last executing test programs: 1m43.399206817s ago: executing program 32 (id=26): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) close(r1) 1m21.543553714s ago: executing program 33 (id=219): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='cgroup\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1m15.947801032s ago: executing program 34 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x8, 0x90, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r0, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20) (async) getsockname$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x20) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000)="4e3c03a82aa23689061f98d4fae8b0388c70f91b59bb66598943d55f1a80a0e51cd25c74ebddb65c147d33ec655f8c316d196c263b53b9ff6b8f046018256a39595e5b16525ed8ab95582690c125ff2b4f5ab5c3087c89c571171104efeea0c62b15aa53cf9c0aaf79b52d03cbb3079327e95d32a15c047f49e5a4a65a7ac42388a737072a4268be7ef76a17de1e5581e66d1f38f431b0b25d9f89c9d87cfd7a543d3544d5f2ca3ad534752d402c8ed2631f2fdd39cb93ca5e78d41776f703e4493d36386fc3daec5d9b0344a2a71a07318bef58a4cb73cf0503cd84981e2356a90f74d126468a4ac4743ef92efda2ed1dc7c1b9544b", &(0x7f0000000100)=@udp=r6, 0x2}, 0x20) 1m13.440219668s ago: executing program 35 (id=388): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c044) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000000380)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000080)) 50.714725456s ago: executing program 0 (id=1443): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.6405757s ago: executing program 0 (id=1446): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdf}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 50.605708082s ago: executing program 0 (id=1449): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000002c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@acl}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nodelalloc}, {@resgid, 0x32}]}, 0xdb, 0x4df, &(0x7f0000001700)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x1, 0x2, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}}, 0x0) 50.529494967s ago: executing program 0 (id=1453): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b7, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000740)={@id={0x2, 0x0, @d}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 50.274718312s ago: executing program 0 (id=1457): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x888}, 0x20000000) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 49.568613293s ago: executing program 0 (id=1468): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f1d3c83a4f79687c1bddf5d793eb73a8e4a836510f5972781dbfffab4d25952c6ee6047b8e0d4c9543f30206e79011947658e2cd0559b178a749366a7d8ea37209db401fa6836cb4055c37ae86684edd0b8723e028b00c24706c33e94d5c0ee4e4222113cc8cbdda274", 0xf6}, {0x0}, {&(0x7f0000002080)="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", 0xded}], 0x5}, 0x40000) 49.567566613s ago: executing program 36 (id=1468): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f1d3c83a4f79687c1bddf5d793eb73a8e4a836510f5972781dbfffab4d25952c6ee6047b8e0d4c9543f30206e79011947658e2cd0559b178a749366a7d8ea37209db401fa6836cb4055c37ae86684edd0b8723e028b00c24706c33e94d5c0ee4e4222113cc8cbdda274", 0xf6}, {0x0}, {&(0x7f0000002080)="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", 0xded}], 0x5}, 0x40000) 41.252800829s ago: executing program 2 (id=1613): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 40.530477061s ago: executing program 2 (id=1617): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 40.487026064s ago: executing program 2 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000001d80)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000e7ffffffb703000008000000b704000001000000850000000300000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 40.375671261s ago: executing program 2 (id=1621): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='cgroup\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 40.331307233s ago: executing program 2 (id=1622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 39.950623035s ago: executing program 9 (id=1629): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 39.950234275s ago: executing program 9 (id=1630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0xfdef) 39.70565908s ago: executing program 9 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@sco, &(0x7f0000000100)=0x80) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0x0, 0x40, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x16, 0x2b, &(0x7f0000001d80)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000040000000000000000000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb71b0000080000001823000085d4f61aad1dd2fbe70285cc76796dda798edd7837794b850d79b10bd4b21e54c769ceffd63b0ef0cfe768fb024f969955418f38e0d56f460ec08fe981aadb1baead68d29a22bc9ca2c35ff65afdb11447048ff644ad29acedf8b1b32bef2cfd94098c4305b30b7956836ccd67df1f463d2fff9b46a1fa54faad10aa9ec570f375a71db2522d7b5e9be55e4cb746df259a526224383983e52847", @ANYRES32, @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x1, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r8, r9], &(0x7f0000001900)=[{0x5, 0x5, 0x1}, {0x0, 0x3, 0xf, 0x7}, {0x2, 0x1, 0x9, 0x8}], 0x10, 0x3}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) syz_open_procfs(0x0, &(0x7f0000002080)='task\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 38.656841521s ago: executing program 2 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 38.588368425s ago: executing program 9 (id=1647): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) fcntl$setlease(r0, 0x400, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000002000000000000000400000d0200000009"], &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xa, 0x1}, 0x28) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setpipe(r3, 0x407, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x40019) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.348488549s ago: executing program 9 (id=1655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 37.110628171s ago: executing program 9 (id=1675): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000008400000001000000f67ac6304100", @ANYRES32=0x0], 0x30}, 0x0) 37.096023212s ago: executing program 8 (id=1676): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000048, 0x8, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 36.841868027s ago: executing program 8 (id=1682): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) 36.781274161s ago: executing program 8 (id=1683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 36.749959612s ago: executing program 8 (id=1686): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x44}}, 0x0) 36.716139504s ago: executing program 8 (id=1687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 35.25654584s ago: executing program 8 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfdef) 31.47966093s ago: executing program 6 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x20000, 0x6, 0x289}, &(0x7f00000001c0), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2b60e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$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") 30.067555963s ago: executing program 6 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 29.96037104s ago: executing program 6 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x7, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0xfffffffe, 0x2, 0x101, 0x4, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x4, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x800002, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x10000003, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x1000cd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0xe2, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0xb, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x805, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xff, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000200)="2478546ca4fa3b0bfe4d", 0xa, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 29.901622872s ago: executing program 6 (id=1764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x2, 0x34005}, 0x0) 29.886135873s ago: executing program 6 (id=1765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 28.936745809s ago: executing program 6 (id=1775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x7, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0xfffffffe, 0x2, 0x101, 0x4, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x4, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x800002, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x10000003, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x1000cd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0xe2, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0xb, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x805, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xff, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000200)="2478546ca4fa3b0bfe4d", 0xa, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 23.283487309s ago: executing program 37 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 21.544900991s ago: executing program 38 (id=1675): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000008400000001000000f67ac6304100", @ANYRES32=0x0], 0x30}, 0x0) 20.062141827s ago: executing program 39 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfdef) 16.955244479s ago: executing program 5 (id=1842): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) 16.032514423s ago: executing program 5 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x4008090) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0xd, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xc}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048064}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.969468397s ago: executing program 4 (id=1862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.831478185s ago: executing program 4 (id=1865): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 15.760437249s ago: executing program 4 (id=1867): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@jqfmt_vfsv1}, {@errors_remount}, {@quota}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x81}}, {@orlov}]}, 0xfc, 0x57e, &(0x7f0000000cc0)="$eJzs3V1rW2UcAPD/SV/2qutgDPVCBrtwMpeurS8TBOel6HCg9zOkWRlNl9GkY60Dtwt3440MQcSB+AG893L4BfwUAx0MGUUvRIic9KRL26RZu8xky+8HaZ/nvPQ5/zznf/o8OQkJYGgdS3/kIl6OiG+SiEMt60YjW3lsbbvVh9eL6SOJev3TP5NIsmXN7ZPs94Gs8lJE/PpVxMnc1naryyvzhXK5tJjVJ2sLVyaryyunLi0U5kpzpcvTMzNn3pqZfvedt3sW6+vn//7+k7sfnvn6+Op3P98/fDuJs3EwW9caxxO40Vo5Vvg3K43F2U0bTvWgsUGS9PsA2JWRLM/HIr0GHIqRLOuB59+XEVEHhlQi/2FINccBzbl9j+bBz4wHH6xNgBqxj7fGP7r22kjsbcyN9q8mG2ZG6Xx3ogftp2388sed2+kjtn8dYl+XOsCO3LgZEadHR7de/5Ps+rd7pxsvHm9vcxvD9v8H+uluOv55o934L7c+/ok2458DbXJ3N7rnf+5+D5rpKB3/vdd2/Lt+6ZoYyWovNMZ8Y8nFS+XS6Yh4MSJORL3rrY8zq/fqnda1jv/WxoDXi82xYHYc90f3bNxntlArRMT4LkPe4MHNiFdG28WfrPd/0qb/0+fj/GO2cbR059VO6zbHn7a/Mf6nq/5TxGtt+/9Rtybb35+cbJwPk82zYqu/bh39rVP7/Y4/7f/928c/kbTer63uvI0f9/5T6rSue/ztz//x5LNGuZkE1wq12uJUxHjy8dbl04/2bdab26fxnzi+/fWv3fmfTr4+f8z4bx251XHTQej/2R31f0shfZI3LmlbuPfRFz90av/x+v/NRulEtiS7/rWXnSvbHM6GwpM+fwAAAAAAADBIchFxMJJcfr2cy+Xza+/vOBL7c+VKtXbyYmXp8mw0Pis7EWO55p3uQy3vh5jK3g/brE9vqs9ExOGI+HZkX6OeL1bKs/0OHgAAAAAAAAAAAAAAAAAAAAbEgQ6f/0/9PtLvowOeusYXG+zp91EA/dD1K/978U1PwEDqmv/Ac0v+w/CS/zC85D8ML/kPw0v+w/CS/zC85D8AAAAAAAAAAAAAAAAAAAAAAAAAAAD01Plz59JHffXh9WJan726vDRfuXpqtlSdzy8sFfPFyuKV/FylMlcu5YuVhW5/r1ypXJmajqVrk7VStTZZXV65sFBZuly7cGmhMFe6UBr7X6ICAAAAAAAAAAAAAAAAAACAZ0t1eWW+UC6XFhU6Ft6PgTiMpxngml3tPjooUSh0KNzMundne/XxogQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm/wXAAD//zjKLhg=") creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x293, &(0x7f0000000140)={0x0, 0x6fdd, 0x808, 0x4, 0x289}, &(0x7f00000001c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xd) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) unshare(0x20000400) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r4, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x863, 0x8008) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) chmod(&(0x7f0000000540)='./file0\x00', 0x120) 14.835430683s ago: executing program 4 (id=1870): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffbff, 0x0, @perf_bp={0x0, 0x8}, 0x1076f0, 0x5, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x60, 0x12, 0x300, 0x70bd28, 0x25dfdbfe, {0x6, 0x9, 0xb, 0x0, {0x4e22, 0x4e26, [0xffffdffc, 0x923, 0x507, 0x8], [0x601, 0x4, 0x4000003, 0x2], 0x0, [0x10000, 0x2]}, 0x31, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0714140002209c9523f92b00402e7ab7"}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004010}, 0x20000000) r1 = socket$isdn(0x22, 0x2, 0x10) r2 = socket$isdn(0x22, 0x2, 0x2) r3 = dup3(r2, r1, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket$kcm(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) 14.772209617s ago: executing program 4 (id=1871): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 14.607691977s ago: executing program 5 (id=1872): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 13.650700742s ago: executing program 40 (id=1775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x7, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0xfffffffe, 0x2, 0x101, 0x4, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x4, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x4, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x800002, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x10000003, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x1000cd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0xe2, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0xb, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x805, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xff, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000200)="2478546ca4fa3b0bfe4d", 0xa, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 13.431830205s ago: executing program 4 (id=1878): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) fcntl$setlease(r0, 0x400, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000002000000000000000400000d0200000009"], &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xa, 0x1}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setpipe(r4, 0x407, 0x7fffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x40019) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.820335381s ago: executing program 5 (id=1887): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x88, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x2}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ae}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x10000, 0x4, 0xdc, 0x7]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000084}, 0x40080) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 12.388709726s ago: executing program 5 (id=1888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 11.160585198s ago: executing program 5 (id=1893): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.307503373s ago: executing program 3 (id=1925): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$netlink(0x10, 0x3, 0x0) 7.236626167s ago: executing program 3 (id=1926): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114"], 0x5c}}, 0x0) 7.236192197s ago: executing program 3 (id=1927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}], 0x1) 7.094698836s ago: executing program 3 (id=1928): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 7.061784297s ago: executing program 3 (id=1929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x400, r0, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000801) 6.053894826s ago: executing program 3 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 1.01717452s ago: executing program 1 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 928.961656ms ago: executing program 1 (id=2001): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="0005000000", 0x5}, {&(0x7f00000002c0)="832debe16d", 0x5}], 0x2}, 0xc8c0) 928.637006ms ago: executing program 1 (id=2002): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 928.354806ms ago: executing program 1 (id=2003): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c20806", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 853.72399ms ago: executing program 1 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 248.038366ms ago: executing program 7 (id=2010): bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) 247.765136ms ago: executing program 7 (id=2011): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x30008010) 147.356602ms ago: executing program 7 (id=2012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 78.300666ms ago: executing program 7 (id=2013): close(0x4) 41.486147ms ago: executing program 7 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b080000000000000800"], 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.544987ms ago: executing program 1 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 0s ago: executing program 7 (id=2016): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@jqfmt_vfsv1}, {@errors_remount}, {@quota}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x81}}, {@orlov}]}, 0xfc, 0x57e, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x293, &(0x7f0000000140)={0x0, 0x6fdd, 0x808, 0x4, 0x289}, &(0x7f00000001c0), 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0xd) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) chmod(&(0x7f0000000540)='./file0\x00', 0x120) kernel console output (not intermixed with test programs): scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 114.347959][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.373466][ T7957] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.388599][ T8215] tipc: Enabling of bearer rejected, failed to enable media [ 114.411591][ T7957] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.429890][ T8213] syzkaller0: entered promiscuous mode [ 114.435419][ T8213] syzkaller0: entered allmulticast mode [ 114.472607][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1469'. [ 114.645131][ T8221] tipc: Enabled bearer , priority 0 [ 114.660341][ T8221] syzkaller0: entered promiscuous mode [ 114.666062][ T8221] syzkaller0: entered allmulticast mode [ 114.683879][ T8221] tipc: Resetting bearer [ 114.692355][ T8220] tipc: Resetting bearer [ 114.705349][ T8220] tipc: Disabling bearer [ 114.721377][ T8225] syzkaller0: entered promiscuous mode [ 114.727019][ T8225] syzkaller0: entered allmulticast mode [ 114.792466][ T8233] tipc: Started in network mode [ 114.797447][ T8233] tipc: Node identity 0a7876febc6f, cluster identity 4711 [ 114.804773][ T8233] tipc: Enabled bearer , priority 0 [ 114.812290][ T8233] syzkaller0: entered promiscuous mode [ 114.817969][ T8233] syzkaller0: entered allmulticast mode [ 114.861430][ T8232] tipc: Resetting bearer [ 114.869604][ T8232] tipc: Disabling bearer [ 114.882840][ T8237] loop2: detected capacity change from 0 to 1024 [ 114.893692][ T8237] EXT4-fs: Ignoring removed bh option [ 114.928014][ T8237] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.975672][ T8247] tipc: Enabled bearer , priority 0 [ 114.991108][ T8237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.008463][ T8247] tipc: Resetting bearer [ 115.028131][ T8237] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.1549: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 115.071490][ T8237] EXT4-fs (loop2): Remounting filesystem read-only [ 115.086167][ T8243] tipc: Disabling bearer [ 115.117275][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.211799][ T8267] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1560'. [ 115.340460][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 115.560452][ T8292] syzkaller0: entered promiscuous mode [ 115.566075][ T8292] syzkaller0: entered allmulticast mode [ 115.978196][ T29] audit: type=1400 audit(1770637781.517:713): avc: denied { execute } for pid=8305 comm="syz.7.1573" path="/proc/crypto" dev="proc" ino=4026532353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 116.037007][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1576'. [ 116.207413][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1578'. [ 116.310608][ T8320] IPv6: sit1: Disabled Multicast RS [ 116.780522][ T8327] syzkaller0: entered promiscuous mode [ 116.786111][ T8327] syzkaller0: entered allmulticast mode [ 116.911662][ T8343] tipc: Enabled bearer , priority 0 [ 116.920996][ T8343] tipc: Resetting bearer [ 116.929583][ T8342] tipc: Disabling bearer [ 117.019959][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1587'. [ 117.217393][ T8362] tipc: Enabled bearer , priority 0 [ 117.246622][ T8362] tipc: Resetting bearer [ 117.277362][ T8361] tipc: Disabling bearer [ 117.666460][ T8382] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1600'. [ 117.696072][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1602'. [ 117.756258][ T8384] syzkaller0: entered promiscuous mode [ 117.761826][ T8384] syzkaller0: entered allmulticast mode [ 117.771575][ T8386] IPv6: sit1: Disabled Multicast RS [ 117.930441][ T8399] tipc: Enabled bearer , priority 0 [ 117.948158][ T8399] syzkaller0: entered promiscuous mode [ 117.953751][ T8399] syzkaller0: entered allmulticast mode [ 117.975668][ T8397] tipc: Resetting bearer [ 118.020328][ T8409] loop6: detected capacity change from 0 to 512 [ 118.038514][ T8409] EXT4-fs: Ignoring removed oldalloc option [ 118.064008][ T8397] tipc: Disabling bearer [ 118.070893][ T8409] EXT4-fs (loop6): 1 truncate cleaned up [ 118.092441][ T8423] veth0_vlan: entered allmulticast mode [ 118.098559][ T8409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.185697][ T4956] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.224567][ T8431] warn_alloc: 1 callbacks suppressed [ 118.224585][ T8431] syz.8.1615: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 118.244602][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.8.1615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.244637][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 118.244655][ T8431] Call Trace: [ 118.244737][ T8431] [ 118.244746][ T8431] __dump_stack+0x1d/0x30 [ 118.244773][ T8431] dump_stack_lvl+0x95/0xd0 [ 118.244804][ T8431] dump_stack+0x15/0x1b [ 118.244839][ T8431] warn_alloc+0x145/0x1c0 [ 118.244946][ T8431] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 118.244986][ T8431] ? __futex_wait+0x1fd/0x260 [ 118.245032][ T8431] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.245069][ T8431] ? __rcu_read_unlock+0x4e/0x70 [ 118.245111][ T8431] ? avc_has_perm_noaudit+0xab/0x130 [ 118.245200][ T8431] ? should_fail_ex+0x30/0x280 [ 118.245244][ T8431] ? should_failslab+0x8c/0xb0 [ 118.245278][ T8431] vmalloc_user_noprof+0x7d/0xb0 [ 118.245317][ T8431] ? xskq_create+0x80/0xe0 [ 118.245367][ T8431] xskq_create+0x80/0xe0 [ 118.245439][ T8431] xsk_init_queue+0x91/0xe0 [ 118.245483][ T8431] xsk_setsockopt+0x3f5/0x640 [ 118.245519][ T8431] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.245633][ T8431] __sys_setsockopt+0x184/0x200 [ 118.245671][ T8431] __x64_sys_setsockopt+0x64/0x80 [ 118.245794][ T8431] x64_sys_call+0x21d5/0x3000 [ 118.245886][ T8431] do_syscall_64+0xc0/0x2a0 [ 118.245925][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.245952][ T8431] RIP: 0033:0x7ff3046faf79 [ 118.245971][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.245994][ T8431] RSP: 002b:00007ff30312e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.246078][ T8431] RAX: ffffffffffffffda RBX: 00007ff304976090 RCX: 00007ff3046faf79 [ 118.246096][ T8431] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 118.246110][ T8431] RBP: 00007ff3047916e0 R08: 0000000000000004 R09: 0000000000000000 [ 118.246124][ T8431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.246140][ T8431] R13: 00007ff304976128 R14: 00007ff304976090 R15: 00007ffe837cfa68 [ 118.246165][ T8431] [ 118.246223][ T8431] Mem-Info: [ 118.300807][ T8432] loop8: detected capacity change from 0 to 1024 [ 118.305639][ T8431] active_anon:8695 inactive_anon:0 isolated_anon:0 [ 118.305639][ T8431] active_file:20354 inactive_file:2377 isolated_file:0 [ 118.305639][ T8431] unevictable:0 dirty:140 writeback:0 [ 118.305639][ T8431] slab_reclaimable:2300 slab_unreclaimable:18769 [ 118.305639][ T8431] mapped:29275 shmem:373 pagetables:1532 [ 118.305639][ T8431] sec_pagetables:0 bounce:0 [ 118.305639][ T8431] kernel_misc_reclaimable:0 [ 118.305639][ T8431] free:1877017 free_pcp:14668 free_cma:0 [ 118.344367][ T8432] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1615: bad orphan inode 134217728 [ 118.348700][ T8431] Node 0 active_anon:34780kB inactive_anon:0kB active_file:81416kB inactive_file:9508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117100kB dirty:560kB writeback:0kB shmem:1492kB kernel_stack:4256kB pagetables:6128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.355360][ T8432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.358994][ T8431] Node 0 [ 118.470105][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1616'. [ 118.509534][ T8431] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.509611][ T8431] lowmem_reserve[]: 0 2879 7858 7858 [ 118.509666][ T8431] Node 0 DMA32 free:2944740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 118.637375][ T8431] lowmem_reserve[]: 0 0 4978 4978 [ 118.642449][ T8431] Node 0 Normal free:4547968kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34780kB inactive_anon:0kB active_file:81416kB inactive_file:9508kB unevictable:0kB writepending:560kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55060kB local_pcp:40476kB free_cma:0kB [ 118.675560][ T8431] lowmem_reserve[]: 0 0 0 0 [ 118.680123][ T8431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.692939][ T8431] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944740kB [ 118.709158][ T8431] Node 0 Normal: 862*4kB (UME) 981*8kB (UME) 45*16kB (UME) 185*32kB (UME) 193*64kB (UME) 121*128kB (UME) 147*256kB (UME) 90*512kB (UME) 52*1024kB (UM) 44*2048kB (UME) 1044*4096kB (UM) = 4549072kB [ 118.728550][ T8431] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 118.737954][ T8431] 23113 total pagecache pages [ 118.742645][ T8431] 0 pages in swap cache [ 118.746873][ T8431] Free swap = 124996kB [ 118.751045][ T8431] Total swap = 124996kB [ 118.755289][ T8431] 2097051 pages RAM [ 118.759189][ T8431] 0 pages HighMem/MovableOnly [ 118.763897][ T8431] 81558 pages reserved [ 118.948212][ T8441] syzkaller0: entered promiscuous mode [ 118.953913][ T8441] syzkaller0: entered allmulticast mode [ 119.034323][ T5505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.165403][ T8452] tipc: Enabled bearer , priority 0 [ 119.181423][ T8452] syzkaller0: entered promiscuous mode [ 119.187006][ T8452] syzkaller0: entered allmulticast mode [ 119.203195][ T8458] loop8: detected capacity change from 0 to 512 [ 119.219468][ T8451] tipc: Resetting bearer [ 119.252853][ T8451] tipc: Disabling bearer [ 119.300642][ T8458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.456741][ T8471] SELinux: policydb version 0 does not match my version range 15-35 [ 119.465567][ T8471] SELinux: failed to load policy [ 119.544498][ T8477] loop7: detected capacity change from 0 to 512 [ 119.551252][ T8477] EXT4-fs: Ignoring removed oldalloc option [ 119.568676][ T8474] syzkaller0: entered promiscuous mode [ 119.574235][ T8474] syzkaller0: entered allmulticast mode [ 119.612636][ T8477] EXT4-fs (loop7): 1 truncate cleaned up [ 119.623878][ T8477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.689896][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.721175][ T8484] loop9: detected capacity change from 0 to 1024 [ 119.735132][ T8484] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1635: bad orphan inode 134217728 [ 119.746441][ T8484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.028800][ T8498] netlink: 'syz.7.1640': attribute type 29 has an invalid length. [ 120.041753][ T8498] loop7: detected capacity change from 0 to 1024 [ 120.074826][ T8498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.087031][ T8498] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.127218][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.141968][ T8459] syz.2.1622 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 120.152867][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.2.1622 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.153019][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 120.153032][ T8459] Call Trace: [ 120.153038][ T8459] [ 120.153044][ T8459] __dump_stack+0x1d/0x30 [ 120.153069][ T8459] dump_stack_lvl+0x95/0xd0 [ 120.153175][ T8459] dump_stack+0x15/0x1b [ 120.153201][ T8459] dump_header+0x80/0x240 [ 120.153228][ T8459] oom_kill_process+0x295/0x350 [ 120.153252][ T8459] out_of_memory+0x97d/0xb80 [ 120.153338][ T8459] try_charge_memcg+0x62e/0xa10 [ 120.153373][ T8459] obj_cgroup_charge_pages+0x23/0xc0 [ 120.153409][ T8459] obj_cgroup_charge_account+0x73/0x1a0 [ 120.153457][ T8459] __memcg_slab_post_alloc_hook+0x396/0x530 [ 120.153619][ T8459] kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 120.153654][ T8459] ? xas_nomem+0xd1/0x130 [ 120.153686][ T8459] xas_nomem+0xd1/0x130 [ 120.153753][ T8459] shmem_add_to_page_cache+0x3f0/0x5b0 [ 120.153791][ T8459] shmem_get_folio_gfp+0x4f3/0xd60 [ 120.153895][ T8459] shmem_fault+0xf6/0x250 [ 120.153934][ T8459] __do_fault+0xbc/0x200 [ 120.153958][ T8459] handle_mm_fault+0x11d7/0x3030 [ 120.154000][ T8459] ? _raw_spin_lock+0x52/0xa0 [ 120.154033][ T8459] ? __pte_offset_map_lock+0x1d9/0x240 [ 120.154075][ T8459] __get_user_pages+0x1023/0x1ea0 [ 120.154129][ T8459] __mm_populate+0x242/0x390 [ 120.154210][ T8459] vm_mmap_pgoff+0x23b/0x2d0 [ 120.154241][ T8459] ksys_mmap_pgoff+0xc1/0x310 [ 120.154287][ T8459] ? __x64_sys_mmap+0x49/0x70 [ 120.154319][ T8459] x64_sys_call+0x16bb/0x3000 [ 120.154349][ T8459] do_syscall_64+0xc0/0x2a0 [ 120.154439][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.154464][ T8459] RIP: 0033:0x7f969ab3af79 [ 120.154485][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.154513][ T8459] RSP: 002b:00007f969956e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.154558][ T8459] RAX: ffffffffffffffda RBX: 00007f969adb6090 RCX: 00007f969ab3af79 [ 120.154577][ T8459] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 120.154612][ T8459] RBP: 00007f969abd16e0 R08: ffffffffffffffff R09: 0000000000000000 [ 120.154637][ T8459] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 120.154655][ T8459] R13: 00007f969adb6128 R14: 00007f969adb6090 R15: 00007ffe76ac6a78 [ 120.154726][ T8459] [ 120.391742][ T8459] memory: usage 307200kB, limit 307200kB, failcnt 9861 [ 120.398645][ T8459] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 120.406609][ T8459] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 120.413995][ T8459] Memory cgroup stats for /syz2: [ 120.414165][ T8459] cache 0 [ 120.422097][ T8459] rss 0 [ 120.424904][ T8459] shmem 0 [ 120.427876][ T8459] mapped_file 0 [ 120.431357][ T8459] dirty 0 [ 120.434348][ T8459] writeback 0 [ 120.437709][ T8459] workingset_refault_anon 3 [ 120.442235][ T8459] workingset_refault_file 185 [ 120.446959][ T8459] swap 196608 [ 120.450317][ T8459] swapcached 0 [ 120.453731][ T8459] pgpgin 99896 [ 120.457126][ T8459] pgpgout 99894 [ 120.460661][ T8459] pgfault 113973 [ 120.464236][ T8459] pgmajfault 11 [ 120.467808][ T8459] inactive_anon 0 [ 120.471532][ T8459] active_anon 0 [ 120.475041][ T8459] inactive_file 4096 [ 120.478980][ T8459] active_file 0 [ 120.482503][ T8459] unevictable 0 [ 120.486070][ T8459] hierarchical_memory_limit 314572800 [ 120.491543][ T8459] hierarchical_memsw_limit 9223372036854771712 [ 120.497829][ T8459] total_cache 0 [ 120.501442][ T8459] total_rss 0 [ 120.504799][ T8459] total_shmem 0 [ 120.508277][ T8459] total_mapped_file 0 [ 120.512311][ T8459] total_dirty 0 [ 120.515860][ T8459] total_writeback 0 [ 120.519698][ T8459] total_workingset_refault_anon 3 [ 120.524766][ T8459] total_workingset_refault_file 185 [ 120.529972][ T8459] total_swap 196608 [ 120.533809][ T8459] total_swapcached 0 [ 120.537734][ T8459] total_pgpgin 99896 [ 120.541669][ T8459] total_pgpgout 99894 [ 120.545733][ T8459] total_pgfault 113973 [ 120.549890][ T8459] total_pgmajfault 11 [ 120.553964][ T8459] total_inactive_anon 0 [ 120.558235][ T8459] total_active_anon 0 [ 120.562222][ T8459] total_inactive_file 4096 [ 120.566675][ T8459] total_active_file 0 [ 120.570672][ T8459] total_unevictable 0 [ 120.574892][ T8459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1622,pid=8445,uid=0 [ 120.589686][ T8459] Memory cgroup out of memory: Killed process 8445 (syz.2.1622) total-vm:94144kB, anon-rss:1340kB, file-rss:22156kB, shmem-rss:88kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 120.636565][ T8510] netlink: 'syz.7.1643': attribute type 29 has an invalid length. [ 120.674083][ T7892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.686050][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1646'. [ 120.919240][ T8526] syzkaller0: entered promiscuous mode [ 120.924924][ T8526] syzkaller0: entered allmulticast mode [ 121.070166][ T8540] syzkaller0: entered promiscuous mode [ 121.075795][ T8540] syzkaller0: entered allmulticast mode [ 121.614592][ T8549] syz.9.1655 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 121.624521][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.9.1655 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.624584][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.624597][ T8549] Call Trace: [ 121.624603][ T8549] [ 121.624610][ T8549] __dump_stack+0x1d/0x30 [ 121.624643][ T8549] dump_stack_lvl+0x95/0xd0 [ 121.624670][ T8549] dump_stack+0x15/0x1b [ 121.624690][ T8549] dump_header+0x80/0x240 [ 121.624793][ T8549] oom_kill_process+0x295/0x350 [ 121.624824][ T8549] out_of_memory+0x97d/0xb80 [ 121.624859][ T8549] try_charge_memcg+0x62e/0xa10 [ 121.624967][ T8549] __mem_cgroup_charge+0x65/0x150 [ 121.625007][ T8549] shmem_get_folio_gfp+0x47b/0xd60 [ 121.625042][ T8549] shmem_fault+0xf6/0x250 [ 121.625119][ T8549] __do_fault+0xbc/0x200 [ 121.625148][ T8549] handle_mm_fault+0x11d7/0x3030 [ 121.625260][ T8549] ? _raw_spin_lock+0x52/0xa0 [ 121.625305][ T8549] ? __pte_offset_map_lock+0x1d9/0x240 [ 121.625343][ T8549] __get_user_pages+0x1023/0x1ea0 [ 121.625484][ T8549] __mm_populate+0x242/0x390 [ 121.625531][ T8549] vm_mmap_pgoff+0x23b/0x2d0 [ 121.625573][ T8549] ksys_mmap_pgoff+0xc1/0x310 [ 121.625675][ T8549] ? __x64_sys_mmap+0x49/0x70 [ 121.625708][ T8549] x64_sys_call+0x16bb/0x3000 [ 121.625784][ T8549] do_syscall_64+0xc0/0x2a0 [ 121.625902][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.625978][ T8549] RIP: 0033:0x7eff3e50af79 [ 121.625999][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.626026][ T8549] RSP: 002b:00007eff3cf25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.626053][ T8549] RAX: ffffffffffffffda RBX: 00007eff3e786180 RCX: 00007eff3e50af79 [ 121.626071][ T8549] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 121.626085][ T8549] RBP: 00007eff3e5a16e0 R08: ffffffffffffffff R09: 0000000000000000 [ 121.626120][ T8549] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 121.626138][ T8549] R13: 00007eff3e786218 R14: 00007eff3e786180 R15: 00007ffd3fbfc838 [ 121.626245][ T8549] [ 121.626260][ T8549] memory: usage 307200kB, limit 307200kB, failcnt 1143 [ 121.839817][ T8549] memory+swap: usage 266684kB, limit 9007199254740988kB, failcnt 0 [ 121.847836][ T8549] kmem: usage 258848kB, limit 9007199254740988kB, failcnt 0 [ 121.855172][ T8549] Memory cgroup stats for /syz9: [ 121.859140][ T8549] cache 0 [ 121.867171][ T8549] rss 20480 [ 121.870328][ T8549] shmem 0 [ 121.873392][ T8549] mapped_file 0 [ 121.876869][ T8549] dirty 0 [ 121.879979][ T8549] writeback 0 [ 121.883306][ T8549] workingset_refault_anon 24 [ 121.887990][ T8549] workingset_refault_file 0 [ 121.892515][ T8549] swap 307200 [ 121.895851][ T8549] swapcached 12288 [ 121.899721][ T8549] pgpgin 4666 [ 121.903025][ T8549] pgpgout 4659 [ 121.906450][ T8549] pgfault 6059 [ 121.909857][ T8549] pgmajfault 8 [ 121.913310][ T8549] inactive_anon 0 [ 121.917027][ T8549] active_anon 24576 [ 121.920981][ T8549] inactive_file 0 [ 121.924675][ T8549] active_file 0 [ 121.928164][ T8549] unevictable 0 [ 121.931685][ T8549] hierarchical_memory_limit 314572800 [ 121.937163][ T8549] hierarchical_memsw_limit 9223372036854771712 [ 121.943419][ T8549] total_cache 0 [ 121.946898][ T8549] total_rss 20480 [ 121.950553][ T8549] total_shmem 0 [ 121.954070][ T8549] total_mapped_file 0 [ 121.958080][ T8549] total_dirty 0 [ 121.961563][ T8549] total_writeback 0 [ 121.965453][ T8549] total_workingset_refault_anon 24 [ 121.970587][ T8549] total_workingset_refault_file 0 [ 121.975652][ T8549] total_swap 307200 [ 121.979475][ T8549] total_swapcached 12288 [ 121.983773][ T8549] total_pgpgin 4666 [ 121.987600][ T8549] total_pgpgout 4659 [ 121.991585][ T8549] total_pgfault 6059 [ 121.996123][ T8549] total_pgmajfault 8 [ 122.000236][ T8549] total_inactive_anon 0 [ 122.004440][ T8549] total_active_anon 24576 [ 122.008871][ T8549] total_inactive_file 0 [ 122.013091][ T8549] total_active_file 0 [ 122.017230][ T8549] total_unevictable 0 [ 122.021340][ T8549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1655,pid=8531,uid=0 [ 122.036056][ T8549] Memory cgroup out of memory: Killed process 8531 (syz.9.1655) total-vm:94276kB, anon-rss:1212kB, file-rss:22284kB, shmem-rss:36kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 122.080943][ T8580] delete_channel: no stack [ 122.112959][ T29] audit: type=1400 audit(1770637787.617:714): avc: denied { create } for pid=8579 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.132477][ T29] audit: type=1400 audit(1770637787.627:715): avc: denied { ioctl } for pid=8579 comm="syz.7.1673" path="socket:[23868]" dev="sockfs" ino=23868 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.157521][ T29] audit: type=1400 audit(1770637787.627:716): avc: denied { write } for pid=8579 comm="syz.7.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.239138][ T29] audit: type=1400 audit(1770637787.677:717): avc: denied { bind } for pid=8581 comm="syz.6.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.342641][ T8590] tipc: Enabling of bearer rejected, failed to enable media [ 122.380855][ T8598] loop6: detected capacity change from 0 to 4096 [ 122.381805][ T8596] syzkaller0: entered promiscuous mode [ 122.392805][ T8596] syzkaller0: entered allmulticast mode [ 122.412191][ T8598] Quota error (device loop6): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 122.424083][ T8598] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.438981][ T8598] EXT4-fs (loop6): mount failed [ 122.568437][ T8612] loop7: detected capacity change from 0 to 512 [ 122.613672][ T8612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.708735][ T29] audit: type=1400 audit(1770637788.247:718): avc: denied { bind } for pid=8621 comm="syz.7.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.728089][ T29] audit: type=1400 audit(1770637788.247:719): avc: denied { name_bind } for pid=8621 comm="syz.7.1690" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 122.748552][ T29] audit: type=1400 audit(1770637788.247:720): avc: denied { node_bind } for pid=8621 comm="syz.7.1690" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 122.757448][ T8622] netlink: 'syz.7.1690': attribute type 21 has an invalid length. [ 122.776847][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1690'. [ 122.794412][ T8622] netlink: 'syz.7.1690': attribute type 5 has an invalid length. [ 122.802204][ T8622] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1690'. [ 123.050190][ T8637] tipc: Enabling of bearer rejected, failed to enable media [ 123.117799][ T8637] syzkaller0: entered promiscuous mode [ 123.123445][ T8637] syzkaller0: entered allmulticast mode [ 123.176689][ T8648] netlink: 'syz.7.1699': attribute type 29 has an invalid length. [ 123.189532][ T8648] loop7: detected capacity change from 0 to 1024 [ 123.206129][ T8648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.218487][ T8648] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.235000][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 3) [ 123.261530][ T8648] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 123.273923][ T8648] EXT4-fs (loop7): This should not happen!! Data will be lost [ 123.273923][ T8648] [ 123.285533][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.302371][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.319089][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.342547][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.357315][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.371604][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.392600][ T8648] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.406871][ T8646] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.430434][ T8646] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1699: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.459018][ T8647] syz.8.1687 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 123.468981][ T8647] CPU: 1 UID: 0 PID: 8647 Comm: syz.8.1687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.469019][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.469037][ T8647] Call Trace: [ 123.469046][ T8647] [ 123.469131][ T8647] __dump_stack+0x1d/0x30 [ 123.469250][ T8647] dump_stack_lvl+0x95/0xd0 [ 123.469278][ T8647] dump_stack+0x15/0x1b [ 123.469299][ T8647] dump_header+0x80/0x240 [ 123.469321][ T8647] oom_kill_process+0x295/0x350 [ 123.469349][ T8647] out_of_memory+0x97d/0xb80 [ 123.469494][ T8647] try_charge_memcg+0x62e/0xa10 [ 123.469532][ T8647] __mem_cgroup_charge+0x65/0x150 [ 123.469572][ T8647] shmem_get_folio_gfp+0x47b/0xd60 [ 123.469656][ T8647] shmem_fault+0xf6/0x250 [ 123.469694][ T8647] __do_fault+0xbc/0x200 [ 123.469802][ T8647] handle_mm_fault+0x11d7/0x3030 [ 123.469840][ T8647] ? _raw_spin_lock+0x52/0xa0 [ 123.469875][ T8647] ? __pte_offset_map_lock+0x1d9/0x240 [ 123.469942][ T8647] __get_user_pages+0x1023/0x1ea0 [ 123.469994][ T8647] __mm_populate+0x242/0x390 [ 123.470105][ T8647] vm_mmap_pgoff+0x23b/0x2d0 [ 123.470132][ T8647] ksys_mmap_pgoff+0xc1/0x310 [ 123.470161][ T8647] ? __x64_sys_mmap+0x49/0x70 [ 123.470259][ T8647] x64_sys_call+0x16bb/0x3000 [ 123.470287][ T8647] do_syscall_64+0xc0/0x2a0 [ 123.470320][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.470404][ T8647] RIP: 0033:0x7ff3046faf79 [ 123.470432][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.470461][ T8647] RSP: 002b:00007ff302cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 123.470564][ T8647] RAX: ffffffffffffffda RBX: 00007ff304976270 RCX: 00007ff3046faf79 [ 123.470662][ T8647] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 123.470676][ T8647] RBP: 00007ff3047916e0 R08: ffffffffffffffff R09: 0000000000000000 [ 123.470690][ T8647] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 123.470706][ T8647] R13: 00007ff304976308 R14: 00007ff304976270 R15: 00007ffe837cfa68 [ 123.470734][ T8647] [ 123.470743][ T8647] memory: usage 307200kB, limit 307200kB, failcnt 1633 [ 123.685205][ T8647] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 123.693147][ T8647] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 123.700462][ T8647] Memory cgroup stats for /syz8: [ 123.753656][ T8647] cache 0 [ 123.761574][ T8647] rss 0 [ 123.764434][ T8647] shmem 0 [ 123.767405][ T8647] mapped_file 0 [ 123.770956][ T8647] dirty 0 [ 123.773975][ T8647] writeback 0 [ 123.777275][ T8647] workingset_refault_anon 24 [ 123.781889][ T8647] workingset_refault_file 0 [ 123.786449][ T8647] swap 339968 [ 123.789838][ T8647] swapcached 4096 [ 123.793512][ T8647] pgpgin 19773 [ 123.796909][ T8647] pgpgout 19771 [ 123.800421][ T8647] pgfault 35540 [ 123.803946][ T8647] pgmajfault 8 [ 123.807337][ T8647] inactive_anon 0 [ 123.811025][ T8647] active_anon 4096 [ 123.814951][ T8647] inactive_file 0 [ 123.818616][ T8647] active_file 4096 [ 123.822432][ T8647] unevictable 0 [ 123.826002][ T8647] hierarchical_memory_limit 314572800 [ 123.831396][ T8647] hierarchical_memsw_limit 9223372036854771712 [ 123.837630][ T8647] total_cache 0 [ 123.841200][ T8647] total_rss 0 [ 123.844561][ T8647] total_shmem 0 [ 123.848051][ T8647] total_mapped_file 0 [ 123.852057][ T8647] total_dirty 0 [ 123.855579][ T8647] total_writeback 0 [ 123.859440][ T8647] total_workingset_refault_anon 24 [ 123.864652][ T8647] total_workingset_refault_file 0 [ 123.869694][ T8647] total_swap 339968 [ 123.873633][ T8647] total_swapcached 4096 [ 123.877811][ T8647] total_pgpgin 19773 [ 123.881722][ T8647] total_pgpgout 19771 [ 123.885815][ T8647] total_pgfault 35540 [ 123.889873][ T8647] total_pgmajfault 8 [ 123.893888][ T8647] total_inactive_anon 0 [ 123.898065][ T8647] total_active_anon 4096 [ 123.902340][ T8647] total_inactive_file 0 [ 123.906614][ T8647] total_active_file 4096 [ 123.910874][ T8647] total_unevictable 0 [ 123.914910][ T8647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1687,pid=8615,uid=0 [ 123.929526][ T8647] Memory cgroup out of memory: Killed process 8615 (syz.8.1687) total-vm:98512kB, anon-rss:1212kB, file-rss:26380kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 124.068839][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 124.081262][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 124.081262][ T37] [ 124.094169][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.150447][ T8667] syzkaller0: entered promiscuous mode [ 124.156033][ T8667] syzkaller0: entered allmulticast mode [ 124.270326][ T8671] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1709'. [ 124.357750][ T8682] tipc: Enabled bearer , priority 0 [ 124.383876][ T8682] syzkaller0: entered promiscuous mode [ 124.389384][ T8682] syzkaller0: entered allmulticast mode [ 124.395751][ T8682] tipc: Resetting bearer [ 124.403860][ T8681] tipc: Resetting bearer [ 124.418931][ T8681] tipc: Disabling bearer [ 124.510650][ T8686] syzkaller0: entered promiscuous mode [ 124.516250][ T8686] syzkaller0: entered allmulticast mode [ 124.718657][ T8694] syzkaller0: entered promiscuous mode [ 124.724253][ T8694] syzkaller0: entered allmulticast mode [ 124.815112][ T8705] loop7: detected capacity change from 0 to 512 [ 124.825612][ T8705] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1720: inode has both inline data and extents flags [ 124.844416][ T8705] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1720: couldn't read orphan inode 15 (err -117) [ 124.856905][ T8705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.871944][ T29] audit: type=1400 audit(1770637790.407:721): avc: denied { write } for pid=8704 comm="syz.7.1720" path="/230/file0/file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.894820][ T29] audit: type=1400 audit(1770637790.407:722): avc: denied { setattr } for pid=8704 comm="syz.7.1720" name="file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.902218][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.959986][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1721'. [ 125.011313][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1723'. [ 125.039489][ T8721] tipc: Enabling of bearer rejected, failed to enable media [ 125.068777][ T8721] syzkaller0: entered promiscuous mode [ 125.074344][ T8721] syzkaller0: entered allmulticast mode [ 125.167725][ T8725] syzkaller0: entered promiscuous mode [ 125.173196][ T8725] syzkaller0: entered allmulticast mode [ 125.283406][ T8727] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 125.293004][ T8727] SELinux: failed to load policy [ 125.369601][ T8734] syzkaller0: entered promiscuous mode [ 125.375207][ T8734] syzkaller0: entered allmulticast mode [ 125.553429][ T8738] netlink: 'syz.7.1732': attribute type 13 has an invalid length. [ 125.563325][ T8738] gretap0: refused to change device tx_queue_len [ 125.570251][ T8738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.699826][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1736'. [ 125.789755][ T8757] syzkaller0: entered promiscuous mode [ 125.795414][ T8757] syzkaller0: entered allmulticast mode [ 126.056389][ T8784] syzkaller0: entered promiscuous mode [ 126.061877][ T8784] syzkaller0: entered allmulticast mode [ 126.140355][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1742'. [ 126.243338][ T8788] loop7: detected capacity change from 0 to 1024 [ 126.268641][ T8788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.314236][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.501925][ T8798] loop7: detected capacity change from 0 to 512 [ 126.525542][ T8798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.201326][ T8818] tipc: Enabled bearer , priority 0 [ 127.211201][ T8818] tipc: Resetting bearer [ 127.219926][ T8817] tipc: Disabling bearer [ 127.526030][ T8824] syzkaller0: entered promiscuous mode [ 127.531723][ T8824] syzkaller0: entered allmulticast mode [ 127.642190][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1753'. [ 127.731027][ T8830] loop6: detected capacity change from 0 to 4096 [ 127.744954][ T8830] __quota_error: 7 callbacks suppressed [ 127.744968][ T8830] Quota error (device loop6): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 127.761163][ T8830] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.776524][ T8830] EXT4-fs (loop6): mount failed [ 127.843186][ T8834] loop6: detected capacity change from 0 to 1024 [ 127.865153][ T8834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.877419][ T8834] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.891103][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 3) [ 127.905984][ T8834] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 127.918350][ T8834] EXT4-fs (loop6): This should not happen!! Data will be lost [ 127.918350][ T8834] [ 127.929286][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.943738][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.970717][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.985230][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.999819][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.015510][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.030194][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.044559][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.059059][ T8834] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.1756: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.689898][ T8848] warn_alloc: 1 callbacks suppressed [ 128.689919][ T8848] syz.7.1761: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 128.710181][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.7.1761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.710286][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 128.710370][ T8848] Call Trace: [ 128.710378][ T8848] [ 128.710389][ T8848] __dump_stack+0x1d/0x30 [ 128.710423][ T8848] dump_stack_lvl+0x95/0xd0 [ 128.710450][ T8848] dump_stack+0x15/0x1b [ 128.710525][ T8848] warn_alloc+0x145/0x1c0 [ 128.710649][ T8848] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 128.710689][ T8848] ? __futex_wait+0x1fd/0x260 [ 128.710729][ T8848] ? __pfx_futex_wake_mark+0x10/0x10 [ 128.710776][ T8848] ? __rcu_read_unlock+0x4e/0x70 [ 128.710810][ T8848] ? avc_has_perm_noaudit+0xab/0x130 [ 128.710855][ T8848] ? should_fail_ex+0x30/0x280 [ 128.710905][ T8848] ? should_failslab+0x8c/0xb0 [ 128.710935][ T8848] vmalloc_user_noprof+0x7d/0xb0 [ 128.711023][ T8848] ? xskq_create+0x80/0xe0 [ 128.711132][ T8848] xskq_create+0x80/0xe0 [ 128.711164][ T8848] xsk_init_queue+0x91/0xe0 [ 128.711200][ T8848] xsk_setsockopt+0x3f5/0x640 [ 128.711236][ T8848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.711279][ T8848] __sys_setsockopt+0x184/0x200 [ 128.711321][ T8848] __x64_sys_setsockopt+0x64/0x80 [ 128.711355][ T8848] x64_sys_call+0x21d5/0x3000 [ 128.711390][ T8848] do_syscall_64+0xc0/0x2a0 [ 128.711432][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.711459][ T8848] RIP: 0033:0x7f04561caf79 [ 128.711480][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.711516][ T8848] RSP: 002b:00007f0454c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.711536][ T8848] RAX: ffffffffffffffda RBX: 00007f0456446090 RCX: 00007f04561caf79 [ 128.711550][ T8848] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 128.711632][ T8848] RBP: 00007f04562616e0 R08: 0000000000000004 R09: 0000000000000000 [ 128.711650][ T8848] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.711668][ T8848] R13: 00007f0456446128 R14: 00007f0456446090 R15: 00007ffcecf5a958 [ 128.711691][ T8848] [ 128.711700][ T8848] Mem-Info: [ 128.766595][ T8849] loop7: detected capacity change from 0 to 1024 [ 128.771298][ T8848] active_anon:8800 inactive_anon:0 isolated_anon:0 [ 128.771298][ T8848] active_file:10422 inactive_file:2414 isolated_file:0 [ 128.771298][ T8848] unevictable:0 dirty:119 writeback:0 [ 128.771298][ T8848] slab_reclaimable:2320 slab_unreclaimable:19413 [ 128.771298][ T8848] mapped:29209 shmem:502 pagetables:1531 [ 128.771298][ T8848] sec_pagetables:0 bounce:0 [ 128.771298][ T8848] kernel_misc_reclaimable:0 [ 128.771298][ T8848] free:1895063 free_pcp:5791 free_cma:0 [ 128.900133][ T8849] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1761: bad orphan inode 134217728 [ 128.901539][ T8848] Node 0 active_anon:35200kB inactive_anon:0kB active_file:41688kB inactive_file:9656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116836kB dirty:476kB writeback:0kB shmem:2008kB kernel_stack:4304kB pagetables:6124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.915979][ T8849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.917636][ T8848] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.055436][ T8848] lowmem_reserve[]: 0 2879 7858 7858 [ 129.060843][ T8848] Node 0 DMA32 free:2944740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 129.092360][ T8848] lowmem_reserve[]: 0 0 4978 4978 [ 129.097471][ T8848] Node 0 Normal free:4620152kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35316kB inactive_anon:0kB active_file:41688kB inactive_file:9656kB unevictable:0kB writepending:476kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19468kB local_pcp:14064kB free_cma:0kB [ 129.130580][ T8848] lowmem_reserve[]: 0 0 0 0 [ 129.135163][ T8848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.147990][ T8848] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944740kB [ 129.164402][ T8848] Node 0 Normal: 780*4kB (UME) 647*8kB (UME) 699*16kB (UME) 589*32kB (UME) 403*64kB (UME) 290*128kB (UME) 166*256kB (UME) 115*512kB (UME) 76*1024kB (UM) 67*2048kB (UME) 1026*4096kB (UM) = 4620152kB [ 129.184196][ T8848] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 129.193572][ T8848] 13364 total pagecache pages [ 129.198258][ T8848] 5 pages in swap cache [ 129.202470][ T8848] Free swap = 124616kB [ 129.206655][ T8848] Total swap = 124996kB [ 129.210816][ T8848] 2097051 pages RAM [ 129.214660][ T8848] 0 pages HighMem/MovableOnly [ 129.219350][ T8848] 81558 pages reserved [ 129.236563][ T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 129.248919][ T52] EXT4-fs (loop6): This should not happen!! Data will be lost [ 129.248919][ T52] [ 129.259676][ T4956] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.328847][ T8854] syzkaller0: entered promiscuous mode [ 129.334361][ T8854] syzkaller0: entered allmulticast mode [ 129.504378][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.604053][ T8863] syzkaller0: entered promiscuous mode [ 129.609726][ T8863] syzkaller0: entered allmulticast mode [ 129.777615][ T4956] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 129.788593][ T4956] CPU: 1 UID: 0 PID: 4956 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.788625][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 129.788641][ T4956] Call Trace: [ 129.788650][ T4956] [ 129.788660][ T4956] __dump_stack+0x1d/0x30 [ 129.788691][ T4956] dump_stack_lvl+0x95/0xd0 [ 129.788734][ T4956] dump_stack+0x15/0x1b [ 129.788760][ T4956] dump_header+0x80/0x240 [ 129.788792][ T4956] oom_kill_process+0x295/0x350 [ 129.788865][ T4956] out_of_memory+0x97d/0xb80 [ 129.788923][ T4956] try_charge_memcg+0x62e/0xa10 [ 129.788958][ T4956] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 129.788996][ T4956] __read_swap_cache_async+0x17b/0x2d0 [ 129.789143][ T4956] swap_cluster_readahead+0x262/0x3c0 [ 129.789194][ T4956] swapin_readahead+0xde/0x840 [ 129.789236][ T4956] ? rb_next+0x5c/0x80 [ 129.789337][ T4956] ? __perf_event_task_sched_in+0xa65/0xad0 [ 129.789365][ T4956] ? __rcu_read_unlock+0x4e/0x70 [ 129.789395][ T4956] ? swap_cache_get_folio+0x26f/0x280 [ 129.789439][ T4956] do_swap_page+0x59b/0x2a50 [ 129.789477][ T4956] ? finish_task_switch+0x79/0x280 [ 129.789668][ T4956] ? __schedule+0x81f/0xce0 [ 129.789688][ T4956] ? __rcu_read_lock+0x36/0x50 [ 129.789732][ T4956] ? __pfx_default_wake_function+0x10/0x10 [ 129.789820][ T4956] handle_mm_fault+0xb40/0x3030 [ 129.789853][ T4956] ? vma_start_read+0x1c7/0x2c0 [ 129.789887][ T4956] do_user_addr_fault+0x62f/0x1050 [ 129.789971][ T4956] exc_page_fault+0x62/0xa0 [ 129.790000][ T4956] asm_exc_page_fault+0x26/0x30 [ 129.790044][ T4956] RIP: 0033:0x7f6deb6c6197 [ 129.790059][ T4956] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 129.790076][ T4956] RSP: 002b:00007ffd77b9f300 EFLAGS: 00010202 [ 129.790147][ T4956] RAX: 0000000000000000 RBX: 000055555e760500 RCX: 00007f6deb6c6197 [ 129.790160][ T4956] RDX: 00007ffd77b9f340 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.790176][ T4956] RBP: 00007ffd77b9f3ac R08: 0000000000000000 R09: 0000000000000000 [ 129.790192][ T4956] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 129.790208][ T4956] R13: 00000000000927c0 R14: 000000000001fad1 R15: 00007ffd77b9f400 [ 129.790269][ T4956] [ 129.790277][ T4956] memory: usage 307200kB, limit 307200kB, failcnt 2771 [ 130.022094][ T4956] memory+swap: usage 227392kB, limit 9007199254740988kB, failcnt 0 [ 130.030018][ T4956] kmem: usage 217168kB, limit 9007199254740988kB, failcnt 0 [ 130.037369][ T4956] Memory cgroup stats for /syz6: [ 130.119492][ T4956] cache 9175040 [ 130.128025][ T4956] rss 114688 [ 130.131235][ T4956] shmem 9175040 [ 130.134777][ T4956] mapped_file 9175040 [ 130.138774][ T4956] dirty 0 [ 130.141730][ T4956] writeback 0 [ 130.145088][ T4956] workingset_refault_anon 65 [ 130.149698][ T4956] workingset_refault_file 0 [ 130.154297][ T4956] swap 208896 [ 130.157602][ T4956] swapcached 102400 [ 130.161420][ T4956] pgpgin 32635 [ 130.164928][ T4956] pgpgout 30363 [ 130.168403][ T4956] pgfault 61261 [ 130.171928][ T4956] pgmajfault 60 [ 130.175459][ T4956] inactive_anon 4096 [ 130.179366][ T4956] active_anon 9261056 [ 130.183413][ T4956] inactive_file 0 [ 130.187131][ T4956] active_file 0 [ 130.190601][ T4956] unevictable 0 [ 130.194141][ T4956] hierarchical_memory_limit 314572800 [ 130.199618][ T4956] hierarchical_memsw_limit 9223372036854771712 [ 130.205829][ T4956] total_cache 9175040 [ 130.209836][ T4956] total_rss 114688 [ 130.213592][ T4956] total_shmem 9175040 [ 130.217591][ T4956] total_mapped_file 9175040 [ 130.222119][ T4956] total_dirty 0 [ 130.225623][ T4956] total_writeback 0 [ 130.229455][ T4956] total_workingset_refault_anon 65 [ 130.234695][ T4956] total_workingset_refault_file 0 [ 130.239745][ T4956] total_swap 208896 [ 130.243579][ T4956] total_swapcached 102400 [ 130.247974][ T4956] total_pgpgin 32635 [ 130.251873][ T4956] total_pgpgout 30363 [ 130.256000][ T4956] total_pgfault 61261 [ 130.259995][ T4956] total_pgmajfault 60 [ 130.264021][ T4956] total_inactive_anon 4096 [ 130.268455][ T4956] total_active_anon 9261056 [ 130.273049][ T4956] total_inactive_file 0 [ 130.277250][ T4956] total_active_file 0 [ 130.281297][ T4956] total_unevictable 0 [ 130.285340][ T4956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1765,pid=8857,uid=0 [ 130.300029][ T4956] Memory cgroup out of memory: Killed process 8857 (syz.6.1765) total-vm:94276kB, anon-rss:1340kB, file-rss:22288kB, shmem-rss:10308kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 130.373920][ T8879] loop7: detected capacity change from 0 to 1024 [ 130.384775][ T8879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.396946][ T8879] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.410673][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 3) [ 130.425190][ T8879] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 130.437512][ T8879] EXT4-fs (loop7): This should not happen!! Data will be lost [ 130.437512][ T8879] [ 130.447997][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.462385][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.476635][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.490849][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.505156][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.519613][ T8878] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.535352][ T8879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.549689][ T8878] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 130.563927][ T8878] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1774: lblock 3 mapped to illegal pblock 3 (length 1) [ 131.217347][ T3337] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.229722][ T3337] EXT4-fs (loop7): This should not happen!! Data will be lost [ 131.229722][ T3337] [ 131.240541][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.319119][ T8886] loop7: detected capacity change from 0 to 1024 [ 131.327783][ T8886] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1776: bad orphan inode 134217728 [ 131.339097][ T8886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.124163][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.160823][ T8889] loop7: detected capacity change from 0 to 4096 [ 132.173401][ T8889] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 132.185143][ T8889] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.200473][ T8889] EXT4-fs (loop7): mount failed [ 132.249320][ T8892] tipc: Enabling of bearer rejected, failed to enable media [ 132.325705][ T8900] syzkaller0: entered promiscuous mode [ 132.331286][ T8900] syzkaller0: entered allmulticast mode [ 132.715087][ T8922] delete_channel: no stack [ 132.791378][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1788'. [ 132.831204][ T8932] loop7: detected capacity change from 0 to 4096 [ 132.844186][ T8932] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 132.855582][ T8932] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.870885][ T8932] EXT4-fs (loop7): mount failed [ 133.131581][ T8952] delete_channel: no stack [ 133.157566][ T8954] loop7: detected capacity change from 0 to 512 [ 133.164267][ T8954] EXT4-fs: Ignoring removed oldalloc option [ 133.176167][ T8954] EXT4-fs (loop7): 1 truncate cleaned up [ 133.182535][ T8954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.207999][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.231486][ T8957] loop7: detected capacity change from 0 to 1024 [ 133.244728][ T8957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.256995][ T8957] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.270213][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 3) [ 133.284828][ T8957] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 133.297132][ T8957] EXT4-fs (loop7): This should not happen!! Data will be lost [ 133.297132][ T8957] [ 133.308657][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.323406][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.337777][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.352210][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.366620][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.380907][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.395392][ T8957] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.409622][ T8956] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.425260][ T8956] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1799: lblock 3 mapped to illegal pblock 3 (length 1) [ 134.074204][ T7957] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 134.086630][ T7957] EXT4-fs (loop7): This should not happen!! Data will be lost [ 134.086630][ T7957] [ 134.097774][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.515081][ T8982] syzkaller0: entered promiscuous mode [ 134.520601][ T8982] syzkaller0: entered allmulticast mode [ 134.634551][ T8984] loop7: detected capacity change from 0 to 512 [ 134.653200][ T8984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.841194][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1814'. [ 134.880343][ T8995] tipc: Enabling of bearer rejected, failed to enable media [ 136.013490][ T8475] syz_tun (unregistering): left allmulticast mode [ 136.020038][ T8475] syz_tun (unregistering): left promiscuous mode [ 136.026500][ T8475] Ÿë: port 1(syz_tun) entered disabled state [ 136.056750][ T9011] syzkaller0: entered promiscuous mode [ 136.062326][ T9011] syzkaller0: entered allmulticast mode [ 136.202291][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 136.239245][ T3337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.256661][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.263964][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.274441][ T9012] bridge_slave_0: entered allmulticast mode [ 136.280715][ T9031] loop7: detected capacity change from 0 to 512 [ 136.281405][ T9012] bridge_slave_0: entered promiscuous mode [ 136.288219][ T9031] EXT4-fs: Ignoring removed oldalloc option [ 136.302219][ T9031] EXT4-fs (loop7): 1 truncate cleaned up [ 136.308527][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.315700][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.323761][ T9031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.324650][ T9012] bridge_slave_1: entered allmulticast mode [ 136.343949][ T9012] bridge_slave_1: entered promiscuous mode [ 136.358186][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.358895][ T3337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.387127][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.397618][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.420077][ T3337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.432054][ T9012] team0: Port device team_slave_0 added [ 136.438771][ T9012] team0: Port device team_slave_1 added [ 136.455579][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.462526][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.488453][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.499856][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.506896][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.532989][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.561496][ T3337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.586452][ T9012] hsr_slave_0: entered promiscuous mode [ 136.592465][ T9012] hsr_slave_1: entered promiscuous mode [ 136.598541][ T9012] debugfs: 'hsr0' already exists in 'hsr' [ 136.604361][ T9012] Cannot create hsr debugfs directory [ 136.672895][ T3337] bridge_slave_1: left allmulticast mode [ 136.678628][ T3337] bridge_slave_1: left promiscuous mode [ 136.684286][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.703585][ T3337] bridge_slave_0: left allmulticast mode [ 136.709251][ T3337] bridge_slave_0: left promiscuous mode [ 136.715068][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.780287][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1829'. [ 136.843905][ T9051] netlink: 'syz.7.1831': attribute type 29 has an invalid length. [ 136.855247][ T9051] loop7: detected capacity change from 0 to 1024 [ 136.874822][ T9051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.887037][ T9051] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.899706][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 3) [ 136.914237][ T9051] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 136.926540][ T9051] EXT4-fs (loop7): This should not happen!! Data will be lost [ 136.926540][ T9051] [ 136.937478][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.951934][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.966492][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.980856][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.995154][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.009702][ T9051] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.023937][ T9050] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.038574][ T9050] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.053080][ T9050] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1831: lblock 3 mapped to illegal pblock 3 (length 1) [ 137.069122][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.079969][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.089788][ T3337] bond0 (unregistering): Released all slaves [ 137.098339][ T3337] bond1 (unregistering): Released all slaves [ 137.107462][ T3337] bond2 (unregistering): Released all slaves [ 137.166006][ T3337] tipc: Left network mode [ 137.173079][ T3337] hsr_slave_0: left promiscuous mode [ 137.181012][ T3337] hsr_slave_1: left promiscuous mode [ 137.189849][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.197287][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.205631][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.213101][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.225574][ T3337] veth1_macvtap: left promiscuous mode [ 137.231335][ T3337] veth0_macvtap: left promiscuous mode [ 137.344730][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 137.355986][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 137.712142][ T52] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 137.724490][ T52] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.724490][ T52] [ 137.737451][ T3337] IPVS: stop unused estimator thread 0... [ 137.737517][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.785849][ T9107] loop7: detected capacity change from 0 to 512 [ 137.792431][ T9107] EXT4-fs: Ignoring removed oldalloc option [ 137.846559][ T9107] EXT4-fs (loop7): 1 truncate cleaned up [ 137.852732][ T9107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.918412][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.046230][ T3337] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.129052][ T3337] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.151640][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 138.178990][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1835'. [ 138.190218][ T3337] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.241529][ T3337] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.269732][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.276900][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.287375][ T9115] bridge_slave_0: entered allmulticast mode [ 138.293885][ T9115] bridge_slave_0: entered promiscuous mode [ 138.302273][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.309469][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.317805][ T9115] bridge_slave_1: entered allmulticast mode [ 138.325997][ T9115] bridge_slave_1: entered promiscuous mode [ 138.336657][ T9170] loop7: detected capacity change from 0 to 1024 [ 138.386751][ T9170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.388466][ T3337] bridge_slave_1: left allmulticast mode [ 138.404598][ T3337] bridge_slave_1: left promiscuous mode [ 138.410327][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.410850][ T9170] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.433112][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 3) [ 138.447994][ T9170] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 138.460402][ T9170] EXT4-fs (loop7): This should not happen!! Data will be lost [ 138.460402][ T9170] [ 138.470984][ T3337] bridge_slave_0: left allmulticast mode [ 138.476750][ T3337] bridge_slave_0: left promiscuous mode [ 138.482503][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.492404][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.532138][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.546757][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.562221][ T9169] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.578467][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.594213][ T9169] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.608525][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.622931][ T9170] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.637259][ T9169] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1837: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.666194][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.676328][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.686185][ T3337] bond0 (unregistering): Released all slaves [ 138.695018][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.705735][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.747345][ T9115] team0: Port device team_slave_0 added [ 138.752999][ T3337] tipc: Left network mode [ 138.762359][ T9115] team0: Port device team_slave_1 added [ 138.770537][ T3337] hsr_slave_0: left promiscuous mode [ 138.784096][ T3337] hsr_slave_1: left promiscuous mode [ 138.790260][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.797733][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.815329][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.822743][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.841558][ T3337] veth1_macvtap: left promiscuous mode [ 138.849241][ T3337] veth0_macvtap: left promiscuous mode [ 138.855043][ T3337] veth1_vlan: left promiscuous mode [ 138.975590][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 138.988416][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 139.062734][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.069771][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.095753][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.107104][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.114166][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.140162][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.179600][ T9115] hsr_slave_0: entered promiscuous mode [ 139.185968][ T9115] hsr_slave_1: entered promiscuous mode [ 139.208432][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 139.221003][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.221003][ T31] [ 139.253709][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.326972][ T8645] syz_tun (unregistering): left allmulticast mode [ 139.333509][ T8645] syz_tun (unregistering): left promiscuous mode [ 139.339908][ T8645] Ÿë: port 1(syz_tun) entered disabled state [ 139.520151][ T3337] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.569025][ T9225] chnl_net:caif_netlink_parms(): no params data found [ 139.589397][ T3337] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.627473][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.634626][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.641740][ T9225] bridge_slave_0: entered allmulticast mode [ 139.648323][ T9225] bridge_slave_0: entered promiscuous mode [ 139.657038][ T3337] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.669065][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.676152][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.683437][ T9225] bridge_slave_1: entered allmulticast mode [ 139.690002][ T9225] bridge_slave_1: entered promiscuous mode [ 139.707958][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.718556][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.739827][ T3337] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.751705][ T9225] team0: Port device team_slave_0 added [ 139.758681][ T9225] team0: Port device team_slave_1 added [ 139.782005][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.789014][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.814998][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.833602][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.840688][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.866657][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.926380][ T3337] bridge_slave_1: left allmulticast mode [ 139.932122][ T3337] bridge_slave_1: left promiscuous mode [ 139.938048][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.948766][ T3337] bridge_slave_0: left allmulticast mode [ 139.954529][ T3337] bridge_slave_0: left promiscuous mode [ 139.960282][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.225299][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.235306][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.244926][ T3337] bond0 (unregistering): Released all slaves [ 140.260009][ T9225] hsr_slave_0: entered promiscuous mode [ 140.266296][ T9225] hsr_slave_1: entered promiscuous mode [ 140.272305][ T9225] debugfs: 'hsr0' already exists in 'hsr' [ 140.278125][ T9225] Cannot create hsr debugfs directory [ 140.285724][ T3337] tipc: Left network mode [ 140.297246][ T3337] hsr_slave_0: left promiscuous mode [ 140.303149][ T3337] hsr_slave_1: left promiscuous mode [ 140.309386][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.316849][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.324832][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.332265][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.343992][ T3337] veth1_macvtap: left promiscuous mode [ 140.349567][ T3337] veth0_macvtap: left promiscuous mode [ 140.404097][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 140.414762][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 141.240691][ T9115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.251074][ T9115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.260713][ T9115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.277444][ T9115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.340672][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.353425][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.364103][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.371210][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.389166][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.396571][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.415624][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.426088][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.480884][ T9225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.491815][ T9225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.508788][ T9225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.525496][ T9225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.562842][ T9012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.581528][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.592242][ T9012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.605542][ T9012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.623916][ T9012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.658633][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.684546][ T9225] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.694404][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.701474][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.742172][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.749319][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.768153][ T9225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.778807][ T9225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.795683][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.820954][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.846702][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.853938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.869807][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.876911][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.930708][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.970947][ T9115] veth0_vlan: entered promiscuous mode [ 141.986411][ T9115] veth1_vlan: entered promiscuous mode [ 142.043115][ T9115] veth0_macvtap: entered promiscuous mode [ 142.057851][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.068210][ T9115] veth1_macvtap: entered promiscuous mode [ 142.086413][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.105359][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.114373][ T9225] veth0_vlan: entered promiscuous mode [ 142.129591][ T7957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.139420][ T9225] veth1_vlan: entered promiscuous mode [ 142.158594][ T7957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.169977][ T9225] veth0_macvtap: entered promiscuous mode [ 142.190484][ T9225] veth1_macvtap: entered promiscuous mode [ 142.201488][ T7957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.217417][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.227555][ T7957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.254941][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.275218][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 142.277825][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.296919][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.310929][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.328211][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.474484][ T9012] veth0_vlan: entered promiscuous mode [ 142.485760][ T9012] veth1_vlan: entered promiscuous mode [ 142.514586][ T9012] veth0_macvtap: entered promiscuous mode [ 142.530810][ T9530] delete_channel: no stack [ 142.545386][ T9012] veth1_macvtap: entered promiscuous mode [ 142.578231][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.600681][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.618883][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1845'. [ 142.634871][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.702514][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.715708][ T9552] syzkaller0: entered promiscuous mode [ 142.721275][ T9552] syzkaller0: entered allmulticast mode [ 142.753422][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.762324][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.830663][ T9565] tipc: Enabled bearer , priority 0 [ 142.844947][ T9565] tipc: Resetting bearer [ 142.852305][ T9564] tipc: Disabling bearer [ 142.973650][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1851'. [ 143.080396][ T9596] loop7: detected capacity change from 0 to 4096 [ 143.095076][ T9596] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 143.113131][ T9596] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.115197][ T9606] delete_channel: no stack [ 143.131416][ T9596] EXT4-fs (loop7): mount failed [ 143.255300][ T9619] syzkaller0: entered promiscuous mode [ 143.260849][ T9619] syzkaller0: entered allmulticast mode [ 143.304716][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1857'. [ 143.363689][ T9635] tipc: Started in network mode [ 143.368600][ T9635] tipc: Node identity cacb7b00daed, cluster identity 4711 [ 143.375926][ T9635] tipc: Enabled bearer , priority 0 [ 143.404818][ T9635] tipc: Resetting bearer [ 143.412409][ T9634] tipc: Disabling bearer [ 143.442319][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1864'. [ 143.518575][ T9659] loop4: detected capacity change from 0 to 1024 [ 143.536680][ T9659] EXT4-fs: Ignoring removed orlov option [ 143.547399][ T9659] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 143.578941][ T9659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.659402][ T29] audit: type=1400 audit(1770637809.197:730): avc: denied { read } for pid=9658 comm="syz.4.1867" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.682549][ T29] audit: type=1400 audit(1770637809.197:731): avc: denied { open } for pid=9658 comm="syz.4.1867" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.707534][ T29] audit: type=1400 audit(1770637809.227:732): avc: denied { getopt } for pid=9658 comm="syz.4.1867" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.759603][ T9680] loop7: detected capacity change from 0 to 4096 [ 143.787307][ T9680] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 143.808698][ T9680] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.827983][ T9680] EXT4-fs (loop7): mount failed [ 143.914792][ T29] audit: type=1400 audit(1770637809.457:733): avc: denied { setattr } for pid=9658 comm="syz.4.1867" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.468201][ T9012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.509243][ T9783] delete_channel: no stack [ 144.723018][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1872'. [ 144.838008][ T9821] warn_alloc: 1 callbacks suppressed [ 144.838029][ T9821] syz.7.1873: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 144.858075][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.7.1873 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.858192][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.858206][ T9821] Call Trace: [ 144.858212][ T9821] [ 144.858222][ T9821] __dump_stack+0x1d/0x30 [ 144.858331][ T9821] dump_stack_lvl+0x95/0xd0 [ 144.858361][ T9821] dump_stack+0x15/0x1b [ 144.858388][ T9821] warn_alloc+0x145/0x1c0 [ 144.858430][ T9821] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 144.858517][ T9821] ? __futex_wait+0x1fd/0x260 [ 144.858556][ T9821] ? __pfx_futex_wake_mark+0x10/0x10 [ 144.858594][ T9821] ? __rcu_read_unlock+0x4e/0x70 [ 144.858671][ T9821] ? avc_has_perm_noaudit+0xab/0x130 [ 144.858707][ T9821] ? should_fail_ex+0x30/0x280 [ 144.858740][ T9821] ? should_failslab+0x8c/0xb0 [ 144.858772][ T9821] vmalloc_user_noprof+0x7d/0xb0 [ 144.858814][ T9821] ? xskq_create+0x80/0xe0 [ 144.858844][ T9821] xskq_create+0x80/0xe0 [ 144.858915][ T9821] xsk_init_queue+0x91/0xe0 [ 144.859024][ T9821] xsk_setsockopt+0x3f5/0x640 [ 144.859107][ T9821] ? __pfx_xsk_setsockopt+0x10/0x10 [ 144.859150][ T9821] __sys_setsockopt+0x184/0x200 [ 144.859330][ T9821] __x64_sys_setsockopt+0x64/0x80 [ 144.859395][ T9821] x64_sys_call+0x21d5/0x3000 [ 144.859421][ T9821] do_syscall_64+0xc0/0x2a0 [ 144.859457][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.859576][ T9821] RIP: 0033:0x7f04561caf79 [ 144.859593][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.859656][ T9821] RSP: 002b:00007f0454c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.859710][ T9821] RAX: ffffffffffffffda RBX: 00007f0456446090 RCX: 00007f04561caf79 [ 144.859724][ T9821] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 144.859736][ T9821] RBP: 00007f04562616e0 R08: 0000000000000004 R09: 0000000000000000 [ 144.859751][ T9821] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.859767][ T9821] R13: 00007f0456446128 R14: 00007f0456446090 R15: 00007ffcecf5a958 [ 144.859790][ T9821] [ 144.859797][ T9821] Mem-Info: [ 144.914579][ T9824] loop7: detected capacity change from 0 to 1024 [ 144.919460][ T9821] active_anon:11536 inactive_anon:48 isolated_anon:0 [ 144.919460][ T9821] active_file:10396 inactive_file:2489 isolated_file:0 [ 144.919460][ T9821] unevictable:0 dirty:125 writeback:0 [ 144.919460][ T9821] slab_reclaimable:2361 slab_unreclaimable:18297 [ 144.919460][ T9821] mapped:32112 shmem:3225 pagetables:1492 [ 144.919460][ T9821] sec_pagetables:0 bounce:0 [ 144.919460][ T9821] kernel_misc_reclaimable:0 [ 144.919460][ T9821] free:1820759 free_pcp:4651 free_cma:0 [ 144.978285][ T9824] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1873: bad orphan inode 134217728 [ 144.982056][ T9821] Node 0 active_anon:46260kB inactive_anon:192kB active_file:41584kB inactive_file:9840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128448kB dirty:500kB writeback:0kB shmem:12900kB kernel_stack:4096kB pagetables:5968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.988284][ T9824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.992513][ T9821] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.203364][ T9821] lowmem_reserve[]: 0 2879 7858 7858 [ 145.208722][ T9821] Node 0 DMA32 free:2944740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 145.240155][ T9821] lowmem_reserve[]: 0 0 4978 4978 [ 145.245349][ T9821] Node 0 Normal free:4322472kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34808kB inactive_anon:11672kB active_file:41584kB inactive_file:9608kB unevictable:0kB writepending:500kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:15072kB local_pcp:12576kB free_cma:0kB [ 145.278708][ T9821] lowmem_reserve[]: 0 0 0 0 [ 145.283310][ T9821] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.296124][ T9821] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944740kB [ 145.312364][ T9821] Node 0 Normal: 741*4kB (UM) 715*8kB (UME) 585*16kB (UME) 541*32kB (UME) 412*64kB (UME) 287*128kB (UME) 169*256kB (UME) 117*512kB (UME) 76*1024kB (UM) 66*2048kB (UME) 954*4096kB (UM) = 4322204kB [ 145.331873][ T9821] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 145.341206][ T9821] 16024 total pagecache pages [ 145.345922][ T9821] 8 pages in swap cache [ 145.350131][ T9821] Free swap = 124808kB [ 145.354364][ T9821] Total swap = 124996kB [ 145.358539][ T9821] 2097051 pages RAM [ 145.362367][ T9821] 0 pages HighMem/MovableOnly [ 145.367088][ T9821] 81558 pages reserved [ 145.618356][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.735459][ T8869] syz_tun (unregistering): left allmulticast mode [ 145.741946][ T8869] syz_tun (unregistering): left promiscuous mode [ 145.748514][ T8869] Ÿë: port 1(syz_tun) entered disabled state [ 145.755604][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1876'. [ 145.959488][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.996356][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1880'. [ 146.055772][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.071444][ T9903] delete_channel: no stack [ 146.107377][ T9906] tipc: Started in network mode [ 146.112356][ T9906] tipc: Node identity be0d8da7e83c, cluster identity 4711 [ 146.119557][ T9906] tipc: Enabled bearer , priority 0 [ 146.161687][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.183070][ T9868] chnl_net:caif_netlink_parms(): no params data found [ 146.205054][ T9906] tipc: Resetting bearer [ 146.249371][ T9905] tipc: Disabling bearer [ 146.260498][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.296930][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.304125][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.316961][ T9932] loop7: detected capacity change from 0 to 1024 [ 146.331882][ T9932] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1884: bad orphan inode 134217728 [ 146.354969][ T9932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.398063][ T9868] bridge_slave_0: entered allmulticast mode [ 146.406196][ T9868] bridge_slave_0: entered promiscuous mode [ 146.459670][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.466946][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.474705][ T9868] bridge_slave_1: entered allmulticast mode [ 146.483954][ T9868] bridge_slave_1: entered promiscuous mode [ 146.496424][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1887'. [ 146.518536][ T52] bridge_slave_1: left allmulticast mode [ 146.524472][ T52] bridge_slave_1: left promiscuous mode [ 146.530240][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.541055][ T52] bridge_slave_0: left allmulticast mode [ 146.546869][ T52] bridge_slave_0: left promiscuous mode [ 146.552702][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.845981][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.855996][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.865992][ T52] bond0 (unregistering): Released all slaves [ 146.873987][ T52] bond1 (unregistering): Released all slaves [ 146.882653][ T52] bond2 (unregistering): Released all slaves [ 146.904976][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.916549][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.939909][ T52] tipc: Left network mode [ 146.952330][ T9868] team0: Port device team_slave_0 added [ 146.959637][ T9868] team0: Port device team_slave_1 added [ 146.977939][ T52] hsr_slave_0: left promiscuous mode [ 146.987656][ T52] hsr_slave_1: left promiscuous mode [ 146.999796][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.007269][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.022672][ T9975] loop3: detected capacity change from 0 to 1024 [ 147.031073][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.034903][ T9975] EXT4-fs: Ignoring removed orlov option [ 147.038666][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.058809][ T9975] EXT4-fs (loop3): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 147.074745][ T9975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.074913][ T52] veth1_macvtap: left promiscuous mode [ 147.113340][ T52] veth0_macvtap: left promiscuous mode [ 147.119005][ T52] veth1_vlan: left promiscuous mode [ 147.134579][ T52] veth0_vlan: left promiscuous mode [ 147.140753][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.233452][ T52] team0 (unregistering): Port device team_slave_1 removed [ 147.253152][ T52] team0 (unregistering): Port device team_slave_0 removed [ 147.341162][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.348204][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.374300][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.389412][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.396487][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.422519][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.500110][ T9868] hsr_slave_0: entered promiscuous mode [ 147.513907][ T9868] hsr_slave_1: entered promiscuous mode [ 147.524113][ T9868] debugfs: 'hsr0' already exists in 'hsr' [ 147.529898][ T9868] Cannot create hsr debugfs directory [ 147.668685][ T9115] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 147.679646][ T9115] CPU: 1 UID: 0 PID: 9115 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.679738][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.679754][ T9115] Call Trace: [ 147.679763][ T9115] [ 147.679773][ T9115] __dump_stack+0x1d/0x30 [ 147.679879][ T9115] dump_stack_lvl+0x95/0xd0 [ 147.679903][ T9115] dump_stack+0x15/0x1b [ 147.679925][ T9115] dump_header+0x80/0x240 [ 147.679999][ T9115] oom_kill_process+0x295/0x350 [ 147.680027][ T9115] out_of_memory+0x97d/0xb80 [ 147.680064][ T9115] try_charge_memcg+0x62e/0xa10 [ 147.680099][ T9115] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 147.680139][ T9115] __read_swap_cache_async+0x17b/0x2d0 [ 147.680276][ T9115] swap_cluster_readahead+0x262/0x3c0 [ 147.680341][ T9115] swapin_readahead+0xde/0x840 [ 147.680374][ T9115] ? __perf_event_task_sched_in+0xa65/0xad0 [ 147.680403][ T9115] ? __rcu_read_unlock+0x4e/0x70 [ 147.680433][ T9115] ? swap_cache_get_folio+0x26f/0x280 [ 147.680472][ T9115] do_swap_page+0x59b/0x2a50 [ 147.680504][ T9115] ? finish_task_switch+0x79/0x280 [ 147.680533][ T9115] ? __schedule+0x81f/0xce0 [ 147.680552][ T9115] ? __rcu_read_lock+0x36/0x50 [ 147.680669][ T9115] ? __pfx_default_wake_function+0x10/0x10 [ 147.680701][ T9115] handle_mm_fault+0xb40/0x3030 [ 147.680777][ T9115] ? vma_start_read+0x1c7/0x2c0 [ 147.680857][ T9115] do_user_addr_fault+0x62f/0x1050 [ 147.680895][ T9115] exc_page_fault+0x62/0xa0 [ 147.680921][ T9115] asm_exc_page_fault+0x26/0x30 [ 147.680943][ T9115] RIP: 0033:0x7fb7515f6197 [ 147.680960][ T9115] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 147.680980][ T9115] RSP: 002b:00007fff7ec221e0 EFLAGS: 00010202 [ 147.681042][ T9115] RAX: 0000000000000000 RBX: 000055555ce59500 RCX: 00007fb7515f6197 [ 147.681057][ T9115] RDX: 00007fff7ec22220 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.681071][ T9115] RBP: 00007fff7ec2228c R08: 0000000000000000 R09: 0000000000000000 [ 147.681091][ T9115] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 147.681104][ T9115] R13: 00000000000927c0 R14: 0000000000024032 R15: 00007fff7ec222e0 [ 147.681132][ T9115] [ 147.681140][ T9115] memory: usage 307200kB, limit 307200kB, failcnt 6598 [ 147.907815][ T9115] memory+swap: usage 183240kB, limit 9007199254740988kB, failcnt 0 [ 147.915760][ T9115] kmem: usage 180988kB, limit 9007199254740988kB, failcnt 0 [ 147.923110][ T9115] Memory cgroup stats for /syz5: [ 147.923645][ T9115] cache 0 [ 147.931591][ T9115] rss 0 [ 147.934896][ T9115] shmem 0 [ 147.937922][ T9115] mapped_file 0 [ 147.941385][ T9115] dirty 0 [ 147.944342][ T9115] writeback 0 [ 147.947709][ T9115] workingset_refault_anon 106 [ 147.952429][ T9115] workingset_refault_file 462 [ 147.957140][ T9115] swap 327680 [ 147.960438][ T9115] swapcached 0 [ 147.963870][ T9115] pgpgin 9379 [ 147.967160][ T9115] pgpgout 9379 [ 147.970568][ T9115] pgfault 9278 [ 147.973988][ T9115] pgmajfault 67 [ 147.977476][ T9115] inactive_anon 0 [ 147.981177][ T9115] active_anon 0 [ 147.984683][ T9115] inactive_file 0 [ 147.988326][ T9115] active_file 0 [ 147.991866][ T9115] unevictable 0 [ 147.995376][ T9115] hierarchical_memory_limit 314572800 [ 148.000750][ T9115] hierarchical_memsw_limit 9223372036854771712 [ 148.006932][ T9115] total_cache 0 [ 148.010397][ T9115] total_rss 0 [ 148.013758][ T9115] total_shmem 0 [ 148.017237][ T9115] total_mapped_file 0 [ 148.021226][ T9115] total_dirty 0 [ 148.024894][ T9115] total_writeback 0 [ 148.028852][ T9115] total_workingset_refault_anon 106 [ 148.034218][ T9115] total_workingset_refault_file 462 [ 148.039440][ T9115] total_swap 327680 [ 148.043309][ T9115] total_swapcached 0 [ 148.047219][ T9115] total_pgpgin 9379 [ 148.051036][ T9115] total_pgpgout 9379 [ 148.055056][ T9115] total_pgfault 9278 [ 148.059022][ T9115] total_pgmajfault 67 [ 148.063116][ T9115] total_inactive_anon 0 [ 148.067290][ T9115] total_active_anon 0 [ 148.071351][ T9115] total_inactive_file 0 [ 148.075663][ T9115] total_active_file 0 [ 148.079670][ T9115] total_unevictable 0 [ 148.083698][ T9115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1888,pid=9972,uid=0 [ 148.098822][ T9115] Memory cgroup out of memory: Killed process 9972 (syz.5.1888) total-vm:94204kB, anon-rss:1208kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 148.126662][ T9225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.331169][ T9868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.340640][ T9868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.350120][ T9868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.360437][ T9868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.405807][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.424184][ T9868] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.434211][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.441335][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.460790][ T9868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.471243][ T9868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.487967][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.495077][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.565692][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.639804][ T9868] veth0_vlan: entered promiscuous mode [ 148.648557][ T9868] veth1_vlan: entered promiscuous mode [ 148.665437][ T9868] veth0_macvtap: entered promiscuous mode [ 148.672961][ T9868] veth1_macvtap: entered promiscuous mode [ 148.685232][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.697730][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.711966][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.732057][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.748873][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.758918][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.964163][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 149.037067][T10124] syzkaller0: entered promiscuous mode [ 149.042600][T10124] syzkaller0: entered allmulticast mode [ 149.066190][T10126] delete_channel: no stack [ 149.259193][T10154] loop3: detected capacity change from 0 to 1024 [ 149.281148][T10154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.293286][T10154] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.307349][T10154] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 3) [ 149.322008][T10154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 149.334388][T10154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.334388][T10154] [ 149.345764][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.360049][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.376726][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.392475][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.407183][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.421522][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.436202][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.450563][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.464843][T10154] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1904: lblock 3 mapped to illegal pblock 3 (length 1) [ 150.102547][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 150.115225][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.115225][ T31] [ 150.126598][ T9225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.303220][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1908'. [ 150.580558][T10292] loop1: detected capacity change from 0 to 512 [ 150.779764][T10302] loop1: detected capacity change from 0 to 1024 [ 150.789560][T10302] EXT4-fs: Ignoring removed orlov option [ 150.802379][T10302] EXT4-fs (loop1): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 150.816214][T10302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.898809][ T9868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.555072][T10317] syzkaller0: entered promiscuous mode [ 151.560630][T10317] syzkaller0: entered allmulticast mode [ 152.009462][T10332] loop3: detected capacity change from 0 to 512 [ 152.087727][T10336] tipc: Enabled bearer , priority 0 [ 152.113539][T10336] syzkaller0: entered promiscuous mode [ 152.119122][T10336] syzkaller0: entered allmulticast mode [ 152.125858][T10336] tipc: Resetting bearer [ 152.134387][T10335] tipc: Resetting bearer [ 152.147275][T10335] tipc: Disabling bearer [ 152.221252][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 152.338250][T10342] loop7: detected capacity change from 0 to 1024 [ 152.355454][T10342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.367768][T10342] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.381450][T10342] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.395906][T10342] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.408258][T10342] EXT4-fs (loop7): This should not happen!! Data will be lost [ 152.408258][T10342] [ 152.419102][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.437337][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.458551][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.472962][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.487564][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.502241][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.516613][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.530983][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.548795][T10342] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1930: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.845371][T10348] Ÿë: port 1(syz_tun) entered blocking state [ 152.851951][T10348] Ÿë: port 1(syz_tun) entered disabled state [ 152.861685][T10348] syz_tun: entered allmulticast mode [ 152.896446][T10348] syz_tun: entered promiscuous mode [ 153.216964][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 153.229398][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 153.229398][ T31] [ 153.269346][T10370] loop1: detected capacity change from 0 to 512 [ 153.276577][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.320868][T10374] netlink: 'syz.7.1935': attribute type 13 has an invalid length. [ 153.396609][T10377] tipc: Started in network mode [ 153.401513][T10377] tipc: Node identity 36c987bfc664, cluster identity 4711 [ 153.408760][T10377] tipc: Enabled bearer , priority 0 [ 153.436020][T10377] syzkaller0: entered promiscuous mode [ 153.441522][T10377] syzkaller0: entered allmulticast mode [ 153.447650][T10377] tipc: Resetting bearer [ 153.455408][T10376] tipc: Resetting bearer [ 153.468199][T10376] tipc: Disabling bearer [ 154.411579][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 154.511366][T10405] loop7: detected capacity change from 0 to 4096 [ 154.525065][T10405] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 154.542425][T10405] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.557468][T10405] EXT4-fs (loop7): mount failed [ 154.732049][T10415] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1945'. [ 155.167942][ T5320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 155.178887][ T5320] CPU: 1 UID: 0 PID: 5320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.178973][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 155.178989][ T5320] Call Trace: [ 155.178998][ T5320] [ 155.179008][ T5320] __dump_stack+0x1d/0x30 [ 155.179035][ T5320] dump_stack_lvl+0x95/0xd0 [ 155.179058][ T5320] dump_stack+0x15/0x1b [ 155.179103][ T5320] dump_header+0x80/0x240 [ 155.179131][ T5320] oom_kill_process+0x295/0x350 [ 155.179165][ T5320] out_of_memory+0x97d/0xb80 [ 155.179197][ T5320] try_charge_memcg+0x62e/0xa10 [ 155.179234][ T5320] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 155.179282][ T5320] __read_swap_cache_async+0x17b/0x2d0 [ 155.179322][ T5320] swap_cluster_readahead+0x262/0x3c0 [ 155.179378][ T5320] swapin_readahead+0xde/0x840 [ 155.179435][ T5320] ? __perf_event_task_sched_in+0xa65/0xad0 [ 155.179485][ T5320] ? __rcu_read_unlock+0x4e/0x70 [ 155.179519][ T5320] ? swap_cache_get_folio+0x26f/0x280 [ 155.179631][ T5320] do_swap_page+0x59b/0x2a50 [ 155.179736][ T5320] ? finish_task_switch+0x79/0x280 [ 155.179761][ T5320] ? __schedule+0x81f/0xce0 [ 155.179781][ T5320] ? __rcu_read_lock+0x36/0x50 [ 155.179855][ T5320] ? __pfx_default_wake_function+0x10/0x10 [ 155.179903][ T5320] handle_mm_fault+0xb40/0x3030 [ 155.179936][ T5320] ? vma_start_read+0x1c7/0x2c0 [ 155.179971][ T5320] do_user_addr_fault+0x62f/0x1050 [ 155.180020][ T5320] exc_page_fault+0x62/0xa0 [ 155.180046][ T5320] asm_exc_page_fault+0x26/0x30 [ 155.180068][ T5320] RIP: 0033:0x7f0456186197 [ 155.180085][ T5320] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 155.180154][ T5320] RSP: 002b:00007ffcecf5ac50 EFLAGS: 00010202 [ 155.180199][ T5320] RAX: 0000000000000000 RBX: 0000555590ddc500 RCX: 00007f0456186197 [ 155.180212][ T5320] RDX: 00007ffcecf5ac90 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.180283][ T5320] RBP: 00007ffcecf5acfc R08: 0000000000000000 R09: 0000000000000000 [ 155.180295][ T5320] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 155.180318][ T5320] R13: 00000000000927c0 R14: 0000000000025dfd R15: 00007ffcecf5ad50 [ 155.180345][ T5320] [ 155.180353][ T5320] memory: usage 307200kB, limit 307200kB, failcnt 2950 [ 155.406291][ T5320] memory+swap: usage 272300kB, limit 9007199254740988kB, failcnt 0 [ 155.414211][ T5320] kmem: usage 272076kB, limit 9007199254740988kB, failcnt 0 [ 155.421542][ T5320] Memory cgroup stats for /syz7: [ 155.433628][ T5320] cache 0 [ 155.441651][ T5320] rss 45056 [ 155.444827][ T5320] shmem 0 [ 155.447769][ T5320] mapped_file 0 [ 155.451227][ T5320] dirty 0 [ 155.454422][ T5320] writeback 0 [ 155.457784][ T5320] workingset_refault_anon 28 [ 155.462378][ T5320] workingset_refault_file 0 [ 155.466989][ T5320] swap 163840 [ 155.470278][ T5320] swapcached 28672 [ 155.474099][ T5320] pgpgin 45837 [ 155.477525][ T5320] pgpgout 45823 [ 155.481062][ T5320] pgfault 84893 [ 155.484602][ T5320] pgmajfault 20 [ 155.488062][ T5320] inactive_anon 0 [ 155.491761][ T5320] active_anon 32768 [ 155.495586][ T5320] inactive_file 0 [ 155.499241][ T5320] active_file 4096 [ 155.502970][ T5320] unevictable 0 [ 155.506472][ T5320] hierarchical_memory_limit 314572800 [ 155.511856][ T5320] hierarchical_memsw_limit 9223372036854771712 [ 155.512951][T10425] loop1: detected capacity change from 0 to 512 [ 155.518045][ T5320] total_cache 0 [ 155.518055][ T5320] total_rss 45056 [ 155.518064][ T5320] total_shmem 0 [ 155.518072][ T5320] total_mapped_file 0 [ 155.538935][ T5320] total_dirty 0 [ 155.542405][ T5320] total_writeback 0 [ 155.546315][ T5320] total_workingset_refault_anon 28 [ 155.551432][ T5320] total_workingset_refault_file 0 [ 155.556502][ T5320] total_swap 163840 [ 155.560323][ T5320] total_swapcached 28672 [ 155.564599][ T5320] total_pgpgin 45837 [ 155.568588][ T5320] total_pgpgout 45823 [ 155.572622][ T5320] total_pgfault 84910 [ 155.576635][ T5320] total_pgmajfault 20 [ 155.580656][ T5320] total_inactive_anon 0 [ 155.584947][ T5320] total_active_anon 32768 [ 155.589287][ T5320] total_inactive_file 0 [ 155.593474][ T5320] total_active_file 4096 [ 155.597754][ T5320] total_unevictable 0 [ 155.601941][ T5320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1947,pid=10418,uid=0 [ 155.616686][ T5320] Memory cgroup out of memory: Killed process 10418 (syz.7.1947) total-vm:94276kB, anon-rss:1296kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 155.666204][T10428] netlink: 'syz.1.1949': attribute type 13 has an invalid length. [ 155.812431][T10445] tipc: Enabled bearer , priority 0 [ 155.849449][T10445] syzkaller0: entered promiscuous mode [ 155.855044][T10445] syzkaller0: entered allmulticast mode [ 155.862094][T10445] tipc: Resetting bearer [ 155.872039][T10442] tipc: Resetting bearer [ 155.886519][T10442] tipc: Disabling bearer [ 156.019687][T10474] loop7: detected capacity change from 0 to 4096 [ 156.031281][T10474] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 156.043321][T10474] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.062659][T10474] EXT4-fs (loop7): mount failed [ 156.170657][T10493] netlink: 'syz.7.1963': attribute type 13 has an invalid length. [ 156.343041][T10499] tipc: Enabled bearer , priority 0 [ 156.350180][T10499] syzkaller0: entered promiscuous mode [ 156.355750][T10499] syzkaller0: entered allmulticast mode [ 156.367394][T10499] tipc: Resetting bearer [ 156.374183][T10498] tipc: Resetting bearer [ 156.381300][T10498] tipc: Disabling bearer [ 156.466785][T10511] loop1: detected capacity change from 0 to 1024 [ 156.473359][T10509] loop7: detected capacity change from 0 to 4096 [ 156.477280][T10511] EXT4-fs: Ignoring removed orlov option [ 156.486240][T10511] EXT4-fs (loop1): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 156.501509][T10509] Quota error (device loop7): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 156.512283][T10509] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.528653][T10509] EXT4-fs (loop7): mount failed [ 156.529193][T10511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.592468][ T9868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.669509][T10525] netlink: 'syz.1.1976': attribute type 13 has an invalid length. [ 156.920528][T10540] loop1: detected capacity change from 0 to 4096 [ 156.929278][T10540] Quota error (device loop1): v2_read_file_info: Block with free entry 261 out of range (1, 6). [ 156.939870][T10540] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.954861][T10540] EXT4-fs (loop1): mount failed [ 157.004082][T10544] loop1: detected capacity change from 0 to 1024 [ 157.010779][T10544] EXT4-fs: Ignoring removed orlov option [ 157.017490][T10544] EXT4-fs (loop1): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 157.035301][T10544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.087451][ T9868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.180348][T10562] netlink: 'syz.7.1990': attribute type 13 has an invalid length. [ 157.318366][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 157.365834][T10570] tipc: Enabled bearer , priority 0 [ 157.397192][T10570] syzkaller0: entered promiscuous mode [ 157.402720][T10570] syzkaller0: entered allmulticast mode [ 157.409226][T10570] tipc: Resetting bearer [ 157.417506][T10568] tipc: Resetting bearer [ 157.429183][T10568] tipc: Disabling bearer [ 157.576435][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.585582][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.602376][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.611466][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.637224][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.646322][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1998'. [ 157.723187][T10584] loop7: detected capacity change from 0 to 1024 [ 157.736024][T10584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.749731][T10584] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.763172][T10584] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 3) [ 157.779677][T10584] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 157.792293][T10584] EXT4-fs (loop7): This should not happen!! Data will be lost [ 157.792293][T10584] [ 157.803325][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.817839][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.832192][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.846730][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.861810][T10583] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.876107][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.890302][T10583] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.904939][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.919304][T10584] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1999: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.381113][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 158.411289][T10598] loop1: detected capacity change from 0 to 1024 [ 158.425118][T10598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.437327][T10598] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.453492][T10598] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 3) [ 158.467662][T10598] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 158.479993][T10598] EXT4-fs (loop1): This should not happen!! Data will be lost [ 158.479993][T10598] [ 158.491020][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.505674][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.520815][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.535610][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.550259][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.571589][T10598] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.586347][T10597] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.601151][T10597] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.603843][ T3337] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 158.616655][T10597] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2004: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.627531][ T3337] EXT4-fs (loop7): This should not happen!! Data will be lost [ 158.627531][ T3337] [ 158.652750][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.687533][T10603] netlink: 'syz.7.2005': attribute type 13 has an invalid length. [ 158.828140][T10605] tipc: Enabled bearer , priority 0 [ 158.856986][T10605] syzkaller0: entered promiscuous mode [ 158.862497][T10605] syzkaller0: entered allmulticast mode [ 158.870391][T10605] tipc: Resetting bearer [ 158.878007][ T3337] tipc: Resetting bearer [ 158.887155][T10604] tipc: Resetting bearer [ 158.900831][T10604] tipc: Disabling bearer [ 159.263884][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 159.276365][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.276365][ T31] [ 159.287561][ T9868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.316854][T10626] loop7: detected capacity change from 0 to 1024 [ 159.326342][T10626] EXT4-fs: Ignoring removed orlov option [ 159.344028][T10626] EXT4-fs (loop7): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 159.355181][T10628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.371452][ T9173] ================================================================== [ 159.375745][T10628] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.379595][ T9173] BUG: KCSAN: data-race in drop_nlink / generic_fillattr [ 159.396886][ T9173] [ 159.399214][ T9173] write to 0xffff88811ad0af48 of 4 bytes by task 3300 on cpu 1: [ 159.406846][ T9173] drop_nlink+0x3d/0xa0 [ 159.411020][ T9173] simple_unlink+0x60/0x80 [ 159.415485][ T9173] shmem_unlink+0x12d/0x140 [ 159.420007][ T9173] shmem_rename2+0x18e/0x310 [ 159.424626][ T9173] vfs_rename+0xa9e/0xbf0 [ 159.428982][ T9173] do_renameat2+0x39a/0x850 [ 159.433509][ T9173] __x64_sys_rename+0x58/0x70 [ 159.438204][ T9173] x64_sys_call+0x24e/0x3000 [ 159.442827][ T9173] do_syscall_64+0xc0/0x2a0 [ 159.447358][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.453265][ T9173] [ 159.455606][ T9173] read to 0xffff88811ad0af48 of 4 bytes by task 9173 on cpu 0: [ 159.463161][ T9173] generic_fillattr+0xfb/0x340 [ 159.467947][ T9173] shmem_getattr+0x181/0x200 [ 159.472577][ T9173] vfs_getattr_nosec+0x146/0x1e0 [ 159.477539][ T9173] vfs_getattr+0x48/0x60 [ 159.481795][ T9173] vfs_statx_path+0x28/0x140 [ 159.486424][ T9173] vfs_statx+0xc4/0x170 [ 159.490600][ T9173] vfs_fstatat+0x115/0x170 [ 159.495046][ T9173] __se_sys_newfstatat+0x55/0x3e0 [ 159.500099][ T9173] __x64_sys_newfstatat+0x55/0x70 [ 159.505144][ T9173] x64_sys_call+0x111f/0x3000 [ 159.509924][ T9173] do_syscall_64+0xc0/0x2a0 [ 159.514443][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.520343][ T9173] [ 159.522671][ T9173] value changed: 0x00000001 -> 0x00000000 [ 159.528405][ T9173] [ 159.530734][ T9173] Reported by Kernel Concurrency Sanitizer on: [ 159.536888][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.546201][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 159.556259][ T9173] ================================================================== [ 159.570936][T10628] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 3) [ 159.586963][T10628] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 159.599341][T10628] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.599341][T10628] [ 159.609615][T10626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.630865][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.645497][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.660124][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.676975][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.691639][T10627] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.711904][ T5320] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.721599][T10627] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.737871][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.761722][T10628] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.780700][T10627] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.2015: lblock 3 mapped to illegal pblock 3 (length 1) [ 160.190821][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 160.203399][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.203399][ T12] [ 160.214187][ T9868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.