.804223][T19611] __x64_sys_write+0x40/0x50 [ 420.804328][T19611] x64_sys_call+0x2802/0x3000 [ 420.804354][T19611] do_syscall_64+0xd2/0x200 [ 420.804445][T19611] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 420.804478][T19611] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 420.804625][T19611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.804651][T19611] RIP: 0033:0x7fc4c645f749 [ 420.804670][T19611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.804711][T19611] RSP: 002b:00007fc4c4ea6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.804814][T19611] RAX: ffffffffffffffda RBX: 00007fc4c66b6090 RCX: 00007fc4c645f749 [ 420.804830][T19611] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000008 [ 420.804844][T19611] RBP: 00007fc4c4ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.804859][T19611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.804874][T19611] R13: 00007fc4c66b6128 R14: 00007fc4c66b6090 R15: 00007ffd748656d8 [ 420.804895][T19611] [ 420.840749][T19615] loop5: detected capacity change from 0 to 1024 [ 420.841886][T19587] /syz1: [ 420.850533][T19615] ext3: Unknown parameter 'obj_type' [ 420.902961][T19587] cache 0 [ 420.911560][T19617] loop0: detected capacity change from 0 to 512 [ 420.918494][T19587] rss 0 [ 420.926186][T19617] EXT4-fs: Ignoring removed nobh option [ 420.938850][T19587] shmem 0 [ 420.947287][T19615] blktrace: Concurrent blktraces are not allowed on loop10 [ 420.954664][T19587] mapped_file 0 [ 421.149325][T19623] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 421.150457][T19587] dirty 0 [ 421.150467][T19587] writeback 0 [ 421.150476][T19587] workingset_refault_anon 649 [ 421.164030][T19627] loop5: detected capacity change from 0 to 128 [ 421.164999][T19587] workingset_refault_file 3058 [ 421.168151][T19627] msdos: Unknown parameter '' [ 421.173317][T19587] swap 208896 [ 421.173347][T19587] swapcached 0 [ 421.176273][ T3638] Bluetooth: hci0: command 0x1003 tx timeout [ 421.183463][T19587] pgpgin 508606 [ 421.186964][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 421.193526][T19587] pgpgout 508603 [ 421.210709][T19627] loop5: detected capacity change from 0 to 2048 [ 421.215420][T19587] pgfault 531873 [ 421.215429][T19587] pgmajfault 412 [ 421.215436][T19587] inactive_anon 0 [ 421.221266][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3754: corrupted inode contents [ 421.223500][T19587] active_anon 0 [ 421.223510][T19587] inactive_file 0 [ 421.223518][T19587] active_file 12288 [ 421.285642][T19587] unevictable 0 [ 421.289175][T19587] hierarchical_memory_limit 314572800 [ 421.294583][T19587] hierarchical_memsw_limit 9223372036854771712 [ 421.300756][T19587] total_cache 0 [ 421.304239][T19587] total_rss 0 [ 421.307521][T19587] total_shmem 0 [ 421.310975][T19587] total_mapped_file 0 [ 421.314979][T19587] total_dirty 0 [ 421.318450][T19587] total_writeback 0 [ 421.322267][T19587] total_workingset_refault_anon 649 [ 421.327500][T19587] total_workingset_refault_file 3058 [ 421.332828][T19587] total_swap 208896 [ 421.336677][T19587] total_swapcached 0 [ 421.340566][T19587] total_pgpgin 508606 [ 421.344571][T19587] total_pgpgout 508603 [ 421.348637][T19587] total_pgfault 531873 [ 421.352814][T19587] total_pgmajfault 412 [ 421.356880][T19587] total_inactive_anon 0 [ 421.361033][T19587] total_active_anon 0 [ 421.365064][T19587] total_inactive_file 0 [ 421.369284][T19587] total_active_file 12288 [ 421.373655][T19587] total_unevictable 0 [ 421.375789][T19617] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.3754: mark_inode_dirty error [ 421.377630][T19587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3747,pid=19586,uid=0 [ 421.389411][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3754: corrupted inode contents [ 421.403586][T19587] Memory cgroup out of memory: Killed process 19586 (syz.1.3747) total-vm:93964kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 421.446927][T19617] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3754: mark_inode_dirty error [ 421.463494][T19631] loop2: detected capacity change from 0 to 512 [ 421.470293][T19631] EXT4-fs: Ignoring removed oldalloc option [ 421.477005][T19627] loop5: p3 < > p4 < > [ 421.481187][T19627] loop5: partition table partially beyond EOD, truncated [ 421.502474][T19631] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3760: inode #0: comm syz.2.3760: iget: illegal inode # [ 421.502835][T19627] loop5: p3 start 4284289 is beyond EOD, truncated [ 421.523074][T19631] EXT4-fs (loop2): get orphan inode failed [ 421.529010][T19631] EXT4-fs (loop2): mount failed [ 421.545656][T19617] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3754: Failed to acquire dquot type 0 [ 421.569218][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3754: corrupted inode contents [ 421.607981][T19617] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3754: mark_inode_dirty error [ 421.643682][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3754: corrupted inode contents [ 421.668981][T19617] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3754: mark_inode_dirty error [ 421.708528][T19642] random: crng reseeded on system resumption [ 421.718057][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3754: corrupted inode contents [ 421.731774][T19642] __nla_validate_parse: 14 callbacks suppressed [ 421.731788][T19642] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3764'. [ 421.760653][T19617] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 421.770443][T19642] loop3: detected capacity change from 0 to 128 [ 421.778994][T19642] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 421.811165][T19617] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3754: corrupted inode contents [ 421.826343][T19617] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3754: mark_inode_dirty error [ 421.856066][T19617] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 421.875656][T19617] EXT4-fs (loop0): 1 truncate cleaned up [ 421.887094][T19617] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.938342][T19645] loop5: detected capacity change from 0 to 1024 [ 421.952265][T19645] ext3: Unknown parameter 'obj_type' [ 421.975399][T19645] blktrace: Concurrent blktraces are not allowed on loop10 [ 421.988359][T19645] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3765'. [ 422.020399][T19652] loop5: detected capacity change from 0 to 1024 [ 422.022712][T19651] blktrace: Concurrent blktraces are not allowed on loop2 [ 422.027095][T19652] ext3: Unknown parameter 'obj_type' [ 422.035295][T19651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3767'. [ 422.043657][T19652] blktrace: Concurrent blktraces are not allowed on loop10 [ 422.069772][T19655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3769'. [ 422.092070][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3766'. [ 422.187308][T19663] delete_channel: no stack [ 422.207469][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3774'. [ 422.224024][T19666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.230794][T19669] loop5: detected capacity change from 0 to 512 [ 422.239206][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3774'. [ 422.248582][T19669] EXT4-fs: Ignoring removed nobh option [ 422.250492][T19670] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 422.263132][T19666] bond3 (unregistering): Released all slaves [ 422.277602][T19670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.285971][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3770: corrupted inode contents [ 422.298482][T19669] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3770: mark_inode_dirty error [ 422.310280][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3770: corrupted inode contents [ 422.324390][T19669] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3770: mark_inode_dirty error [ 422.336082][T19669] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3770: Failed to acquire dquot type 0 [ 422.348135][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3770: corrupted inode contents [ 422.360438][T19669] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3770: mark_inode_dirty error [ 422.372025][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3770: corrupted inode contents [ 422.384588][T19669] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3770: mark_inode_dirty error [ 422.402463][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3770: corrupted inode contents [ 422.414494][T19669] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 422.417459][T19682] blktrace: Concurrent blktraces are not allowed on loop2 [ 422.423284][T19669] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3770: corrupted inode contents [ 422.431461][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3778'. [ 422.442288][T19669] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3770: mark_inode_dirty error [ 422.462800][T19669] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 422.472692][T19669] EXT4-fs (loop5): 1 truncate cleaned up [ 422.478852][T19669] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.505296][T19687] blktrace: Concurrent blktraces are not allowed on loop2 [ 422.529007][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 422.538288][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 422.732504][T19702] netlink: 'syz.1.3786': attribute type 1 has an invalid length. [ 422.745999][T19702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.746776][T19700] syz!: rxe_newlink: already configured on team_slave_0 [ 422.816800][T19712] loop3: detected capacity change from 0 to 1024 [ 422.818415][T19715] loop2: detected capacity change from 0 to 1024 [ 422.823844][T19712] ext3: Unknown parameter 'obj_type' [ 422.830013][T19715] ext3: Unknown parameter 'obj_type' [ 422.839221][T19712] blktrace: Concurrent blktraces are not allowed on loop6 [ 422.843698][T19715] blktrace: Concurrent blktraces are not allowed on loop4 [ 422.913022][T19722] loop3: detected capacity change from 0 to 1024 [ 422.913840][T19722] EXT4-fs: Ignoring removed nobh option [ 422.913931][T19722] EXT4-fs: Ignoring removed bh option [ 422.954263][T19724] random: crng reseeded on system resumption [ 423.194274][T19741] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 423.207681][T19741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.288457][T19748] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 423.330930][T19755] loop3: detected capacity change from 0 to 1024 [ 423.331233][T19755] ext3: Unknown parameter 'obj_type' [ 423.337491][T19755] blktrace: Concurrent blktraces are not allowed on loop6 [ 423.351732][T19746] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 423.352879][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 423.352891][ T29] audit: type=1326 audit(1763946161.277:22639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.352960][ T29] audit: type=1326 audit(1763946161.277:22640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.352987][ T29] audit: type=1326 audit(1763946161.277:22641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353014][ T29] audit: type=1326 audit(1763946161.277:22642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353063][ T29] audit: type=1326 audit(1763946161.277:22643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353089][ T29] audit: type=1326 audit(1763946161.277:22644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353117][ T29] audit: type=1326 audit(1763946161.277:22645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353154][ T29] audit: type=1326 audit(1763946161.277:22646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353181][ T29] audit: type=1326 audit(1763946161.277:22647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.353282][ T29] audit: type=1326 audit(1763946161.287:22648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.0.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401530f749 code=0x7ffc0000 [ 423.395253][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.537470][T19762] vhci_hcd: invalid port number 96 [ 423.556089][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.578653][T19762] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 423.675171][T19764] netlink: 'syz.3.3807': attribute type 10 has an invalid length. [ 423.684016][T19764] netlink: 'syz.3.3807': attribute type 10 has an invalid length. [ 423.693419][T19764] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 423.823937][T19776] loop3: detected capacity change from 0 to 1024 [ 423.831022][T19776] EXT4-fs: Ignoring removed nobh option [ 423.836701][T19776] EXT4-fs: Ignoring removed bh option [ 423.981689][T19781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.990022][T19781] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.003274][T19781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.263450][T19785] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 424.277797][T19788] loop0: detected capacity change from 0 to 1024 [ 424.290882][T19793] netlink: 'syz.5.3817': attribute type 10 has an invalid length. [ 424.302448][T19788] ext3: Unknown parameter 'obj_type' [ 424.310774][T19793] bond0: (slave dummy0): Releasing backup interface [ 424.318795][T19788] blktrace: Concurrent blktraces are not allowed on loop0 [ 424.341385][T19795] netlink: 'syz.5.3817': attribute type 10 has an invalid length. [ 424.376491][T19795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 424.448647][T19808] loop0: detected capacity change from 0 to 1024 [ 424.455290][T19808] ext3: Unknown parameter 'obj_type' [ 424.463056][T19808] blktrace: Concurrent blktraces are not allowed on loop0 [ 424.501889][T19811] loop2: detected capacity change from 0 to 512 [ 424.515315][T19801] loop3: detected capacity change from 0 to 2048 [ 424.516176][T19813] loop0: detected capacity change from 0 to 2048 [ 424.528687][T19811] EXT4-fs: Ignoring removed nobh option [ 424.544544][T19801] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.557638][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3816: corrupted inode contents [ 424.571044][T19813] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.583743][T19811] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.3816: mark_inode_dirty error [ 424.658483][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3816: corrupted inode contents [ 424.663620][T19823] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3820: bg 0: block 345: padding at end of block bitmap is not set [ 424.688387][T19811] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3816: mark_inode_dirty error [ 424.688664][T19823] EXT4-fs (loop3): Remounting filesystem read-only [ 424.722025][T19825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.733556][T19827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3825: bg 0: block 345: padding at end of block bitmap is not set [ 424.762490][T19811] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3816: Failed to acquire dquot type 0 [ 424.768738][T19825] bond4 (unregistering): Released all slaves [ 424.779968][T19827] EXT4-fs (loop0): Remounting filesystem read-only [ 424.790483][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3816: corrupted inode contents [ 424.822298][T19811] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.3816: mark_inode_dirty error [ 424.838154][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3816: corrupted inode contents [ 424.850507][T19811] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3816: mark_inode_dirty error [ 424.871370][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3816: corrupted inode contents [ 424.894342][T19811] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 424.903223][T19811] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3816: corrupted inode contents [ 424.915625][T19811] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3816: mark_inode_dirty error [ 424.927233][T19811] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 424.937290][T19811] EXT4-fs (loop2): 1 truncate cleaned up [ 424.944024][T19811] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.967581][T19833] loop0: detected capacity change from 0 to 1024 [ 424.974653][T19833] ext3: Unknown parameter 'obj_type' [ 424.982580][T19833] blktrace: Concurrent blktraces are not allowed on loop0 [ 425.025103][T19840] netlink: 'syz.0.3832': attribute type 10 has an invalid length. [ 425.034983][T19840] netlink: 'syz.0.3832': attribute type 10 has an invalid length. [ 425.045841][T19840] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.098350][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.115215][T19844] loop0: detected capacity change from 0 to 1024 [ 425.132268][T19844] EXT4-fs: Ignoring removed nobh option [ 425.137832][T19844] EXT4-fs: Ignoring removed bh option [ 425.160333][T19843] delete_channel: no stack [ 425.328669][T19855] loop5: detected capacity change from 0 to 2048 [ 425.343592][T19855] ext4 filesystem being mounted at /512/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.358901][T19859] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 425.377521][T19859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.440660][T19863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3838: bg 0: block 345: padding at end of block bitmap is not set [ 425.473626][T19866] netlink: 'syz.0.3836': attribute type 13 has an invalid length. [ 425.502338][T19863] EXT4-fs (loop5): Remounting filesystem read-only [ 425.557075][T19869] loop0: detected capacity change from 0 to 512 [ 425.572400][T19869] EXT4-fs: Ignoring removed nobh option [ 425.606988][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3836: corrupted inode contents [ 425.607539][T19869] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.3836: mark_inode_dirty error [ 425.621852][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3836: corrupted inode contents [ 425.634105][T19869] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3836: mark_inode_dirty error [ 425.634649][T19869] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3836: Failed to acquire dquot type 0 [ 425.638487][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3836: corrupted inode contents [ 425.642209][T19869] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3836: mark_inode_dirty error [ 425.642533][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3836: corrupted inode contents [ 425.642749][T19869] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3836: mark_inode_dirty error [ 425.643086][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3836: corrupted inode contents [ 425.643533][T19869] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 425.644070][T19869] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3836: corrupted inode contents [ 425.646227][T19869] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3836: mark_inode_dirty error [ 425.779704][T19869] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 425.780096][T19869] EXT4-fs (loop0): 1 truncate cleaned up [ 425.868515][T19869] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.899539][T19879] bond0: (slave dummy0): Releasing backup interface [ 425.911703][T19879] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.940812][T19884] loop5: detected capacity change from 0 to 128 [ 426.095946][T19892] vhci_hcd: invalid port number 96 [ 426.101264][T19892] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 426.144807][ T3626] Bluetooth: hci1: Frame reassembly failed (-84) [ 426.320398][T19902] loop5: detected capacity change from 0 to 512 [ 426.320731][T19902] EXT4-fs: Ignoring removed nobh option [ 426.363551][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3854: corrupted inode contents [ 426.376005][T19902] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3854: mark_inode_dirty error [ 426.387781][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3854: corrupted inode contents [ 426.399956][T19902] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3854: mark_inode_dirty error [ 426.411465][T19906] bond0: (slave dummy0): Releasing backup interface [ 426.418450][T19902] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3854: Failed to acquire dquot type 0 [ 426.423368][T19906] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 426.430543][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3854: corrupted inode contents [ 426.450307][T19902] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3854: mark_inode_dirty error [ 426.471003][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3854: corrupted inode contents [ 426.487034][T19902] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3854: mark_inode_dirty error [ 426.498506][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3854: corrupted inode contents [ 426.510689][T19902] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 426.519565][T19902] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3854: corrupted inode contents [ 426.532196][T19902] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3854: mark_inode_dirty error [ 426.543527][T19902] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 426.553016][T19902] EXT4-fs (loop5): 1 truncate cleaned up [ 426.559394][T19902] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.633424][T19919] loop2: detected capacity change from 0 to 1024 [ 426.639955][T19919] ext3: Unknown parameter 'obj_type' [ 426.649029][T19919] blktrace: Concurrent blktraces are not allowed on loop4 [ 426.962293][T19923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.132398][ T4121] Bluetooth: hci0: command 0x1003 tx timeout [ 427.138634][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 427.165713][T19925] loop3: detected capacity change from 0 to 1024 [ 427.177621][T19925] ext3: Unknown parameter 'obj_type' [ 427.188055][T19925] blktrace: Concurrent blktraces are not allowed on loop6 [ 427.195728][T19925] __nla_validate_parse: 20 callbacks suppressed [ 427.195774][T19925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3862'. [ 427.254284][T19929] vhci_hcd: invalid port number 96 [ 427.259555][T19929] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 427.280434][T19932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.289252][T19932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.303800][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'. [ 427.313116][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 427.374975][T19939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3867'. [ 427.384806][T19939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3867'. [ 427.413307][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3868'. [ 427.744017][T19952] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.751249][T19952] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.780996][T19953] loop5: detected capacity change from 0 to 512 [ 427.787796][T19953] EXT4-fs: Ignoring removed nobh option [ 427.812634][T19952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.822287][T19952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.945881][ T41] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.954402][ T41] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.013026][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3869: corrupted inode contents [ 428.025353][ T41] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.033731][ T41] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.042270][T19953] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3869: mark_inode_dirty error [ 428.053766][ T31] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.062177][ T31] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.070963][ T31] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.070989][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3869: corrupted inode contents [ 428.091183][ T31] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.100179][T19953] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3869: mark_inode_dirty error [ 428.102270][T19958] loop0: detected capacity change from 0 to 128 [ 428.120803][T19949] loop3: detected capacity change from 0 to 512 [ 428.132610][T19958] msdos: Unknown parameter '' [ 428.137828][T19953] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3869: Failed to acquire dquot type 0 [ 428.141276][T19949] EXT4-fs: Ignoring removed nobh option [ 428.149934][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3869: corrupted inode contents [ 428.166889][T19953] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3869: mark_inode_dirty error [ 428.172159][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 428.178625][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3869: corrupted inode contents [ 428.184415][ T3638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 428.202716][T19953] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3869: mark_inode_dirty error [ 428.214182][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3869: corrupted inode contents [ 428.229696][T19953] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 428.238741][T19953] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3869: corrupted inode contents [ 428.250986][T19953] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3869: mark_inode_dirty error [ 428.262198][T19953] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 428.272743][T19953] EXT4-fs (loop5): 1 truncate cleaned up [ 428.278931][T19953] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.377301][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3866: corrupted inode contents [ 428.455545][T19949] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.3866: mark_inode_dirty error [ 428.474603][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3866: corrupted inode contents [ 428.496154][T19949] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3866: mark_inode_dirty error [ 428.508483][T19949] __quota_error: 234 callbacks suppressed [ 428.508499][T19949] Quota error (device loop3): write_blk: dquota write failed [ 428.523659][T19949] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 428.535134][T19949] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3866: Failed to acquire dquot type 0 [ 428.560453][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3866: corrupted inode contents [ 428.578857][T19949] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.3866: mark_inode_dirty error [ 428.607795][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3866: corrupted inode contents [ 428.608830][ T29] audit: type=1326 audit(1763946166.537:22875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.643392][ T29] audit: type=1326 audit(1763946166.537:22876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.656542][T19949] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3866: mark_inode_dirty error [ 428.667172][ T29] audit: type=1326 audit(1763946166.587:22877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.682032][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3866: corrupted inode contents [ 428.701740][ T29] audit: type=1326 audit(1763946166.587:22878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.714145][T19949] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 428.737330][ T29] audit: type=1326 audit(1763946166.587:22879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.769396][ T29] audit: type=1326 audit(1763946166.587:22880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.793035][ T29] audit: type=1326 audit(1763946166.587:22881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.802245][T19949] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3866: corrupted inode contents [ 428.816597][ T29] audit: type=1326 audit(1763946166.587:22882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d39e5f749 code=0x7ffc0000 [ 428.877417][T19949] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3866: mark_inode_dirty error [ 428.890170][T19949] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 428.900134][T19949] EXT4-fs (loop3): 1 truncate cleaned up [ 428.902783][T19971] blktrace: Concurrent blktraces are not allowed on loop2 [ 428.907936][T19949] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.916867][T19971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3874'. [ 428.983874][T19974] vhci_hcd: invalid port number 96 [ 428.989047][T19974] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 429.058037][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3879'. [ 429.076744][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3877'. [ 429.105206][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 429.144049][T19982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.154641][T19982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.307339][T19984] loop5: detected capacity change from 0 to 128 [ 429.316790][T19984] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.743319][T19991] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 429.751756][T19994] loop3: detected capacity change from 0 to 2048 [ 429.783211][T19994] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.843624][T19998] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 429.873495][T20000] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3883: bg 0: block 345: padding at end of block bitmap is not set [ 429.888289][T20000] EXT4-fs (loop3): Remounting filesystem read-only [ 429.920003][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 430.000700][T20006] blktrace: Concurrent blktraces are not allowed on loop2 [ 430.051413][T20009] loop3: detected capacity change from 0 to 1024 [ 430.058185][T20009] ext3: Unknown parameter 'obj_type' [ 430.060782][T20009] blktrace: Concurrent blktraces are not allowed on loop6 [ 430.224237][T20030] loop5: detected capacity change from 0 to 1024 [ 430.230880][T20030] ext3: Unknown parameter 'obj_type' [ 430.238625][T20030] blktrace: Concurrent blktraces are not allowed on loop10 [ 430.402911][T20038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.483664][ T4121] Bluetooth: hci0: command 0x1003 tx timeout [ 430.489890][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 430.636071][T20037] loop3: detected capacity change from 0 to 512 [ 430.657623][T20037] EXT4-fs: Ignoring removed oldalloc option [ 430.694860][T20037] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3898: inode #0: comm syz.3.3898: iget: illegal inode # [ 430.758490][T20037] EXT4-fs (loop3): get orphan inode failed [ 430.774285][T20037] EXT4-fs (loop3): mount failed [ 430.782872][T20045] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 430.874195][T20061] validate_nla: 6 callbacks suppressed [ 430.874211][T20061] netlink: 'syz.5.3911': attribute type 1 has an invalid length. [ 430.893647][T20061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.904454][T20061] bond6 (unregistering): Released all slaves [ 430.995637][T20034] syz.3.3898 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 431.009800][T20034] CPU: 1 UID: 0 PID: 20034 Comm: syz.3.3898 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.009835][T20034] Tainted: [W]=WARN [ 431.009843][T20034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.009903][T20034] Call Trace: [ 431.009911][T20034] [ 431.009920][T20034] __dump_stack+0x1d/0x30 [ 431.009945][T20034] dump_stack_lvl+0xe8/0x140 [ 431.009979][T20034] dump_stack+0x15/0x1b [ 431.010043][T20034] dump_header+0x81/0x220 [ 431.010081][T20034] oom_kill_process+0x342/0x400 [ 431.010112][T20034] out_of_memory+0x979/0xb80 [ 431.010143][T20034] try_charge_memcg+0x610/0xa10 [ 431.010241][T20034] obj_cgroup_charge_pages+0xa6/0x150 [ 431.010265][T20034] __memcg_kmem_charge_page+0x9f/0x170 [ 431.010290][T20034] __alloc_frozen_pages_noprof+0x188/0x360 [ 431.010332][T20034] alloc_pages_mpol+0xb3/0x260 [ 431.010435][T20034] alloc_pages_noprof+0x90/0x130 [ 431.010519][T20034] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 431.010569][T20034] __kvmalloc_node_noprof+0x483/0x670 [ 431.010605][T20034] ? ip_set_alloc+0x24/0x30 [ 431.010666][T20034] ? ip_set_alloc+0x24/0x30 [ 431.010700][T20034] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 431.010792][T20034] ip_set_alloc+0x24/0x30 [ 431.010826][T20034] hash_netiface_create+0x282/0x740 [ 431.010903][T20034] ? __pfx_hash_netiface_create+0x10/0x10 [ 431.010941][T20034] ip_set_create+0x3cc/0x970 [ 431.010973][T20034] ? __nla_parse+0x40/0x60 [ 431.011006][T20034] nfnetlink_rcv_msg+0x4c6/0x590 [ 431.011145][T20034] netlink_rcv_skb+0x123/0x220 [ 431.011193][T20034] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 431.011257][T20034] nfnetlink_rcv+0x167/0x16c0 [ 431.011348][T20034] ? free_pgtables+0x5d3/0x610 [ 431.011386][T20034] ? __account_obj_stock+0x211/0x350 [ 431.011415][T20034] ? refill_obj_stock+0x254/0x2e0 [ 431.011438][T20034] ? __rcu_read_unlock+0x4f/0x70 [ 431.011520][T20034] ? __memcg_slab_free_hook+0xbc/0x230 [ 431.011541][T20034] ? vm_area_free+0x71/0xb0 [ 431.011566][T20034] ? kmem_cache_free+0x286/0x3d0 [ 431.011675][T20034] ? percpu_counter_add_batch+0xb6/0x130 [ 431.011710][T20034] ? __mt_destroy+0xce/0xe0 [ 431.011732][T20034] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 431.011754][T20034] ? should_fail_ex+0x30/0x280 [ 431.011826][T20034] ? selinux_nlmsg_lookup+0x99/0x890 [ 431.011856][T20034] ? __rcu_read_unlock+0x34/0x70 [ 431.011882][T20034] ? __netlink_lookup+0x266/0x2a0 [ 431.011901][T20034] netlink_unicast+0x5c0/0x690 [ 431.012007][T20034] netlink_sendmsg+0x58b/0x6b0 [ 431.012026][T20034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.012167][T20034] __sock_sendmsg+0x145/0x180 [ 431.012191][T20034] ____sys_sendmsg+0x31e/0x4e0 [ 431.012217][T20034] ___sys_sendmsg+0x17b/0x1d0 [ 431.012253][T20034] __x64_sys_sendmsg+0xd4/0x160 [ 431.012352][T20034] x64_sys_call+0x191e/0x3000 [ 431.012378][T20034] do_syscall_64+0xd2/0x200 [ 431.012402][T20034] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.012434][T20034] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.012524][T20034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.012547][T20034] RIP: 0033:0x7fc4c645f749 [ 431.012561][T20034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.012576][T20034] RSP: 002b:00007fc4c4ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.012621][T20034] RAX: ffffffffffffffda RBX: 00007fc4c66b5fa0 RCX: 00007fc4c645f749 [ 431.012668][T20034] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 431.012732][T20034] RBP: 00007fc4c64e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.012745][T20034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.012758][T20034] R13: 00007fc4c66b6038 R14: 00007fc4c66b5fa0 R15: 00007ffd748656d8 [ 431.012889][T20034] [ 431.377775][T20034] memory: usage 307200kB, limit 307200kB, failcnt 1634 [ 431.384954][T20034] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 431.392878][T20034] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 431.400214][T20034] Memory cgroup stats for /syz3: [ 431.400600][T20034] cache 0 [ 431.408563][T20034] rss 4096 [ 431.411647][T20034] shmem 0 [ 431.414610][T20034] mapped_file 0 [ 431.418064][T20034] dirty 0 [ 431.420998][T20034] writeback 0 [ 431.424314][T20034] workingset_refault_anon 261 [ 431.428989][T20034] workingset_refault_file 2253 [ 431.433763][T20034] swap 196608 [ 431.437147][T20034] swapcached 8192 [ 431.440815][T20034] pgpgin 423103 [ 431.444291][T20034] pgpgout 423097 [ 431.447830][T20034] pgfault 468622 [ 431.451378][T20034] pgmajfault 179 [ 431.454988][T20034] inactive_anon 8192 [ 431.458901][T20034] active_anon 0 [ 431.462385][T20034] inactive_file 16384 [ 431.466483][T20034] active_file 0 [ 431.469963][T20034] unevictable 0 [ 431.473482][T20034] hierarchical_memory_limit 314572800 [ 431.478864][T20034] hierarchical_memsw_limit 9223372036854771712 [ 431.485049][T20034] total_cache 0 [ 431.488529][T20034] total_rss 4096 [ 431.492123][T20034] total_shmem 0 [ 431.495579][T20034] total_mapped_file 0 [ 431.499625][T20034] total_dirty 0 [ 431.503129][T20034] total_writeback 0 [ 431.506929][T20034] total_workingset_refault_anon 261 [ 431.512150][T20034] total_workingset_refault_file 2253 [ 431.517426][T20034] total_swap 196608 [ 431.521229][T20034] total_swapcached 8192 [ 431.525414][T20034] total_pgpgin 423103 [ 431.529427][T20034] total_pgpgout 423097 [ 431.533608][T20034] total_pgfault 468622 [ 431.537703][T20034] total_pgmajfault 179 [ 431.541771][T20034] total_inactive_anon 8192 [ 431.546215][T20034] total_active_anon 0 [ 431.550192][T20034] total_inactive_file 16384 [ 431.554712][T20034] total_active_file 0 [ 431.558734][T20034] total_unevictable 0 [ 431.562737][T20034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3898,pid=20028,uid=0 [ 431.577434][T20034] Memory cgroup out of memory: Killed process 20028 (syz.3.3898) total-vm:93964kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 431.854474][T20090] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 431.883543][T20090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.924481][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 431.944873][T20090] bond2 (unregistering): Released all slaves [ 432.126135][T20100] netlink: 'syz.5.3923': attribute type 13 has an invalid length. [ 433.023356][T20106] __nla_validate_parse: 12 callbacks suppressed [ 433.023373][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3926'. [ 433.081079][T20102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.136319][T20110] syzkaller0: entered promiscuous mode [ 433.141838][T20110] syzkaller0: entered allmulticast mode [ 433.161112][T20105] random: crng reseeded on system resumption [ 433.169349][T20105] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3925'. [ 433.182417][T20105] loop3: detected capacity change from 0 to 128 [ 433.204093][T20105] EXT4-fs mount: 36 callbacks suppressed [ 433.204110][T20105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.430730][T20120] netlink: 'syz.0.3927': attribute type 13 has an invalid length. [ 433.574695][T20119] loop0: detected capacity change from 0 to 512 [ 433.581529][T20119] EXT4-fs: Ignoring removed nobh option [ 433.622817][T20105] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 433.655458][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3927: corrupted inode contents [ 433.676118][T20119] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.3927: mark_inode_dirty error [ 433.690467][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 433.690483][ T29] audit: type=1326 audit(1763946171.617:23251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.697058][T20126] loop2: detected capacity change from 0 to 128 [ 433.720621][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3927: corrupted inode contents [ 433.738640][ T29] audit: type=1326 audit(1763946171.617:23252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.762293][ T29] audit: type=1326 audit(1763946171.617:23253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.785816][ T29] audit: type=1326 audit(1763946171.617:23254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.809426][ T29] audit: type=1326 audit(1763946171.617:23255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.832925][ T29] audit: type=1326 audit(1763946171.617:23256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.856497][ T29] audit: type=1326 audit(1763946171.617:23257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.880095][ T29] audit: type=1326 audit(1763946171.617:23258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.903738][ T29] audit: type=1326 audit(1763946171.617:23259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.927322][ T29] audit: type=1326 audit(1763946171.617:23260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c26f6f749 code=0x7ffc0000 [ 433.950991][T20119] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3927: mark_inode_dirty error [ 433.951740][T17123] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.971723][T20119] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3927: Failed to acquire dquot type 0 [ 433.972895][T20126] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.995871][T20126] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.007218][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3927: corrupted inode contents [ 434.022339][T20119] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3927: mark_inode_dirty error [ 434.040032][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3927: corrupted inode contents [ 434.060067][T20119] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3927: mark_inode_dirty error [ 434.071494][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3927: corrupted inode contents [ 434.083582][T20119] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 434.094395][T20119] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3927: corrupted inode contents [ 434.106920][T20119] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3927: mark_inode_dirty error [ 434.118148][T20119] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 434.137389][T20119] EXT4-fs (loop0): 1 truncate cleaned up [ 434.141845][T20119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.142015][T20119] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.211138][T20136] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 434.225184][T20136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.369436][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 434.371159][T17428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.389168][T20136] bond3 (unregistering): Released all slaves [ 434.585314][T20144] netlink: 'syz.5.3935': attribute type 13 has an invalid length. [ 434.592390][T20144] loop5: detected capacity change from 0 to 512 [ 434.592803][T20144] EXT4-fs: Ignoring removed nobh option [ 434.656644][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3935: corrupted inode contents [ 434.656930][T20144] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3935: mark_inode_dirty error [ 434.657596][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3935: corrupted inode contents [ 434.657791][T20144] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3935: mark_inode_dirty error [ 434.658496][T20144] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3935: Failed to acquire dquot type 0 [ 434.659434][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3935: corrupted inode contents [ 434.659814][T20144] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3935: mark_inode_dirty error [ 434.660314][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3935: corrupted inode contents [ 434.660450][T20144] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3935: mark_inode_dirty error [ 434.660769][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3935: corrupted inode contents [ 434.660949][T20144] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 434.661145][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3935: corrupted inode contents [ 434.661386][T20144] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3935: mark_inode_dirty error [ 434.661530][T20144] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 434.662185][T20144] EXT4-fs (loop5): 1 truncate cleaned up [ 434.662837][T20144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.662899][T20144] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.995808][T16825] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.005551][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3939'. [ 435.114140][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.128723][T20164] loop0: detected capacity change from 0 to 512 [ 435.156930][T20164] EXT4-fs: Ignoring removed nobh option [ 435.265288][T20173] loop3: detected capacity change from 0 to 1024 [ 435.287565][T20175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.340252][T20173] EXT4-fs: Ignoring removed nobh option [ 435.345869][T20173] EXT4-fs: Ignoring removed bh option [ 435.358438][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3937: corrupted inode contents [ 435.393627][T20173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.455585][T20164] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.3937: mark_inode_dirty error [ 435.471808][T20186] loop5: detected capacity change from 0 to 1024 [ 435.479811][T20187] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3947'. [ 435.500050][T20186] EXT4-fs: Ignoring removed nobh option [ 435.505818][T20186] EXT4-fs: Ignoring removed bh option [ 435.517858][T20183] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 435.532632][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.3937: corrupted inode contents [ 435.563911][T20186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.580977][T20164] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3937: mark_inode_dirty error [ 435.602586][T20164] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3937: Failed to acquire dquot type 0 [ 435.614141][T20185] delete_channel: no stack [ 435.621981][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3937: corrupted inode contents [ 435.634573][T20164] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.3937: mark_inode_dirty error [ 435.634947][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.655411][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3937: corrupted inode contents [ 435.689824][T20164] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3937: mark_inode_dirty error [ 435.701596][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3937: corrupted inode contents [ 435.715144][T20164] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 435.738190][T20164] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.3937: corrupted inode contents [ 435.751905][T20192] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 435.765689][T20192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.767990][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 435.782046][T20164] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3937: mark_inode_dirty error [ 435.794170][T20164] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 435.803509][T20164] EXT4-fs (loop0): 1 truncate cleaned up [ 435.804853][T20192] bond6 (unregistering): Released all slaves [ 435.809977][T20164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.827914][T20164] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.828201][T17123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.022911][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3953'. [ 436.224157][T20205] netlink: 'syz.3.3952': attribute type 13 has an invalid length. [ 436.239305][T20205] loop3: detected capacity change from 0 to 512 [ 436.246238][T20205] EXT4-fs: Ignoring removed nobh option [ 436.269757][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3952: corrupted inode contents [ 436.281799][T20205] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.3952: mark_inode_dirty error [ 436.293974][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.3952: corrupted inode contents [ 436.306053][T20205] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3952: mark_inode_dirty error [ 436.317687][T20205] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3952: Failed to acquire dquot type 0 [ 436.330062][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3952: corrupted inode contents [ 436.342356][T20205] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.3952: mark_inode_dirty error [ 436.353845][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3952: corrupted inode contents [ 436.366013][T20205] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3952: mark_inode_dirty error [ 436.377457][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3952: corrupted inode contents [ 436.389520][T20205] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 436.398319][T20205] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3952: corrupted inode contents [ 436.410449][T20205] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3952: mark_inode_dirty error [ 436.421852][T20205] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 436.422624][T20205] EXT4-fs (loop3): 1 truncate cleaned up [ 436.422973][T20205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.423105][T20205] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.559641][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'. [ 436.560640][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3954'. [ 436.752416][T17123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.786369][T20227] loop5: detected capacity change from 0 to 2048 [ 436.802861][T20224] blktrace: Concurrent blktraces are not allowed on loop2 [ 436.915282][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3965'. [ 436.919274][T20227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.944071][T17428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.953500][T20227] ext4 filesystem being mounted at /555/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.275233][T20241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.347729][T20243] syû: rxe_newlink: already configured on bond_slave_0 [ 437.378664][ T44] Bluetooth: hci0: sending frame failed (-49) [ 437.384870][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 437.418066][T20250] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3963: bg 0: block 345: padding at end of block bitmap is not set [ 437.451950][T20250] EXT4-fs (loop5): Remounting filesystem read-only [ 437.546184][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.766685][T20269] random: crng reseeded on system resumption [ 437.978513][T20276] loop3: detected capacity change from 0 to 512 [ 438.022598][T20276] EXT4-fs: Ignoring removed oldalloc option [ 438.030052][T20276] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3977: inode #0: comm syz.3.3977: iget: illegal inode # [ 438.043249][T20276] EXT4-fs (loop3): get orphan inode failed [ 438.049149][T20276] EXT4-fs (loop3): mount failed [ 438.091747][T20280] __nla_validate_parse: 2 callbacks suppressed [ 438.091766][T20280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3978'. [ 438.108303][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 438.355188][T20288] loop2: detected capacity change from 0 to 1024 [ 438.361994][T20288] ext3: Unknown parameter 'obj_type' [ 438.369978][T20288] blktrace: Concurrent blktraces are not allowed on loop4 [ 438.412321][T20290] random: crng reseeded on system resumption [ 438.420461][T20290] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3982'. [ 438.438826][T20291] netlink: 'syz.3.3980': attribute type 13 has an invalid length. [ 438.684371][T20290] loop2: detected capacity change from 0 to 128 [ 439.010441][T20297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.050627][T20293] loop5: detected capacity change from 0 to 1024 [ 439.157887][T20290] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.199082][T20293] ext3: Unknown parameter 'obj_type' [ 439.242137][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 439.242153][ T29] audit: type=1326 audit(1763946177.137:23569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.271999][ T29] audit: type=1326 audit(1763946177.137:23570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.295701][ T29] audit: type=1326 audit(1763946177.147:23571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.319172][ T29] audit: type=1326 audit(1763946177.147:23572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.340301][T20293] blktrace: Concurrent blktraces are not allowed on loop10 [ 439.342883][ T29] audit: type=1326 audit(1763946177.147:23573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.373711][ T29] audit: type=1326 audit(1763946177.147:23574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.382231][T20290] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 439.397374][ T29] audit: type=1326 audit(1763946177.147:23575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.397406][ T29] audit: type=1326 audit(1763946177.147:23576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.397470][ T29] audit: type=1326 audit(1763946177.147:23577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.430214][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3983'. [ 439.452940][ T29] audit: type=1326 audit(1763946177.147:23578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20300 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc4c645f749 code=0x7ffc0000 [ 439.734946][T16825] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.764103][T16825] ================================================================== [ 439.772201][T16825] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 439.779744][T16825] [ 439.782062][T16825] read-write to 0xffff888237c25ee8 of 1 bytes by task 20314 on cpu 0: [ 439.790210][T16825] folio_add_lru+0xa5/0x1f0 [ 439.794708][T16825] folio_add_lru_vma+0x49/0x70 [ 439.799469][T16825] handle_mm_fault+0x27e2/0x2be0 [ 439.804432][T16825] do_user_addr_fault+0x630/0x1080 [ 439.809546][T16825] exc_page_fault+0x62/0xa0 [ 439.814059][T16825] asm_exc_page_fault+0x26/0x30 [ 439.818910][T16825] [ 439.821226][T16825] read to 0xffff888237c25ee8 of 1 bytes by task 16825 on cpu 1: [ 439.828848][T16825] __lru_add_drain_all+0x17e/0x450 [ 439.833962][T16825] lru_add_drain_all+0x10/0x20 [ 439.838727][T16825] invalidate_bdev+0x47/0x70 [ 439.843332][T16825] ext4_put_super+0x624/0x7d0 [ 439.848009][T16825] generic_shutdown_super+0xe6/0x210 [ 439.853291][T16825] kill_block_super+0x2a/0x70 [ 439.857966][T16825] ext4_kill_sb+0x42/0x80 [ 439.862291][T16825] deactivate_locked_super+0x75/0x1c0 [ 439.867658][T16825] deactivate_super+0x97/0xa0 [ 439.872328][T16825] cleanup_mnt+0x269/0x2e0 [ 439.876746][T16825] __cleanup_mnt+0x19/0x20 [ 439.881165][T16825] task_work_run+0x131/0x1a0 [ 439.885755][T16825] exit_to_user_mode_loop+0xed/0x110 [ 439.891071][T16825] do_syscall_64+0x1d6/0x200 [ 439.895658][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.901548][T16825] [ 439.903864][T16825] value changed: 0x03 -> 0x06 [ 439.908538][T16825] [ 439.910854][T16825] Reported by Kernel Concurrency Sanitizer on: [ 439.916997][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.928555][T16825] Tainted: [W]=WARN [ 439.932352][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.942400][T16825] ================================================================== [ 441.997306][T20317] netlink: 'syz.5.3988': attribute type 13 has an invalid length. [ 442.008449][T20317] loop5: detected capacity change from 0 to 512 [ 442.015106][T20317] EXT4-fs: Ignoring removed nobh option [ 442.065507][T20318] netlink: 'syz.0.3991': attribute type 13 has an invalid length. [ 442.079390][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3988: corrupted inode contents [ 442.091618][T20317] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.3988: mark_inode_dirty error [ 442.103339][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.3988: corrupted inode contents [ 442.115357][T20317] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3988: mark_inode_dirty error [ 442.127141][T20317] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3988: Failed to acquire dquot type 0 [ 442.139963][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3988: corrupted inode contents [ 442.151982][T20317] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.3988: mark_inode_dirty error [ 442.163476][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3988: corrupted inode contents [ 442.176014][T20317] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3988: mark_inode_dirty error [ 442.187512][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3988: corrupted inode contents [ 442.199567][T20317] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 442.208358][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3988: corrupted inode contents [ 442.220717][T20317] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3988: mark_inode_dirty error [ 442.242410][T20317] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 442.251824][T20317] EXT4-fs (loop5): 1 truncate cleaned up [ 442.257833][T20317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.270310][T20317] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.474462][T10499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.