7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000255c0c000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2528.754691][T30077] syzkaller1: entered allmulticast mode [ 2528.797477][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.803855][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.918612][T30090] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2528.929082][T30090] CPU: 1 PID: 30090 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2528.939537][T30090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2528.949624][T30090] Call Trace: [ 2528.952927][T30090] [ 2528.955881][T30090] dump_stack_lvl+0x136/0x150 [ 2528.960600][T30090] dump_header+0x10a/0xd70 [ 2528.965065][T30090] oom_kill_process+0x25d/0x600 [ 2528.969969][T30090] out_of_memory+0x35c/0x1660 [ 2528.974698][T30090] ? find_held_lock+0x2d/0x110 [ 2528.979510][T30090] ? oom_killer_disable+0x2b0/0x2b0 [ 2528.984762][T30090] ? rcu_read_unlock+0x9/0x60 [ 2528.989485][T30090] ? find_held_lock+0x2d/0x110 [ 2528.994312][T30090] mem_cgroup_out_of_memory+0x206/0x270 [ 2528.999896][T30090] ? mem_cgroup_margin+0x130/0x130 [ 2529.005054][T30090] ? lock_downgrade+0x690/0x690 [ 2529.009955][T30090] try_charge_memcg+0xf9b/0x13b0 [ 2529.014924][T30090] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2529.020943][T30090] ? rcu_read_unlock+0x9/0x60 [ 2529.025675][T30090] ? lock_downgrade+0x690/0x690 [ 2529.030563][T30090] charge_memcg+0x90/0x3b0 [ 2529.034997][T30090] __mem_cgroup_charge+0x2b/0x90 [ 2529.039953][T30090] do_wp_page+0x8eb/0x3520 [ 2529.044397][T30090] ? lock_release+0x670/0x670 [ 2529.049278][T30090] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2529.054683][T30090] ? do_raw_spin_lock+0x124/0x2b0 [ 2529.059729][T30090] ? spin_bug+0x1c0/0x1c0 [ 2529.064081][T30090] ? lock_downgrade+0x690/0x690 [ 2529.068954][T30090] __handle_mm_fault+0x19a1/0x3e60 [ 2529.074096][T30090] ? vm_iomap_memory+0x190/0x190 [ 2529.079080][T30090] handle_mm_fault+0x2ba/0x9c0 [ 2529.083977][T30090] do_user_addr_fault+0x475/0x1230 [ 2529.089119][T30090] ? rcu_is_watching+0x12/0xb0 [ 2529.093915][T30090] exc_page_fault+0x98/0x170 [ 2529.098530][T30090] asm_exc_page_fault+0x26/0x30 [ 2529.103404][T30090] RIP: 0023:0xf72206e8 [ 2529.107482][T30090] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2529.127101][T30090] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2529.133187][T30090] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2529.141188][T30090] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2529.149182][T30090] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2529.157176][T30090] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 13:02:41 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5452, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:41 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x5522, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2529.165169][T30090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2529.173276][T30090] 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x5523, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8933, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) (async) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @random="83b3a1307810"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x800}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000005"], 0x34) 13:02:42 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x8) [ 2529.534703][T30090] memory: usage 307200kB, limit 307200kB, failcnt 1610 [ 2529.557621][T30090] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2529.600887][T30106] syzkaller1: entered promiscuous mode [ 2529.634930][T30106] syzkaller1: entered allmulticast mode [ 2529.744740][T30090] Memory cgroup stats for /syz2: [ 2529.744989][T30090] anon 794624 [ 2529.744989][T30090] file 315392 [ 2529.744989][T30090] kernel 313462784 [ 2529.744989][T30090] kernel_stack 327680 [ 2529.744989][T30090] pagetables 503808 [ 2529.744989][T30090] sec_pagetables 0 [ 2529.744989][T30090] percpu 4060640 [ 2529.744989][T30090] sock 0 [ 2529.744989][T30090] vmalloc 0 [ 2529.744989][T30090] shmem 315392 [ 2529.744989][T30090] zswap 0 [ 2529.744989][T30090] zswapped 0 [ 2529.744989][T30090] file_mapped 249856 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x400448c9, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2529.744989][T30090] file_dirty 0 [ 2529.744989][T30090] file_writeback 0 [ 2529.744989][T30090] swapcached 0 [ 2529.744989][T30090] anon_thp 0 [ 2529.744989][T30090] file_thp 0 [ 2529.744989][T30090] shmem_thp 0 [ 2529.744989][T30090] inactive_anon 65536 [ 2529.744989][T30090] active_anon 1044480 [ 2529.744989][T30090] inactive_file 0 [ 2529.744989][T30090] active_file 0 [ 2529.744989][T30090] unevictable 0 [ 2529.744989][T30090] slab_reclaimable 31088 [ 2529.744989][T30090] slab_unreclaimable 308450344 [ 2529.744989][T30090] slab 308481432 [ 2529.744989][T30090] workingset_refault_anon 0 [ 2529.744989][T30090] workingset_refault_file 0 [ 2529.744989][T30090] workingset_activate_anon 0 [ 2529.744989][T30090] workingset_activate_file 0 [ 2529.744989][T30090] workingset_restore_anon 0 [ 2529.744989][T30090] workingset_restore_file 0 [ 2529.744989][T30090] workingset_nodereclaim 0 [ 2529.744989][T30090] pgscan 0 [ 2529.744989][T30090] pgsteal 0 [ 2529.744989][T30090] pgscan_kswapd 0 [ 2529.744989][T30090] pgscan_direct 0 [ 2529.744989][T30090] pgscan_khugepaged 0 [ 2529.744989][T30090] pgsteal_kswapd 0 [ 2529.744989][T30090] pgsteal_direct 0 [ 2529.744989][T30090] pgsteal_khugepaged 0 [ 2529.744989][T30090] pgfault 497705 [ 2529.744989][T30090] pgmajfault 32 [ 2529.744989][T30090] pgrefill 0 [ 2529.744989][T30090] pgactivate 0 [ 2529.744989][T30090] pgdeactivate 0 [ 2529.744989][T30090] pglazyfree 0 [ 2529.744989][T30090] pglazyfreed 0 [ 2529.744989][T30090] zswpin 0 [ 2529.744989][T30090] zswpout 0 [ 2529.744989][T30090] thp_fault_alloc 0 13:02:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) 13:02:42 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5460, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x400448dd, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) [ 2530.065460][T30090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30090,uid=0 13:02:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025d40d000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2530.103302][T30090] Memory cgroup out of memory: Killed process 30090 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x400454ca, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:42 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4004550c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @random="83b3a1307810"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x800}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000005"], 0x34) 13:02:43 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x300) [ 2530.409065][T30139] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2530.481436][T30139] CPU: 1 PID: 30139 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2530.491922][T30139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2530.502033][T30139] Call Trace: [ 2530.505336][T30139] [ 2530.508293][T30139] dump_stack_lvl+0x136/0x150 [ 2530.513011][T30139] dump_header+0x10a/0xd70 [ 2530.517477][T30139] oom_kill_process+0x25d/0x600 [ 2530.522377][T30139] out_of_memory+0x35c/0x1660 [ 2530.527102][T30139] ? find_held_lock+0x2d/0x110 [ 2530.531918][T30139] ? oom_killer_disable+0x2b0/0x2b0 [ 2530.537177][T30139] ? rcu_read_unlock+0x9/0x60 [ 2530.541901][T30139] ? find_held_lock+0x2d/0x110 [ 2530.546728][T30139] mem_cgroup_out_of_memory+0x206/0x270 [ 2530.552332][T30139] ? mem_cgroup_margin+0x130/0x130 [ 2530.557491][T30139] ? lock_downgrade+0x690/0x690 [ 2530.562395][T30139] try_charge_memcg+0xf9b/0x13b0 [ 2530.567381][T30139] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2530.573394][T30139] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2530.579162][T30139] ? lock_downgrade+0x690/0x690 [ 2530.584048][T30139] ? lock_downgrade+0x690/0x690 [ 2530.588951][T30139] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2530.594545][T30139] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2530.600746][T30139] copy_process+0x13a7/0x7590 [ 2530.605462][T30139] ? __lock_acquire+0xbc5/0x5d40 [ 2530.610465][T30139] ? __cleanup_sighand+0xb0/0xb0 [ 2530.615450][T30139] ? psi_memstall_leave+0x174/0x250 [ 2530.620707][T30139] kernel_clone+0xeb/0x890 [ 2530.625162][T30139] ? create_io_thread+0xf0/0xf0 [ 2530.630050][T30139] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2530.636337][T30139] ? lock_downgrade+0x690/0x690 [ 2530.641251][T30139] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2530.646837][T30139] ? __do_compat_sys_ia32_fstat64+0xc0/0xc0 [ 2530.652780][T30139] ? lockdep_hardirqs_on+0x7d/0x100 [ 2530.658012][T30139] ? syscall_enter_from_user_mode+0x26/0x80 [ 2530.663984][T30139] do_int80_syscall_32+0x4a/0x90 [ 2530.668975][T30139] entry_INT80_compat+0x8f/0xa0 [ 2530.673870][T30139] RIP: 0023:0xf725c6c4 [ 2530.677962][T30139] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 61 81 00 00 74 01 c3 89 f5 ff d3 e8 00 00 00 [ 2530.697698][T30139] RSP: 002b:00000000f749fa20 EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 2530.706151][T30139] RAX: ffffffffffffffda RBX: 00000000003d0f00 RCX: 00000000f7f757a4 [ 2530.714153][T30139] RDX: 00000000f7f75ba8 RSI: 00000000f749fa6c RDI: 00000000f7f75ba8 [ 2530.722156][T30139] RBP: 00000000f734e000 R08: 0000000000000000 R09: 0000000000000000 [ 2530.730163][T30139] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 2530.738168][T30139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2530.746197][T30139] [ 2530.754644][T30139] memory: usage 307200kB, limit 307200kB, failcnt 1714 [ 2530.803413][T30139] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2530.812857][T30139] Memory cgroup stats for /syz2: [ 2530.813103][T30139] anon 782336 [ 2530.813103][T30139] file 315392 [ 2530.813103][T30139] kernel 313458688 [ 2530.813103][T30139] kernel_stack 327680 [ 2530.813103][T30139] pagetables 503808 [ 2530.813103][T30139] sec_pagetables 0 [ 2530.813103][T30139] percpu 4060576 [ 2530.813103][T30139] sock 0 [ 2530.813103][T30139] vmalloc 0 [ 2530.813103][T30139] shmem 315392 [ 2530.813103][T30139] zswap 0 [ 2530.813103][T30139] zswapped 0 [ 2530.813103][T30139] file_mapped 249856 [ 2530.813103][T30139] file_dirty 0 [ 2530.813103][T30139] file_writeback 0 [ 2530.813103][T30139] swapcached 0 [ 2530.813103][T30139] anon_thp 0 [ 2530.813103][T30139] file_thp 0 [ 2530.813103][T30139] shmem_thp 0 [ 2530.813103][T30139] inactive_anon 65536 [ 2530.813103][T30139] active_anon 1032192 [ 2530.813103][T30139] inactive_file 0 [ 2530.813103][T30139] active_file 0 [ 2530.813103][T30139] unevictable 0 [ 2530.813103][T30139] slab_reclaimable 29160 [ 2530.813103][T30139] slab_unreclaimable 308446448 [ 2530.813103][T30139] slab 308475608 [ 2530.813103][T30139] workingset_refault_anon 0 [ 2530.813103][T30139] workingset_refault_file 0 [ 2530.813103][T30139] workingset_activate_anon 0 [ 2530.813103][T30139] workingset_activate_file 0 [ 2530.813103][T30139] workingset_restore_anon 0 [ 2530.813103][T30139] workingset_restore_file 0 [ 2530.813103][T30139] workingset_nodereclaim 0 [ 2530.813103][T30139] pgscan 0 [ 2530.813103][T30139] pgsteal 0 [ 2530.813103][T30139] pgscan_kswapd 0 [ 2530.813103][T30139] pgscan_direct 0 [ 2530.813103][T30139] pgscan_khugepaged 0 [ 2530.813103][T30139] pgsteal_kswapd 0 [ 2530.813103][T30139] pgsteal_direct 0 [ 2530.813103][T30139] pgsteal_khugepaged 0 [ 2530.813103][T30139] pgfault 497743 [ 2530.813103][T30139] pgmajfault 32 [ 2530.813103][T30139] pgrefill 0 [ 2530.813103][T30139] pgactivate 0 [ 2530.813103][T30139] pgdeactivate 0 [ 2530.813103][T30139] pglazyfree 0 [ 2530.813103][T30139] pglazyfreed 0 [ 2530.813103][T30139] zswpin 0 [ 2530.813103][T30139] zswpout 0 [ 2530.813103][T30139] thp_fault_alloc 0 13:02:43 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x550b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) 13:02:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025dc0d000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2531.023027][T30139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30139,uid=0 [ 2531.040039][T30139] Memory cgroup out of memory: Killed process 30139 (syz-executor.2) total-vm:54444kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:43 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4004550d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2531.220354][T30165] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2531.242044][T30165] CPU: 1 PID: 30165 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2531.252545][T30165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2531.262636][T30165] Call Trace: [ 2531.265986][T30165] [ 2531.268947][T30165] dump_stack_lvl+0x136/0x150 [ 2531.273675][T30165] dump_header+0x10a/0xd70 [ 2531.278145][T30165] oom_kill_process+0x25d/0x600 [ 2531.283045][T30165] out_of_memory+0x35c/0x1660 [ 2531.287765][T30165] ? find_held_lock+0x2d/0x110 [ 2531.292584][T30165] ? oom_killer_disable+0x2b0/0x2b0 [ 2531.297840][T30165] ? rcu_read_unlock+0x9/0x60 [ 2531.302568][T30165] ? find_held_lock+0x2d/0x110 [ 2531.307392][T30165] mem_cgroup_out_of_memory+0x206/0x270 [ 2531.313004][T30165] ? mem_cgroup_margin+0x130/0x130 13:02:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @random="83b3a1307810"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x800}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000005"], 0x34) 13:02:44 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5514, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:44 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2531.318170][T30165] ? lock_downgrade+0x690/0x690 [ 2531.323081][T30165] try_charge_memcg+0xf9b/0x13b0 [ 2531.328072][T30165] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2531.334110][T30165] ? rcu_read_unlock+0x9/0x60 [ 2531.338846][T30165] ? lock_downgrade+0x690/0x690 [ 2531.343751][T30165] charge_memcg+0x90/0x3b0 [ 2531.348211][T30165] __mem_cgroup_charge+0x2b/0x90 [ 2531.353187][T30165] do_wp_page+0x8eb/0x3520 [ 2531.357648][T30165] ? lock_release+0x670/0x670 [ 2531.362365][T30165] ? finish_mkwrite_fault+0x3d0/0x3d0 13:02:44 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40046602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2531.367783][T30165] ? do_raw_spin_lock+0x124/0x2b0 [ 2531.372848][T30165] ? spin_bug+0x1c0/0x1c0 [ 2531.377215][T30165] ? lock_downgrade+0x690/0x690 [ 2531.382113][T30165] __handle_mm_fault+0x19a1/0x3e60 [ 2531.387281][T30165] ? vm_iomap_memory+0x190/0x190 [ 2531.392289][T30165] handle_mm_fault+0x2ba/0x9c0 [ 2531.397107][T30165] do_user_addr_fault+0x475/0x1230 [ 2531.402278][T30165] ? rcu_is_watching+0x12/0xb0 [ 2531.407099][T30165] exc_page_fault+0x98/0x170 [ 2531.411738][T30165] asm_exc_page_fault+0x26/0x30 [ 2531.416624][T30165] RIP: 0023:0xf72206e8 [ 2531.420719][T30165] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2531.440370][T30165] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2531.446479][T30165] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2531.454494][T30165] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2531.460020][T30173] syzkaller1: entered promiscuous mode [ 2531.462565][T30165] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2531.462587][T30165] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2531.462605][T30165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2531.462643][T30165] 13:02:44 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40049409, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2531.514933][T30173] syzkaller1: entered allmulticast mode [ 2531.543070][T30165] memory: usage 307200kB, limit 307200kB, failcnt 1831 [ 2531.567112][T30165] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2531.589766][T30165] Memory cgroup stats for /syz2: [ 2531.590253][T30165] anon 794624 [ 2531.590253][T30165] file 315392 [ 2531.590253][T30165] kernel 313462784 [ 2531.590253][T30165] kernel_stack 327680 [ 2531.590253][T30165] pagetables 503808 [ 2531.590253][T30165] sec_pagetables 0 [ 2531.590253][T30165] percpu 4060640 [ 2531.590253][T30165] sock 0 [ 2531.590253][T30165] vmalloc 0 [ 2531.590253][T30165] shmem 315392 [ 2531.590253][T30165] zswap 0 [ 2531.590253][T30165] zswapped 0 [ 2531.590253][T30165] file_mapped 249856 [ 2531.590253][T30165] file_dirty 0 [ 2531.590253][T30165] file_writeback 0 [ 2531.590253][T30165] swapcached 0 [ 2531.590253][T30165] anon_thp 0 [ 2531.590253][T30165] file_thp 0 [ 2531.590253][T30165] shmem_thp 0 [ 2531.590253][T30165] inactive_anon 65536 [ 2531.590253][T30165] active_anon 1044480 [ 2531.590253][T30165] inactive_file 0 [ 2531.590253][T30165] active_file 0 [ 2531.590253][T30165] unevictable 0 [ 2531.590253][T30165] slab_reclaimable 31088 [ 2531.590253][T30165] slab_unreclaimable 308450344 [ 2531.590253][T30165] slab 308481432 [ 2531.590253][T30165] workingset_refault_anon 0 [ 2531.590253][T30165] workingset_refault_file 0 [ 2531.590253][T30165] workingset_activate_anon 0 [ 2531.590253][T30165] workingset_activate_file 0 [ 2531.590253][T30165] workingset_restore_anon 0 [ 2531.590253][T30165] workingset_restore_file 0 [ 2531.590253][T30165] workingset_nodereclaim 0 [ 2531.590253][T30165] pgscan 0 [ 2531.590253][T30165] pgsteal 0 [ 2531.590253][T30165] pgscan_kswapd 0 [ 2531.590253][T30165] pgscan_direct 0 [ 2531.590253][T30165] pgscan_khugepaged 0 [ 2531.590253][T30165] pgsteal_kswapd 0 [ 2531.590253][T30165] pgsteal_direct 0 [ 2531.590253][T30165] pgsteal_khugepaged 0 [ 2531.590253][T30165] pgfault 497789 [ 2531.590253][T30165] pgmajfault 32 [ 2531.590253][T30165] pgrefill 0 [ 2531.590253][T30165] pgactivate 0 [ 2531.590253][T30165] pgdeactivate 0 [ 2531.590253][T30165] pglazyfree 0 13:02:44 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 2531.590253][T30165] pglazyfreed 0 [ 2531.590253][T30165] zswpin 0 [ 2531.590253][T30165] zswpout 0 [ 2531.590253][T30165] thp_fault_alloc 0 13:02:44 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4008550c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e40d000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2531.811721][T30165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30165,uid=0 [ 2531.830325][T30165] Memory cgroup out of memory: Killed process 30165 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:44 executing program 1: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40046602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) 13:02:44 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x551f, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @random="83b3a1307810"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x800}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000005"], 0x34) [ 2532.052655][T30194] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2532.094647][T30194] CPU: 0 PID: 30194 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2532.105108][T30194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2532.115269][T30194] Call Trace: [ 2532.118557][T30194] [ 2532.121499][T30194] dump_stack_lvl+0x136/0x150 [ 2532.126547][T30194] dump_header+0x10a/0xd70 [ 2532.131012][T30194] oom_kill_process+0x25d/0x600 [ 2532.135885][T30194] out_of_memory+0x35c/0x1660 [ 2532.140595][T30194] ? find_held_lock+0x2d/0x110 [ 2532.145397][T30194] ? oom_killer_disable+0x2b0/0x2b0 [ 2532.150706][T30194] ? rcu_read_unlock+0x9/0x60 [ 2532.155415][T30194] ? find_held_lock+0x2d/0x110 [ 2532.160222][T30194] mem_cgroup_out_of_memory+0x206/0x270 [ 2532.165795][T30194] ? mem_cgroup_margin+0x130/0x130 [ 2532.170927][T30194] ? lock_downgrade+0x690/0x690 [ 2532.175807][T30194] try_charge_memcg+0xf9b/0x13b0 [ 2532.180765][T30194] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2532.186767][T30194] ? rcu_read_unlock+0x9/0x60 [ 2532.191464][T30194] ? lock_downgrade+0x690/0x690 [ 2532.196343][T30194] charge_memcg+0x90/0x3b0 [ 2532.200782][T30194] __mem_cgroup_charge+0x2b/0x90 [ 2532.205732][T30194] ? copy_mc_to_kernel+0x3e/0x90 [ 2532.210714][T30194] do_wp_page+0x8eb/0x3520 [ 2532.215165][T30194] ? lock_release+0x670/0x670 [ 2532.219875][T30194] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2532.225284][T30194] ? do_raw_spin_lock+0x124/0x2b0 [ 2532.230334][T30194] ? spin_bug+0x1c0/0x1c0 [ 2532.234700][T30194] ? lock_downgrade+0x690/0x690 [ 2532.239578][T30194] __handle_mm_fault+0x19a1/0x3e60 [ 2532.244804][T30194] ? vm_iomap_memory+0x190/0x190 [ 2532.249805][T30194] handle_mm_fault+0x2ba/0x9c0 [ 2532.254594][T30194] do_user_addr_fault+0x475/0x1230 [ 2532.259732][T30194] ? rcu_is_watching+0x12/0xb0 [ 2532.264522][T30194] exc_page_fault+0x98/0x170 [ 2532.269131][T30194] asm_exc_page_fault+0x26/0x30 [ 2532.274010][T30194] RIP: 0023:0xf721cf2c [ 2532.278087][T30194] Code: 18 8b 43 14 89 d7 21 c7 83 ff ff 74 29 bf e7 03 00 00 39 c7 19 d6 0f 82 59 02 00 00 8b 74 24 14 8d 04 40 8d 84 86 c0 a0 02 00 <89> 48 04 c1 f9 1f c6 00 01 89 48 08 8b 74 24 14 8b 43 10 8b be c0 [ 2532.297708][T30194] RSP: 002b:00000000f749fb00 EFLAGS: 00010246 [ 2532.303787][T30194] RAX: 00000000f73780c0 RBX: 00000000f737afc0 RCX: 0000000000000003 [ 2532.311772][T30194] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 00000000000003e7 [ 2532.319756][T30194] RBP: 00000000f737afcc R08: 0000000000000000 R09: 0000000000000000 [ 2532.327738][T30194] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2532.335716][T30194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2532.343715][T30194] 13:02:45 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5521, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2532.371669][T30194] memory: usage 307200kB, limit 307200kB, failcnt 1904 [ 2532.397671][T30194] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2532.415538][T30194] Memory cgroup stats for /syz2: [ 2532.415773][T30194] anon 778240 [ 2532.415773][T30194] file 315392 [ 2532.415773][T30194] kernel 313462784 [ 2532.415773][T30194] kernel_stack 327680 [ 2532.415773][T30194] pagetables 503808 [ 2532.415773][T30194] sec_pagetables 0 [ 2532.415773][T30194] percpu 4060640 [ 2532.415773][T30194] sock 0 [ 2532.415773][T30194] vmalloc 0 [ 2532.415773][T30194] shmem 315392 [ 2532.415773][T30194] zswap 0 [ 2532.415773][T30194] zswapped 0 [ 2532.415773][T30194] file_mapped 249856 [ 2532.415773][T30194] file_dirty 0 [ 2532.415773][T30194] file_writeback 0 [ 2532.415773][T30194] swapcached 0 [ 2532.415773][T30194] anon_thp 0 [ 2532.415773][T30194] file_thp 0 [ 2532.415773][T30194] shmem_thp 0 [ 2532.415773][T30194] inactive_anon 65536 [ 2532.415773][T30194] active_anon 1028096 [ 2532.415773][T30194] inactive_file 0 [ 2532.415773][T30194] active_file 0 [ 2532.415773][T30194] unevictable 0 [ 2532.415773][T30194] slab_reclaimable 31088 [ 2532.415773][T30194] slab_unreclaimable 308450344 [ 2532.415773][T30194] slab 308481432 [ 2532.415773][T30194] workingset_refault_anon 0 [ 2532.415773][T30194] workingset_refault_file 0 [ 2532.415773][T30194] workingset_activate_anon 0 [ 2532.415773][T30194] workingset_activate_file 0 [ 2532.415773][T30194] workingset_restore_anon 0 [ 2532.415773][T30194] workingset_restore_file 0 [ 2532.415773][T30194] workingset_nodereclaim 0 [ 2532.415773][T30194] pgscan 0 [ 2532.415773][T30194] pgsteal 0 [ 2532.415773][T30194] pgscan_kswapd 0 [ 2532.415773][T30194] pgscan_direct 0 [ 2532.415773][T30194] pgscan_khugepaged 0 [ 2532.415773][T30194] pgsteal_kswapd 0 [ 2532.415773][T30194] pgsteal_direct 0 [ 2532.415773][T30194] pgsteal_khugepaged 0 [ 2532.415773][T30194] pgfault 497827 [ 2532.415773][T30194] pgmajfault 32 [ 2532.415773][T30194] pgrefill 0 [ 2532.415773][T30194] pgactivate 0 [ 2532.415773][T30194] pgdeactivate 0 [ 2532.415773][T30194] pglazyfree 0 [ 2532.415773][T30194] pglazyfreed 0 [ 2532.415773][T30194] zswpin 0 [ 2532.415773][T30194] zswpout 0 [ 2532.415773][T30194] thp_fault_alloc 0 [ 2532.417898][T30208] syzkaller1: entered promiscuous mode 13:02:45 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 2532.435569][T30194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2532.625379][T30208] syzkaller1: entered allmulticast mode 13:02:45 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) 13:02:45 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4008550d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:45 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009001000006574b07fcdaf00180002fffffffffffffffd00", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x1, 0x3, 0x1, 0x1b, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7880, 0x3, 0x3f}}) bind$packet(r4, &(0x7f0000000440)={0x11, 0x9, r5, 0x1, 0x87, 0x6, @random="a71ecd10888b"}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r11, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r8], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x80, 0x105a}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ed661cdd9b57204892ea456cfd2a724d"}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "f8bf34a55004eaf032"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x80}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 2532.772940][T30194] ,cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30194,uid=0 [ 2532.807122][T30194] Memory cgroup out of memory: Killed process 30194 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:45 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5522, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:45 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40085511, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025ec0d000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2532.922023][T30233] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:02:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x6, 0x1ff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048090) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r7, @ANYBLOB="00010000000000001c000a000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x87, 0xff, 0x2, 0x0, 0x3, 0x3800}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x38}}, 0x40) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) setuid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:45 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40086602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2533.061220][T30233] bond298: entered promiscuous mode 13:02:45 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x40186366, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2533.225227][T30240] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2533.249070][T30251] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 2533.298879][T30240] CPU: 1 PID: 30240 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2533.309323][T30240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2533.319383][T30240] Call Trace: [ 2533.322661][T30240] [ 2533.325600][T30240] dump_stack_lvl+0x136/0x150 [ 2533.330435][T30240] dump_header+0x10a/0xd70 [ 2533.334859][T30240] oom_kill_process+0x25d/0x600 [ 2533.339712][T30240] out_of_memory+0x35c/0x1660 [ 2533.344392][T30240] ? find_held_lock+0x2d/0x110 [ 2533.349198][T30240] ? oom_killer_disable+0x2b0/0x2b0 [ 2533.354441][T30240] ? rcu_read_unlock+0x9/0x60 [ 2533.359135][T30240] ? find_held_lock+0x2d/0x110 [ 2533.363919][T30240] mem_cgroup_out_of_memory+0x206/0x270 [ 2533.369507][T30240] ? mem_cgroup_margin+0x130/0x130 [ 2533.374683][T30240] ? lock_downgrade+0x690/0x690 [ 2533.379564][T30240] try_charge_memcg+0xf9b/0x13b0 [ 2533.384515][T30240] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2533.390536][T30240] ? rcu_read_unlock+0x9/0x60 [ 2533.395213][T30240] ? lock_downgrade+0x690/0x690 [ 2533.400077][T30240] charge_memcg+0x90/0x3b0 [ 2533.404505][T30240] __mem_cgroup_charge+0x2b/0x90 [ 2533.409466][T30240] do_wp_page+0x8eb/0x3520 [ 2533.413899][T30240] ? lock_release+0x670/0x670 [ 2533.418596][T30240] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2533.423975][T30240] ? do_raw_spin_lock+0x124/0x2b0 [ 2533.429022][T30240] ? spin_bug+0x1c0/0x1c0 [ 2533.433433][T30240] ? lock_downgrade+0x690/0x690 [ 2533.438285][T30240] __handle_mm_fault+0x19a1/0x3e60 [ 2533.443419][T30240] ? vm_iomap_memory+0x190/0x190 [ 2533.448380][T30240] handle_mm_fault+0x2ba/0x9c0 [ 2533.453152][T30240] do_user_addr_fault+0x475/0x1230 [ 2533.458295][T30240] ? rcu_is_watching+0x12/0xb0 [ 2533.463059][T30240] exc_page_fault+0x98/0x170 [ 2533.467644][T30240] asm_exc_page_fault+0x26/0x30 [ 2533.472490][T30240] RIP: 0023:0xf72206e8 [ 2533.476550][T30240] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 13:02:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) syz_io_uring_setup(0x4397, &(0x7f0000000200)={0x0, 0xd56b, 0x100, 0x3, 0x1d1, 0x0, r3}, &(0x7f000024c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r11 = dup(r10) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r12, r6, 0x0, 0x5) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 2533.496157][T30240] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2533.502224][T30240] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2533.510190][T30240] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2533.518176][T30240] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2533.526144][T30240] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2533.534107][T30240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2533.542086][T30240] 13:02:46 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x401c5820, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:46 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009001000006574b07fcdaf00180002fffffffffffffffd00", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r3], 0x50}}, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x1, 0x3, 0x1, 0x1b, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7880, 0x3, 0x3f}}) bind$packet(r4, &(0x7f0000000440)={0x11, 0x9, r5, 0x1, 0x87, 0x6, @random="a71ecd10888b"}, 0x14) (async) bind$packet(r4, &(0x7f0000000440)={0x11, 0x9, r5, 0x1, 0x87, 0x6, @random="a71ecd10888b"}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r11, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r11, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r8], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x80, 0x105a}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ed661cdd9b57204892ea456cfd2a724d"}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "f8bf34a55004eaf032"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x80}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x80, 0x105a}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ed661cdd9b57204892ea456cfd2a724d"}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "f8bf34a55004eaf032"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x80}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 2533.667326][T30240] memory: usage 307200kB, limit 307200kB, failcnt 1985 [ 2533.693195][T30240] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2533.729709][T30240] Memory cgroup stats for /syz2: [ 2533.732599][T30240] anon 794624 [ 2533.732599][T30240] file 315392 [ 2533.732599][T30240] kernel 313462784 [ 2533.732599][T30240] kernel_stack 327680 [ 2533.732599][T30240] pagetables 503808 [ 2533.732599][T30240] sec_pagetables 0 [ 2533.732599][T30240] percpu 4060640 [ 2533.732599][T30240] sock 0 [ 2533.732599][T30240] vmalloc 0 [ 2533.732599][T30240] shmem 315392 [ 2533.732599][T30240] zswap 0 [ 2533.732599][T30240] zswapped 0 [ 2533.732599][T30240] file_mapped 249856 [ 2533.732599][T30240] file_dirty 0 [ 2533.732599][T30240] file_writeback 0 [ 2533.732599][T30240] swapcached 0 [ 2533.732599][T30240] anon_thp 0 [ 2533.732599][T30240] file_thp 0 [ 2533.732599][T30240] shmem_thp 0 [ 2533.732599][T30240] inactive_anon 65536 [ 2533.732599][T30240] active_anon 1044480 [ 2533.732599][T30240] inactive_file 0 [ 2533.732599][T30240] active_file 0 [ 2533.732599][T30240] unevictable 0 [ 2533.732599][T30240] slab_reclaimable 31088 [ 2533.732599][T30240] slab_unreclaimable 308450344 [ 2533.732599][T30240] slab 308481432 [ 2533.732599][T30240] workingset_refault_anon 0 [ 2533.732599][T30240] workingset_refault_file 0 [ 2533.732599][T30240] workingset_activate_anon 0 [ 2533.732599][T30240] workingset_activate_file 0 [ 2533.732599][T30240] workingset_restore_anon 0 [ 2533.732599][T30240] workingset_restore_file 0 [ 2533.732599][T30240] workingset_nodereclaim 0 [ 2533.732599][T30240] pgscan 0 [ 2533.732599][T30240] pgsteal 0 [ 2533.732599][T30240] pgscan_kswapd 0 [ 2533.732599][T30240] pgscan_direct 0 [ 2533.732599][T30240] pgscan_khugepaged 0 [ 2533.732599][T30240] pgsteal_kswapd 0 [ 2533.732599][T30240] pgsteal_direct 0 [ 2533.732599][T30240] pgsteal_khugepaged 0 [ 2533.732599][T30240] pgfault 497873 [ 2533.732599][T30240] pgmajfault 32 [ 2533.732599][T30240] pgrefill 0 [ 2533.732599][T30240] pgactivate 0 [ 2533.732599][T30240] pgdeactivate 0 [ 2533.732599][T30240] pglazyfree 0 [ 2533.732599][T30240] pglazyfreed 0 [ 2533.732599][T30240] zswpin 0 [ 2533.732599][T30240] zswpout 0 [ 2533.732599][T30240] thp_fault_alloc 0 13:02:46 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x5523, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025000e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2534.014701][T30240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 2534.016871][T30240] syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30240,uid=0 [ 2534.036081][T30240] Memory cgroup out of memory: Killed process 30240 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:46 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x4020940d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:46 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009001000006574b07fcdaf00180002fffffffffffffffd00", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r3], 0x50}}, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x1, 0x3, 0x1, 0x1b, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7880, 0x3, 0x3f}}) bind$packet(r4, &(0x7f0000000440)={0x11, 0x9, r5, 0x1, 0x87, 0x6, @random="a71ecd10888b"}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r11, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000008c00000008000a00", @ANYRES32=r8], 0x50}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x80, 0x105a}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ed661cdd9b57204892ea456cfd2a724d"}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "f8bf34a55004eaf032"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x80}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13:02:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x6, 0x1ff, 0x6}) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x6, 0x1ff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048090) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r7, @ANYBLOB="00010000000000001c000a000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x87, 0xff, 0x2, 0x0, 0x3, 0x3800}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x38}}, 0x40) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) setuid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2534.226505][T30272] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2534.255537][T30272] CPU: 1 PID: 30272 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2534.266024][T30272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2534.276076][T30272] Call Trace: [ 2534.279357][T30272] [ 2534.282294][T30272] dump_stack_lvl+0x136/0x150 [ 2534.286982][T30272] dump_header+0x10a/0xd70 [ 2534.291424][T30272] oom_kill_process+0x25d/0x600 [ 2534.296298][T30272] out_of_memory+0x35c/0x1660 [ 2534.301001][T30272] ? find_held_lock+0x2d/0x110 [ 2534.305794][T30272] ? oom_killer_disable+0x2b0/0x2b0 [ 2534.311031][T30272] ? rcu_read_unlock+0x9/0x60 [ 2534.315728][T30272] ? find_held_lock+0x2d/0x110 [ 2534.320521][T30272] mem_cgroup_out_of_memory+0x206/0x270 [ 2534.326177][T30272] ? mem_cgroup_margin+0x130/0x130 [ 2534.331332][T30272] ? lock_downgrade+0x690/0x690 [ 2534.336213][T30272] try_charge_memcg+0xf9b/0x13b0 [ 2534.341172][T30272] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2534.347167][T30272] ? rcu_read_unlock+0x9/0x60 [ 2534.351862][T30272] ? lock_downgrade+0x690/0x690 [ 2534.356737][T30272] charge_memcg+0x90/0x3b0 [ 2534.361166][T30272] __mem_cgroup_charge+0x2b/0x90 [ 2534.366122][T30272] do_wp_page+0x8eb/0x3520 [ 2534.370563][T30272] ? lock_release+0x670/0x670 [ 2534.375268][T30272] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2534.380665][T30272] ? do_raw_spin_lock+0x124/0x2b0 [ 2534.385710][T30272] ? spin_bug+0x1c0/0x1c0 [ 2534.390057][T30272] ? lock_downgrade+0x690/0x690 [ 2534.394931][T30272] __handle_mm_fault+0x19a1/0x3e60 [ 2534.400072][T30272] ? vm_iomap_memory+0x190/0x190 [ 2534.405055][T30272] handle_mm_fault+0x2ba/0x9c0 [ 2534.409852][T30272] do_user_addr_fault+0x475/0x1230 [ 2534.414988][T30272] ? rcu_is_watching+0x12/0xb0 [ 2534.419774][T30272] exc_page_fault+0x98/0x170 [ 2534.424384][T30272] asm_exc_page_fault+0x26/0x30 [ 2534.429254][T30272] RIP: 0023:0xf72206e8 [ 2534.433335][T30272] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2534.452955][T30272] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2534.459032][T30272] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2534.467013][T30272] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec 13:02:47 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="001df9bc5757dd237038fa53beaacaf9b0555e43b01b0fea9a3b23862bb2d9f82b852fcc4a39044b2547f44336302953cb684858a7054076aed49d15e63d4b1ff2251791d58883a1335d5dc55d3870f95edb9c106276d14719eec735c0215e2e396d7dde218acd6856e863b71dca895883e4d4bfc08f38947bc08415369e7ac2e62a5b04c94ec60970d7a618be001dce3fb8cd18e7182c90df7f949849a078fd207e30a74b55732b7df1602178", 0xad}], 0x1) [ 2534.474993][T30272] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2534.482970][T30272] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2534.490949][T30272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2534.498942][T30272] 13:02:47 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x402c5828, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2534.579945][T30272] memory: usage 307200kB, limit 307200kB, failcnt 2061 [ 2534.610330][T30272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2534.626632][T30272] Memory cgroup stats for /syz2: [ 2534.626934][T30272] anon 794624 [ 2534.626934][T30272] file 315392 [ 2534.626934][T30272] kernel 313462784 [ 2534.626934][T30272] kernel_stack 327680 [ 2534.626934][T30272] pagetables 503808 [ 2534.626934][T30272] sec_pagetables 0 [ 2534.626934][T30272] percpu 4060640 [ 2534.626934][T30272] sock 0 [ 2534.626934][T30272] vmalloc 0 [ 2534.626934][T30272] shmem 315392 [ 2534.626934][T30272] zswap 0 [ 2534.626934][T30272] zswapped 0 [ 2534.626934][T30272] file_mapped 249856 [ 2534.626934][T30272] file_dirty 0 [ 2534.626934][T30272] file_writeback 0 [ 2534.626934][T30272] swapcached 0 [ 2534.626934][T30272] anon_thp 0 [ 2534.626934][T30272] file_thp 0 [ 2534.626934][T30272] shmem_thp 0 [ 2534.626934][T30272] inactive_anon 65536 [ 2534.626934][T30272] active_anon 1044480 [ 2534.626934][T30272] inactive_file 0 [ 2534.626934][T30272] active_file 0 [ 2534.626934][T30272] unevictable 0 [ 2534.626934][T30272] slab_reclaimable 31088 [ 2534.626934][T30272] slab_unreclaimable 308450344 [ 2534.626934][T30272] slab 308481432 [ 2534.626934][T30272] workingset_refault_anon 0 [ 2534.626934][T30272] workingset_refault_file 0 [ 2534.626934][T30272] workingset_activate_anon 0 [ 2534.626934][T30272] workingset_activate_file 0 [ 2534.626934][T30272] workingset_restore_anon 0 [ 2534.626934][T30272] workingset_restore_file 0 [ 2534.626934][T30272] workingset_nodereclaim 0 [ 2534.626934][T30272] pgscan 0 [ 2534.626934][T30272] pgsteal 0 [ 2534.626934][T30272] pgscan_kswapd 0 [ 2534.626934][T30272] pgscan_direct 0 [ 2534.626934][T30272] pgscan_khugepaged 0 [ 2534.626934][T30272] pgsteal_kswapd 0 [ 2534.626934][T30272] pgsteal_direct 0 [ 2534.626934][T30272] pgsteal_khugepaged 0 [ 2534.626934][T30272] pgfault 497919 [ 2534.626934][T30272] pgmajfault 32 [ 2534.626934][T30272] pgrefill 0 [ 2534.626934][T30272] pgactivate 0 [ 2534.626934][T30272] pgdeactivate 0 [ 2534.626934][T30272] pglazyfree 0 [ 2534.626934][T30272] pglazyfreed 0 [ 2534.626934][T30272] zswpin 0 [ 2534.626934][T30272] zswpout 0 [ 2534.626934][T30272] thp_fault_alloc 0 13:02:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:47 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x402c5829, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2534.832398][T30272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30272,uid=0 [ 2534.853554][T30272] Memory cgroup out of memory: Killed process 30272 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2535.021059][T30300] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2535.055796][T30300] CPU: 1 PID: 30300 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2535.066274][T30300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2535.076366][T30300] Call Trace: [ 2535.079660][T30300] [ 2535.082596][T30300] dump_stack_lvl+0x136/0x150 [ 2535.087376][T30300] dump_header+0x10a/0xd70 [ 2535.091837][T30300] oom_kill_process+0x25d/0x600 [ 2535.096698][T30300] out_of_memory+0x35c/0x1660 [ 2535.101384][T30300] ? find_held_lock+0x2d/0x110 [ 2535.106188][T30300] ? oom_killer_disable+0x2b0/0x2b0 [ 2535.111411][T30300] ? rcu_read_unlock+0x9/0x60 [ 2535.116097][T30300] ? find_held_lock+0x2d/0x110 [ 2535.120907][T30300] mem_cgroup_out_of_memory+0x206/0x270 [ 2535.126491][T30300] ? mem_cgroup_margin+0x130/0x130 [ 2535.131646][T30300] ? lock_downgrade+0x690/0x690 [ 2535.136503][T30300] try_charge_memcg+0xf9b/0x13b0 [ 2535.141436][T30300] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2535.147418][T30300] ? rcu_read_unlock+0x9/0x60 [ 2535.152122][T30300] ? lock_downgrade+0x690/0x690 [ 2535.156976][T30300] charge_memcg+0x90/0x3b0 [ 2535.161399][T30300] __mem_cgroup_charge+0x2b/0x90 [ 2535.166329][T30300] do_wp_page+0x8eb/0x3520 [ 2535.170741][T30300] ? lock_release+0x670/0x670 [ 2535.175412][T30300] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2535.180775][T30300] ? do_raw_spin_lock+0x124/0x2b0 [ 2535.185792][T30300] ? spin_bug+0x1c0/0x1c0 [ 2535.190110][T30300] ? lock_downgrade+0x690/0x690 [ 2535.194958][T30300] __handle_mm_fault+0x19a1/0x3e60 [ 2535.200066][T30300] ? vm_iomap_memory+0x190/0x190 [ 2535.205009][T30300] handle_mm_fault+0x2ba/0x9c0 [ 2535.209771][T30300] do_user_addr_fault+0x475/0x1230 [ 2535.214878][T30300] ? rcu_is_watching+0x12/0xb0 [ 2535.219640][T30300] exc_page_fault+0x98/0x170 [ 2535.224226][T30300] asm_exc_page_fault+0x26/0x30 [ 2535.229071][T30300] RIP: 0023:0xf72206e8 [ 2535.233128][T30300] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2535.252740][T30300] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2535.258798][T30300] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a 13:02:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) syz_io_uring_setup(0x4397, &(0x7f0000000200)={0x0, 0xd56b, 0x100, 0x3, 0x1d1, 0x0, r3}, &(0x7f000024c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) (async) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) (async) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r11 = dup(r10) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000840)) (async) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r12, r6, 0x0, 0x5) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) (async) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) (async) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 13:02:48 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x402c582a, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x6, 0x1ff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048090) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r7, @ANYBLOB="00010000000000001c000a000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x87, 0xff, 0x2, 0x0, 0x3, 0x3800}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x38}}, 0x40) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) (async) setuid(0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2535.266759][T30300] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2535.274719][T30300] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2535.282678][T30300] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2535.290637][T30300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2535.298610][T30300] [ 2535.304088][T30300] memory: usage 307200kB, limit 307200kB, failcnt 2126 [ 2535.336196][T30300] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2535.375922][T30300] Memory cgroup stats for /syz2: [ 2535.376170][T30300] anon 794624 [ 2535.376170][T30300] file 315392 [ 2535.376170][T30300] kernel 313462784 [ 2535.376170][T30300] kernel_stack 327680 [ 2535.376170][T30300] pagetables 503808 [ 2535.376170][T30300] sec_pagetables 0 [ 2535.376170][T30300] percpu 4060640 [ 2535.376170][T30300] sock 0 [ 2535.376170][T30300] vmalloc 0 [ 2535.376170][T30300] shmem 315392 [ 2535.376170][T30300] zswap 0 [ 2535.376170][T30300] zswapped 0 [ 2535.376170][T30300] file_mapped 249856 [ 2535.376170][T30300] file_dirty 0 [ 2535.376170][T30300] file_writeback 0 [ 2535.376170][T30300] swapcached 0 [ 2535.376170][T30300] anon_thp 0 [ 2535.376170][T30300] file_thp 0 [ 2535.376170][T30300] shmem_thp 0 [ 2535.376170][T30300] inactive_anon 65536 [ 2535.376170][T30300] active_anon 1044480 [ 2535.376170][T30300] inactive_file 0 [ 2535.376170][T30300] active_file 0 [ 2535.376170][T30300] unevictable 0 [ 2535.376170][T30300] slab_reclaimable 31088 [ 2535.376170][T30300] slab_unreclaimable 308450344 [ 2535.376170][T30300] slab 308481432 [ 2535.376170][T30300] workingset_refault_anon 0 [ 2535.376170][T30300] workingset_refault_file 0 [ 2535.376170][T30300] workingset_activate_anon 0 [ 2535.376170][T30300] workingset_activate_file 0 [ 2535.376170][T30300] workingset_restore_anon 0 [ 2535.376170][T30300] workingset_restore_file 0 [ 2535.376170][T30300] workingset_nodereclaim 0 [ 2535.376170][T30300] pgscan 0 [ 2535.376170][T30300] pgsteal 0 [ 2535.376170][T30300] pgscan_kswapd 0 [ 2535.376170][T30300] pgscan_direct 0 [ 2535.376170][T30300] pgscan_khugepaged 0 [ 2535.376170][T30300] pgsteal_kswapd 0 [ 2535.376170][T30300] pgsteal_direct 0 [ 2535.376170][T30300] pgsteal_khugepaged 0 [ 2535.376170][T30300] pgfault 497965 [ 2535.376170][T30300] pgmajfault 32 [ 2535.376170][T30300] pgrefill 0 [ 2535.376170][T30300] pgactivate 0 [ 2535.376170][T30300] pgdeactivate 0 [ 2535.376170][T30300] pglazyfree 0 [ 2535.376170][T30300] pglazyfreed 0 [ 2535.376170][T30300] zswpin 0 [ 2535.376170][T30300] zswpout 0 [ 2535.376170][T30300] thp_fault_alloc 0 13:02:48 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x8933, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:48 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x402c582b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:48 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="001df9bc5757dd237038fa53beaacaf9b0555e43b01b0fea9a3b23862bb2d9f82b852fcc4a39044b2547f44336302953cb684858a7054076aed49d15e63d4b1ff2251791d58883a1335d5dc55d3870f95edb9c106276d14719eec735c0215e2e396d7dde218acd6856e863b71dca895883e4d4bfc08f38947bc08415369e7ac2e62a5b04c94ec60970d7a618be001dce3fb8cd18e7182c90df7f949849a078fd207e30a74b55732b7df1602178", 0xad}], 0x1) [ 2535.587072][T30300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30300,uid=0 13:02:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025100e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2535.637159][T30300] Memory cgroup out of memory: Killed process 30300 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) syz_io_uring_setup(0x4397, &(0x7f0000000200)={0x0, 0xd56b, 0x100, 0x3, 0x1d1, 0x0, r3}, &(0x7f000024c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) dup(r10) (async) r11 = dup(r10) ioctl$UI_DEV_CREATE(r11, 0x5501) (async) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000840)) (async) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r12, r6, 0x0, 0x5) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) (async) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 13:02:48 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x402c5839, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) syz_io_uring_setup(0x4397, &(0x7f0000000200)={0x0, 0xd56b, 0x100, 0x3, 0x1d1, 0x0, r3}, &(0x7f000024c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r11 = dup(r10) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r12, r6, 0x0, 0x5) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 13:02:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000140)={&(0x7f0000000380)={{@local, 0xd11}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x7}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) syz_io_uring_setup(0x4397, &(0x7f0000000200)={0x0, 0xd56b, 0x100, 0x3, 0x1d1, 0x0, r3}, &(0x7f000024c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r5, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000800)=0x101) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r11 = dup(r10) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_io_uring_setup(0xd91, &(0x7f0000000940)={0x0, 0xd4dc, 0x1, 0x0, 0x26c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r12, r6, 0x0, 0x5) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) open(&(0x7f00000007c0)='./file0\x00', 0x141000, 0x88) read$midi(r9, &(0x7f00000009c0)=""/206, 0xce) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 2535.992797][T30339] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2536.008433][T30339] CPU: 0 PID: 30339 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2536.018911][T30339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2536.028964][T30339] Call Trace: [ 2536.032264][T30339] [ 2536.035233][T30339] dump_stack_lvl+0x136/0x150 [ 2536.040038][T30339] dump_header+0x10a/0xd70 [ 2536.044484][T30339] oom_kill_process+0x25d/0x600 [ 2536.049354][T30339] out_of_memory+0x35c/0x1660 [ 2536.054130][T30339] ? find_held_lock+0x2d/0x110 [ 2536.058930][T30339] ? oom_killer_disable+0x2b0/0x2b0 [ 2536.064146][T30339] ? rcu_read_unlock+0x9/0x60 [ 2536.068866][T30339] ? find_held_lock+0x2d/0x110 [ 2536.073646][T30339] mem_cgroup_out_of_memory+0x206/0x270 [ 2536.079201][T30339] ? mem_cgroup_margin+0x130/0x130 [ 2536.084357][T30339] ? lock_downgrade+0x690/0x690 [ 2536.089241][T30339] try_charge_memcg+0xf9b/0x13b0 [ 2536.094180][T30339] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2536.100245][T30339] ? rcu_read_unlock+0x9/0x60 [ 2536.104929][T30339] ? lock_downgrade+0x690/0x690 [ 2536.109790][T30339] charge_memcg+0x90/0x3b0 [ 2536.114207][T30339] __mem_cgroup_charge+0x2b/0x90 [ 2536.119159][T30339] ? copy_mc_to_kernel+0x3e/0x90 [ 2536.124138][T30339] do_wp_page+0x8eb/0x3520 [ 2536.128585][T30339] ? lock_release+0x670/0x670 [ 2536.133285][T30339] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2536.138679][T30339] ? do_raw_spin_lock+0x124/0x2b0 [ 2536.143724][T30339] ? spin_bug+0x1c0/0x1c0 [ 2536.148075][T30339] ? lock_downgrade+0x690/0x690 [ 2536.152950][T30339] __handle_mm_fault+0x19a1/0x3e60 [ 2536.158090][T30339] ? vm_iomap_memory+0x190/0x190 [ 2536.163065][T30339] handle_mm_fault+0x2ba/0x9c0 [ 2536.167873][T30339] do_user_addr_fault+0x475/0x1230 [ 2536.173015][T30339] ? rcu_is_watching+0x12/0xb0 [ 2536.177802][T30339] exc_page_fault+0x98/0x170 [ 2536.182412][T30339] asm_exc_page_fault+0x26/0x30 [ 2536.187285][T30339] RIP: 0023:0xf721cf2c [ 2536.191361][T30339] Code: 18 8b 43 14 89 d7 21 c7 83 ff ff 74 29 bf e7 03 00 00 39 c7 19 d6 0f 82 59 02 00 00 8b 74 24 14 8d 04 40 8d 84 86 c0 a0 02 00 <89> 48 04 c1 f9 1f c6 00 01 89 48 08 8b 74 24 14 8b 43 10 8b be c0 [ 2536.210984][T30339] RSP: 002b:00000000f749fb00 EFLAGS: 00010246 [ 2536.217066][T30339] RAX: 00000000f73780c0 RBX: 00000000f737afc0 RCX: 0000000000000003 [ 2536.225048][T30339] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 00000000000003e7 [ 2536.233028][T30339] RBP: 00000000f737afcc R08: 0000000000000000 R09: 0000000000000000 13:02:48 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x41045508, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2536.241020][T30339] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2536.249083][T30339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2536.257082][T30339] 13:02:49 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x400448c9, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2536.317000][T30339] memory: usage 307184kB, limit 307200kB, failcnt 2211 [ 2536.343174][T30339] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2536.360723][T30339] Memory cgroup stats for /syz2: [ 2536.360892][T30339] anon 778240 [ 2536.360892][T30339] file 315392 [ 2536.360892][T30339] kernel 313462784 [ 2536.360892][T30339] kernel_stack 327680 [ 2536.360892][T30339] pagetables 503808 [ 2536.360892][T30339] sec_pagetables 0 [ 2536.360892][T30339] percpu 4060640 [ 2536.360892][T30339] sock 0 [ 2536.360892][T30339] vmalloc 0 [ 2536.360892][T30339] shmem 315392 [ 2536.360892][T30339] zswap 0 [ 2536.360892][T30339] zswapped 0 [ 2536.360892][T30339] file_mapped 249856 [ 2536.360892][T30339] file_dirty 0 [ 2536.360892][T30339] file_writeback 0 [ 2536.360892][T30339] swapcached 0 [ 2536.360892][T30339] anon_thp 0 [ 2536.360892][T30339] file_thp 0 [ 2536.360892][T30339] shmem_thp 0 [ 2536.360892][T30339] inactive_anon 65536 [ 2536.360892][T30339] active_anon 1028096 [ 2536.360892][T30339] inactive_file 0 [ 2536.360892][T30339] active_file 0 [ 2536.360892][T30339] unevictable 0 [ 2536.360892][T30339] slab_reclaimable 31088 [ 2536.360892][T30339] slab_unreclaimable 308450344 [ 2536.360892][T30339] slab 308481432 [ 2536.360892][T30339] workingset_refault_anon 0 [ 2536.360892][T30339] workingset_refault_file 0 [ 2536.360892][T30339] workingset_activate_anon 0 [ 2536.360892][T30339] workingset_activate_file 0 [ 2536.360892][T30339] workingset_restore_anon 0 [ 2536.360892][T30339] workingset_restore_file 0 [ 2536.360892][T30339] workingset_nodereclaim 0 [ 2536.360892][T30339] pgscan 0 [ 2536.360892][T30339] pgsteal 0 [ 2536.360892][T30339] pgscan_kswapd 0 [ 2536.360892][T30339] pgscan_direct 0 [ 2536.360892][T30339] pgscan_khugepaged 0 [ 2536.360892][T30339] pgsteal_kswapd 0 [ 2536.360892][T30339] pgsteal_direct 0 [ 2536.360892][T30339] pgsteal_khugepaged 0 13:02:49 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="001df9bc5757dd237038fa53beaacaf9b0555e43b01b0fea9a3b23862bb2d9f82b852fcc4a39044b2547f44336302953cb684858a7054076aed49d15e63d4b1ff2251791d58883a1335d5dc55d3870f95edb9c106276d14719eec735c0215e2e396d7dde218acd6856e863b71dca895883e4d4bfc08f38947bc08415369e7ac2e62a5b04c94ec60970d7a618be001dce3fb8cd18e7182c90df7f949849a078fd207e30a74b55732b7df1602178", 0xad}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="001df9bc5757dd237038fa53beaacaf9b0555e43b01b0fea9a3b23862bb2d9f82b852fcc4a39044b2547f44336302953cb684858a7054076aed49d15e63d4b1ff2251791d58883a1335d5dc55d3870f95edb9c106276d14719eec735c0215e2e396d7dde218acd6856e863b71dca895883e4d4bfc08f38947bc08415369e7ac2e62a5b04c94ec60970d7a618be001dce3fb8cd18e7182c90df7f949849a078fd207e30a74b55732b7df1602178", 0xad}], 0x1) (async) 13:02:49 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045503, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2536.360892][T30339] pgfault 498003 [ 2536.360892][T30339] pgmajfault 32 [ 2536.360892][T30339] pgrefill 0 [ 2536.360892][T30339] pgactivate 0 [ 2536.360892][T30339] pgdeactivate 0 [ 2536.360892][T30339] pglazyfree 0 [ 2536.360892][T30339] pglazyfreed 0 [ 2536.360892][T30339] zswpin 0 [ 2536.360892][T30339] zswpout 0 [ 2536.360892][T30339] thp_fault_alloc 0 13:02:49 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendto$inet(r0, &(0x7f0000000e00)="bfc1360a5a270f366af4575fe4ad036004f441a1997d8e530859ef50567615e9f57646d89e26d069d054f2441067293ec6e04a3a7a9fa0f9c5641916f1aafe551523dbc71fe6ee9a143de5b99fddc992210111fad317ed751179077d3e73b447b83911d9c996489dbe44109a78b15c79b305ab90114d09681f17", 0x7a, 0x20040080, &(0x7f0000000e80)={0x2, 0x4e24, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="125e13248e1975f23ae20327e6c8ac6030aab1bbfd49173af7668fb90906d93b9a4cca528c912a8e1ff5ff843c5b1ff5e5cad1cfb30f74cd6b8d1599507da1f5151f327381325c8b215f24d714560eec9cb193fefe0e526827686a15f6fbd6742fb65bb1737a018c2cfac974a0a299c0b3526352", 0x74}, {&(0x7f0000000240)="86fa0112fc907755f63dd8f1fa21b7e7baccbd72913f91dc066b9424db1d0fb80d96a021069c96fc3d10185eea5e2040f13dea1d85efeed231193c2ef19e936c3eb66e79d4a31d9e9d55c34d3418b87a2102080d768a0fc156987d87c0e96cd8d70a7e3a6063ce2abf625b2907defae1fab9b9836736fc9267567cab2d44b15112430af2b2c1eb", 0x87}, {&(0x7f0000000040)="648e4bdf09bff0bd7e11ad8d641ccdd6b1a57ed5c5", 0x15}, {&(0x7f0000000180)="4623f164856b721fadf8a159bef296", 0xf}, {&(0x7f00000001c0)="4e10ddcd45071f3d9a519f17b01deb7d3a668745f1c4557776bcc67a6a03bb03ccd71907b2863d9327a01e4c818a2ee1ac0d74eab2", 0x35}, {&(0x7f0000000300)="1e3b18f6ef053871f7f316841c448cd1aa865194db39f72369b06399fbd9367b576f6d", 0x23}, {&(0x7f0000000340)="d82483348aca14a008d2a24f7ffb97d6dba80ccd631807b8458c50604cdb02479aec474e90d9326d396b2952a778e8f77e61cb598d03b96f645b2117b62541c73a10ad3100e2fbd6c6bdab10b5c8dc98d450266551448278f6abc12e674afa62d8e79048c785478aebb4adecb3b9a289f24eff27bb11c806d03e92579fb51b610914638967036f0c3232cd03ac22a709ea0ff12d22fd656d4fafc6fc066c48078371a1e2c5a7e42694391da943e871b4931c6672947a912318d438ac69841941c12fc619d8d9a6ecabeeb0ba91348db088b5694fa68d19109961224015", 0xdd}, {&(0x7f00000004c0)="8e56c774b9d51a5daef421675253ed5694f27bfecd511e680fdf5e3cb0e0b4d1387b60c5d0587ec6ab052e66e43bd96cf3717500d57fe033d27c53d4ac0b1cf7fbb3bc62dc4fb4b94c448a5eb2b4026bb2b0e343250408e9c9ebdea35334a5e2c0f2026d", 0x64}], 0x8, &(0x7f0000000540)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr={{0x74, 0x29, 0x39, {0x89, 0xc, 0x2, 0x8, 0x0, [@mcast1, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}}}], 0x84}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="8da6773eedfaec2a0534c2dd25c4de6c8adadeb780280459335a674b867dcd25b016609900ef7896e2f5109932d5de77c642e3d46f0c840940509c18188b3ea22b38fa526204fcd10dcf4519eafe7bc7243473f0b1c9e3ee0b7af6ceba7981f20bc13643ce6b7364cbb61837e73dc721cc8780bb4ddf2cf4c855504de05ae9dfb08be20359cb12583ea6a931fe5360fda04e73e2e80ac11dd43d21c1f5e04f3e946fbf488e0888061dc7fa1c72202e954bd8a7c0304c8f4ceddc6b7fa355a2ba3bddaaa4f9c7414995bb747130382f6d9d062aa36506ef27ec872a273e407d1af7685d6b2bef9c9729a669105d5e8f4671421733f4d048", 0xf7}, {&(0x7f0000000700)="ed3316abe9bc7b87cc2d13007772cfcb1127bb47149c75ef72d1cbf0b45c8f6156da934a06a5a69a8810b86323da1ff00577004f5a65f9003cc5eb4472f18d8eb73f017dcf404fadd32c9cf5540ff5f4fd88ccd22ec7947a38220d73cd02a14b619db8a019dcd13897fc58b539f0213d48f97add218bdc1bb26365ccd1e1b47b7d153d5485cfa43e296380f4c453890173fa91c9cc9e72cdf25497d45c367112df56", 0xa2}], 0x2, &(0x7f0000000840)=[@tclass={{0x10, 0x29, 0x43, 0x7}}, @pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r1}}}, @dstopts={{0x1c, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1]}}}], 0x4c}}, {{&(0x7f00000008c0)={0xa, 0x4e21, 0x57, @private2, 0xffffffff}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000900)="1966ef73be85b5d2f2b5900b791ae90e69dd5e41abd0d06aa5fa3ebc687b874124ff7a0f4384015d392d4ce5cbae546e2c6a0f521709603cbbaab57befecf75d68f1dfc519a6c02f46312879d06a4a7fdd3bad97af83f8a2dfce696f70e4f4705f91f40743f4888e5f588825765e6ac52e31fa71a18bb3f8ca07ccb571c9bc6e0cb8251dfa9ed23764298661960ca4b7afef18245d0e6c4a8889cf774703d1a13db4b353de62", 0xa6}, {&(0x7f00000009c0)="14afea1ccb4c118813986f05fd04a3251a8b86cf6bf7d66d1f545993a56a05b62bc954164a91d732bfc5569eafbc29bf91a856d51c7ac1fd8da77b6281ec4fb9b6d177f9a4741aa45cedfba6fb2f414c2fdf2dbbd5f4843131b27384a4245001a61704830e8d4e19fb4efa35db5af2f4b4ab715ab7af59cdb16c66c9b2ee9764c16c5febfec65fe9e52fc69e9071dec9b8d1a28885ea3119d064d694609f1cb02ddbedab5d89fd870b57e6b44093475a6d7069f6eb62b2dd49679d3446ac9f0cf02bc7fe", 0xc4}, {&(0x7f0000000ac0)="879285c54f55e92b7c926f340e33daf1915c44fbe9135a7f0af2c213c90d3fabe0de8416d2572e348d3ebcd0683bb33e40bfa87c4838", 0x36}, {&(0x7f0000000b00)="ff8a1ed1adfcd2de03a0f7c5cfef438e03152cba5d1bf9e5b4af8ec414f3f9a1aee65db49700720e8f2dc8269647b66753e4696ef31bca6e2f187a8f8fd0fa71b90c867760f8957461f2734c443567cc", 0x50}], 0x4}}, {{&(0x7f0000000bc0)={0xa, 0x4e25, 0x4, @mcast1, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c00)="86d0bb15372f58419a7125cd5c62a6b60fabe3a41de0d107d5df597ef932dda0898762536d809ef3f0067d236800045f362e8a8c53dd9b8ac7e581d4178ac141b0bd3db81536614febdaab03a263777f156c6a1386fdeb79e983e0f9cb903b8a136d04b1519a4aad944285f87a3501a1c84951b32359c8783be263a2065ca0ae5c054a4f1629bf6eb200c06aa89dc0a39ebd92867466b6b78d3bb2bb917aed5757ff41da0d2bb96efb03c51d5c63d20ae3eb4e5e4f9b16298c8b2422492be0265019770cbd006d63", 0xc8}], 0x1, &(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="200000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0], 0x1ac}}, {{&(0x7f0000000f40)={0xa, 0x4e24, 0x8a6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000f80)="81204264c29ee59a7c8c11c306816a18bd13fce8d8f8c6c45dc354c11d9996e43ed9427e3b2d202c6ba41e8629b519c91cb406f7b015b672e5e7be9cf6cae50e0d1766f2508296e4207c1871348076ba9c6293f088c5132c2169330a12c2f2d6d8cb5cbfa38f7168f5d464f5f88f4ffe7a32abebc3f3abd332a690b1e1abecf8d3a35a462d9b626c735454cce15a", 0x8e}, {&(0x7f0000001040)="d61f7581edcf0fb9a68f4d0712060a9311a129f9d072bacbd8e1b903de88c483e3", 0x21}, {&(0x7f0000001080)="c71fe27eb243cd0ac9ff15dfc0281e339790556e9facc683b30391beacbb89c6f22c218e72f337fbffc01fd115d5c2d72df5ca88f383a92c88bde9e5bf4d0f98e83e2038b6934b23a6623c58fa932a685d8faff4b74785b0869c5fd9c2edd278b3ce", 0x62}, {&(0x7f0000001100)="6b6eef4142377bb6bf54ccdbf5c6e185c0aa8185a6f993c7001e7095489cb345fd21929d6726ee6ecbf38b2cad7e38d3e7c4cd5396be91cae0ac8f2a889b2d5db2dec6150e3176", 0x47}, {&(0x7f0000001180)="eaf0bf30cbd3dbe9fcd91ffa1181282f60d6c838e6f276b8bc542b641181dc437ecdd88d32986fd10a9ddb68d4fe0e5c08fa311d4333cc978a87c0b4ce258438850aabc2c3ae4de72c58ede7ed693050a296340b94ad636d57afbf6fc2da6435bbbbc4c4d166", 0x66}, {&(0x7f0000001200)="e043daf7eb0b", 0x6}, {&(0x7f0000001240)="ae44fbde7bbc2af8aa1a41822de8ee2e0f120d3ebd73b7912c1a096dd3f379017ee055ebf72057e4e1e741f31e4f111e031e5921d50dece9ea0c3aeba2069974a04f356922827b8444dbb70b606ff88c170ce28adb716163326a57c218db9eccaa61f515294c8e11e724164fd79f5b5a83d77a2c92a369d37ae60107e5dea9695a884ddba4a8c382e218dfd32ea34b75c404283f20b860302e", 0x99}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4d44d4473bb75646d440f0b921bbdc9a670744a98e460088f62a78af1080278ec26a0d97604b34df8a7f5164b3409f1d28645d672f8043009dfe54a3353b1bb88f04b13e8cee0b9d1fbe146cdebc96b92620", 0x52}, {&(0x7f0000000d80)="665d37765f3d37f3bdd8c7efd50260a9fcafda5a49401fc027efa7d1add048151b44b4a2dce154528a89287043c9eb1be1926138ee5235920b4662a4d8785029ac9b3d707ee66615a0197c40a652d2f89991ca6ffc991f1f04a368a8505f029b95982f1b63b8241bcefc876133ce00d7816abb", 0x73}], 0xa, &(0x7f0000002480)=[@hoplimit={{0x10, 0x29, 0x34, 0x8}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x21, 0x4, 0x0, 0x1, 0x0, [@mcast2, @loopback]}}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x87, 0x2, '\x00', [@pad1, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x6a, 0xb, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x800, [0x2, 0xfff, 0x542d, 0x1, 0x5066, 0xfa, 0x0]}}, @ra, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}], 0x114}}], 0x5, 0x4000) 13:02:49 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x400448dd, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025180e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2536.743175][T30339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30339,uid=0 [ 2536.771044][T30339] Memory cgroup out of memory: Killed process 30339 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2537.015426][T30378] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2537.026236][T30378] CPU: 0 PID: 30378 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2537.036709][T30378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2537.046783][T30378] Call Trace: [ 2537.050088][T30378] [ 2537.053049][T30378] dump_stack_lvl+0x136/0x150 [ 2537.057755][T30378] dump_header+0x10a/0xd70 [ 2537.062219][T30378] oom_kill_process+0x25d/0x600 [ 2537.067077][T30378] out_of_memory+0x35c/0x1660 [ 2537.071754][T30378] ? find_held_lock+0x2d/0x110 [ 2537.076532][T30378] ? oom_killer_disable+0x2b0/0x2b0 [ 2537.081752][T30378] ? rcu_read_unlock+0x9/0x60 [ 2537.086461][T30378] ? find_held_lock+0x2d/0x110 [ 2537.091264][T30378] mem_cgroup_out_of_memory+0x206/0x270 [ 2537.096842][T30378] ? mem_cgroup_margin+0x130/0x130 [ 2537.101991][T30378] ? lock_downgrade+0x690/0x690 [ 2537.106853][T30378] try_charge_memcg+0xf9b/0x13b0 [ 2537.111814][T30378] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2537.117823][T30378] ? rcu_read_unlock+0x9/0x60 [ 2537.122505][T30378] ? lock_downgrade+0x690/0x690 [ 2537.127369][T30378] charge_memcg+0x90/0x3b0 [ 2537.131785][T30378] __mem_cgroup_charge+0x2b/0x90 [ 2537.136726][T30378] do_wp_page+0x8eb/0x3520 [ 2537.141146][T30378] ? lock_release+0x670/0x670 [ 2537.145818][T30378] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2537.151205][T30378] ? do_raw_spin_lock+0x124/0x2b0 [ 2537.156231][T30378] ? spin_bug+0x1c0/0x1c0 [ 2537.160559][T30378] ? lock_downgrade+0x690/0x690 [ 2537.165426][T30378] __handle_mm_fault+0x19a1/0x3e60 [ 2537.170541][T30378] ? vm_iomap_memory+0x190/0x190 [ 2537.175487][T30378] handle_mm_fault+0x2ba/0x9c0 [ 2537.180256][T30378] do_user_addr_fault+0x475/0x1230 [ 2537.185389][T30378] ? rcu_is_watching+0x12/0xb0 [ 2537.190159][T30378] exc_page_fault+0x98/0x170 [ 2537.194750][T30378] asm_exc_page_fault+0x26/0x30 [ 2537.199607][T30378] RIP: 0023:0xf72206e8 [ 2537.203667][T30378] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2537.223273][T30378] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2537.229339][T30378] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2537.237397][T30378] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2537.245370][T30378] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2537.253334][T30378] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2537.261384][T30378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2537.269372][T30378] [ 2537.328884][T30378] memory: usage 307200kB, limit 307200kB, failcnt 2303 [ 2537.341318][T30378] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2537.350620][T30378] Memory cgroup stats for /syz2: [ 2537.350878][T30378] anon 794624 [ 2537.350878][T30378] file 315392 [ 2537.350878][T30378] kernel 313462784 [ 2537.350878][T30378] kernel_stack 327680 [ 2537.350878][T30378] pagetables 503808 [ 2537.350878][T30378] sec_pagetables 0 [ 2537.350878][T30378] percpu 4060640 [ 2537.350878][T30378] sock 0 [ 2537.350878][T30378] vmalloc 0 [ 2537.350878][T30378] shmem 315392 [ 2537.350878][T30378] zswap 0 [ 2537.350878][T30378] zswapped 0 [ 2537.350878][T30378] file_mapped 249856 [ 2537.350878][T30378] file_dirty 0 [ 2537.350878][T30378] file_writeback 0 [ 2537.350878][T30378] swapcached 0 [ 2537.350878][T30378] anon_thp 0 [ 2537.350878][T30378] file_thp 0 [ 2537.350878][T30378] shmem_thp 0 [ 2537.350878][T30378] inactive_anon 65536 [ 2537.350878][T30378] active_anon 1044480 [ 2537.350878][T30378] inactive_file 0 [ 2537.350878][T30378] active_file 0 [ 2537.350878][T30378] unevictable 0 [ 2537.350878][T30378] slab_reclaimable 31088 [ 2537.350878][T30378] slab_unreclaimable 308450344 [ 2537.350878][T30378] slab 308481432 [ 2537.350878][T30378] workingset_refault_anon 0 [ 2537.350878][T30378] workingset_refault_file 0 [ 2537.350878][T30378] workingset_activate_anon 0 [ 2537.350878][T30378] workingset_activate_file 0 [ 2537.350878][T30378] workingset_restore_anon 0 [ 2537.350878][T30378] workingset_restore_file 0 [ 2537.350878][T30378] workingset_nodereclaim 0 [ 2537.350878][T30378] pgscan 0 [ 2537.350878][T30378] pgsteal 0 [ 2537.350878][T30378] pgscan_kswapd 0 [ 2537.350878][T30378] pgscan_direct 0 [ 2537.350878][T30378] pgscan_khugepaged 0 [ 2537.350878][T30378] pgsteal_kswapd 0 [ 2537.350878][T30378] pgsteal_direct 0 [ 2537.350878][T30378] pgsteal_khugepaged 0 [ 2537.350878][T30378] pgfault 498049 [ 2537.350878][T30378] pgmajfault 32 [ 2537.350878][T30378] pgrefill 0 [ 2537.350878][T30378] pgactivate 0 [ 2537.350878][T30378] pgdeactivate 0 [ 2537.350878][T30378] pglazyfree 0 [ 2537.350878][T30378] pglazyfreed 0 13:02:50 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2537.350878][T30378] zswpin 0 [ 2537.350878][T30378] zswpout 0 [ 2537.350878][T30378] thp_fault_alloc 0 13:02:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025200e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2537.578075][T30378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30378,uid=0 [ 2537.596102][T30378] Memory cgroup out of memory: Killed process 30378 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:50 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (rerun: 32) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) sendto$inet(r0, &(0x7f0000000e00)="bfc1360a5a270f366af4575fe4ad036004f441a1997d8e530859ef50567615e9f57646d89e26d069d054f2441067293ec6e04a3a7a9fa0f9c5641916f1aafe551523dbc71fe6ee9a143de5b99fddc992210111fad317ed751179077d3e73b447b83911d9c996489dbe44109a78b15c79b305ab90114d09681f17", 0x7a, 0x20040080, &(0x7f0000000e80)={0x2, 0x4e24, @empty}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="125e13248e1975f23ae20327e6c8ac6030aab1bbfd49173af7668fb90906d93b9a4cca528c912a8e1ff5ff843c5b1ff5e5cad1cfb30f74cd6b8d1599507da1f5151f327381325c8b215f24d714560eec9cb193fefe0e526827686a15f6fbd6742fb65bb1737a018c2cfac974a0a299c0b3526352", 0x74}, {&(0x7f0000000240)="86fa0112fc907755f63dd8f1fa21b7e7baccbd72913f91dc066b9424db1d0fb80d96a021069c96fc3d10185eea5e2040f13dea1d85efeed231193c2ef19e936c3eb66e79d4a31d9e9d55c34d3418b87a2102080d768a0fc156987d87c0e96cd8d70a7e3a6063ce2abf625b2907defae1fab9b9836736fc9267567cab2d44b15112430af2b2c1eb", 0x87}, {&(0x7f0000000040)="648e4bdf09bff0bd7e11ad8d641ccdd6b1a57ed5c5", 0x15}, {&(0x7f0000000180)="4623f164856b721fadf8a159bef296", 0xf}, {&(0x7f00000001c0)="4e10ddcd45071f3d9a519f17b01deb7d3a668745f1c4557776bcc67a6a03bb03ccd71907b2863d9327a01e4c818a2ee1ac0d74eab2", 0x35}, {&(0x7f0000000300)="1e3b18f6ef053871f7f316841c448cd1aa865194db39f72369b06399fbd9367b576f6d", 0x23}, {&(0x7f0000000340)="d82483348aca14a008d2a24f7ffb97d6dba80ccd631807b8458c50604cdb02479aec474e90d9326d396b2952a778e8f77e61cb598d03b96f645b2117b62541c73a10ad3100e2fbd6c6bdab10b5c8dc98d450266551448278f6abc12e674afa62d8e79048c785478aebb4adecb3b9a289f24eff27bb11c806d03e92579fb51b610914638967036f0c3232cd03ac22a709ea0ff12d22fd656d4fafc6fc066c48078371a1e2c5a7e42694391da943e871b4931c6672947a912318d438ac69841941c12fc619d8d9a6ecabeeb0ba91348db088b5694fa68d19109961224015", 0xdd}, {&(0x7f00000004c0)="8e56c774b9d51a5daef421675253ed5694f27bfecd511e680fdf5e3cb0e0b4d1387b60c5d0587ec6ab052e66e43bd96cf3717500d57fe033d27c53d4ac0b1cf7fbb3bc62dc4fb4b94c448a5eb2b4026bb2b0e343250408e9c9ebdea35334a5e2c0f2026d", 0x64}], 0x8, &(0x7f0000000540)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr={{0x74, 0x29, 0x39, {0x89, 0xc, 0x2, 0x8, 0x0, [@mcast1, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}}}], 0x84}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="8da6773eedfaec2a0534c2dd25c4de6c8adadeb780280459335a674b867dcd25b016609900ef7896e2f5109932d5de77c642e3d46f0c840940509c18188b3ea22b38fa526204fcd10dcf4519eafe7bc7243473f0b1c9e3ee0b7af6ceba7981f20bc13643ce6b7364cbb61837e73dc721cc8780bb4ddf2cf4c855504de05ae9dfb08be20359cb12583ea6a931fe5360fda04e73e2e80ac11dd43d21c1f5e04f3e946fbf488e0888061dc7fa1c72202e954bd8a7c0304c8f4ceddc6b7fa355a2ba3bddaaa4f9c7414995bb747130382f6d9d062aa36506ef27ec872a273e407d1af7685d6b2bef9c9729a669105d5e8f4671421733f4d048", 0xf7}, {&(0x7f0000000700)="ed3316abe9bc7b87cc2d13007772cfcb1127bb47149c75ef72d1cbf0b45c8f6156da934a06a5a69a8810b86323da1ff00577004f5a65f9003cc5eb4472f18d8eb73f017dcf404fadd32c9cf5540ff5f4fd88ccd22ec7947a38220d73cd02a14b619db8a019dcd13897fc58b539f0213d48f97add218bdc1bb26365ccd1e1b47b7d153d5485cfa43e296380f4c453890173fa91c9cc9e72cdf25497d45c367112df56", 0xa2}], 0x2, &(0x7f0000000840)=[@tclass={{0x10, 0x29, 0x43, 0x7}}, @pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r1}}}, @dstopts={{0x1c, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1]}}}], 0x4c}}, {{&(0x7f00000008c0)={0xa, 0x4e21, 0x57, @private2, 0xffffffff}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000900)="1966ef73be85b5d2f2b5900b791ae90e69dd5e41abd0d06aa5fa3ebc687b874124ff7a0f4384015d392d4ce5cbae546e2c6a0f521709603cbbaab57befecf75d68f1dfc519a6c02f46312879d06a4a7fdd3bad97af83f8a2dfce696f70e4f4705f91f40743f4888e5f588825765e6ac52e31fa71a18bb3f8ca07ccb571c9bc6e0cb8251dfa9ed23764298661960ca4b7afef18245d0e6c4a8889cf774703d1a13db4b353de62", 0xa6}, {&(0x7f00000009c0)="14afea1ccb4c118813986f05fd04a3251a8b86cf6bf7d66d1f545993a56a05b62bc954164a91d732bfc5569eafbc29bf91a856d51c7ac1fd8da77b6281ec4fb9b6d177f9a4741aa45cedfba6fb2f414c2fdf2dbbd5f4843131b27384a4245001a61704830e8d4e19fb4efa35db5af2f4b4ab715ab7af59cdb16c66c9b2ee9764c16c5febfec65fe9e52fc69e9071dec9b8d1a28885ea3119d064d694609f1cb02ddbedab5d89fd870b57e6b44093475a6d7069f6eb62b2dd49679d3446ac9f0cf02bc7fe", 0xc4}, {&(0x7f0000000ac0)="879285c54f55e92b7c926f340e33daf1915c44fbe9135a7f0af2c213c90d3fabe0de8416d2572e348d3ebcd0683bb33e40bfa87c4838", 0x36}, {&(0x7f0000000b00)="ff8a1ed1adfcd2de03a0f7c5cfef438e03152cba5d1bf9e5b4af8ec414f3f9a1aee65db49700720e8f2dc8269647b66753e4696ef31bca6e2f187a8f8fd0fa71b90c867760f8957461f2734c443567cc", 0x50}], 0x4}}, {{&(0x7f0000000bc0)={0xa, 0x4e25, 0x4, @mcast1, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c00)="86d0bb15372f58419a7125cd5c62a6b60fabe3a41de0d107d5df597ef932dda0898762536d809ef3f0067d236800045f362e8a8c53dd9b8ac7e581d4178ac141b0bd3db81536614febdaab03a263777f156c6a1386fdeb79e983e0f9cb903b8a136d04b1519a4aad944285f87a3501a1c84951b32359c8783be263a2065ca0ae5c054a4f1629bf6eb200c06aa89dc0a39ebd92867466b6b78d3bb2bb917aed5757ff41da0d2bb96efb03c51d5c63d20ae3eb4e5e4f9b16298c8b2422492be0265019770cbd006d63", 0xc8}], 0x1, &(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="200000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0], 0x1ac}}, {{&(0x7f0000000f40)={0xa, 0x4e24, 0x8a6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000f80)="81204264c29ee59a7c8c11c306816a18bd13fce8d8f8c6c45dc354c11d9996e43ed9427e3b2d202c6ba41e8629b519c91cb406f7b015b672e5e7be9cf6cae50e0d1766f2508296e4207c1871348076ba9c6293f088c5132c2169330a12c2f2d6d8cb5cbfa38f7168f5d464f5f88f4ffe7a32abebc3f3abd332a690b1e1abecf8d3a35a462d9b626c735454cce15a", 0x8e}, {&(0x7f0000001040)="d61f7581edcf0fb9a68f4d0712060a9311a129f9d072bacbd8e1b903de88c483e3", 0x21}, {&(0x7f0000001080)="c71fe27eb243cd0ac9ff15dfc0281e339790556e9facc683b30391beacbb89c6f22c218e72f337fbffc01fd115d5c2d72df5ca88f383a92c88bde9e5bf4d0f98e83e2038b6934b23a6623c58fa932a685d8faff4b74785b0869c5fd9c2edd278b3ce", 0x62}, {&(0x7f0000001100)="6b6eef4142377bb6bf54ccdbf5c6e185c0aa8185a6f993c7001e7095489cb345fd21929d6726ee6ecbf38b2cad7e38d3e7c4cd5396be91cae0ac8f2a889b2d5db2dec6150e3176", 0x47}, {&(0x7f0000001180)="eaf0bf30cbd3dbe9fcd91ffa1181282f60d6c838e6f276b8bc542b641181dc437ecdd88d32986fd10a9ddb68d4fe0e5c08fa311d4333cc978a87c0b4ce258438850aabc2c3ae4de72c58ede7ed693050a296340b94ad636d57afbf6fc2da6435bbbbc4c4d166", 0x66}, {&(0x7f0000001200)="e043daf7eb0b", 0x6}, {&(0x7f0000001240)="ae44fbde7bbc2af8aa1a41822de8ee2e0f120d3ebd73b7912c1a096dd3f379017ee055ebf72057e4e1e741f31e4f111e031e5921d50dece9ea0c3aeba2069974a04f356922827b8444dbb70b606ff88c170ce28adb716163326a57c218db9eccaa61f515294c8e11e724164fd79f5b5a83d77a2c92a369d37ae60107e5dea9695a884ddba4a8c382e218dfd32ea34b75c404283f20b860302e", 0x99}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4d44d4473bb75646d440f0b921bbdc9a670744a98e460088f62a78af1080278ec26a0d97604b34df8a7f5164b3409f1d28645d672f8043009dfe54a3353b1bb88f04b13e8cee0b9d1fbe146cdebc96b92620", 0x52}, {&(0x7f0000000d80)="665d37765f3d37f3bdd8c7efd50260a9fcafda5a49401fc027efa7d1add048151b44b4a2dce154528a89287043c9eb1be1926138ee5235920b4662a4d8785029ac9b3d707ee66615a0197c40a652d2f89991ca6ffc991f1f04a368a8505f029b95982f1b63b8241bcefc876133ce00d7816abb", 0x73}], 0xa, &(0x7f0000002480)=[@hoplimit={{0x10, 0x29, 0x34, 0x8}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x21, 0x4, 0x0, 0x1, 0x0, [@mcast2, @loopback]}}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x87, 0x2, '\x00', [@pad1, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x6a, 0xb, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x800, [0x2, 0xfff, 0x542d, 0x1, 0x5066, 0xfa, 0x0]}}, @ra, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}], 0x114}}], 0x5, 0x4000) [ 2537.797697][T30391] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2537.852073][T30391] CPU: 1 PID: 30391 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2537.862545][T30391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2537.872601][T30391] Call Trace: [ 2537.875873][T30391] [ 2537.878802][T30391] dump_stack_lvl+0x136/0x150 [ 2537.883484][T30391] dump_header+0x10a/0xd70 [ 2537.887904][T30391] oom_kill_process+0x25d/0x600 [ 2537.892756][T30391] out_of_memory+0x35c/0x1660 [ 2537.897435][T30391] ? find_held_lock+0x2d/0x110 [ 2537.902200][T30391] ? oom_killer_disable+0x2b0/0x2b0 [ 2537.907410][T30391] ? rcu_read_unlock+0x9/0x60 [ 2537.912124][T30391] ? find_held_lock+0x2d/0x110 [ 2537.916909][T30391] mem_cgroup_out_of_memory+0x206/0x270 [ 2537.922456][T30391] ? mem_cgroup_margin+0x130/0x130 [ 2537.927579][T30391] ? lock_downgrade+0x690/0x690 [ 2537.932559][T30391] try_charge_memcg+0xf9b/0x13b0 [ 2537.937516][T30391] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2537.943492][T30391] ? rcu_read_unlock+0x9/0x60 [ 2537.948194][T30391] ? lock_downgrade+0x690/0x690 [ 2537.953048][T30391] charge_memcg+0x90/0x3b0 [ 2537.957462][T30391] __mem_cgroup_charge+0x2b/0x90 [ 2537.962399][T30391] do_wp_page+0x8eb/0x3520 [ 2537.966833][T30391] ? lock_release+0x670/0x670 [ 2537.971519][T30391] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2537.976889][T30391] ? do_raw_spin_lock+0x124/0x2b0 [ 2537.981910][T30391] ? spin_bug+0x1c0/0x1c0 [ 2537.986235][T30391] ? lock_downgrade+0x690/0x690 [ 2537.991082][T30391] __handle_mm_fault+0x19a1/0x3e60 [ 2537.996210][T30391] ? vm_iomap_memory+0x190/0x190 [ 2538.001206][T30391] handle_mm_fault+0x2ba/0x9c0 [ 2538.006003][T30391] do_user_addr_fault+0x475/0x1230 [ 2538.011116][T30391] ? rcu_is_watching+0x12/0xb0 [ 2538.015905][T30391] exc_page_fault+0x98/0x170 [ 2538.020495][T30391] asm_exc_page_fault+0x26/0x30 [ 2538.025345][T30391] RIP: 0023:0xf72206e8 [ 2538.029409][T30391] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2538.049026][T30391] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2538.055090][T30391] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2538.063052][T30391] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2538.071015][T30391] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2538.078980][T30391] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2538.086948][T30391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2538.094922][T30391] [ 2538.157641][T30391] memory: usage 307200kB, limit 307200kB, failcnt 2380 [ 2538.166296][T30391] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2538.173649][T30391] Memory cgroup stats for /syz2: [ 2538.173888][T30391] anon 794624 [ 2538.173888][T30391] file 315392 [ 2538.173888][T30391] kernel 313462784 [ 2538.173888][T30391] kernel_stack 327680 [ 2538.173888][T30391] pagetables 503808 [ 2538.173888][T30391] sec_pagetables 0 [ 2538.173888][T30391] percpu 4060640 [ 2538.173888][T30391] sock 0 [ 2538.173888][T30391] vmalloc 0 [ 2538.173888][T30391] shmem 315392 [ 2538.173888][T30391] zswap 0 [ 2538.173888][T30391] zswapped 0 [ 2538.173888][T30391] file_mapped 249856 [ 2538.173888][T30391] file_dirty 0 [ 2538.173888][T30391] file_writeback 0 [ 2538.173888][T30391] swapcached 0 [ 2538.173888][T30391] anon_thp 0 [ 2538.173888][T30391] file_thp 0 [ 2538.173888][T30391] shmem_thp 0 [ 2538.173888][T30391] inactive_anon 65536 [ 2538.173888][T30391] active_anon 1044480 [ 2538.173888][T30391] inactive_file 0 [ 2538.173888][T30391] active_file 0 [ 2538.173888][T30391] unevictable 0 [ 2538.173888][T30391] slab_reclaimable 31088 [ 2538.173888][T30391] slab_unreclaimable 308450344 [ 2538.173888][T30391] slab 308481432 [ 2538.173888][T30391] workingset_refault_anon 0 [ 2538.173888][T30391] workingset_refault_file 0 [ 2538.173888][T30391] workingset_activate_anon 0 [ 2538.173888][T30391] workingset_activate_file 0 [ 2538.173888][T30391] workingset_restore_anon 0 [ 2538.173888][T30391] workingset_restore_file 0 [ 2538.173888][T30391] workingset_nodereclaim 0 [ 2538.173888][T30391] pgscan 0 [ 2538.173888][T30391] pgsteal 0 [ 2538.173888][T30391] pgscan_kswapd 0 [ 2538.173888][T30391] pgscan_direct 0 [ 2538.173888][T30391] pgscan_khugepaged 0 [ 2538.173888][T30391] pgsteal_kswapd 0 [ 2538.173888][T30391] pgsteal_direct 0 [ 2538.173888][T30391] pgsteal_khugepaged 0 [ 2538.173888][T30391] pgfault 498095 [ 2538.173888][T30391] pgmajfault 32 [ 2538.173888][T30391] pgrefill 0 [ 2538.173888][T30391] pgactivate 0 [ 2538.173888][T30391] pgdeactivate 0 [ 2538.173888][T30391] pglazyfree 0 [ 2538.173888][T30391] pglazyfreed 0 [ 2538.173888][T30391] zswpin 0 [ 2538.173888][T30391] zswpout 0 [ 2538.173888][T30391] thp_fault_alloc 0 [ 2538.376830][T30391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30391,uid=0 [ 2538.422087][T30391] Memory cgroup out of memory: Killed process 30391 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:51 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048042) socket(0x10, 0x80002, 0x0) socket$inet(0x2, 0x80001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x17a9, &(0x7f0000000240)={0x0, 0x10001}, &(0x7f0000005000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) sendfile(r1, r3, &(0x7f00000000c0)=0x1, 0x200006) r7 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001580)) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x10}, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 13:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x3, 0x6, 0x1ff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048090) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r7, @ANYBLOB="00010000000000001c000a000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x87, 0xff, 0x2, 0x0, 0x3, 0x3800}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x38}}, 0x40) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) setuid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:02:51 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) sendto$inet(r0, &(0x7f0000000e00)="bfc1360a5a270f366af4575fe4ad036004f441a1997d8e530859ef50567615e9f57646d89e26d069d054f2441067293ec6e04a3a7a9fa0f9c5641916f1aafe551523dbc71fe6ee9a143de5b99fddc992210111fad317ed751179077d3e73b447b83911d9c996489dbe44109a78b15c79b305ab90114d09681f17", 0x7a, 0x20040080, &(0x7f0000000e80)={0x2, 0x4e24, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="125e13248e1975f23ae20327e6c8ac6030aab1bbfd49173af7668fb90906d93b9a4cca528c912a8e1ff5ff843c5b1ff5e5cad1cfb30f74cd6b8d1599507da1f5151f327381325c8b215f24d714560eec9cb193fefe0e526827686a15f6fbd6742fb65bb1737a018c2cfac974a0a299c0b3526352", 0x74}, {&(0x7f0000000240)="86fa0112fc907755f63dd8f1fa21b7e7baccbd72913f91dc066b9424db1d0fb80d96a021069c96fc3d10185eea5e2040f13dea1d85efeed231193c2ef19e936c3eb66e79d4a31d9e9d55c34d3418b87a2102080d768a0fc156987d87c0e96cd8d70a7e3a6063ce2abf625b2907defae1fab9b9836736fc9267567cab2d44b15112430af2b2c1eb", 0x87}, {&(0x7f0000000040)="648e4bdf09bff0bd7e11ad8d641ccdd6b1a57ed5c5", 0x15}, {&(0x7f0000000180)="4623f164856b721fadf8a159bef296", 0xf}, {&(0x7f00000001c0)="4e10ddcd45071f3d9a519f17b01deb7d3a668745f1c4557776bcc67a6a03bb03ccd71907b2863d9327a01e4c818a2ee1ac0d74eab2", 0x35}, {&(0x7f0000000300)="1e3b18f6ef053871f7f316841c448cd1aa865194db39f72369b06399fbd9367b576f6d", 0x23}, {&(0x7f0000000340)="d82483348aca14a008d2a24f7ffb97d6dba80ccd631807b8458c50604cdb02479aec474e90d9326d396b2952a778e8f77e61cb598d03b96f645b2117b62541c73a10ad3100e2fbd6c6bdab10b5c8dc98d450266551448278f6abc12e674afa62d8e79048c785478aebb4adecb3b9a289f24eff27bb11c806d03e92579fb51b610914638967036f0c3232cd03ac22a709ea0ff12d22fd656d4fafc6fc066c48078371a1e2c5a7e42694391da943e871b4931c6672947a912318d438ac69841941c12fc619d8d9a6ecabeeb0ba91348db088b5694fa68d19109961224015", 0xdd}, {&(0x7f00000004c0)="8e56c774b9d51a5daef421675253ed5694f27bfecd511e680fdf5e3cb0e0b4d1387b60c5d0587ec6ab052e66e43bd96cf3717500d57fe033d27c53d4ac0b1cf7fbb3bc62dc4fb4b94c448a5eb2b4026bb2b0e343250408e9c9ebdea35334a5e2c0f2026d", 0x64}], 0x8, &(0x7f0000000540)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr={{0x74, 0x29, 0x39, {0x89, 0xc, 0x2, 0x8, 0x0, [@mcast1, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}}}], 0x84}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="8da6773eedfaec2a0534c2dd25c4de6c8adadeb780280459335a674b867dcd25b016609900ef7896e2f5109932d5de77c642e3d46f0c840940509c18188b3ea22b38fa526204fcd10dcf4519eafe7bc7243473f0b1c9e3ee0b7af6ceba7981f20bc13643ce6b7364cbb61837e73dc721cc8780bb4ddf2cf4c855504de05ae9dfb08be20359cb12583ea6a931fe5360fda04e73e2e80ac11dd43d21c1f5e04f3e946fbf488e0888061dc7fa1c72202e954bd8a7c0304c8f4ceddc6b7fa355a2ba3bddaaa4f9c7414995bb747130382f6d9d062aa36506ef27ec872a273e407d1af7685d6b2bef9c9729a669105d5e8f4671421733f4d048", 0xf7}, {&(0x7f0000000700)="ed3316abe9bc7b87cc2d13007772cfcb1127bb47149c75ef72d1cbf0b45c8f6156da934a06a5a69a8810b86323da1ff00577004f5a65f9003cc5eb4472f18d8eb73f017dcf404fadd32c9cf5540ff5f4fd88ccd22ec7947a38220d73cd02a14b619db8a019dcd13897fc58b539f0213d48f97add218bdc1bb26365ccd1e1b47b7d153d5485cfa43e296380f4c453890173fa91c9cc9e72cdf25497d45c367112df56", 0xa2}], 0x2, &(0x7f0000000840)=[@tclass={{0x10, 0x29, 0x43, 0x7}}, @pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r1}}}, @dstopts={{0x1c, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1]}}}], 0x4c}}, {{&(0x7f00000008c0)={0xa, 0x4e21, 0x57, @private2, 0xffffffff}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000900)="1966ef73be85b5d2f2b5900b791ae90e69dd5e41abd0d06aa5fa3ebc687b874124ff7a0f4384015d392d4ce5cbae546e2c6a0f521709603cbbaab57befecf75d68f1dfc519a6c02f46312879d06a4a7fdd3bad97af83f8a2dfce696f70e4f4705f91f40743f4888e5f588825765e6ac52e31fa71a18bb3f8ca07ccb571c9bc6e0cb8251dfa9ed23764298661960ca4b7afef18245d0e6c4a8889cf774703d1a13db4b353de62", 0xa6}, {&(0x7f00000009c0)="14afea1ccb4c118813986f05fd04a3251a8b86cf6bf7d66d1f545993a56a05b62bc954164a91d732bfc5569eafbc29bf91a856d51c7ac1fd8da77b6281ec4fb9b6d177f9a4741aa45cedfba6fb2f414c2fdf2dbbd5f4843131b27384a4245001a61704830e8d4e19fb4efa35db5af2f4b4ab715ab7af59cdb16c66c9b2ee9764c16c5febfec65fe9e52fc69e9071dec9b8d1a28885ea3119d064d694609f1cb02ddbedab5d89fd870b57e6b44093475a6d7069f6eb62b2dd49679d3446ac9f0cf02bc7fe", 0xc4}, {&(0x7f0000000ac0)="879285c54f55e92b7c926f340e33daf1915c44fbe9135a7f0af2c213c90d3fabe0de8416d2572e348d3ebcd0683bb33e40bfa87c4838", 0x36}, {&(0x7f0000000b00)="ff8a1ed1adfcd2de03a0f7c5cfef438e03152cba5d1bf9e5b4af8ec414f3f9a1aee65db49700720e8f2dc8269647b66753e4696ef31bca6e2f187a8f8fd0fa71b90c867760f8957461f2734c443567cc", 0x50}], 0x4}}, {{&(0x7f0000000bc0)={0xa, 0x4e25, 0x4, @mcast1, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c00)="86d0bb15372f58419a7125cd5c62a6b60fabe3a41de0d107d5df597ef932dda0898762536d809ef3f0067d236800045f362e8a8c53dd9b8ac7e581d4178ac141b0bd3db81536614febdaab03a263777f156c6a1386fdeb79e983e0f9cb903b8a136d04b1519a4aad944285f87a3501a1c84951b32359c8783be263a2065ca0ae5c054a4f1629bf6eb200c06aa89dc0a39ebd92867466b6b78d3bb2bb917aed5757ff41da0d2bb96efb03c51d5c63d20ae3eb4e5e4f9b16298c8b2422492be0265019770cbd006d63", 0xc8}], 0x1, &(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="200000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0], 0x1ac}}, {{&(0x7f0000000f40)={0xa, 0x4e24, 0x8a6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000f80)="81204264c29ee59a7c8c11c306816a18bd13fce8d8f8c6c45dc354c11d9996e43ed9427e3b2d202c6ba41e8629b519c91cb406f7b015b672e5e7be9cf6cae50e0d1766f2508296e4207c1871348076ba9c6293f088c5132c2169330a12c2f2d6d8cb5cbfa38f7168f5d464f5f88f4ffe7a32abebc3f3abd332a690b1e1abecf8d3a35a462d9b626c735454cce15a", 0x8e}, {&(0x7f0000001040)="d61f7581edcf0fb9a68f4d0712060a9311a129f9d072bacbd8e1b903de88c483e3", 0x21}, {&(0x7f0000001080)="c71fe27eb243cd0ac9ff15dfc0281e339790556e9facc683b30391beacbb89c6f22c218e72f337fbffc01fd115d5c2d72df5ca88f383a92c88bde9e5bf4d0f98e83e2038b6934b23a6623c58fa932a685d8faff4b74785b0869c5fd9c2edd278b3ce", 0x62}, {&(0x7f0000001100)="6b6eef4142377bb6bf54ccdbf5c6e185c0aa8185a6f993c7001e7095489cb345fd21929d6726ee6ecbf38b2cad7e38d3e7c4cd5396be91cae0ac8f2a889b2d5db2dec6150e3176", 0x47}, {&(0x7f0000001180)="eaf0bf30cbd3dbe9fcd91ffa1181282f60d6c838e6f276b8bc542b641181dc437ecdd88d32986fd10a9ddb68d4fe0e5c08fa311d4333cc978a87c0b4ce258438850aabc2c3ae4de72c58ede7ed693050a296340b94ad636d57afbf6fc2da6435bbbbc4c4d166", 0x66}, {&(0x7f0000001200)="e043daf7eb0b", 0x6}, {&(0x7f0000001240)="ae44fbde7bbc2af8aa1a41822de8ee2e0f120d3ebd73b7912c1a096dd3f379017ee055ebf72057e4e1e741f31e4f111e031e5921d50dece9ea0c3aeba2069974a04f356922827b8444dbb70b606ff88c170ce28adb716163326a57c218db9eccaa61f515294c8e11e724164fd79f5b5a83d77a2c92a369d37ae60107e5dea9695a884ddba4a8c382e218dfd32ea34b75c404283f20b860302e", 0x99}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4d44d4473bb75646d440f0b921bbdc9a670744a98e460088f62a78af1080278ec26a0d97604b34df8a7f5164b3409f1d28645d672f8043009dfe54a3353b1bb88f04b13e8cee0b9d1fbe146cdebc96b92620", 0x52}, {&(0x7f0000000d80)="665d37765f3d37f3bdd8c7efd50260a9fcafda5a49401fc027efa7d1add048151b44b4a2dce154528a89287043c9eb1be1926138ee5235920b4662a4d8785029ac9b3d707ee66615a0197c40a652d2f89991ca6ffc991f1f04a368a8505f029b95982f1b63b8241bcefc876133ce00d7816abb", 0x73}], 0xa, &(0x7f0000002480)=[@hoplimit={{0x10, 0x29, 0x34, 0x8}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x21, 0x4, 0x0, 0x1, 0x0, [@mcast2, @loopback]}}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x87, 0x2, '\x00', [@pad1, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x6a, 0xb, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x800, [0x2, 0xfff, 0x542d, 0x1, 0x5066, 0xfa, 0x0]}}, @ra, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}], 0x114}}], 0x5, 0x4000) 13:02:51 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8004550f, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:51 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x400454ca, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025280e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:51 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045510, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:51 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c13d4efb3d285e86d000352b0839eef84afff52dd000c0002f1"], 0x3c}}, 0x0) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x30}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "613f1af2d725c4c26d471dced8"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bd90220c68c876e1471a80da87"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40140c5}, 0x24000040) r8 = io_uring_setup(0x66c9, &(0x7f0000000040)={0x0, 0x0, 0x1}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x13, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) syz_io_uring_setup(0x2623, &(0x7f0000000340), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x50000008}, r8, 0x1, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x18, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r9}}, 0xae) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0xff, 0x2}, {0x8001, 0x3, 0x4, 0xa9}, {0x6, 0x40, 0x9, 0x2}]}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) [ 2538.729640][T30426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2538.793841][T30430] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2538.913125][T30416] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2538.980231][T30416] CPU: 1 PID: 30416 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2538.990698][T30416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2539.000750][T30416] Call Trace: [ 2539.004034][T30416] [ 2539.006996][T30416] dump_stack_lvl+0x136/0x150 [ 2539.011677][T30416] dump_header+0x10a/0xd70 [ 2539.016112][T30416] oom_kill_process+0x25d/0x600 [ 2539.020970][T30416] out_of_memory+0x35c/0x1660 [ 2539.025672][T30416] ? find_held_lock+0x2d/0x110 [ 2539.030440][T30416] ? oom_killer_disable+0x2b0/0x2b0 [ 2539.035654][T30416] ? rcu_read_unlock+0x9/0x60 [ 2539.040368][T30416] ? find_held_lock+0x2d/0x110 [ 2539.045169][T30416] mem_cgroup_out_of_memory+0x206/0x270 [ 2539.050743][T30416] ? mem_cgroup_margin+0x130/0x130 [ 2539.055865][T30416] ? lock_downgrade+0x690/0x690 [ 2539.060721][T30416] try_charge_memcg+0xf9b/0x13b0 [ 2539.065673][T30416] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2539.071682][T30416] ? rcu_read_unlock+0x9/0x60 [ 2539.076403][T30416] ? lock_downgrade+0x690/0x690 [ 2539.081257][T30416] charge_memcg+0x90/0x3b0 [ 2539.085668][T30416] __mem_cgroup_charge+0x2b/0x90 [ 2539.090612][T30416] do_wp_page+0x8eb/0x3520 [ 2539.095057][T30416] ? lock_release+0x670/0x670 [ 2539.099736][T30416] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2539.105105][T30416] ? do_raw_spin_lock+0x124/0x2b0 [ 2539.110133][T30416] ? spin_bug+0x1c0/0x1c0 [ 2539.114458][T30416] ? lock_downgrade+0x690/0x690 [ 2539.119312][T30416] __handle_mm_fault+0x19a1/0x3e60 [ 2539.124428][T30416] ? vm_iomap_memory+0x190/0x190 [ 2539.129383][T30416] handle_mm_fault+0x2ba/0x9c0 [ 2539.134169][T30416] do_user_addr_fault+0x475/0x1230 [ 2539.139279][T30416] ? rcu_is_watching+0x12/0xb0 [ 2539.144042][T30416] exc_page_fault+0x98/0x170 [ 2539.148628][T30416] asm_exc_page_fault+0x26/0x30 [ 2539.153474][T30416] RIP: 0023:0xf72206e8 [ 2539.157534][T30416] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2539.177147][T30416] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2539.183204][T30416] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2539.191270][T30416] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2539.199238][T30416] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2539.207204][T30416] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2539.215175][T30416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2539.223151][T30416] [ 2539.274715][T30416] memory: usage 307200kB, limit 307200kB, failcnt 2488 [ 2539.301125][T30416] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2539.325272][T30416] Memory cgroup stats for /syz2: [ 2539.331938][T30416] anon 794624 [ 2539.331938][T30416] file 315392 [ 2539.331938][T30416] kernel 313462784 [ 2539.331938][T30416] kernel_stack 327680 [ 2539.331938][T30416] pagetables 503808 [ 2539.331938][T30416] sec_pagetables 0 [ 2539.331938][T30416] percpu 4060640 [ 2539.331938][T30416] sock 0 [ 2539.331938][T30416] vmalloc 0 [ 2539.331938][T30416] shmem 315392 [ 2539.331938][T30416] zswap 0 [ 2539.331938][T30416] zswapped 0 [ 2539.331938][T30416] file_mapped 249856 [ 2539.331938][T30416] file_dirty 0 [ 2539.331938][T30416] file_writeback 0 [ 2539.331938][T30416] swapcached 0 [ 2539.331938][T30416] anon_thp 0 [ 2539.331938][T30416] file_thp 0 [ 2539.331938][T30416] shmem_thp 0 [ 2539.331938][T30416] inactive_anon 65536 [ 2539.331938][T30416] active_anon 1044480 [ 2539.331938][T30416] inactive_file 0 [ 2539.331938][T30416] active_file 0 [ 2539.331938][T30416] unevictable 0 [ 2539.331938][T30416] slab_reclaimable 31088 [ 2539.331938][T30416] slab_unreclaimable 308450344 [ 2539.331938][T30416] slab 308481432 [ 2539.331938][T30416] workingset_refault_anon 0 [ 2539.331938][T30416] workingset_refault_file 0 [ 2539.331938][T30416] workingset_activate_anon 0 [ 2539.331938][T30416] workingset_activate_file 0 [ 2539.331938][T30416] workingset_restore_anon 0 [ 2539.331938][T30416] workingset_restore_file 0 [ 2539.331938][T30416] workingset_nodereclaim 0 [ 2539.331938][T30416] pgscan 0 [ 2539.331938][T30416] pgsteal 0 [ 2539.331938][T30416] pgscan_kswapd 0 [ 2539.331938][T30416] pgscan_direct 0 [ 2539.331938][T30416] pgscan_khugepaged 0 [ 2539.331938][T30416] pgsteal_kswapd 0 13:02:52 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2539.331938][T30416] pgsteal_direct 0 [ 2539.331938][T30416] pgsteal_khugepaged 0 [ 2539.331938][T30416] pgfault 498141 [ 2539.331938][T30416] pgmajfault 32 [ 2539.331938][T30416] pgrefill 0 [ 2539.331938][T30416] pgactivate 0 [ 2539.331938][T30416] pgdeactivate 0 [ 2539.331938][T30416] pglazyfree 0 [ 2539.331938][T30416] pglazyfreed 0 [ 2539.331938][T30416] zswpin 0 [ 2539.331938][T30416] zswpout 0 [ 2539.331938][T30416] thp_fault_alloc 0 13:02:52 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c13d4efb3d285e86d000352b0839eef84afff52dd000c0002f1"], 0x3c}}, 0x0) (async) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x30}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "613f1af2d725c4c26d471dced8"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bd90220c68c876e1471a80da87"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40140c5}, 0x24000040) (async) r8 = io_uring_setup(0x66c9, &(0x7f0000000040)={0x0, 0x0, 0x1}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x13, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) (async) syz_io_uring_setup(0x2623, &(0x7f0000000340), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x50000008}, r8, 0x1, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x18, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r9}}, 0xae) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0xff, 0x2}, {0x8001, 0x3, 0x4, 0xa9}, {0x6, 0x40, 0x9, 0x2}]}, 0x8) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (rerun: 32) 13:02:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x4008800) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048042) (rerun: 64) socket(0x10, 0x80002, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x17a9, &(0x7f0000000240)={0x0, 0x10001}, &(0x7f0000005000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) sendfile(r1, r3, &(0x7f00000000c0)=0x1, 0x200006) (async) r7 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) (async) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001580)) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 2539.565043][T30416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30416,uid=0 13:02:52 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045518, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025300e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2539.735070][T30416] Memory cgroup out of memory: Killed process 30416 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2539.739697][T30437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:02:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048042) socket(0x10, 0x80002, 0x0) socket$inet(0x2, 0x80001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x17a9, &(0x7f0000000240)={0x0, 0x10001}, &(0x7f0000005000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) sendfile(r1, r3, &(0x7f00000000c0)=0x1, 0x200006) r7 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001580)) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x10}, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 13:02:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x4008800) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048042) socket(0x10, 0x80002, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = syz_io_uring_setup(0x17a9, &(0x7f0000000240)={0x0, 0x10001}, &(0x7f0000005000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) (async) sendfile(r1, r3, &(0x7f00000000c0)=0x1, 0x200006) (async) r7 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001580)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x10}, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 13:02:52 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c13d4efb3d285e86d000352b0839eef84afff52dd000c0002f1"], 0x3c}}, 0x0) (async) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x30}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "613f1af2d725c4c26d471dced8"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bd90220c68c876e1471a80da87"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40140c5}, 0x24000040) (async) r8 = io_uring_setup(0x66c9, &(0x7f0000000040)={0x0, 0x0, 0x1}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x13, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) syz_io_uring_setup(0x2623, &(0x7f0000000340), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x50000008}, r8, 0x1, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x18, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17, 0x0, {0x0, r9}}, 0xae) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0xff, 0x2}, {0x8001, 0x3, 0x4, 0xa9}, {0x6, 0x40, 0x9, 0x2}]}, 0x8) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:02:52 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4004550c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:52 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/xoop0\x00'], 0x0, &(0x7f0000000300)='cramfs\x00', 0x0, &(0x7f0000000340)='@\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = signalfd4(r1, &(0x7f0000003cc0)={[0x1, 0x7f]}, 0x8, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003d00)='ns/uts\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="bdb3cb", 0x3}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}], 0x4c, 0x40040}}, {{&(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)="a48056f7efb6cc2d96449c41fbe95fcfe9f41bb71d45f6a0b957b856f54dde80ef422f5660e094abf6046cc693", 0x2d}, {&(0x7f00000005c0)="4a4d5ee2916c2ae25cb870b280fd17383b89709e3c4712416e8bf1dbc7b944cfcba960bce5190e2000e435363fdfe91dabbf52b57cfbed3a64fd1ff13847db0b682b3a7992d4509ef6327d497ae7bd589e18b6a365b6445485567f0ad24dbab14bba0de86e97370102d08701305d97f654acf810d69fe0a5b3cb48facb99caf5654bc2328fb49d60e6a16496043cae2cb9ca6dfb8035", 0x96}, {&(0x7f0000000380)="e16c247886fab40405886b85a705bffaf529f5874b30fdb120ac6a5136505aeecd9d3eefb1ed", 0x26}, {&(0x7f0000000680)="6665cf9799610ecb095b851d83a4bc5849daab9b633bc12f86c860abd28c2411675f95a3702cf4e062f7089a34cd148233840286ab86", 0x36}, {&(0x7f00000006c0)="b4be4de79ea7a16cffb91676b18d29e4d088dafbfbded6acd34a66df66da143eaebfb1d356908da0d919e0c8764f527224d712de39d9b1a2d487e285571f27a86c43960fc0fa0cb6c3165d9b55579eec7714651b7f738ae401b249b541ab29121584e75dfd9191c2756d3b4e43174070524d4e2f736d9762f7ed9a1a8103765bd4d6227a6fdc1ea086345256a07bedebc69624f51875a62085422b644899852484f385e129f2d5450f79c020500e864b3cf2fd76eb", 0xb5}, {&(0x7f0000000780)="0be3897c4786374b2f72a452d4df590dfc34e2d96fe6fb4af1e4919c0751ee944a58feca2b6eb82062dfd5ed0b878e0e59f64cc1d21d57c7a95eecab521b226ebd12a73330f3959b151b9307b603991a2d68f2cf98a32e6d3473db480e27bf4f163a0ebafa0561f77ded13e3c957c44dfbb84a3e0a31931f637a5ade78d6e6858f8fe60e5ebaeb936d0d36e2c72df468bf197e833eafd77d9dba2217ff022a6317a4ab08925ac36580e044", 0xab}, {&(0x7f0000000840)="d16d756ddd2c12f91bdc93129c2099870130febc7f7cbccf091b370c921dfa1cce544810fcba1b6538ad9bb4c03f252f2fd31c81228dba9e9bdf230e712f5e43b01fb25992ca5a7b17ce9e6bb0de7f42a878aac5bd14a5a68e911d8aacafc1a6bebb19a31a8b7e170d387c8d0a9ba780d76ae39c14888c3b2ff6158aaf870152142024fff65eb0ccd34f249f8d01a6d5f4898f8f03dce8b4897c403059a1b058a38df36518672e251d8b23604c90b9d6b0036c64b84dbe66416d5de5601289448e241eadd36fc8c60fbd7d9a70", 0xcd}, {&(0x7f0000000940)="a19ff9971b850039b75c800e4ce6038a3d451a330012023e1ce39c084203f64a6079", 0x22}, {&(0x7f0000000980)="0400f1658c3ceba1c1bfa16f291c2d1a5c96bb3f94ed5adb3fda3c79a4b7db4d43062638ca9b45e6f2b02728db49df85f6cb0e412ef24aeacbf7acbea2dc2a9653d9420da5f131c3803a32e5f2ea791d78e4588a13f48929f0a3e928b2d2fc0ed475848e2c5286c9ae6f11041ee6e613012ce616e0df6cb91f1c5908b6a9b3be9b8ef572e20f9e087a78c5205d9f36f2b5047926f68c3a80c8fda772996350633ff836f15742aa80b7f37c1a030250b053eb6fffc56e3ea745538304af707de15fed6570", 0xc4}], 0x9, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="3f2e30fb964658eea2570161bb6dba9f0225f8fb58c266310597da32ff2f10f9078f648ee25d155da72f5f99ff1734b0e97ef085632ae71462f7b3bc81013da5979f8a745d011a57749a469c44f6235ec897acb86b30ede3b0b7a2af3c282cb2f8ec147ebc5aadd502b1c0ab5f1449c3836495fd979682afd2a8be0a", 0x7c}, {&(0x7f0000000c00)="8ebd74569d20af2821ce9160213eefa66335704103da6562cfd036024eed718ab43bebad50c7a56eda01c7a20d96d0de2ea9a7993cdfc1c4ac54a0594a04fd6adf0caec725f2f61bbeba0f048fc3f388fffa9cf5c5c8c06456fa79001d4f1aed68eb113f1d538a086077fb9eecda08625aa1477dc8484cd7cb6362b0c6bd017683bb7799fe", 0x85}, {&(0x7f0000000cc0)="28ccb0d00b112a542e5133b8c08b9a2340a22cd34291140e6af8a6b2eb60712994572222fd934bc0cad0b793d1f39babd3c3e99cbc7f6029bdf578a30e33379ab0db72b43056f2b9ddc7393f830b78871a912bf6c7aa91dc27e805dcc7eb6c42f022cd9a3eb87f2c23fc596680c4815eaec6673dfc9701d50864", 0x7a}], 0x3, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14, 0x41}}, {{&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e40)="63f5f0db5e2ecc574bb1648a95e5762357e58dd1231cfd936e377e9365e6084efe57034d421706e619bb951c58c5fb72cbf19644be10df4e98504dd0ebbb76895066d28d01121be855c0c75dd1933d51b88366312f51ec6d18b8309c0f06eefbc02f030152e1ec0ecb000c5c49aaa8d0e866697edd17c91ba2b44390d19c497e19e2aeb48d15587bd01075af41e7df1a866dd2b06dbe946e817d05b81fb5d40b345520d0ada50f5ef97f3ea721359013280791bbb163c15646244d1cb97056e162aed419bfa157258b71", 0xca}, {&(0x7f0000000f40)="0f968ef25901e2d75ac4282379463ffac3661783c23bdcdd1610e199eae2efa44c638889076b1cc0334018b70627781a6b824a60557fad8d8c6fc6f8e79612b9bee4c9c1961ecc73140ceae77ff9076a14d91716c9f9110f2a09c9a7da440d71b7cc31dfb5921bfbff692693ce27fae71c08a91c1d0ed72765b9e3bd4319e1cc47933d644e57cdf25aaad202de2705eb3c8099f88647b7f113c396bd09e1839d6e776a52b03c1a2953ca2ee45d52f97f6611bbd535295018bc73460b041f57af059f1a53cf9802ab753fadaee25e7d9710058083f96e08ebf2529b36e76c1365eb54e6da2695273a48ec", 0xea}, {&(0x7f0000001040)="d9035562aebe8abf7bd6196d9b2130de258877d276bd28648a704ec402c0387c1492ea432c95669cc139a59546e1d944cccba42004ae43cfa6e3ad1f9163de053c0405a8d77179db6cbabf514812dae941264bdc9595ca4c6dd79ecf45093bd6ea10116b86a7823ce68e77fdfea92dc001bcda0605505b0073d8d1bb9ab3e909996290a1bbe5a785490e6f646bce9daef584216c5e58bbddef0ee6c9c9b355182ec3ea7412f7325429b5fbbfb2f5836669bceb625fd87f86586ad3efa731cd3c9c4669a6bc75c156fe", 0xc9}, {&(0x7f0000001140)="39e4e97979abbe7ad8ddad6c79e760f80b0b9758d40b12268eef80265d9914c65e946e75402f11d462be03e92a9d5ad8", 0x30}, {&(0x7f0000001180)="67847b1954e61516de28e8092656b8b33a2523aefd329724f33d58eee3883ed5736ff624c151909fd6191786a740d2d0ae2c557aca5eb303394d2ef73a04c85edefcec81782b3803639f5488bd7e8ae21cad5e", 0x53}, {&(0x7f0000001200)="00780b961e1e81a78e362705fa96a1bdf8439e662d79f6f4d07abb04d51fa7fa7901831ebde93c2521237300fb80401d891396dc50eee19d339eccf83daff42944ec13a20a42b07c23d5c5270ff0a4b7beae3b8a7c9a5690c19beb2ae881cf3dd48d50219dc908a999747d6dd4d1c47a76a178976895dcb84f0b124a0efe35d79c2b5371fa7d9b56ccb2117461c7c724f5fbbb44a04d1adcc84eb039a153a563f33dd8f350f4be996173957b2b6c916e5b444ba01cb11d6e1e7435ea", 0xbc}], 0x6, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000034c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x70, 0x854}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000035c0)="06f73fa3196c27c0e0295890e80b49ebc87229cac6f9056e2f4b8642289de630e7940a701256", 0x26}, {&(0x7f0000003600)="17b3accf829989eb02e7ef624851b89c6d5d3edc215a2a635b88a5089b59c70fdea32f7678378f36401e96e74a48d71ca9f595ff846b585e420d339276df57f2f0af1af451e5469292c98404fcd60e41a5f2a6094f146966507268611ce4990bd3f58ddeb9a7382b75c560c62ad1b11bca55215e345192253a3ab2973245f2cf9d92710a69bf6a5c809550a8f417ea0acac114d8dfd8ccd77fcca14330a0d8780882daceeb86b7", 0xa7}, {&(0x7f00000036c0)="33cba4227c8c8c1f283358b447a58c66f233ff740ccdc8fe6bcba3b2b92e1948f3e0a7dda55d8f9bac77acc3a3cfe4f25e4ad8e203c9dde3e9cfa05b4ae3da169d", 0x41}, {&(0x7f0000003740)="b238fc912a033a86fa388c9b8642aabbaa910715c0f75b8bd5c1b1415053d7797578aa41db8ea2a9288b79eff937eb964ead70392ba9b010cfddc3ee0e8b645a3db0964269ed07392a9aa93344ab58209aca367bddcf4e5b5a45f4566abf08a956df699d36a8670512b464227a393ab32ddeac0b81a325d5c8e759e095ae2d3549bda4eba737269144792c882c9d3413edcf1959373f96fcdde901c86759b9046c8cc06d476b21364770efd3da5668432cea8dcc087139db5b4356109231fbd0852627d146de34cfcce1c1e7ce1ab8f23edb", 0xd2}], 0x4, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)="e1f9057427b05d766d3f03ebcd381d602225ac2cf9b6c065c0e6e67acbb328d2f18249a6dd8570460ce070d02f87cce1bf175158985ff1990a70e53565e54f487ac3295d03ddd84f7ff53eb640af5abc225b11842f55c88a98d616c61c66087ab2243b6709272a7536f2029dc474fa3eb0c750e55179a47ab67f43ef4f6469c1756b516d92156db942f1f0159b5384", 0x8f}, {&(0x7f00000039c0)="4f9a3cebe8a3fd4f392470fee83008f5452761d462206fb5c78597c36f77e60b2f96c4af58bbabee5a1ff6355add3911f65d3bdb61985067c8d93973d7d62d7784d1dd34d55785a241acb6bf72ae1695dc591cb5b000856dfb42a721aef9ec6a0e08319fd00b7a213d90d230978f257dde460617352c2eca7f9f1525bc4ba6cb04d0353b893c4e3a1782b76f7c4e00fb9eb5afd485aceb77e1cbbcff7fccf56d0fd5c506b9c8fa5486fc3722bbcc56cce41a57042b954bc49ffe7d58c5f6251f20b9f9af55841323c522a89ffa339e2625ef68182568e6e3baf0ddb953804d655d38f9342a65fb312a8f394bb6a5fa5a5857fa", 0xf3}, {&(0x7f0000003ac0)="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", 0xff}, {&(0x7f0000003bc0)="015a16052c75bc4bb3f1b7ecab7b70ebc1a6da7fe933036348e7d987be2305a121be1a5e51aecb6b5ed0159cf22c6fca934a631bf93d71c7acaf039440f75c5c3614e5b21a1f8fe86628dfb61c36265af484b3e02369ced8fd8376682bc5ba8e77b68081773805d9f5911dc5", 0x6c}], 0x4, &(0x7f0000003d40)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r1, r5, r0, r8]}}], 0x54, 0x40000}}], 0x7, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 2540.003160][T30466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2540.084362][T30449] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2540.111919][T30449] CPU: 0 PID: 30449 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2540.122866][T30449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2540.132938][T30449] Call Trace: [ 2540.136241][T30449] [ 2540.139170][T30449] dump_stack_lvl+0x136/0x150 [ 2540.143851][T30449] dump_header+0x10a/0xd70 [ 2540.148274][T30449] oom_kill_process+0x25d/0x600 [ 2540.153135][T30449] out_of_memory+0x35c/0x1660 [ 2540.157848][T30449] ? find_held_lock+0x2d/0x110 [ 2540.162709][T30449] ? oom_killer_disable+0x2b0/0x2b0 [ 2540.167943][T30449] ? rcu_read_unlock+0x9/0x60 [ 2540.172624][T30449] ? find_held_lock+0x2d/0x110 [ 2540.177431][T30449] mem_cgroup_out_of_memory+0x206/0x270 [ 2540.183001][T30449] ? mem_cgroup_margin+0x130/0x130 [ 2540.188126][T30449] ? lock_downgrade+0x690/0x690 [ 2540.193599][T30449] try_charge_memcg+0xf9b/0x13b0 [ 2540.198542][T30449] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2540.204543][T30449] ? rcu_read_unlock+0x9/0x60 [ 2540.209253][T30449] ? lock_downgrade+0x690/0x690 [ 2540.214141][T30449] charge_memcg+0x90/0x3b0 [ 2540.218564][T30449] __mem_cgroup_charge+0x2b/0x90 [ 2540.223501][T30449] do_wp_page+0x8eb/0x3520 [ 2540.227930][T30449] ? lock_release+0x670/0x670 [ 2540.232601][T30449] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2540.237979][T30449] ? do_raw_spin_lock+0x124/0x2b0 [ 2540.243049][T30449] ? spin_bug+0x1c0/0x1c0 [ 2540.247382][T30449] ? lock_downgrade+0x690/0x690 [ 2540.252255][T30449] __handle_mm_fault+0x19a1/0x3e60 [ 2540.257385][T30449] ? vm_iomap_memory+0x190/0x190 [ 2540.262362][T30449] handle_mm_fault+0x2ba/0x9c0 [ 2540.267143][T30449] do_user_addr_fault+0x475/0x1230 [ 2540.272264][T30449] ? rcu_is_watching+0x12/0xb0 [ 2540.277044][T30449] exc_page_fault+0x98/0x170 [ 2540.281633][T30449] asm_exc_page_fault+0x26/0x30 [ 2540.286481][T30449] RIP: 0023:0xf72206e8 [ 2540.290550][T30449] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2540.310155][T30449] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2540.316225][T30449] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2540.324189][T30449] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec 13:02:53 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8004551a, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2540.332168][T30449] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2540.340134][T30449] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2540.348102][T30449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2540.356078][T30449] [ 2540.389712][T30449] memory: usage 307200kB, limit 307200kB, failcnt 2573 [ 2540.396876][T30449] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2540.403964][T30449] Memory cgroup stats for /syz2: [ 2540.404251][T30449] anon 794624 [ 2540.404251][T30449] file 315392 [ 2540.404251][T30449] kernel 313462784 [ 2540.404251][T30449] kernel_stack 327680 [ 2540.404251][T30449] pagetables 503808 [ 2540.404251][T30449] sec_pagetables 0 [ 2540.404251][T30449] percpu 4060640 [ 2540.404251][T30449] sock 0 [ 2540.404251][T30449] vmalloc 0 [ 2540.404251][T30449] shmem 315392 [ 2540.404251][T30449] zswap 0 [ 2540.404251][T30449] zswapped 0 [ 2540.404251][T30449] file_mapped 249856 [ 2540.404251][T30449] file_dirty 0 [ 2540.404251][T30449] file_writeback 0 [ 2540.404251][T30449] swapcached 0 [ 2540.404251][T30449] anon_thp 0 [ 2540.404251][T30449] file_thp 0 [ 2540.404251][T30449] shmem_thp 0 [ 2540.404251][T30449] inactive_anon 65536 [ 2540.404251][T30449] active_anon 1044480 [ 2540.404251][T30449] inactive_file 0 [ 2540.404251][T30449] active_file 0 [ 2540.404251][T30449] unevictable 0 [ 2540.404251][T30449] slab_reclaimable 31088 [ 2540.404251][T30449] slab_unreclaimable 308450344 [ 2540.404251][T30449] slab 308481432 [ 2540.404251][T30449] workingset_refault_anon 0 [ 2540.404251][T30449] workingset_refault_file 0 [ 2540.404251][T30449] workingset_activate_anon 0 [ 2540.404251][T30449] workingset_activate_file 0 [ 2540.404251][T30449] workingset_restore_anon 0 [ 2540.404251][T30449] workingset_restore_file 0 [ 2540.404251][T30449] workingset_nodereclaim 0 [ 2540.404251][T30449] pgscan 0 [ 2540.404251][T30449] pgsteal 0 [ 2540.404251][T30449] pgscan_kswapd 0 [ 2540.404251][T30449] pgscan_direct 0 [ 2540.404251][T30449] pgscan_khugepaged 0 [ 2540.404251][T30449] pgsteal_kswapd 0 [ 2540.404251][T30449] pgsteal_direct 0 [ 2540.404251][T30449] pgsteal_khugepaged 0 [ 2540.404251][T30449] pgfault 498187 [ 2540.404251][T30449] pgmajfault 32 [ 2540.404251][T30449] pgrefill 0 [ 2540.404251][T30449] pgactivate 0 [ 2540.404251][T30449] pgdeactivate 0 [ 2540.404251][T30449] pglazyfree 0 [ 2540.404251][T30449] pglazyfreed 0 [ 2540.404251][T30449] zswpin 0 [ 2540.404251][T30449] zswpout 0 [ 2540.404251][T30449] thp_fault_alloc 0 13:02:53 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80046601, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2540.817790][T30449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30449,uid=0 13:02:53 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000004c0)=""/145, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff92) keyctl$restrict_keyring(0xa, 0xfffffffffffffffd, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)='id:ab*e') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x84800) ftruncate(r7, 0x0) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)) ftruncate(r8, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r9 = dup(r5) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f000001a600)=ANY=[@ANYRES16=r3], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x208000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 13:02:53 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80085504, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2540.944654][T30449] Memory cgroup out of memory: Killed process 30449 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:53 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2402c080) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}, 0x0) 13:02:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025380e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:53 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2402c080) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}, 0x0) 13:02:53 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4004550d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:53 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8008550e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:53 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2402c080) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}, 0x0) socket$inet(0x2b, 0x801, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2402c080) (async) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}, 0x0) (async) [ 2541.261180][T30499] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2541.289805][T30499] CPU: 1 PID: 30499 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2541.300284][T30499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2541.310370][T30499] Call Trace: [ 2541.313679][T30499] [ 2541.316635][T30499] dump_stack_lvl+0x136/0x150 [ 2541.321356][T30499] dump_header+0x10a/0xd70 [ 2541.325823][T30499] oom_kill_process+0x25d/0x600 [ 2541.330721][T30499] out_of_memory+0x35c/0x1660 [ 2541.335448][T30499] ? find_held_lock+0x2d/0x110 [ 2541.340262][T30499] ? oom_killer_disable+0x2b0/0x2b0 [ 2541.345521][T30499] ? rcu_read_unlock+0x9/0x60 [ 2541.350233][T30499] ? find_held_lock+0x2d/0x110 [ 2541.355045][T30499] mem_cgroup_out_of_memory+0x206/0x270 [ 2541.360733][T30499] ? mem_cgroup_margin+0x130/0x130 [ 2541.365890][T30499] ? lock_downgrade+0x690/0x690 [ 2541.370792][T30499] try_charge_memcg+0xf9b/0x13b0 [ 2541.375770][T30499] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2541.381793][T30499] ? rcu_read_unlock+0x9/0x60 [ 2541.386515][T30499] ? lock_downgrade+0x690/0x690 [ 2541.391422][T30499] charge_memcg+0x90/0x3b0 [ 2541.397970][T30499] __mem_cgroup_charge+0x2b/0x90 [ 2541.402948][T30499] do_wp_page+0x8eb/0x3520 [ 2541.407412][T30499] ? lock_release+0x670/0x670 [ 2541.412126][T30499] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2541.417552][T30499] ? do_raw_spin_lock+0x124/0x2b0 [ 2541.422617][T30499] ? spin_bug+0x1c0/0x1c0 [ 2541.426984][T30499] ? lock_downgrade+0x690/0x690 [ 2541.431882][T30499] __handle_mm_fault+0x19a1/0x3e60 [ 2541.437040][T30499] ? vm_iomap_memory+0x190/0x190 [ 2541.442047][T30499] handle_mm_fault+0x2ba/0x9c0 [ 2541.446861][T30499] do_user_addr_fault+0x475/0x1230 [ 2541.452026][T30499] ? rcu_is_watching+0x12/0xb0 [ 2541.456842][T30499] exc_page_fault+0x98/0x170 [ 2541.461469][T30499] asm_exc_page_fault+0x26/0x30 [ 2541.466359][T30499] RIP: 0023:0xf72206e8 [ 2541.470453][T30499] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2541.490622][T30499] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2541.496727][T30499] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2541.504735][T30499] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec 13:02:54 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2541.512739][T30499] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2541.520745][T30499] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2541.528753][T30499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2541.536776][T30499] [ 2541.565781][T30499] memory: usage 307200kB, limit 307200kB, failcnt 2649 [ 2541.572908][T30499] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2541.580032][T30499] Memory cgroup stats for /syz2: [ 2541.580270][T30499] anon 794624 [ 2541.580270][T30499] file 315392 [ 2541.580270][T30499] kernel 313462784 [ 2541.580270][T30499] kernel_stack 327680 [ 2541.580270][T30499] pagetables 503808 [ 2541.580270][T30499] sec_pagetables 0 [ 2541.580270][T30499] percpu 4060640 [ 2541.580270][T30499] sock 0 [ 2541.580270][T30499] vmalloc 0 [ 2541.580270][T30499] shmem 315392 [ 2541.580270][T30499] zswap 0 [ 2541.580270][T30499] zswapped 0 [ 2541.580270][T30499] file_mapped 249856 [ 2541.580270][T30499] file_dirty 0 [ 2541.580270][T30499] file_writeback 0 [ 2541.580270][T30499] swapcached 0 [ 2541.580270][T30499] anon_thp 0 [ 2541.580270][T30499] file_thp 0 [ 2541.580270][T30499] shmem_thp 0 [ 2541.580270][T30499] inactive_anon 65536 [ 2541.580270][T30499] active_anon 1044480 [ 2541.580270][T30499] inactive_file 0 [ 2541.580270][T30499] active_file 0 [ 2541.580270][T30499] unevictable 0 [ 2541.580270][T30499] slab_reclaimable 31088 [ 2541.580270][T30499] slab_unreclaimable 308450344 [ 2541.580270][T30499] slab 308481432 [ 2541.580270][T30499] workingset_refault_anon 0 [ 2541.580270][T30499] workingset_refault_file 0 [ 2541.580270][T30499] workingset_activate_anon 0 [ 2541.580270][T30499] workingset_activate_file 0 [ 2541.580270][T30499] workingset_restore_anon 0 [ 2541.580270][T30499] workingset_restore_file 0 [ 2541.580270][T30499] workingset_nodereclaim 0 [ 2541.580270][T30499] pgscan 0 [ 2541.580270][T30499] pgsteal 0 [ 2541.580270][T30499] pgscan_kswapd 0 [ 2541.580270][T30499] pgscan_direct 0 [ 2541.580270][T30499] pgscan_khugepaged 0 [ 2541.580270][T30499] pgsteal_kswapd 0 [ 2541.580270][T30499] pgsteal_direct 0 [ 2541.580270][T30499] pgsteal_khugepaged 0 [ 2541.580270][T30499] pgfault 498233 [ 2541.580270][T30499] pgmajfault 32 [ 2541.580270][T30499] pgrefill 0 [ 2541.580270][T30499] pgactivate 0 [ 2541.580270][T30499] pgdeactivate 0 [ 2541.580270][T30499] pglazyfree 0 [ 2541.580270][T30499] pglazyfreed 0 [ 2541.580270][T30499] zswpin 0 [ 2541.580270][T30499] zswpout 0 [ 2541.580270][T30499] thp_fault_alloc 0 [ 2541.771954][T30499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30499,uid=0 [ 2541.799808][T30499] Memory cgroup out of memory: Killed process 30499 (syz-executor.2) total-vm:54312kB, anon-rss:344kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:55 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8008551d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 1: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4004550c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/xoop0\x00'], 0x0, &(0x7f0000000300)='cramfs\x00', 0x0, &(0x7f0000000340)='@\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) r2 = signalfd4(r1, &(0x7f0000003cc0)={[0x1, 0x7f]}, 0x8, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003d00)='ns/uts\x00') (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="bdb3cb", 0x3}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}], 0x4c, 0x40040}}, {{&(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)="a48056f7efb6cc2d96449c41fbe95fcfe9f41bb71d45f6a0b957b856f54dde80ef422f5660e094abf6046cc693", 0x2d}, {&(0x7f00000005c0)="4a4d5ee2916c2ae25cb870b280fd17383b89709e3c4712416e8bf1dbc7b944cfcba960bce5190e2000e435363fdfe91dabbf52b57cfbed3a64fd1ff13847db0b682b3a7992d4509ef6327d497ae7bd589e18b6a365b6445485567f0ad24dbab14bba0de86e97370102d08701305d97f654acf810d69fe0a5b3cb48facb99caf5654bc2328fb49d60e6a16496043cae2cb9ca6dfb8035", 0x96}, {&(0x7f0000000380)="e16c247886fab40405886b85a705bffaf529f5874b30fdb120ac6a5136505aeecd9d3eefb1ed", 0x26}, {&(0x7f0000000680)="6665cf9799610ecb095b851d83a4bc5849daab9b633bc12f86c860abd28c2411675f95a3702cf4e062f7089a34cd148233840286ab86", 0x36}, {&(0x7f00000006c0)="b4be4de79ea7a16cffb91676b18d29e4d088dafbfbded6acd34a66df66da143eaebfb1d356908da0d919e0c8764f527224d712de39d9b1a2d487e285571f27a86c43960fc0fa0cb6c3165d9b55579eec7714651b7f738ae401b249b541ab29121584e75dfd9191c2756d3b4e43174070524d4e2f736d9762f7ed9a1a8103765bd4d6227a6fdc1ea086345256a07bedebc69624f51875a62085422b644899852484f385e129f2d5450f79c020500e864b3cf2fd76eb", 0xb5}, {&(0x7f0000000780)="0be3897c4786374b2f72a452d4df590dfc34e2d96fe6fb4af1e4919c0751ee944a58feca2b6eb82062dfd5ed0b878e0e59f64cc1d21d57c7a95eecab521b226ebd12a73330f3959b151b9307b603991a2d68f2cf98a32e6d3473db480e27bf4f163a0ebafa0561f77ded13e3c957c44dfbb84a3e0a31931f637a5ade78d6e6858f8fe60e5ebaeb936d0d36e2c72df468bf197e833eafd77d9dba2217ff022a6317a4ab08925ac36580e044", 0xab}, {&(0x7f0000000840)="d16d756ddd2c12f91bdc93129c2099870130febc7f7cbccf091b370c921dfa1cce544810fcba1b6538ad9bb4c03f252f2fd31c81228dba9e9bdf230e712f5e43b01fb25992ca5a7b17ce9e6bb0de7f42a878aac5bd14a5a68e911d8aacafc1a6bebb19a31a8b7e170d387c8d0a9ba780d76ae39c14888c3b2ff6158aaf870152142024fff65eb0ccd34f249f8d01a6d5f4898f8f03dce8b4897c403059a1b058a38df36518672e251d8b23604c90b9d6b0036c64b84dbe66416d5de5601289448e241eadd36fc8c60fbd7d9a70", 0xcd}, {&(0x7f0000000940)="a19ff9971b850039b75c800e4ce6038a3d451a330012023e1ce39c084203f64a6079", 0x22}, {&(0x7f0000000980)="0400f1658c3ceba1c1bfa16f291c2d1a5c96bb3f94ed5adb3fda3c79a4b7db4d43062638ca9b45e6f2b02728db49df85f6cb0e412ef24aeacbf7acbea2dc2a9653d9420da5f131c3803a32e5f2ea791d78e4588a13f48929f0a3e928b2d2fc0ed475848e2c5286c9ae6f11041ee6e613012ce616e0df6cb91f1c5908b6a9b3be9b8ef572e20f9e087a78c5205d9f36f2b5047926f68c3a80c8fda772996350633ff836f15742aa80b7f37c1a030250b053eb6fffc56e3ea745538304af707de15fed6570", 0xc4}], 0x9, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="3f2e30fb964658eea2570161bb6dba9f0225f8fb58c266310597da32ff2f10f9078f648ee25d155da72f5f99ff1734b0e97ef085632ae71462f7b3bc81013da5979f8a745d011a57749a469c44f6235ec897acb86b30ede3b0b7a2af3c282cb2f8ec147ebc5aadd502b1c0ab5f1449c3836495fd979682afd2a8be0a", 0x7c}, {&(0x7f0000000c00)="8ebd74569d20af2821ce9160213eefa66335704103da6562cfd036024eed718ab43bebad50c7a56eda01c7a20d96d0de2ea9a7993cdfc1c4ac54a0594a04fd6adf0caec725f2f61bbeba0f048fc3f388fffa9cf5c5c8c06456fa79001d4f1aed68eb113f1d538a086077fb9eecda08625aa1477dc8484cd7cb6362b0c6bd017683bb7799fe", 0x85}, {&(0x7f0000000cc0)="28ccb0d00b112a542e5133b8c08b9a2340a22cd34291140e6af8a6b2eb60712994572222fd934bc0cad0b793d1f39babd3c3e99cbc7f6029bdf578a30e33379ab0db72b43056f2b9ddc7393f830b78871a912bf6c7aa91dc27e805dcc7eb6c42f022cd9a3eb87f2c23fc596680c4815eaec6673dfc9701d50864", 0x7a}], 0x3, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14, 0x41}}, {{&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e40)="63f5f0db5e2ecc574bb1648a95e5762357e58dd1231cfd936e377e9365e6084efe57034d421706e619bb951c58c5fb72cbf19644be10df4e98504dd0ebbb76895066d28d01121be855c0c75dd1933d51b88366312f51ec6d18b8309c0f06eefbc02f030152e1ec0ecb000c5c49aaa8d0e866697edd17c91ba2b44390d19c497e19e2aeb48d15587bd01075af41e7df1a866dd2b06dbe946e817d05b81fb5d40b345520d0ada50f5ef97f3ea721359013280791bbb163c15646244d1cb97056e162aed419bfa157258b71", 0xca}, {&(0x7f0000000f40)="0f968ef25901e2d75ac4282379463ffac3661783c23bdcdd1610e199eae2efa44c638889076b1cc0334018b70627781a6b824a60557fad8d8c6fc6f8e79612b9bee4c9c1961ecc73140ceae77ff9076a14d91716c9f9110f2a09c9a7da440d71b7cc31dfb5921bfbff692693ce27fae71c08a91c1d0ed72765b9e3bd4319e1cc47933d644e57cdf25aaad202de2705eb3c8099f88647b7f113c396bd09e1839d6e776a52b03c1a2953ca2ee45d52f97f6611bbd535295018bc73460b041f57af059f1a53cf9802ab753fadaee25e7d9710058083f96e08ebf2529b36e76c1365eb54e6da2695273a48ec", 0xea}, {&(0x7f0000001040)="d9035562aebe8abf7bd6196d9b2130de258877d276bd28648a704ec402c0387c1492ea432c95669cc139a59546e1d944cccba42004ae43cfa6e3ad1f9163de053c0405a8d77179db6cbabf514812dae941264bdc9595ca4c6dd79ecf45093bd6ea10116b86a7823ce68e77fdfea92dc001bcda0605505b0073d8d1bb9ab3e909996290a1bbe5a785490e6f646bce9daef584216c5e58bbddef0ee6c9c9b355182ec3ea7412f7325429b5fbbfb2f5836669bceb625fd87f86586ad3efa731cd3c9c4669a6bc75c156fe", 0xc9}, {&(0x7f0000001140)="39e4e97979abbe7ad8ddad6c79e760f80b0b9758d40b12268eef80265d9914c65e946e75402f11d462be03e92a9d5ad8", 0x30}, {&(0x7f0000001180)="67847b1954e61516de28e8092656b8b33a2523aefd329724f33d58eee3883ed5736ff624c151909fd6191786a740d2d0ae2c557aca5eb303394d2ef73a04c85edefcec81782b3803639f5488bd7e8ae21cad5e", 0x53}, {&(0x7f0000001200)="00780b961e1e81a78e362705fa96a1bdf8439e662d79f6f4d07abb04d51fa7fa7901831ebde93c2521237300fb80401d891396dc50eee19d339eccf83daff42944ec13a20a42b07c23d5c5270ff0a4b7beae3b8a7c9a5690c19beb2ae881cf3dd48d50219dc908a999747d6dd4d1c47a76a178976895dcb84f0b124a0efe35d79c2b5371fa7d9b56ccb2117461c7c724f5fbbb44a04d1adcc84eb039a153a563f33dd8f350f4be996173957b2b6c916e5b444ba01cb11d6e1e7435ea", 0xbc}], 0x6, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000034c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x70, 0x854}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000035c0)="06f73fa3196c27c0e0295890e80b49ebc87229cac6f9056e2f4b8642289de630e7940a701256", 0x26}, {&(0x7f0000003600)="17b3accf829989eb02e7ef624851b89c6d5d3edc215a2a635b88a5089b59c70fdea32f7678378f36401e96e74a48d71ca9f595ff846b585e420d339276df57f2f0af1af451e5469292c98404fcd60e41a5f2a6094f146966507268611ce4990bd3f58ddeb9a7382b75c560c62ad1b11bca55215e345192253a3ab2973245f2cf9d92710a69bf6a5c809550a8f417ea0acac114d8dfd8ccd77fcca14330a0d8780882daceeb86b7", 0xa7}, {&(0x7f00000036c0)="33cba4227c8c8c1f283358b447a58c66f233ff740ccdc8fe6bcba3b2b92e1948f3e0a7dda55d8f9bac77acc3a3cfe4f25e4ad8e203c9dde3e9cfa05b4ae3da169d", 0x41}, {&(0x7f0000003740)="b238fc912a033a86fa388c9b8642aabbaa910715c0f75b8bd5c1b1415053d7797578aa41db8ea2a9288b79eff937eb964ead70392ba9b010cfddc3ee0e8b645a3db0964269ed07392a9aa93344ab58209aca367bddcf4e5b5a45f4566abf08a956df699d36a8670512b464227a393ab32ddeac0b81a325d5c8e759e095ae2d3549bda4eba737269144792c882c9d3413edcf1959373f96fcdde901c86759b9046c8cc06d476b21364770efd3da5668432cea8dcc087139db5b4356109231fbd0852627d146de34cfcce1c1e7ce1ab8f23edb", 0xd2}], 0x4, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)="e1f9057427b05d766d3f03ebcd381d602225ac2cf9b6c065c0e6e67acbb328d2f18249a6dd8570460ce070d02f87cce1bf175158985ff1990a70e53565e54f487ac3295d03ddd84f7ff53eb640af5abc225b11842f55c88a98d616c61c66087ab2243b6709272a7536f2029dc474fa3eb0c750e55179a47ab67f43ef4f6469c1756b516d92156db942f1f0159b5384", 0x8f}, {&(0x7f00000039c0)="4f9a3cebe8a3fd4f392470fee83008f5452761d462206fb5c78597c36f77e60b2f96c4af58bbabee5a1ff6355add3911f65d3bdb61985067c8d93973d7d62d7784d1dd34d55785a241acb6bf72ae1695dc591cb5b000856dfb42a721aef9ec6a0e08319fd00b7a213d90d230978f257dde460617352c2eca7f9f1525bc4ba6cb04d0353b893c4e3a1782b76f7c4e00fb9eb5afd485aceb77e1cbbcff7fccf56d0fd5c506b9c8fa5486fc3722bbcc56cce41a57042b954bc49ffe7d58c5f6251f20b9f9af55841323c522a89ffa339e2625ef68182568e6e3baf0ddb953804d655d38f9342a65fb312a8f394bb6a5fa5a5857fa", 0xf3}, {&(0x7f0000003ac0)="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", 0xff}, {&(0x7f0000003bc0)="015a16052c75bc4bb3f1b7ecab7b70ebc1a6da7fe933036348e7d987be2305a121be1a5e51aecb6b5ed0159cf22c6fca934a631bf93d71c7acaf039440f75c5c3614e5b21a1f8fe86628dfb61c36265af484b3e02369ced8fd8376682bc5ba8e77b68081773805d9f5911dc5", 0x6c}], 0x4, &(0x7f0000003d40)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r1, r5, r0, r8]}}], 0x54, 0x40000}}], 0x7, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) unshare(0x6c060000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:02:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025400e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:55 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000004c0)=""/145, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff92) (async) keyctl$restrict_keyring(0xa, 0xfffffffffffffffd, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)='id:ab*e') (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x84800) ftruncate(r7, 0x0) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)) (async) ftruncate(r8, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) r9 = dup(r5) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f000001a600)=ANY=[@ANYRES16=r3], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x80) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) r11 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x208000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 13:02:55 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80086301, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) (async) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000004c0)=""/145, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff92) keyctl$restrict_keyring(0xa, 0xfffffffffffffffd, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)='id:ab*e') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x84800) ftruncate(r7, 0x0) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)) ftruncate(r8, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) dup(r5) (async) r9 = dup(r5) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f000001a600)=ANY=[@ANYRES16=r3], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f000001a600)=ANY=[@ANYRES16=r3], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x208000, 0x0) (async) r11 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x208000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 13:02:55 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80086601, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8010550e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/xoop0\x00'], 0x0, &(0x7f0000000300)='cramfs\x00', 0x0, &(0x7f0000000340)='@\x00') (async) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/xoop0\x00'], 0x0, &(0x7f0000000300)='cramfs\x00', 0x0, &(0x7f0000000340)='@\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) signalfd4(r1, &(0x7f0000003cc0)={[0x1, 0x7f]}, 0x8, 0x0) (async) r2 = signalfd4(r1, &(0x7f0000003cc0)={[0x1, 0x7f]}, 0x8, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003d00)='ns/uts\x00') r5 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a100000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a001000"], 0x28}}, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="bdb3cb", 0x3}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}], 0x4c, 0x40040}}, {{&(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)="a48056f7efb6cc2d96449c41fbe95fcfe9f41bb71d45f6a0b957b856f54dde80ef422f5660e094abf6046cc693", 0x2d}, {&(0x7f00000005c0)="4a4d5ee2916c2ae25cb870b280fd17383b89709e3c4712416e8bf1dbc7b944cfcba960bce5190e2000e435363fdfe91dabbf52b57cfbed3a64fd1ff13847db0b682b3a7992d4509ef6327d497ae7bd589e18b6a365b6445485567f0ad24dbab14bba0de86e97370102d08701305d97f654acf810d69fe0a5b3cb48facb99caf5654bc2328fb49d60e6a16496043cae2cb9ca6dfb8035", 0x96}, {&(0x7f0000000380)="e16c247886fab40405886b85a705bffaf529f5874b30fdb120ac6a5136505aeecd9d3eefb1ed", 0x26}, {&(0x7f0000000680)="6665cf9799610ecb095b851d83a4bc5849daab9b633bc12f86c860abd28c2411675f95a3702cf4e062f7089a34cd148233840286ab86", 0x36}, {&(0x7f00000006c0)="b4be4de79ea7a16cffb91676b18d29e4d088dafbfbded6acd34a66df66da143eaebfb1d356908da0d919e0c8764f527224d712de39d9b1a2d487e285571f27a86c43960fc0fa0cb6c3165d9b55579eec7714651b7f738ae401b249b541ab29121584e75dfd9191c2756d3b4e43174070524d4e2f736d9762f7ed9a1a8103765bd4d6227a6fdc1ea086345256a07bedebc69624f51875a62085422b644899852484f385e129f2d5450f79c020500e864b3cf2fd76eb", 0xb5}, {&(0x7f0000000780)="0be3897c4786374b2f72a452d4df590dfc34e2d96fe6fb4af1e4919c0751ee944a58feca2b6eb82062dfd5ed0b878e0e59f64cc1d21d57c7a95eecab521b226ebd12a73330f3959b151b9307b603991a2d68f2cf98a32e6d3473db480e27bf4f163a0ebafa0561f77ded13e3c957c44dfbb84a3e0a31931f637a5ade78d6e6858f8fe60e5ebaeb936d0d36e2c72df468bf197e833eafd77d9dba2217ff022a6317a4ab08925ac36580e044", 0xab}, {&(0x7f0000000840)="d16d756ddd2c12f91bdc93129c2099870130febc7f7cbccf091b370c921dfa1cce544810fcba1b6538ad9bb4c03f252f2fd31c81228dba9e9bdf230e712f5e43b01fb25992ca5a7b17ce9e6bb0de7f42a878aac5bd14a5a68e911d8aacafc1a6bebb19a31a8b7e170d387c8d0a9ba780d76ae39c14888c3b2ff6158aaf870152142024fff65eb0ccd34f249f8d01a6d5f4898f8f03dce8b4897c403059a1b058a38df36518672e251d8b23604c90b9d6b0036c64b84dbe66416d5de5601289448e241eadd36fc8c60fbd7d9a70", 0xcd}, {&(0x7f0000000940)="a19ff9971b850039b75c800e4ce6038a3d451a330012023e1ce39c084203f64a6079", 0x22}, {&(0x7f0000000980)="0400f1658c3ceba1c1bfa16f291c2d1a5c96bb3f94ed5adb3fda3c79a4b7db4d43062638ca9b45e6f2b02728db49df85f6cb0e412ef24aeacbf7acbea2dc2a9653d9420da5f131c3803a32e5f2ea791d78e4588a13f48929f0a3e928b2d2fc0ed475848e2c5286c9ae6f11041ee6e613012ce616e0df6cb91f1c5908b6a9b3be9b8ef572e20f9e087a78c5205d9f36f2b5047926f68c3a80c8fda772996350633ff836f15742aa80b7f37c1a030250b053eb6fffc56e3ea745538304af707de15fed6570", 0xc4}], 0x9, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="3f2e30fb964658eea2570161bb6dba9f0225f8fb58c266310597da32ff2f10f9078f648ee25d155da72f5f99ff1734b0e97ef085632ae71462f7b3bc81013da5979f8a745d011a57749a469c44f6235ec897acb86b30ede3b0b7a2af3c282cb2f8ec147ebc5aadd502b1c0ab5f1449c3836495fd979682afd2a8be0a", 0x7c}, {&(0x7f0000000c00)="8ebd74569d20af2821ce9160213eefa66335704103da6562cfd036024eed718ab43bebad50c7a56eda01c7a20d96d0de2ea9a7993cdfc1c4ac54a0594a04fd6adf0caec725f2f61bbeba0f048fc3f388fffa9cf5c5c8c06456fa79001d4f1aed68eb113f1d538a086077fb9eecda08625aa1477dc8484cd7cb6362b0c6bd017683bb7799fe", 0x85}, {&(0x7f0000000cc0)="28ccb0d00b112a542e5133b8c08b9a2340a22cd34291140e6af8a6b2eb60712994572222fd934bc0cad0b793d1f39babd3c3e99cbc7f6029bdf578a30e33379ab0db72b43056f2b9ddc7393f830b78871a912bf6c7aa91dc27e805dcc7eb6c42f022cd9a3eb87f2c23fc596680c4815eaec6673dfc9701d50864", 0x7a}], 0x3, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14, 0x41}}, {{&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e40)="63f5f0db5e2ecc574bb1648a95e5762357e58dd1231cfd936e377e9365e6084efe57034d421706e619bb951c58c5fb72cbf19644be10df4e98504dd0ebbb76895066d28d01121be855c0c75dd1933d51b88366312f51ec6d18b8309c0f06eefbc02f030152e1ec0ecb000c5c49aaa8d0e866697edd17c91ba2b44390d19c497e19e2aeb48d15587bd01075af41e7df1a866dd2b06dbe946e817d05b81fb5d40b345520d0ada50f5ef97f3ea721359013280791bbb163c15646244d1cb97056e162aed419bfa157258b71", 0xca}, {&(0x7f0000000f40)="0f968ef25901e2d75ac4282379463ffac3661783c23bdcdd1610e199eae2efa44c638889076b1cc0334018b70627781a6b824a60557fad8d8c6fc6f8e79612b9bee4c9c1961ecc73140ceae77ff9076a14d91716c9f9110f2a09c9a7da440d71b7cc31dfb5921bfbff692693ce27fae71c08a91c1d0ed72765b9e3bd4319e1cc47933d644e57cdf25aaad202de2705eb3c8099f88647b7f113c396bd09e1839d6e776a52b03c1a2953ca2ee45d52f97f6611bbd535295018bc73460b041f57af059f1a53cf9802ab753fadaee25e7d9710058083f96e08ebf2529b36e76c1365eb54e6da2695273a48ec", 0xea}, {&(0x7f0000001040)="d9035562aebe8abf7bd6196d9b2130de258877d276bd28648a704ec402c0387c1492ea432c95669cc139a59546e1d944cccba42004ae43cfa6e3ad1f9163de053c0405a8d77179db6cbabf514812dae941264bdc9595ca4c6dd79ecf45093bd6ea10116b86a7823ce68e77fdfea92dc001bcda0605505b0073d8d1bb9ab3e909996290a1bbe5a785490e6f646bce9daef584216c5e58bbddef0ee6c9c9b355182ec3ea7412f7325429b5fbbfb2f5836669bceb625fd87f86586ad3efa731cd3c9c4669a6bc75c156fe", 0xc9}, {&(0x7f0000001140)="39e4e97979abbe7ad8ddad6c79e760f80b0b9758d40b12268eef80265d9914c65e946e75402f11d462be03e92a9d5ad8", 0x30}, {&(0x7f0000001180)="67847b1954e61516de28e8092656b8b33a2523aefd329724f33d58eee3883ed5736ff624c151909fd6191786a740d2d0ae2c557aca5eb303394d2ef73a04c85edefcec81782b3803639f5488bd7e8ae21cad5e", 0x53}, {&(0x7f0000001200)="00780b961e1e81a78e362705fa96a1bdf8439e662d79f6f4d07abb04d51fa7fa7901831ebde93c2521237300fb80401d891396dc50eee19d339eccf83daff42944ec13a20a42b07c23d5c5270ff0a4b7beae3b8a7c9a5690c19beb2ae881cf3dd48d50219dc908a999747d6dd4d1c47a76a178976895dcb84f0b124a0efe35d79c2b5371fa7d9b56ccb2117461c7c724f5fbbb44a04d1adcc84eb039a153a563f33dd8f350f4be996173957b2b6c916e5b444ba01cb11d6e1e7435ea", 0xbc}], 0x6, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000034c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x70, 0x854}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000035c0)="06f73fa3196c27c0e0295890e80b49ebc87229cac6f9056e2f4b8642289de630e7940a701256", 0x26}, {&(0x7f0000003600)="17b3accf829989eb02e7ef624851b89c6d5d3edc215a2a635b88a5089b59c70fdea32f7678378f36401e96e74a48d71ca9f595ff846b585e420d339276df57f2f0af1af451e5469292c98404fcd60e41a5f2a6094f146966507268611ce4990bd3f58ddeb9a7382b75c560c62ad1b11bca55215e345192253a3ab2973245f2cf9d92710a69bf6a5c809550a8f417ea0acac114d8dfd8ccd77fcca14330a0d8780882daceeb86b7", 0xa7}, {&(0x7f00000036c0)="33cba4227c8c8c1f283358b447a58c66f233ff740ccdc8fe6bcba3b2b92e1948f3e0a7dda55d8f9bac77acc3a3cfe4f25e4ad8e203c9dde3e9cfa05b4ae3da169d", 0x41}, {&(0x7f0000003740)="b238fc912a033a86fa388c9b8642aabbaa910715c0f75b8bd5c1b1415053d7797578aa41db8ea2a9288b79eff937eb964ead70392ba9b010cfddc3ee0e8b645a3db0964269ed07392a9aa93344ab58209aca367bddcf4e5b5a45f4566abf08a956df699d36a8670512b464227a393ab32ddeac0b81a325d5c8e759e095ae2d3549bda4eba737269144792c882c9d3413edcf1959373f96fcdde901c86759b9046c8cc06d476b21364770efd3da5668432cea8dcc087139db5b4356109231fbd0852627d146de34cfcce1c1e7ce1ab8f23edb", 0xd2}], 0x4, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)="e1f9057427b05d766d3f03ebcd381d602225ac2cf9b6c065c0e6e67acbb328d2f18249a6dd8570460ce070d02f87cce1bf175158985ff1990a70e53565e54f487ac3295d03ddd84f7ff53eb640af5abc225b11842f55c88a98d616c61c66087ab2243b6709272a7536f2029dc474fa3eb0c750e55179a47ab67f43ef4f6469c1756b516d92156db942f1f0159b5384", 0x8f}, {&(0x7f00000039c0)="4f9a3cebe8a3fd4f392470fee83008f5452761d462206fb5c78597c36f77e60b2f96c4af58bbabee5a1ff6355add3911f65d3bdb61985067c8d93973d7d62d7784d1dd34d55785a241acb6bf72ae1695dc591cb5b000856dfb42a721aef9ec6a0e08319fd00b7a213d90d230978f257dde460617352c2eca7f9f1525bc4ba6cb04d0353b893c4e3a1782b76f7c4e00fb9eb5afd485aceb77e1cbbcff7fccf56d0fd5c506b9c8fa5486fc3722bbcc56cce41a57042b954bc49ffe7d58c5f6251f20b9f9af55841323c522a89ffa339e2625ef68182568e6e3baf0ddb953804d655d38f9342a65fb312a8f394bb6a5fa5a5857fa", 0xf3}, {&(0x7f0000003ac0)="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", 0xff}, {&(0x7f0000003bc0)="015a16052c75bc4bb3f1b7ecab7b70ebc1a6da7fe933036348e7d987be2305a121be1a5e51aecb6b5ed0159cf22c6fca934a631bf93d71c7acaf039440f75c5c3614e5b21a1f8fe86628dfb61c36265af484b3e02369ced8fd8376682bc5ba8e77b68081773805d9f5911dc5", 0x6c}], 0x4, &(0x7f0000003d40)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r1, r5, r0, r8]}}], 0x54, 0x40000}}], 0x7, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="bdb3cb", 0x3}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}], 0x4c, 0x40040}}, {{&(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)="a48056f7efb6cc2d96449c41fbe95fcfe9f41bb71d45f6a0b957b856f54dde80ef422f5660e094abf6046cc693", 0x2d}, {&(0x7f00000005c0)="4a4d5ee2916c2ae25cb870b280fd17383b89709e3c4712416e8bf1dbc7b944cfcba960bce5190e2000e435363fdfe91dabbf52b57cfbed3a64fd1ff13847db0b682b3a7992d4509ef6327d497ae7bd589e18b6a365b6445485567f0ad24dbab14bba0de86e97370102d08701305d97f654acf810d69fe0a5b3cb48facb99caf5654bc2328fb49d60e6a16496043cae2cb9ca6dfb8035", 0x96}, {&(0x7f0000000380)="e16c247886fab40405886b85a705bffaf529f5874b30fdb120ac6a5136505aeecd9d3eefb1ed", 0x26}, {&(0x7f0000000680)="6665cf9799610ecb095b851d83a4bc5849daab9b633bc12f86c860abd28c2411675f95a3702cf4e062f7089a34cd148233840286ab86", 0x36}, {&(0x7f00000006c0)="b4be4de79ea7a16cffb91676b18d29e4d088dafbfbded6acd34a66df66da143eaebfb1d356908da0d919e0c8764f527224d712de39d9b1a2d487e285571f27a86c43960fc0fa0cb6c3165d9b55579eec7714651b7f738ae401b249b541ab29121584e75dfd9191c2756d3b4e43174070524d4e2f736d9762f7ed9a1a8103765bd4d6227a6fdc1ea086345256a07bedebc69624f51875a62085422b644899852484f385e129f2d5450f79c020500e864b3cf2fd76eb", 0xb5}, {&(0x7f0000000780)="0be3897c4786374b2f72a452d4df590dfc34e2d96fe6fb4af1e4919c0751ee944a58feca2b6eb82062dfd5ed0b878e0e59f64cc1d21d57c7a95eecab521b226ebd12a73330f3959b151b9307b603991a2d68f2cf98a32e6d3473db480e27bf4f163a0ebafa0561f77ded13e3c957c44dfbb84a3e0a31931f637a5ade78d6e6858f8fe60e5ebaeb936d0d36e2c72df468bf197e833eafd77d9dba2217ff022a6317a4ab08925ac36580e044", 0xab}, {&(0x7f0000000840)="d16d756ddd2c12f91bdc93129c2099870130febc7f7cbccf091b370c921dfa1cce544810fcba1b6538ad9bb4c03f252f2fd31c81228dba9e9bdf230e712f5e43b01fb25992ca5a7b17ce9e6bb0de7f42a878aac5bd14a5a68e911d8aacafc1a6bebb19a31a8b7e170d387c8d0a9ba780d76ae39c14888c3b2ff6158aaf870152142024fff65eb0ccd34f249f8d01a6d5f4898f8f03dce8b4897c403059a1b058a38df36518672e251d8b23604c90b9d6b0036c64b84dbe66416d5de5601289448e241eadd36fc8c60fbd7d9a70", 0xcd}, {&(0x7f0000000940)="a19ff9971b850039b75c800e4ce6038a3d451a330012023e1ce39c084203f64a6079", 0x22}, {&(0x7f0000000980)="0400f1658c3ceba1c1bfa16f291c2d1a5c96bb3f94ed5adb3fda3c79a4b7db4d43062638ca9b45e6f2b02728db49df85f6cb0e412ef24aeacbf7acbea2dc2a9653d9420da5f131c3803a32e5f2ea791d78e4588a13f48929f0a3e928b2d2fc0ed475848e2c5286c9ae6f11041ee6e613012ce616e0df6cb91f1c5908b6a9b3be9b8ef572e20f9e087a78c5205d9f36f2b5047926f68c3a80c8fda772996350633ff836f15742aa80b7f37c1a030250b053eb6fffc56e3ea745538304af707de15fed6570", 0xc4}], 0x9, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="3f2e30fb964658eea2570161bb6dba9f0225f8fb58c266310597da32ff2f10f9078f648ee25d155da72f5f99ff1734b0e97ef085632ae71462f7b3bc81013da5979f8a745d011a57749a469c44f6235ec897acb86b30ede3b0b7a2af3c282cb2f8ec147ebc5aadd502b1c0ab5f1449c3836495fd979682afd2a8be0a", 0x7c}, {&(0x7f0000000c00)="8ebd74569d20af2821ce9160213eefa66335704103da6562cfd036024eed718ab43bebad50c7a56eda01c7a20d96d0de2ea9a7993cdfc1c4ac54a0594a04fd6adf0caec725f2f61bbeba0f048fc3f388fffa9cf5c5c8c06456fa79001d4f1aed68eb113f1d538a086077fb9eecda08625aa1477dc8484cd7cb6362b0c6bd017683bb7799fe", 0x85}, {&(0x7f0000000cc0)="28ccb0d00b112a542e5133b8c08b9a2340a22cd34291140e6af8a6b2eb60712994572222fd934bc0cad0b793d1f39babd3c3e99cbc7f6029bdf578a30e33379ab0db72b43056f2b9ddc7393f830b78871a912bf6c7aa91dc27e805dcc7eb6c42f022cd9a3eb87f2c23fc596680c4815eaec6673dfc9701d50864", 0x7a}], 0x3, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14, 0x41}}, {{&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e40)="63f5f0db5e2ecc574bb1648a95e5762357e58dd1231cfd936e377e9365e6084efe57034d421706e619bb951c58c5fb72cbf19644be10df4e98504dd0ebbb76895066d28d01121be855c0c75dd1933d51b88366312f51ec6d18b8309c0f06eefbc02f030152e1ec0ecb000c5c49aaa8d0e866697edd17c91ba2b44390d19c497e19e2aeb48d15587bd01075af41e7df1a866dd2b06dbe946e817d05b81fb5d40b345520d0ada50f5ef97f3ea721359013280791bbb163c15646244d1cb97056e162aed419bfa157258b71", 0xca}, {&(0x7f0000000f40)="0f968ef25901e2d75ac4282379463ffac3661783c23bdcdd1610e199eae2efa44c638889076b1cc0334018b70627781a6b824a60557fad8d8c6fc6f8e79612b9bee4c9c1961ecc73140ceae77ff9076a14d91716c9f9110f2a09c9a7da440d71b7cc31dfb5921bfbff692693ce27fae71c08a91c1d0ed72765b9e3bd4319e1cc47933d644e57cdf25aaad202de2705eb3c8099f88647b7f113c396bd09e1839d6e776a52b03c1a2953ca2ee45d52f97f6611bbd535295018bc73460b041f57af059f1a53cf9802ab753fadaee25e7d9710058083f96e08ebf2529b36e76c1365eb54e6da2695273a48ec", 0xea}, {&(0x7f0000001040)="d9035562aebe8abf7bd6196d9b2130de258877d276bd28648a704ec402c0387c1492ea432c95669cc139a59546e1d944cccba42004ae43cfa6e3ad1f9163de053c0405a8d77179db6cbabf514812dae941264bdc9595ca4c6dd79ecf45093bd6ea10116b86a7823ce68e77fdfea92dc001bcda0605505b0073d8d1bb9ab3e909996290a1bbe5a785490e6f646bce9daef584216c5e58bbddef0ee6c9c9b355182ec3ea7412f7325429b5fbbfb2f5836669bceb625fd87f86586ad3efa731cd3c9c4669a6bc75c156fe", 0xc9}, {&(0x7f0000001140)="39e4e97979abbe7ad8ddad6c79e760f80b0b9758d40b12268eef80265d9914c65e946e75402f11d462be03e92a9d5ad8", 0x30}, {&(0x7f0000001180)="67847b1954e61516de28e8092656b8b33a2523aefd329724f33d58eee3883ed5736ff624c151909fd6191786a740d2d0ae2c557aca5eb303394d2ef73a04c85edefcec81782b3803639f5488bd7e8ae21cad5e", 0x53}, {&(0x7f0000001200)="00780b961e1e81a78e362705fa96a1bdf8439e662d79f6f4d07abb04d51fa7fa7901831ebde93c2521237300fb80401d891396dc50eee19d339eccf83daff42944ec13a20a42b07c23d5c5270ff0a4b7beae3b8a7c9a5690c19beb2ae881cf3dd48d50219dc908a999747d6dd4d1c47a76a178976895dcb84f0b124a0efe35d79c2b5371fa7d9b56ccb2117461c7c724f5fbbb44a04d1adcc84eb039a153a563f33dd8f350f4be996173957b2b6c916e5b444ba01cb11d6e1e7435ea", 0xbc}], 0x6, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000034c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x70, 0x854}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000035c0)="06f73fa3196c27c0e0295890e80b49ebc87229cac6f9056e2f4b8642289de630e7940a701256", 0x26}, {&(0x7f0000003600)="17b3accf829989eb02e7ef624851b89c6d5d3edc215a2a635b88a5089b59c70fdea32f7678378f36401e96e74a48d71ca9f595ff846b585e420d339276df57f2f0af1af451e5469292c98404fcd60e41a5f2a6094f146966507268611ce4990bd3f58ddeb9a7382b75c560c62ad1b11bca55215e345192253a3ab2973245f2cf9d92710a69bf6a5c809550a8f417ea0acac114d8dfd8ccd77fcca14330a0d8780882daceeb86b7", 0xa7}, {&(0x7f00000036c0)="33cba4227c8c8c1f283358b447a58c66f233ff740ccdc8fe6bcba3b2b92e1948f3e0a7dda55d8f9bac77acc3a3cfe4f25e4ad8e203c9dde3e9cfa05b4ae3da169d", 0x41}, {&(0x7f0000003740)="b238fc912a033a86fa388c9b8642aabbaa910715c0f75b8bd5c1b1415053d7797578aa41db8ea2a9288b79eff937eb964ead70392ba9b010cfddc3ee0e8b645a3db0964269ed07392a9aa93344ab58209aca367bddcf4e5b5a45f4566abf08a956df699d36a8670512b464227a393ab32ddeac0b81a325d5c8e759e095ae2d3549bda4eba737269144792c882c9d3413edcf1959373f96fcdde901c86759b9046c8cc06d476b21364770efd3da5668432cea8dcc087139db5b4356109231fbd0852627d146de34cfcce1c1e7ce1ab8f23edb", 0xd2}], 0x4, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)="e1f9057427b05d766d3f03ebcd381d602225ac2cf9b6c065c0e6e67acbb328d2f18249a6dd8570460ce070d02f87cce1bf175158985ff1990a70e53565e54f487ac3295d03ddd84f7ff53eb640af5abc225b11842f55c88a98d616c61c66087ab2243b6709272a7536f2029dc474fa3eb0c750e55179a47ab67f43ef4f6469c1756b516d92156db942f1f0159b5384", 0x8f}, {&(0x7f00000039c0)="4f9a3cebe8a3fd4f392470fee83008f5452761d462206fb5c78597c36f77e60b2f96c4af58bbabee5a1ff6355add3911f65d3bdb61985067c8d93973d7d62d7784d1dd34d55785a241acb6bf72ae1695dc591cb5b000856dfb42a721aef9ec6a0e08319fd00b7a213d90d230978f257dde460617352c2eca7f9f1525bc4ba6cb04d0353b893c4e3a1782b76f7c4e00fb9eb5afd485aceb77e1cbbcff7fccf56d0fd5c506b9c8fa5486fc3722bbcc56cce41a57042b954bc49ffe7d58c5f6251f20b9f9af55841323c522a89ffa339e2625ef68182568e6e3baf0ddb953804d655d38f9342a65fb312a8f394bb6a5fa5a5857fa", 0xf3}, {&(0x7f0000003ac0)="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", 0xff}, {&(0x7f0000003bc0)="015a16052c75bc4bb3f1b7ecab7b70ebc1a6da7fe933036348e7d987be2305a121be1a5e51aecb6b5ed0159cf22c6fca934a631bf93d71c7acaf039440f75c5c3614e5b21a1f8fe86628dfb61c36265af484b3e02369ced8fd8376682bc5ba8e77b68081773805d9f5911dc5", 0x6c}], 0x4, &(0x7f0000003d40)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r1, r5, r0, r8]}}], 0x54, 0x40000}}], 0x7, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:02:55 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) [ 2543.161462][T30521] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2543.210167][T30521] CPU: 0 PID: 30521 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2543.220738][T30521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2543.230825][T30521] Call Trace: [ 2543.234127][T30521] [ 2543.237085][T30521] dump_stack_lvl+0x136/0x150 [ 2543.241801][T30521] dump_header+0x10a/0xd70 [ 2543.246260][T30521] oom_kill_process+0x25d/0x600 [ 2543.251153][T30521] out_of_memory+0x35c/0x1660 [ 2543.255867][T30521] ? find_held_lock+0x2d/0x110 [ 2543.260680][T30521] ? oom_killer_disable+0x2b0/0x2b0 [ 2543.265918][T30521] ? rcu_read_unlock+0x9/0x60 [ 2543.270634][T30521] ? find_held_lock+0x2d/0x110 [ 2543.275454][T30521] mem_cgroup_out_of_memory+0x206/0x270 [ 2543.281137][T30521] ? mem_cgroup_margin+0x130/0x130 [ 2543.286294][T30521] ? lock_downgrade+0x690/0x690 [ 2543.291197][T30521] try_charge_memcg+0xf9b/0x13b0 [ 2543.296178][T30521] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2543.302204][T30521] ? rcu_read_unlock+0x9/0x60 13:02:55 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40046602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2543.306925][T30521] ? lock_downgrade+0x690/0x690 [ 2543.311831][T30521] charge_memcg+0x90/0x3b0 [ 2543.316283][T30521] __mem_cgroup_charge+0x2b/0x90 [ 2543.321267][T30521] do_wp_page+0x8eb/0x3520 [ 2543.325730][T30521] ? lock_release+0x670/0x670 [ 2543.330446][T30521] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2543.335859][T30521] ? do_raw_spin_lock+0x124/0x2b0 [ 2543.340929][T30521] ? spin_bug+0x1c0/0x1c0 [ 2543.345279][T30521] ? lock_downgrade+0x690/0x690 [ 2543.350134][T30521] __handle_mm_fault+0x19a1/0x3e60 [ 2543.355252][T30521] ? vm_iomap_memory+0x190/0x190 [ 2543.360199][T30521] handle_mm_fault+0x2ba/0x9c0 [ 2543.364959][T30521] do_user_addr_fault+0x475/0x1230 [ 2543.370067][T30521] ? rcu_is_watching+0x12/0xb0 [ 2543.374844][T30521] exc_page_fault+0x98/0x170 [ 2543.379440][T30521] asm_exc_page_fault+0x26/0x30 [ 2543.384285][T30521] RIP: 0023:0xf72206e8 [ 2543.388340][T30521] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2543.407964][T30521] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2543.414023][T30521] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2543.421987][T30521] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2543.429950][T30521] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2543.437911][T30521] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2543.445873][T30521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2543.453845][T30521] [ 2543.484957][T30521] memory: usage 307200kB, limit 307200kB, failcnt 2741 [ 2543.492747][T30521] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2543.499956][T30521] Memory cgroup stats for /syz2: [ 2543.510900][T30521] anon 811008 [ 2543.510900][T30521] file 315392 [ 2543.510900][T30521] kernel 313446400 [ 2543.510900][T30521] kernel_stack 327680 [ 2543.510900][T30521] pagetables 503808 [ 2543.510900][T30521] sec_pagetables 0 [ 2543.510900][T30521] percpu 4060576 [ 2543.510900][T30521] sock 0 [ 2543.510900][T30521] vmalloc 0 [ 2543.510900][T30521] shmem 315392 [ 2543.510900][T30521] zswap 0 [ 2543.510900][T30521] zswapped 0 [ 2543.510900][T30521] file_mapped 249856 [ 2543.510900][T30521] file_dirty 0 [ 2543.510900][T30521] file_writeback 0 [ 2543.510900][T30521] swapcached 0 [ 2543.510900][T30521] anon_thp 0 [ 2543.510900][T30521] file_thp 0 [ 2543.510900][T30521] shmem_thp 0 [ 2543.510900][T30521] inactive_anon 65536 [ 2543.510900][T30521] active_anon 1060864 [ 2543.510900][T30521] inactive_file 0 [ 2543.510900][T30521] active_file 0 [ 2543.510900][T30521] unevictable 0 [ 2543.510900][T30521] slab_reclaimable 31088 [ 2543.510900][T30521] slab_unreclaimable 308438432 [ 2543.510900][T30521] slab 308469520 [ 2543.510900][T30521] workingset_refault_anon 0 [ 2543.510900][T30521] workingset_refault_file 0 [ 2543.510900][T30521] workingset_activate_anon 0 [ 2543.510900][T30521] workingset_activate_file 0 [ 2543.510900][T30521] workingset_restore_anon 0 [ 2543.510900][T30521] workingset_restore_file 0 [ 2543.510900][T30521] workingset_nodereclaim 0 [ 2543.510900][T30521] pgscan 0 [ 2543.510900][T30521] pgsteal 0 [ 2543.510900][T30521] pgscan_kswapd 0 [ 2543.510900][T30521] pgscan_direct 0 [ 2543.510900][T30521] pgscan_khugepaged 0 [ 2543.510900][T30521] pgsteal_kswapd 0 [ 2543.510900][T30521] pgsteal_direct 0 [ 2543.510900][T30521] pgsteal_khugepaged 0 [ 2543.510900][T30521] pgfault 498287 [ 2543.510900][T30521] pgmajfault 32 [ 2543.510900][T30521] pgrefill 0 [ 2543.510900][T30521] pgactivate 0 [ 2543.510900][T30521] pgdeactivate 0 [ 2543.510900][T30521] pglazyfree 0 [ 2543.510900][T30521] pglazyfreed 0 [ 2543.510900][T30521] zswpin 0 [ 2543.510900][T30521] zswpout 0 [ 2543.510900][T30521] thp_fault_alloc 0 [ 2543.705603][T30521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30521,uid=0 [ 2543.735222][T30521] Memory cgroup out of memory: Killed process 30521 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:56 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x801c581f, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:56 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40049409, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:56 executing program 1: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x80086601, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025480e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x14000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1e1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xffffffff7fffffff, 0x0, 0xffffffffffffffff, 0x40, 0xd0, 0x0, 0x80000000, 0x5}, {0x0, 0xe44, 0xc45, 0x40}, 0x7, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@local, 0x4d4}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x1, 0xd1d2, 0x7f}}, 0xe4) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000540)=0x14, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_open_dev$sg(&(0x7f0000000e40), 0x5, 0x88401) r11 = getuid() r12 = syz_clone(0x0, &(0x7f0000000e80)="56d04cb556e72562bdb64592b0b3d06d889f982a414e5f5f4d61ecc8f63848a0e43ab5c04850588e579281c7526be2deda67e97048b3bc6b353a686cb70c3f", 0x3f, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="1264c346c5f0e6c5e8e40ac32f3ad37d0dc30195a10c39d453f76c8f2ff9763c04b0568e1614e7e6695fec3b80768dae0cba0d7fd9bc82d1de4806bb8a1720c97e2cfb8205843c80c43c0eb56edbc3f311bb55c03fc5e13574c8818284c9338e8bfe94f8bfd0dd72306f81b3e9684b26af49f4036e51") r13 = getuid() sendmmsg$unix(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="d2ea9d33290dd785b14032231a0377653994f65e19a93cfd1540b1b012c06ceef4bd877b83081fcd0d387edd773a88e1717c380028423050c5b19661eb1ff97ebf8cf9286221608ccc8b7b1bc6dc4828871a8a60c67fc3f164eb817eef3d4949e22b72f42d49dcc2a8f573a91eb1b987088340442eb549af68ec3fdee5d57c218d344bcc5c66c103cc6100a897fc409eb09010ba5e498226f4c84c5947550cafa8fb3dc4a7f806762da31769344cd30736412d35ed49c1a537f3464490711580db08f1fedadeda2dd2847e5d8abd21dbb44d42d7bcbb22ee8b9044dd263d8520b98ce5", 0xe3}, {&(0x7f0000000300)="a0b84ff0a48ccc70974d17450b83f4428a45335547a096b761927a998927bab1de80a66e40090040ec74fb14651097d1a86952803607863b20648390d343b858c4e74e6994bb10f41387e4b7f8db0fbda794601d87232cebbbc00c78ca0c285e2fdef58f2087a1011f5dd0f913c4b063fc2b9557df510ee28a470740fc10ab244a7a9bf07f84f9", 0x87}, {&(0x7f0000000280)="3813752e489cf6ac047de3ab4dc4fba3acc3", 0x12}, {&(0x7f0000000640)="aa06460484848516d5bcfc0dd0c8606def75d93e30a630deac821bbd772a35d6c18c508695f1c46f1ad1b642abc997d13a0f5cf31c7dd6af701b1862046e6870ba27b06bb44309341b70fd1c0cde0c622cf18d132b168be70dcfa4f956a1b18629c7ded07d5ffa626b4d083f47ff781b9b8ea1831da0ca477dcc54b99ac1c4ecfa1dcc1dfd552f478b50c71c2a6ff92062f8e6a3e17f9db35c1265a6dd6eb00eb36c513df54f6c21641dad91d981081c58b9f41acaba5c846d", 0xb9}, {&(0x7f0000000700)="99bd9b4778370b131529e17fe1516aa3f8ca782d0baf65044059d9cbbce5f2486d2d3cd287e8ad6cc87afa558647c4dbfe9f15b9e7225fbb4da19144662335cfbf8ef836686a03e5835b5ae5d5a66d", 0x4f}, {&(0x7f0000000780)="7576eafbcbf79be66fa40f547c8806f92a81cd7c4165b94c6c0c27d4093647d7f0b499b3f03b0714e001b864b3e1b49ff6e0aefcb75266c69c8869f7249ca3499d1dba6a909daa9229dfb13cfe3268d93a72242fbdee14d3ae8828ab7f350a10fffb094fbca61dd7a74f6f1bf6037d0ca7712211bc449a86d5171a840295e7d0af0dada054bf6342e6a15c0b2cd00d2949d7fa90cb6a223f0a5ad438c7b3e9b52a6c30a2f7e181d376aaa785d739760fdd8fbd1008e5be5686cd1cbba0955a1db1ded2", 0xc3}, {&(0x7f0000000880)="5ab6bf99e074cb032c2084290c8c56d345495a19b830e006ae7ec40e7af13b2da2cf013575eacb54af41576d7dcf71c85008b18558ed08ecc89b9db6ddfcca216da68745a095b3e6e9f1ecd4a6c8f15b17228771c36d24759bcbaa8e7ef91198", 0x60}], 0x7, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r5, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="84864f0ea686f486d020813b1a1894c4687ce36011af4a468ec5fa06c1b4f9b350be83a589cdb6d3a791a0c5061037b211d1153ccc7a0cb5093c96a2c6dc12a1bd1a181af4d20c23342f66649b097605505797365134548df4fe2f587047c568a47dfa88c1f3c8a1ed716389f398c49514bf2cae57c875e23b6eb6347c762bf522e6467486efc7e2854077baba74233c231ddc18b456e6e310d0dbbe676c71f75e4e25ac7ecf80cb2e8343e1cd9ab188860801a45b0b05cef922bc7b9d50564941a24a84a4d60a6665c18f18bbde41c0c52f6dba3fd40f81", 0xd8}, {&(0x7f0000000cc0)="98db92f8eac24460dbaba455e8463388c9b53ebcdfe60c64df1eb37a9c151add8756a57c064d7031bad1f9574be229052bfc2afe4f6759a03236c5904e2591314e5be2b507d625bd157ceae8d145ff5e1a5e107a291fade0b4864e1dd6d349853a840ef67713907862ed0423f1c50daa6025f44b2c3b725c7c3dc1673476b1dd599e", 0x82}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1400000001cdf700000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r8, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x9c, 0x805}}], 0x2, 0x41) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="73393a746c6c300200839bcf0592c717d518b42a23b90001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000430000cc00000000000490787f000001ac1414aa4410000000000000000000000000000000028640000000000005c1288c0006cbb573d40012d3781551639fc7494b284a7b6b73ec3500108202794ff6b6b96b0c565bac6538000d919dc3dfc5fed896d65dbc071b00ac1414bb0000000000000000ac1414bb7f000001ac1e0001000100094617d76507aeb744180000000000000000000000000000000000000000000044140003ac14140000000000ac1e000100000000001221efa26052c4fc0813dca4d452498cb70000"]}) 13:02:56 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x802c550a, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000000)="5e1dc3cfecd021d56a6101cff477f749138c0569047ccf9f41d4680180838b13493340ff748380ce463b42547b5c146fb3cf622db160881d1de7fecf6668859c7664ef841f805623d49c6453252a85d968d5c0e0e1b527a2f1d9169ff2fb205c246bd236edd76c5098ebf743acf5dda18fb0c9e8187e0b7422966710e4f02723c6dff9fa63f6", 0x86}, {&(0x7f00000000c0)="3cde9c46c66309172d0c0c3a", 0xc}, {&(0x7f0000001140)="b12d9c08b49372bd851ae63aec52b53f8429aec338bc165057091b7c0357707ac16bbb5672991d374b154c5e335383ff89a9bff8fd7171adf8df3fae9399d54f3a84df6880c604144d1ecb42592d24c95cb8ff9e9baefdcf4145431d57d8d334d1e7c88d46590815bf0dc6941f8d5022034ec291e1452d0f3693a6b5253c8eb18190bdba4a60d4035b236b0ab288a6c7a3d21d", 0x93}, {&(0x7f0000001200)="ff79bd059fa02e4ea69143e96ee50244acd4a391e95bb8ea68962bb6289a4d12a20961fb657bc2c300778c74712fa5f6224b0ca7240a7aceafe48e13b3ae984443175e8895f1897853c30b6e186c21a55d37c259baedbe86c49061cad6a3e3bc4f0ba7013f777c1dfe698e6fd7729e9679469ffb97d836e347c64a53b1aa31b7b98ec728bf3f444732a45b64ffb00ec1f1d095a398e2e0264e40dc1c2b7ab6912ef6efd3ddbdda8c1cb20bcb7af07766b2cf995f1be3677e12", 0xb9}, {&(0x7f00000012c0)="455660ffa098ec7898c3afff73f0daf8878b56976eef568710199a5e164259ed17445cb9efd557487032a1502b9e95c716b3ba8cdef0fdec7a666d264e78da3393e4ff261fa08b51c69c255e4265d1d6c24279e573bba4d4be520d7c538857de34c052b1a36a181f76c9189b1dc451ec61e4f6cf98002625ca514be4996ad88e4366a6", 0x83}], 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd408205140095bb0000000109022400011b00000009040000022a3e740009098b33020000100109050b362f"], 0x0) 13:02:56 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) (rerun: 32) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:02:56 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8038550a, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2544.110951][T30585] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2544.149169][T30585] CPU: 0 PID: 30585 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2544.159644][T30585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2544.169721][T30585] Call Trace: [ 2544.172989][T30585] [ 2544.175920][T30585] dump_stack_lvl+0x136/0x150 [ 2544.180619][T30585] dump_header+0x10a/0xd70 [ 2544.185060][T30585] oom_kill_process+0x25d/0x600 [ 2544.189906][T30585] out_of_memory+0x35c/0x1660 [ 2544.194589][T30585] ? find_held_lock+0x2d/0x110 [ 2544.199378][T30585] ? oom_killer_disable+0x2b0/0x2b0 [ 2544.204603][T30585] ? rcu_read_unlock+0x9/0x60 [ 2544.209279][T30585] ? find_held_lock+0x2d/0x110 [ 2544.214392][T30585] mem_cgroup_out_of_memory+0x206/0x270 [ 2544.219935][T30585] ? mem_cgroup_margin+0x130/0x130 [ 2544.225040][T30585] ? lock_downgrade+0x690/0x690 [ 2544.229892][T30585] try_charge_memcg+0xf9b/0x13b0 [ 2544.234836][T30585] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2544.240811][T30585] ? rcu_read_unlock+0x9/0x60 [ 2544.245504][T30585] ? lock_downgrade+0x690/0x690 [ 2544.250353][T30585] charge_memcg+0x90/0x3b0 [ 2544.254782][T30585] __mem_cgroup_charge+0x2b/0x90 [ 2544.259755][T30585] do_wp_page+0x8eb/0x3520 [ 2544.264194][T30585] ? lock_release+0x670/0x670 [ 2544.268861][T30585] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2544.274313][T30585] ? do_raw_spin_lock+0x124/0x2b0 [ 2544.279332][T30585] ? spin_bug+0x1c0/0x1c0 [ 2544.283662][T30585] ? lock_downgrade+0x690/0x690 [ 2544.288516][T30585] __handle_mm_fault+0x19a1/0x3e60 [ 2544.293631][T30585] ? vm_iomap_memory+0x190/0x190 [ 2544.298666][T30585] handle_mm_fault+0x2ba/0x9c0 [ 2544.303515][T30585] do_user_addr_fault+0x475/0x1230 [ 2544.308624][T30585] ? rcu_is_watching+0x12/0xb0 [ 2544.313400][T30585] exc_page_fault+0x98/0x170 [ 2544.317987][T30585] asm_exc_page_fault+0x26/0x30 [ 2544.322834][T30585] RIP: 0023:0xf72206e8 [ 2544.326908][T30585] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2544.346628][T30585] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2544.352688][T30585] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2544.360649][T30585] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2544.368611][T30585] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2544.376590][T30585] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2544.384725][T30585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2544.392695][T30585] [ 2544.404704][T21131] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2544.419982][T30585] memory: usage 307200kB, limit 307200kB, failcnt 2825 [ 2544.427327][T30585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2544.445485][T30585] Memory cgroup stats for /syz2: [ 2544.448312][T30585] anon 811008 [ 2544.448312][T30585] file 315392 [ 2544.448312][T30585] kernel 313446400 [ 2544.448312][T30585] kernel_stack 327680 [ 2544.448312][T30585] pagetables 503808 [ 2544.448312][T30585] sec_pagetables 0 [ 2544.448312][T30585] percpu 4060576 [ 2544.448312][T30585] sock 0 [ 2544.448312][T30585] vmalloc 0 [ 2544.448312][T30585] shmem 315392 [ 2544.448312][T30585] zswap 0 [ 2544.448312][T30585] zswapped 0 [ 2544.448312][T30585] file_mapped 249856 [ 2544.448312][T30585] file_dirty 0 [ 2544.448312][T30585] file_writeback 0 [ 2544.448312][T30585] swapcached 0 [ 2544.448312][T30585] anon_thp 0 [ 2544.448312][T30585] file_thp 0 [ 2544.448312][T30585] shmem_thp 0 [ 2544.448312][T30585] inactive_anon 65536 [ 2544.448312][T30585] active_anon 1060864 [ 2544.448312][T30585] inactive_file 0 [ 2544.448312][T30585] active_file 0 [ 2544.448312][T30585] unevictable 0 [ 2544.448312][T30585] slab_reclaimable 31088 [ 2544.448312][T30585] slab_unreclaimable 308438432 [ 2544.448312][T30585] slab 308469520 [ 2544.448312][T30585] workingset_refault_anon 0 [ 2544.448312][T30585] workingset_refault_file 0 [ 2544.448312][T30585] workingset_activate_anon 0 [ 2544.448312][T30585] workingset_activate_file 0 [ 2544.448312][T30585] workingset_restore_anon 0 [ 2544.448312][T30585] workingset_restore_file 0 [ 2544.448312][T30585] workingset_nodereclaim 0 [ 2544.448312][T30585] pgscan 0 [ 2544.448312][T30585] pgsteal 0 [ 2544.448312][T30585] pgscan_kswapd 0 [ 2544.448312][T30585] pgscan_direct 0 [ 2544.448312][T30585] pgscan_khugepaged 0 [ 2544.448312][T30585] pgsteal_kswapd 0 [ 2544.448312][T30585] pgsteal_direct 0 [ 2544.448312][T30585] pgsteal_khugepaged 0 [ 2544.448312][T30585] pgfault 498341 [ 2544.448312][T30585] pgmajfault 32 [ 2544.448312][T30585] pgrefill 0 [ 2544.448312][T30585] pgactivate 0 [ 2544.448312][T30585] pgdeactivate 0 13:02:57 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) [ 2544.448312][T30585] pglazyfree 0 [ 2544.448312][T30585] pglazyfreed 0 [ 2544.448312][T30585] zswpin 0 [ 2544.448312][T30585] zswpout 0 [ 2544.448312][T30585] thp_fault_alloc 0 [ 2544.644787][T30585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30585,uid=0 13:02:57 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendto$inet(r1, &(0x7f0000000040)="470900c1ab2cb067a87ba8fdcb5116909ec663d3d91d727005c454f4248c82f947eb653aa8cd56d162997479f4db6bba0a802dcd4c8c7de70d6aca0970", 0x3d, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:02:57 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2544.681766][T30585] Memory cgroup out of memory: Killed process 30585 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025500e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2544.784902][T21131] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2544.810457][T21131] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 13:02:57 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0045878, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:57 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4008550c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2544.859359][T21131] usb 2-1: Dual-Role OTG device on HNP port 13:02:57 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x14000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) dup(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1e1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xffffffff7fffffff, 0x0, 0xffffffffffffffff, 0x40, 0xd0, 0x0, 0x80000000, 0x5}, {0x0, 0xe44, 0xc45, 0x40}, 0x7, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@local, 0x4d4}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x1, 0xd1d2, 0x7f}}, 0xe4) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000540)=0x14, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r10 = syz_open_dev$sg(&(0x7f0000000e40), 0x5, 0x88401) r11 = getuid() (async) r12 = syz_clone(0x0, &(0x7f0000000e80)="56d04cb556e72562bdb64592b0b3d06d889f982a414e5f5f4d61ecc8f63848a0e43ab5c04850588e579281c7526be2deda67e97048b3bc6b353a686cb70c3f", 0x3f, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="1264c346c5f0e6c5e8e40ac32f3ad37d0dc30195a10c39d453f76c8f2ff9763c04b0568e1614e7e6695fec3b80768dae0cba0d7fd9bc82d1de4806bb8a1720c97e2cfb8205843c80c43c0eb56edbc3f311bb55c03fc5e13574c8818284c9338e8bfe94f8bfd0dd72306f81b3e9684b26af49f4036e51") (async) r13 = getuid() sendmmsg$unix(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="d2ea9d33290dd785b14032231a0377653994f65e19a93cfd1540b1b012c06ceef4bd877b83081fcd0d387edd773a88e1717c380028423050c5b19661eb1ff97ebf8cf9286221608ccc8b7b1bc6dc4828871a8a60c67fc3f164eb817eef3d4949e22b72f42d49dcc2a8f573a91eb1b987088340442eb549af68ec3fdee5d57c218d344bcc5c66c103cc6100a897fc409eb09010ba5e498226f4c84c5947550cafa8fb3dc4a7f806762da31769344cd30736412d35ed49c1a537f3464490711580db08f1fedadeda2dd2847e5d8abd21dbb44d42d7bcbb22ee8b9044dd263d8520b98ce5", 0xe3}, {&(0x7f0000000300)="a0b84ff0a48ccc70974d17450b83f4428a45335547a096b761927a998927bab1de80a66e40090040ec74fb14651097d1a86952803607863b20648390d343b858c4e74e6994bb10f41387e4b7f8db0fbda794601d87232cebbbc00c78ca0c285e2fdef58f2087a1011f5dd0f913c4b063fc2b9557df510ee28a470740fc10ab244a7a9bf07f84f9", 0x87}, {&(0x7f0000000280)="3813752e489cf6ac047de3ab4dc4fba3acc3", 0x12}, {&(0x7f0000000640)="aa06460484848516d5bcfc0dd0c8606def75d93e30a630deac821bbd772a35d6c18c508695f1c46f1ad1b642abc997d13a0f5cf31c7dd6af701b1862046e6870ba27b06bb44309341b70fd1c0cde0c622cf18d132b168be70dcfa4f956a1b18629c7ded07d5ffa626b4d083f47ff781b9b8ea1831da0ca477dcc54b99ac1c4ecfa1dcc1dfd552f478b50c71c2a6ff92062f8e6a3e17f9db35c1265a6dd6eb00eb36c513df54f6c21641dad91d981081c58b9f41acaba5c846d", 0xb9}, {&(0x7f0000000700)="99bd9b4778370b131529e17fe1516aa3f8ca782d0baf65044059d9cbbce5f2486d2d3cd287e8ad6cc87afa558647c4dbfe9f15b9e7225fbb4da19144662335cfbf8ef836686a03e5835b5ae5d5a66d", 0x4f}, {&(0x7f0000000780)="7576eafbcbf79be66fa40f547c8806f92a81cd7c4165b94c6c0c27d4093647d7f0b499b3f03b0714e001b864b3e1b49ff6e0aefcb75266c69c8869f7249ca3499d1dba6a909daa9229dfb13cfe3268d93a72242fbdee14d3ae8828ab7f350a10fffb094fbca61dd7a74f6f1bf6037d0ca7712211bc449a86d5171a840295e7d0af0dada054bf6342e6a15c0b2cd00d2949d7fa90cb6a223f0a5ad438c7b3e9b52a6c30a2f7e181d376aaa785d739760fdd8fbd1008e5be5686cd1cbba0955a1db1ded2", 0xc3}, {&(0x7f0000000880)="5ab6bf99e074cb032c2084290c8c56d345495a19b830e006ae7ec40e7af13b2da2cf013575eacb54af41576d7dcf71c85008b18558ed08ecc89b9db6ddfcca216da68745a095b3e6e9f1ecd4a6c8f15b17228771c36d24759bcbaa8e7ef91198", 0x60}], 0x7, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r5, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="84864f0ea686f486d020813b1a1894c4687ce36011af4a468ec5fa06c1b4f9b350be83a589cdb6d3a791a0c5061037b211d1153ccc7a0cb5093c96a2c6dc12a1bd1a181af4d20c23342f66649b097605505797365134548df4fe2f587047c568a47dfa88c1f3c8a1ed716389f398c49514bf2cae57c875e23b6eb6347c762bf522e6467486efc7e2854077baba74233c231ddc18b456e6e310d0dbbe676c71f75e4e25ac7ecf80cb2e8343e1cd9ab188860801a45b0b05cef922bc7b9d50564941a24a84a4d60a6665c18f18bbde41c0c52f6dba3fd40f81", 0xd8}, {&(0x7f0000000cc0)="98db92f8eac24460dbaba455e8463388c9b53ebcdfe60c64df1eb37a9c151add8756a57c064d7031bad1f9574be229052bfc2afe4f6759a03236c5904e2591314e5be2b507d625bd157ceae8d145ff5e1a5e107a291fade0b4864e1dd6d349853a840ef67713907862ed0423f1c50daa6025f44b2c3b725c7c3dc1673476b1dd599e", 0x82}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1400000001cdf700000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r8, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x9c, 0x805}}], 0x2, 0x41) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="73393a746c6c300200839bcf0592c717d518b42a23b90001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000430000cc00000000000490787f000001ac1414aa4410000000000000000000000000000000028640000000000005c1288c0006cbb573d40012d3781551639fc7494b284a7b6b73ec3500108202794ff6b6b96b0c565bac6538000d919dc3dfc5fed896d65dbc071b00ac1414bb0000000000000000ac1414bb7f000001ac1e0001000100094617d76507aeb744180000000000000000000000000000000000000000000044140003ac14140000000000ac1e000100000000001221efa26052c4fc0813dca4d452498cb70000"]}) [ 2544.912590][T30623] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2544.924744][T21131] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.95 [ 2544.950835][T21131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.961272][T30623] CPU: 0 PID: 30623 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2544.971830][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2544.981916][T30623] Call Trace: [ 2544.985226][T30623] [ 2544.988192][T30623] dump_stack_lvl+0x136/0x150 [ 2544.992918][T30623] dump_header+0x10a/0xd70 [ 2544.997418][T30623] oom_kill_process+0x25d/0x600 [ 2545.002323][T30623] out_of_memory+0x35c/0x1660 [ 2545.004896][T30601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2545.007028][T30623] ? find_held_lock+0x2d/0x110 [ 2545.018935][T30623] ? oom_killer_disable+0x2b0/0x2b0 [ 2545.024190][T30623] ? rcu_read_unlock+0x9/0x60 [ 2545.028916][T30623] ? find_held_lock+0x2d/0x110 [ 2545.033741][T30623] mem_cgroup_out_of_memory+0x206/0x270 [ 2545.039348][T30623] ? mem_cgroup_margin+0x130/0x130 [ 2545.044510][T30623] ? lock_downgrade+0x690/0x690 [ 2545.048497][T21131] usb 2-1: invalid MIDI in EP 0 [ 2545.049392][T30623] try_charge_memcg+0xf9b/0x13b0 [ 2545.059200][T30623] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2545.065223][T30623] ? rcu_read_unlock+0x9/0x60 [ 2545.069943][T30623] ? lock_downgrade+0x690/0x690 [ 2545.074842][T30623] charge_memcg+0x90/0x3b0 [ 2545.079297][T30623] __mem_cgroup_charge+0x2b/0x90 [ 2545.084276][T30623] do_wp_page+0x8eb/0x3520 [ 2545.088738][T30623] ? lock_release+0x670/0x670 [ 2545.093454][T30623] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2545.098875][T30623] ? do_raw_spin_lock+0x124/0x2b0 [ 2545.103945][T30623] ? spin_bug+0x1c0/0x1c0 [ 2545.108318][T30623] ? lock_downgrade+0x690/0x690 [ 2545.113219][T30623] __handle_mm_fault+0x19a1/0x3e60 [ 2545.118387][T30623] ? vm_iomap_memory+0x190/0x190 [ 2545.123396][T30623] handle_mm_fault+0x2ba/0x9c0 [ 2545.128259][T30623] do_user_addr_fault+0x475/0x1230 [ 2545.133419][T30623] ? rcu_is_watching+0x12/0xb0 [ 2545.138232][T30623] exc_page_fault+0x98/0x170 [ 2545.142866][T30623] asm_exc_page_fault+0x26/0x30 [ 2545.147756][T30623] RIP: 0023:0xf72206e8 13:02:57 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0045878, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2545.151853][T30623] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2545.171502][T30623] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2545.177603][T30623] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2545.185618][T30623] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2545.193622][T30623] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2545.201625][T30623] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 13:02:57 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x14000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) dup(r3) (async) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1e1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xffffffff7fffffff, 0x0, 0xffffffffffffffff, 0x40, 0xd0, 0x0, 0x80000000, 0x5}, {0x0, 0xe44, 0xc45, 0x40}, 0x7, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@local, 0x4d4}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x1, 0xd1d2, 0x7f}}, 0xe4) (async, rerun: 32) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000540)=0x14, 0x0) (async, rerun: 32) r9 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r10 = syz_open_dev$sg(&(0x7f0000000e40), 0x5, 0x88401) r11 = getuid() (async) r12 = syz_clone(0x0, &(0x7f0000000e80)="56d04cb556e72562bdb64592b0b3d06d889f982a414e5f5f4d61ecc8f63848a0e43ab5c04850588e579281c7526be2deda67e97048b3bc6b353a686cb70c3f", 0x3f, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="1264c346c5f0e6c5e8e40ac32f3ad37d0dc30195a10c39d453f76c8f2ff9763c04b0568e1614e7e6695fec3b80768dae0cba0d7fd9bc82d1de4806bb8a1720c97e2cfb8205843c80c43c0eb56edbc3f311bb55c03fc5e13574c8818284c9338e8bfe94f8bfd0dd72306f81b3e9684b26af49f4036e51") (async, rerun: 32) r13 = getuid() (rerun: 32) sendmmsg$unix(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="d2ea9d33290dd785b14032231a0377653994f65e19a93cfd1540b1b012c06ceef4bd877b83081fcd0d387edd773a88e1717c380028423050c5b19661eb1ff97ebf8cf9286221608ccc8b7b1bc6dc4828871a8a60c67fc3f164eb817eef3d4949e22b72f42d49dcc2a8f573a91eb1b987088340442eb549af68ec3fdee5d57c218d344bcc5c66c103cc6100a897fc409eb09010ba5e498226f4c84c5947550cafa8fb3dc4a7f806762da31769344cd30736412d35ed49c1a537f3464490711580db08f1fedadeda2dd2847e5d8abd21dbb44d42d7bcbb22ee8b9044dd263d8520b98ce5", 0xe3}, {&(0x7f0000000300)="a0b84ff0a48ccc70974d17450b83f4428a45335547a096b761927a998927bab1de80a66e40090040ec74fb14651097d1a86952803607863b20648390d343b858c4e74e6994bb10f41387e4b7f8db0fbda794601d87232cebbbc00c78ca0c285e2fdef58f2087a1011f5dd0f913c4b063fc2b9557df510ee28a470740fc10ab244a7a9bf07f84f9", 0x87}, {&(0x7f0000000280)="3813752e489cf6ac047de3ab4dc4fba3acc3", 0x12}, {&(0x7f0000000640)="aa06460484848516d5bcfc0dd0c8606def75d93e30a630deac821bbd772a35d6c18c508695f1c46f1ad1b642abc997d13a0f5cf31c7dd6af701b1862046e6870ba27b06bb44309341b70fd1c0cde0c622cf18d132b168be70dcfa4f956a1b18629c7ded07d5ffa626b4d083f47ff781b9b8ea1831da0ca477dcc54b99ac1c4ecfa1dcc1dfd552f478b50c71c2a6ff92062f8e6a3e17f9db35c1265a6dd6eb00eb36c513df54f6c21641dad91d981081c58b9f41acaba5c846d", 0xb9}, {&(0x7f0000000700)="99bd9b4778370b131529e17fe1516aa3f8ca782d0baf65044059d9cbbce5f2486d2d3cd287e8ad6cc87afa558647c4dbfe9f15b9e7225fbb4da19144662335cfbf8ef836686a03e5835b5ae5d5a66d", 0x4f}, {&(0x7f0000000780)="7576eafbcbf79be66fa40f547c8806f92a81cd7c4165b94c6c0c27d4093647d7f0b499b3f03b0714e001b864b3e1b49ff6e0aefcb75266c69c8869f7249ca3499d1dba6a909daa9229dfb13cfe3268d93a72242fbdee14d3ae8828ab7f350a10fffb094fbca61dd7a74f6f1bf6037d0ca7712211bc449a86d5171a840295e7d0af0dada054bf6342e6a15c0b2cd00d2949d7fa90cb6a223f0a5ad438c7b3e9b52a6c30a2f7e181d376aaa785d739760fdd8fbd1008e5be5686cd1cbba0955a1db1ded2", 0xc3}, {&(0x7f0000000880)="5ab6bf99e074cb032c2084290c8c56d345495a19b830e006ae7ec40e7af13b2da2cf013575eacb54af41576d7dcf71c85008b18558ed08ecc89b9db6ddfcca216da68745a095b3e6e9f1ecd4a6c8f15b17228771c36d24759bcbaa8e7ef91198", 0x60}], 0x7, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r5, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="84864f0ea686f486d020813b1a1894c4687ce36011af4a468ec5fa06c1b4f9b350be83a589cdb6d3a791a0c5061037b211d1153ccc7a0cb5093c96a2c6dc12a1bd1a181af4d20c23342f66649b097605505797365134548df4fe2f587047c568a47dfa88c1f3c8a1ed716389f398c49514bf2cae57c875e23b6eb6347c762bf522e6467486efc7e2854077baba74233c231ddc18b456e6e310d0dbbe676c71f75e4e25ac7ecf80cb2e8343e1cd9ab188860801a45b0b05cef922bc7b9d50564941a24a84a4d60a6665c18f18bbde41c0c52f6dba3fd40f81", 0xd8}, {&(0x7f0000000cc0)="98db92f8eac24460dbaba455e8463388c9b53ebcdfe60c64df1eb37a9c151add8756a57c064d7031bad1f9574be229052bfc2afe4f6759a03236c5904e2591314e5be2b507d625bd157ceae8d145ff5e1a5e107a291fade0b4864e1dd6d349853a840ef67713907862ed0423f1c50daa6025f44b2c3b725c7c3dc1673476b1dd599e", 0x82}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1400000001cdf700000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r8, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x9c, 0x805}}], 0x2, 0x41) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async, rerun: 64) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="73393a746c6c300200839bcf0592c717d518b42a23b90001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000430000cc00000000000490787f000001ac1414aa4410000000000000000000000000000000028640000000000005c1288c0006cbb573d40012d3781551639fc7494b284a7b6b73ec3500108202794ff6b6b96b0c565bac6538000d919dc3dfc5fed896d65dbc071b00ac1414bb0000000000000000ac1414bb7f000001ac1e0001000100094617d76507aeb744180000000000000000000000000000000000000000000044140003ac14140000000000ac1e000100000000001221efa26052c4fc0813dca4d452498cb70000"]}) [ 2545.206544][T21131] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2545.209605][T30623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2545.209644][T30623] [ 2545.316351][T21131] usb 2-1: USB disconnect, device number 37 [ 2545.334129][T30623] memory: usage 307200kB, limit 307200kB, failcnt 2907 [ 2545.354761][T30623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2545.378051][T30623] Memory cgroup stats for /syz2: [ 2545.378207][T30623] anon 794624 [ 2545.378207][T30623] file 315392 [ 2545.378207][T30623] kernel 313462784 [ 2545.378207][T30623] kernel_stack 327680 [ 2545.378207][T30623] pagetables 503808 [ 2545.378207][T30623] sec_pagetables 0 [ 2545.378207][T30623] percpu 4060640 [ 2545.378207][T30623] sock 0 [ 2545.378207][T30623] vmalloc 0 [ 2545.378207][T30623] shmem 315392 [ 2545.378207][T30623] zswap 0 [ 2545.378207][T30623] zswapped 0 [ 2545.378207][T30623] file_mapped 249856 [ 2545.378207][T30623] file_dirty 0 [ 2545.378207][T30623] file_writeback 0 [ 2545.378207][T30623] swapcached 0 [ 2545.378207][T30623] anon_thp 0 [ 2545.378207][T30623] file_thp 0 [ 2545.378207][T30623] shmem_thp 0 [ 2545.378207][T30623] inactive_anon 65536 [ 2545.378207][T30623] active_anon 1044480 [ 2545.378207][T30623] inactive_file 0 [ 2545.378207][T30623] active_file 0 [ 2545.378207][T30623] unevictable 0 [ 2545.378207][T30623] slab_reclaimable 31088 [ 2545.378207][T30623] slab_unreclaimable 308450344 [ 2545.378207][T30623] slab 308481432 [ 2545.378207][T30623] workingset_refault_anon 0 [ 2545.378207][T30623] workingset_refault_file 0 [ 2545.378207][T30623] workingset_activate_anon 0 [ 2545.378207][T30623] workingset_activate_file 0 [ 2545.378207][T30623] workingset_restore_anon 0 [ 2545.378207][T30623] workingset_restore_file 0 [ 2545.378207][T30623] workingset_nodereclaim 0 [ 2545.378207][T30623] pgscan 0 [ 2545.378207][T30623] pgsteal 0 [ 2545.378207][T30623] pgscan_kswapd 0 [ 2545.378207][T30623] pgscan_direct 0 [ 2545.378207][T30623] pgscan_khugepaged 0 [ 2545.378207][T30623] pgsteal_kswapd 0 [ 2545.378207][T30623] pgsteal_direct 0 [ 2545.378207][T30623] pgsteal_khugepaged 0 [ 2545.378207][T30623] pgfault 498387 [ 2545.378207][T30623] pgmajfault 32 [ 2545.378207][T30623] pgrefill 0 [ 2545.378207][T30623] pgactivate 0 [ 2545.378207][T30623] pgdeactivate 0 [ 2545.378207][T30623] pglazyfree 0 [ 2545.378207][T30623] pglazyfreed 0 [ 2545.378207][T30623] zswpin 0 [ 2545.378207][T30623] zswpout 0 [ 2545.378207][T30623] thp_fault_alloc 0 [ 2545.573352][T30623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30623,uid=0 [ 2545.590405][T30623] Memory cgroup out of memory: Killed process 30623 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:02:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000140)="d10bf6c902848b4b27fe09854bbde217b1e116edada75af2eb8a0c91fba20ef237b79bffb2522148c2b7af0b60cee3cc6e55160ed7f2ea8cf0b46db1e638e9171cf931b10baf82e2e7b984c6218d0da3bff7f92cecdb90e4031503e84cc221d0119ad1ba56ecbf7559798809a8c5b36926f415ec09c8b5e4723a2239f8a1a3f47a5c6d7ce01827a3a16fdbe9a832ae0015b4a1b8768e9c10d92fb2bb7c9611de76bdf4c1988d9f5306da44012bd8f02aaccd108240be4b56969e041590c512edb9cdc3fc3fc39e3272d8f9cb0a12f5ed59e111e6218d6cee955cbcc884d8061aa0711f5ad81a33bfdc34e629c059421b09db0e45a478b68d71c9c4a3d73d3f15b65389e1cb155c9f0c8c9f8a4fdc6341f292811147fbad7346623228b4f005a031f4e7716bcda60e006ab786e93567a63ab323991034044d10e88e9aeafc6734bfa908867c0443b821ccc89345a73cb6c0cfa471aa607da54d8f25284c7e2533e33b9435cbc97113b215d102898b4a1949aaf2baae24c612bb49c0ccede489d32878a98466397e84086e94f99df19cb683e0b3b58ba3c5e617a7b6e5194456c8a0aa9188389c021a1508b621b0fd6a3bc9ab3cd4078007300529f17d6124672eabfda231db20fab72d9fb5b6f7bc78874263c325f11a8730999fc59b89686cb2b71693f7980b438141fd668b48920e570c7822d36971cc1ee69e2226d3d77ddbaf75d945a3822cecf29c87f194b44f4e10f599a9c3ce1a74746389d5e97214e552d270a1766c45700f98eabd748427ef47a8c71723c4d179c8ee488894a74ef4f6c0b1f238bc2ae6a863becaad7ea245599f3869c67b8a74325dcb77f979790dc2b699a7f536aba5a3561470e52f96d614f92941dd25bc5c9dbea7cca5977d81d1e4aaa50cd06d89ca6b55209bd0b0f8283f87807750c56e3876207b328608b9afb591be640d86ada09c6dd87227e715bf99d77e64c880053018f102e4d2ce7cd69b6692c1c6f561aa8d339a42148d8e22c0eaacf991046df250d8ad579ab1f3e3afdfa43d19be28a075886dcd3869816659cf0985341c1db0f3b8e3225a7085140039ba6008c4d2f92ba04efec40229a9bff81904efd8c38bf6b218b7a7a1091cd4f2d86d62008d4c6e2f94e8de5f6dc664b8912fe25adbcdcb606f957a9ec7606602a0325784aeaeaf1709e1d7c257d00406556aee499baf6d069508ed945899e380037f231a9600d1e71b535dbb6b9f44c8e0a2a3a9f107d57fc961eacfc7cafb6b940e8334bcc7554491010d3db835f47dbad9101d7e7159063f1c03056fa131c50385ba09e63a010a65226e3dc98954263c1fe2b2d43cc6c4ba57985aca5153cea347d5db321a011b7a8e2eec1726c95515b688d9b1ab6a5a207ecbe8b506cc4550e578150ddc8649769ef45034d397656b480200d5cf565aa2b12400092cf8e107a6874f3125671569e18d963a3150d4403a6739c9fceaa8017266f2ad274cf0d339ffa6066240adaad42f2fe46cdff9e4f3f4929a2c1109b8fd549117845a5b509d73649bd93357a901a4d2ab3f823a6c11fe766a4dd1d5eae05eb271cda94aaad796db3c38375e9b49583ba44e328d44d199978efa89a6d18d67430d3d10e63e4ce813b989f293f34d88d9176f92138e58e0fdfcaa10ddd93950013479e6e7b57603f6c6e12f23b3bebf495f0fd99b8b7f0f2f3b43067804df9b7c008022fb1c72ca87562a5136a9e9ee6e6fc37a95acc9033279f1c2cec0110cb0befcd16e61e52411a41c008af6f12ec311f58e4dbca1abe74d83fd017bfda7ad00e96556ca79cfafa1723d2fcdca993abfa3047645cf268c7f4a166af93caf096cd597e3960730c9e3572f84ea16fff5156e11f9ea643e6c99563bee0444852212944c8436feb11d320fb57fd7f066d6f8705363e085b990158f91167a037129e6ab783d9a75d6d17096ed1fd4aee3885c30c6c34e99af5a6733ea4f1543eb615778410bfaa6d127e3fd291e8fb0edd50972f6a21520a7c3e084ea61296eec50397e723245e6dd8facacc119bfb0fba8d2397f3b51a4c09fa633e7c52ca15217e24290dc1aae9aa62f0d2b22cc619b061b4448039ebf1cbc8f2caa1a9894b9b6396b2f0fa430fdc0facf3653d0cd4fc4e5b3798b487202a283fd233fa7faf69e6442ba92d277ab92224f8d6224ea3b71375410a275ac2ba3ec6736f7876524638b1371a7be1bab59a7816590f92828c730362bac9a1ee0e1744db25002b6feb5fbe2b361de627a4b491f9fb18df995baf6aaf9b7cd39fe87ec89695831fbf17002f0515a0968d4ebb57ca4fbf7079aab5b3780b97702ae9fcd5a3eef923aa190afa9219afc4d40b5bca7e094234572cfcd377126feef396b54f506e21be441045963cd463f8885429c14dc9363cd409790bcb8df44445d48dc7d81acfa1e636d757c842912e87ffcd7dd92830e84dcf66615cfd5adb44629a0b9b4fcb034a4a8442c2a864f86d3d54682c09d68216ed025cc7ebd68842efa6a0aad108d20cf843dcb9a2f024c68c983b221d6fe664355ae3dde4611e2a6e7d528c89142bf663bf1594f2c143f3482ce3d9ee0e175d3932706a91e70c24d254a6a4f26a205d9e7c301a48d92be2f85fd74d8a941317a0faa8a2f7003894ac8cf46211aaf35a695a45c00c4309ce89ff92ab93722ca35b1130766972a30f55335cce79e38a7100781f21a16c0a7cb92f7fddf2905922fb7fec0a20bff3abad90bf896e4d9a96785641abba824b00c6c7b0a74ddd381ba3974adc7aecbf9189ad22e2a5697d5f7274309f952541a15cddeca9d555bdda6c09e3b3fd2c3c243e62fc22ca7c6fae6346fa720ca7b7fdc2926cad743ad9d0aae1b3ace3fa7f64ab45930e4e90c5472a84e98ffc4a44514daa72c246cc188c8a1bdbd07ecd4c2eb0ffc6b784d77507e26983e1af8f5ab88d6f4014b94f3ddc6827f3a5cedec30fbc3af785836759b2b0dfe56164d4e6e8248f481be20f3f2c9be9a3d8dedff9561b28221b47fa338d0de52651c02e8af1b6c175ca94504eaa6deeab4fe75705c3fd5073022409c472ec1c585ae24b3d5899dd49b5de0c7616e413dad9fb534a18940dfa94de2df04482b9ab222816e798604f9aba923de6e635e2f5ed188e12238f9f5e562a6d9c4f2bd29c607d1179fe4ce17772a225d3180525ec3c3715503bae3281db92f90fc6d5569bfd53c200377ff8e0f5650ed38cab46be1cd1fb9b5eb301f2cacf227eea26311e8800ec72c39e7c836c447b74cec026406784409018df05728d91e8b24f63e1d41e719d454bfc3ed8eef86d25447e43b6813c7ad3bd4298fa8fefbc997860aaeaac0ac74bf0542466f16c057e36b51d97d147fd27d69ed52a2914b40c376078a346d8f39685ee465a3f7b2e6e68d7e1c30ac2ee48e96f195dfeeeb056b2598373ae013b5a5df0d12a51104b56fdb56c86ea41fe600fad40724c1ffe5a0483143e23a3173642687b4b8528f135913f2b6c922260ab841554a1bc55958850407ba2f220225cac23123ae1c85700f7505c4905e31010cf31a9afe1562c96e39024579d983192195b2e10746bfc1c0b46c160ccad477dbdc83f724f42ff954bd2ece2789f2d0c521663a930a7f74e2271610d9974c07e0c70c15f38c5b1cae732f0c5e59cd5e1ecf6cbaf47d34fb31e5947a5d14aadb173bee851a36b581b988b68c5c328f478965fbf367ecab99d345a1447de968a3be735f722a582215c98bbaead942b9c4e6571019760f52d4096533c49120415225785b50ddf16f02640c26bd3629a1d96d658af3e073e2c9cbeda5d29328cc43b1698e856bdb869fe17ddaacdfbbf28e6848ef55c544b5f1af5fe26fd0cf3ac7d416a8a86938f6c8e3386558d2cc0ad5262458b2f461ca43ff63efbcb9a4935e649fc96245efb8cd9ed03a8b72b411078baac8b6f8dfddc438b076afe42e0e25a261755c2fe926c309eb4e1e388d384efde0d62ea148d29e5db3ed8ca0b06a1408be164b9d39e344679f51dd18aaaeececaede834016ea8d9d01d2f3cfd0afd01902f88974240e3169874f53509935ad5317c9fedc6b24ee4b6df3975a7beb4432ba84289f5913993b37578ac58bb195dda53c9536710f6f02ccefc1621d4bbb52d7ae39f3959a77ca478375abaaf59511e865ea3f64c4c44a48478ed1fed7ddae96f433f1dc3d7950d59c4f93409c8c49f3affd9c2b33690b325758c15e8e70f7569b91e711857967b7e916dc6008a325b97c4ca01b1edc566255960500b0996b18b938a1e0663669979a299dcc5a383d71b26e734aa428a8f499a82f929b12025fb1ec78f7c57d0c6af359ea16a2724b29162eafbefd80d6fca218405e98f18f522af1f4faa157a3656d1cafa2d534d63ae2c56723aaf2b96d63e13b4aacbbdf0749dd99a3e059c6a0464bcd53e9d066cbe3ffcf33e5cee5d59d5b1e2410118ad60feef30b6478ac7a3b1b204c4bb16598f518321fcef6c1524831221293915de9bb2f22928ebde332d84e1b2f7c6a8abe92a3b62791cc5c5ec1e08a56860dd0006e8020f4e57d4c00d4a4c060466042aa8a5b1f9c7610bff21a1939fce35a00a865d955be41fdf4c51c309a7a2274c7087012a03ae58fde9b7c7a371db32e1b80095a3d0f1e83e97c1f8cbfa6da1efef60b9aab83a931230f692e516a0f0ba1cbf71d4af9e986a583a178642220035bf1b577312de974dceed9c32825dd7789f4d17f66a586e1b83c5574e44a34be15e8051f52bf3ea0ba922127c1420039d4a09c28b520f049c3f4f8d6964c513765a8bd41bc766718093d502b7adb788c31db2712e9f5f7efba34f3d6e857730df16005b137c5aac22c9906dbcb8b61536f7ce4925216633595132f60dcd1fe80403b6cfc450c1f2bbeb525a81eca00956c824806c7c558fa54acb21179c003d9259afe4aeb44e331ea40982e1faca5781bc6d229b53335b147177cdfa5ea91c0003c3e9c4b652d43cae4877e4de636754b754163a73bb1afd7611127252cb2c416806a49be02d468cb310af08b978389b5f32afd77e9fdf907c05efd6eedf659fe50c893497e62f4b8fcdb63d6f392185af6839c88b7a7512cc505b52431c803310640719b8581dd430ed35a7595e49fd7cf20a6ffb8f5a73855bbbff31b7a3eab860e10725a48983e5c9d2868315e53961794363981f37382fc963a411d4ec3b64809d6d1e776ceec5c4c3435814803601c51f9acd81d4e279ab6b67ea0bf378e51424cb5fc091da2f9f46baa888cde878919069f2665e6cb0501f2fb089b66605082173aad933ed0f207d1368ad18db03488f1564fbd8fab265bb97b6b5d0b1110de04498429f70390489ff2397ceeaabc6c602ed9221075a332a2aec950c034dd19f88a38070e0e99419b7dac3983c584008b3ea47f2169a0d5cb51d1f8c6333f4e4999edfabdec21da98f95248f70163291e528a7c57bad52d75def9675920ca0924d66e4685eda8403cd2d75fe3843b607e81ba086b59639a930150b3e296e369cc2aa8ea19b7a2830d2903261b09a3a459095be0ee1be0d5024a8935b9454c8fc66422f6d0625bc0bf5f1f95d8b888c7707b58c82e0b42d0307f69405eeb663ba4b8eb79d8e049c177f87ed994d82a79f76ca646cc119bcf8bb7fcc0f28645cad57c063e6f241c307cce7395cd4288626c0d319d4d73c4c8f028aa98c3eeb5e6c0b70112ea29b2022644dcbfcc88f6a3311aacb9bf0a33f02570f1babc2a17b8b26d4e05e1c69b4b516dae5fbd437ce4e0bde3335cbac0aabb", 0x1000}, {&(0x7f0000000000)="5e1dc3cfecd021d56a6101cff477f749138c0569047ccf9f41d4680180838b13493340ff748380ce463b42547b5c146fb3cf622db160881d1de7fecf6668859c7664ef841f805623d49c6453252a85d968d5c0e0e1b527a2f1d9169ff2fb205c246bd236edd76c5098ebf743acf5dda18fb0c9e8187e0b7422966710e4f02723c6dff9fa63f6", 0x86}, {&(0x7f00000000c0)="3cde9c46c66309172d0c0c3a", 0xc}, {&(0x7f0000001140)="b12d9c08b49372bd851ae63aec52b53f8429aec338bc165057091b7c0357707ac16bbb5672991d374b154c5e335383ff89a9bff8fd7171adf8df3fae9399d54f3a84df6880c604144d1ecb42592d24c95cb8ff9e9baefdcf4145431d57d8d334d1e7c88d46590815bf0dc6941f8d5022034ec291e1452d0f3693a6b5253c8eb18190bdba4a60d4035b236b0ab288a6c7a3d21d", 0x93}, {&(0x7f0000001200)="ff79bd059fa02e4ea69143e96ee50244acd4a391e95bb8ea68962bb6289a4d12a20961fb657bc2c300778c74712fa5f6224b0ca7240a7aceafe48e13b3ae984443175e8895f1897853c30b6e186c21a55d37c259baedbe86c49061cad6a3e3bc4f0ba7013f777c1dfe698e6fd7729e9679469ffb97d836e347c64a53b1aa31b7b98ec728bf3f444732a45b64ffb00ec1f1d095a398e2e0264e40dc1c2b7ab6912ef6efd3ddbdda8c1cb20bcb7af07766b2cf995f1be3677e12", 0xb9}, {&(0x7f00000012c0)="455660ffa098ec7898c3afff73f0daf8878b56976eef568710199a5e164259ed17445cb9efd557487032a1502b9e95c716b3ba8cdef0fdec7a666d264e78da3393e4ff261fa08b51c69c255e4265d1d6c24279e573bba4d4be520d7c538857de34c052b1a36a181f76c9189b1dc451ec61e4f6cf98002625ca514be4996ad88e4366a6", 0x83}], 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd408205140095bb0000000109022400011b00000009040000022a3e740009098b33020000100109050b362f"], 0x0) 13:02:58 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4008550d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:58 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025580e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:02:58 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendto$inet(r1, &(0x7f0000000040)="470900c1ab2cb067a87ba8fdcb5116909ec663d3d91d727005c454f4248c82f947eb653aa8cd56d162997479f4db6bba0a802dcd4c8c7de70d6aca0970", 0x3d, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:02:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x14000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1e1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xffffffff7fffffff, 0x0, 0xffffffffffffffff, 0x40, 0xd0, 0x0, 0x80000000, 0x5}, {0x0, 0xe44, 0xc45, 0x40}, 0x7, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@local, 0x4d4}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x1, 0xd1d2, 0x7f}}, 0xe4) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000540)=0x14, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_open_dev$sg(&(0x7f0000000e40), 0x5, 0x88401) r11 = getuid() r12 = syz_clone(0x0, &(0x7f0000000e80)="56d04cb556e72562bdb64592b0b3d06d889f982a414e5f5f4d61ecc8f63848a0e43ab5c04850588e579281c7526be2deda67e97048b3bc6b353a686cb70c3f", 0x3f, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="1264c346c5f0e6c5e8e40ac32f3ad37d0dc30195a10c39d453f76c8f2ff9763c04b0568e1614e7e6695fec3b80768dae0cba0d7fd9bc82d1de4806bb8a1720c97e2cfb8205843c80c43c0eb56edbc3f311bb55c03fc5e13574c8818284c9338e8bfe94f8bfd0dd72306f81b3e9684b26af49f4036e51") r13 = getuid() sendmmsg$unix(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="d2ea9d33290dd785b14032231a0377653994f65e19a93cfd1540b1b012c06ceef4bd877b83081fcd0d387edd773a88e1717c380028423050c5b19661eb1ff97ebf8cf9286221608ccc8b7b1bc6dc4828871a8a60c67fc3f164eb817eef3d4949e22b72f42d49dcc2a8f573a91eb1b987088340442eb549af68ec3fdee5d57c218d344bcc5c66c103cc6100a897fc409eb09010ba5e498226f4c84c5947550cafa8fb3dc4a7f806762da31769344cd30736412d35ed49c1a537f3464490711580db08f1fedadeda2dd2847e5d8abd21dbb44d42d7bcbb22ee8b9044dd263d8520b98ce5", 0xe3}, {&(0x7f0000000300)="a0b84ff0a48ccc70974d17450b83f4428a45335547a096b761927a998927bab1de80a66e40090040ec74fb14651097d1a86952803607863b20648390d343b858c4e74e6994bb10f41387e4b7f8db0fbda794601d87232cebbbc00c78ca0c285e2fdef58f2087a1011f5dd0f913c4b063fc2b9557df510ee28a470740fc10ab244a7a9bf07f84f9", 0x87}, {&(0x7f0000000280)="3813752e489cf6ac047de3ab4dc4fba3acc3", 0x12}, {&(0x7f0000000640)="aa06460484848516d5bcfc0dd0c8606def75d93e30a630deac821bbd772a35d6c18c508695f1c46f1ad1b642abc997d13a0f5cf31c7dd6af701b1862046e6870ba27b06bb44309341b70fd1c0cde0c622cf18d132b168be70dcfa4f956a1b18629c7ded07d5ffa626b4d083f47ff781b9b8ea1831da0ca477dcc54b99ac1c4ecfa1dcc1dfd552f478b50c71c2a6ff92062f8e6a3e17f9db35c1265a6dd6eb00eb36c513df54f6c21641dad91d981081c58b9f41acaba5c846d", 0xb9}, {&(0x7f0000000700)="99bd9b4778370b131529e17fe1516aa3f8ca782d0baf65044059d9cbbce5f2486d2d3cd287e8ad6cc87afa558647c4dbfe9f15b9e7225fbb4da19144662335cfbf8ef836686a03e5835b5ae5d5a66d", 0x4f}, {&(0x7f0000000780)="7576eafbcbf79be66fa40f547c8806f92a81cd7c4165b94c6c0c27d4093647d7f0b499b3f03b0714e001b864b3e1b49ff6e0aefcb75266c69c8869f7249ca3499d1dba6a909daa9229dfb13cfe3268d93a72242fbdee14d3ae8828ab7f350a10fffb094fbca61dd7a74f6f1bf6037d0ca7712211bc449a86d5171a840295e7d0af0dada054bf6342e6a15c0b2cd00d2949d7fa90cb6a223f0a5ad438c7b3e9b52a6c30a2f7e181d376aaa785d739760fdd8fbd1008e5be5686cd1cbba0955a1db1ded2", 0xc3}, {&(0x7f0000000880)="5ab6bf99e074cb032c2084290c8c56d345495a19b830e006ae7ec40e7af13b2da2cf013575eacb54af41576d7dcf71c85008b18558ed08ecc89b9db6ddfcca216da68745a095b3e6e9f1ecd4a6c8f15b17228771c36d24759bcbaa8e7ef91198", 0x60}], 0x7, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r5, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="84864f0ea686f486d020813b1a1894c4687ce36011af4a468ec5fa06c1b4f9b350be83a589cdb6d3a791a0c5061037b211d1153ccc7a0cb5093c96a2c6dc12a1bd1a181af4d20c23342f66649b097605505797365134548df4fe2f587047c568a47dfa88c1f3c8a1ed716389f398c49514bf2cae57c875e23b6eb6347c762bf522e6467486efc7e2854077baba74233c231ddc18b456e6e310d0dbbe676c71f75e4e25ac7ecf80cb2e8343e1cd9ab188860801a45b0b05cef922bc7b9d50564941a24a84a4d60a6665c18f18bbde41c0c52f6dba3fd40f81", 0xd8}, {&(0x7f0000000cc0)="98db92f8eac24460dbaba455e8463388c9b53ebcdfe60c64df1eb37a9c151add8756a57c064d7031bad1f9574be229052bfc2afe4f6759a03236c5904e2591314e5be2b507d625bd157ceae8d145ff5e1a5e107a291fade0b4864e1dd6d349853a840ef67713907862ed0423f1c50daa6025f44b2c3b725c7c3dc1673476b1dd599e", 0x82}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1400000001cdf700000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r8, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x9c, 0x805}}], 0x2, 0x41) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="73393a746c6c300200839bcf0592c717d518b42a23b90001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000430000cc00000000000490787f000001ac1414aa4410000000000000000000000000000000028640000000000005c1288c0006cbb573d40012d3781551639fc7494b284a7b6b73ec3500108202794ff6b6b96b0c565bac6538000d919dc3dfc5fed896d65dbc071b00ac1414bb0000000000000000ac1414bb7f000001ac1e0001000100094617d76507aeb744180000000000000000000000000000000000000000000044140003ac14140000000000ac1e000100000000001221efa26052c4fc0813dca4d452498cb70000"]}) 13:02:58 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2546.028887][T30685] vhci_hcd: invalid port number 23 [ 2546.035371][T30659] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2546.051497][T30685] vhci_hcd: default hub control req: 0000 v0000 i0017 l0 [ 2546.071302][T30659] CPU: 0 PID: 30659 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2546.081777][T30659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2546.091868][T30659] Call Trace: [ 2546.095172][T30659] [ 2546.098126][T30659] dump_stack_lvl+0x136/0x150 [ 2546.102847][T30659] dump_header+0x10a/0xd70 [ 2546.107314][T30659] oom_kill_process+0x25d/0x600 [ 2546.112213][T30659] out_of_memory+0x35c/0x1660 [ 2546.116942][T30659] ? find_held_lock+0x2d/0x110 [ 2546.121760][T30659] ? oom_killer_disable+0x2b0/0x2b0 [ 2546.127016][T30659] ? rcu_read_unlock+0x9/0x60 [ 2546.131740][T30659] ? find_held_lock+0x2d/0x110 [ 2546.136566][T30659] mem_cgroup_out_of_memory+0x206/0x270 [ 2546.142177][T30659] ? mem_cgroup_margin+0x130/0x130 [ 2546.147333][T30659] ? lock_downgrade+0x690/0x690 [ 2546.152235][T30659] try_charge_memcg+0xf9b/0x13b0 [ 2546.157216][T30659] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2546.163237][T30659] ? rcu_read_unlock+0x9/0x60 [ 2546.167954][T30659] ? lock_downgrade+0x690/0x690 [ 2546.172855][T30659] charge_memcg+0x90/0x3b0 [ 2546.177308][T30659] __mem_cgroup_charge+0x2b/0x90 [ 2546.182284][T30659] do_wp_page+0x8eb/0x3520 [ 2546.186746][T30659] ? lock_release+0x670/0x670 [ 2546.191463][T30659] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2546.196876][T30659] ? do_raw_spin_lock+0x124/0x2b0 [ 2546.201937][T30659] ? spin_bug+0x1c0/0x1c0 [ 2546.206299][T30659] ? lock_downgrade+0x690/0x690 [ 2546.211198][T30659] __handle_mm_fault+0x19a1/0x3e60 [ 2546.216359][T30659] ? vm_iomap_memory+0x190/0x190 [ 2546.221363][T30659] handle_mm_fault+0x2ba/0x9c0 [ 2546.226179][T30659] do_user_addr_fault+0x475/0x1230 [ 2546.231335][T30659] ? rcu_is_watching+0x12/0xb0 [ 2546.236142][T30659] exc_page_fault+0x98/0x170 [ 2546.240773][T30659] asm_exc_page_fault+0x26/0x30 [ 2546.245662][T30659] RIP: 0023:0xf72206e8 [ 2546.249754][T30659] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2546.269658][T30659] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 13:02:59 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105502, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2546.275762][T30659] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2546.283766][T30659] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2546.291771][T30659] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2546.299770][T30659] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2546.307773][T30659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2546.315792][T30659] [ 2546.359341][T30659] memory: usage 307200kB, limit 307200kB, failcnt 2993 [ 2546.371073][T30659] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2546.389444][T30659] Memory cgroup stats for /syz2: [ 2546.389712][T30659] anon 794624 [ 2546.389712][T30659] file 315392 [ 2546.389712][T30659] kernel 313462784 [ 2546.389712][T30659] kernel_stack 327680 [ 2546.389712][T30659] pagetables 503808 [ 2546.389712][T30659] sec_pagetables 0 [ 2546.389712][T30659] percpu 4060640 [ 2546.389712][T30659] sock 0 [ 2546.389712][T30659] vmalloc 0 [ 2546.389712][T30659] shmem 315392 [ 2546.389712][T30659] zswap 0 [ 2546.389712][T30659] zswapped 0 [ 2546.389712][T30659] file_mapped 249856 [ 2546.389712][T30659] file_dirty 0 [ 2546.389712][T30659] file_writeback 0 [ 2546.389712][T30659] swapcached 0 [ 2546.389712][T30659] anon_thp 0 [ 2546.389712][T30659] file_thp 0 [ 2546.389712][T30659] shmem_thp 0 [ 2546.389712][T30659] inactive_anon 65536 [ 2546.389712][T30659] active_anon 1044480 [ 2546.389712][T30659] inactive_file 0 [ 2546.389712][T30659] active_file 0 [ 2546.389712][T30659] unevictable 0 [ 2546.389712][T30659] slab_reclaimable 31088 [ 2546.389712][T30659] slab_unreclaimable 308450344 [ 2546.389712][T30659] slab 308481432 [ 2546.389712][T30659] workingset_refault_anon 0 [ 2546.389712][T30659] workingset_refault_file 0 [ 2546.389712][T30659] workingset_activate_anon 0 [ 2546.389712][T30659] workingset_activate_file 0 [ 2546.389712][T30659] workingset_restore_anon 0 [ 2546.389712][T30659] workingset_restore_file 0 [ 2546.389712][T30659] workingset_nodereclaim 0 [ 2546.389712][T30659] pgscan 0 [ 2546.389712][T30659] pgsteal 0 [ 2546.389712][T30659] pgscan_kswapd 0 [ 2546.389712][T30659] pgscan_direct 0 [ 2546.389712][T30659] pgscan_khugepaged 0 [ 2546.389712][T30659] pgsteal_kswapd 0 [ 2546.389712][T30659] pgsteal_direct 0 [ 2546.389712][T30659] pgsteal_khugepaged 0 [ 2546.389712][T30659] pgfault 498433 [ 2546.389712][T30659] pgmajfault 32 [ 2546.389712][T30659] pgrefill 0 [ 2546.389712][T30659] pgactivate 0 [ 2546.389712][T30659] pgdeactivate 0 [ 2546.389712][T30659] pglazyfree 0 [ 2546.389712][T30659] pglazyfreed 0 [ 2546.389712][T30659] zswpin 0 [ 2546.389712][T30659] zswpout 0 [ 2546.389712][T30659] thp_fault_alloc 0 13:02:59 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc010551c, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025600e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2546.607250][T30659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30659,uid=0 [ 2546.623519][T30659] Memory cgroup out of memory: Killed process 30659 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2546.644841][ T5161] usb 2-1: new high-speed USB device number 38 using dummy_hcd 13:02:59 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0185500, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:02:59 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendto$inet(r1, &(0x7f0000000040)="470900c1ab2cb067a87ba8fdcb5116909ec663d3d91d727005c454f4248c82f947eb653aa8cd56d162997479f4db6bba0a802dcd4c8c7de70d6aca0970", 0x3d, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) sendto$inet(r1, &(0x7f0000000040)="470900c1ab2cb067a87ba8fdcb5116909ec663d3d91d727005c454f4248c82f947eb653aa8cd56d162997479f4db6bba0a802dcd4c8c7de70d6aca0970", 0x3d, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) [ 2546.802364][T30696] vhci_hcd: invalid port number 23 [ 2546.838389][T30696] vhci_hcd: default hub control req: 0000 v0000 i0017 l0 [ 2546.930747][T30694] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2546.969626][T30694] CPU: 0 PID: 30694 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2546.980108][T30694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2546.990189][T30694] Call Trace: [ 2546.993496][T30694] [ 2546.996449][T30694] dump_stack_lvl+0x136/0x150 [ 2547.001164][T30694] dump_header+0x10a/0xd70 [ 2547.005619][T30694] oom_kill_process+0x25d/0x600 [ 2547.010507][T30694] out_of_memory+0x35c/0x1660 [ 2547.015533][T30694] ? find_held_lock+0x2d/0x110 [ 2547.020303][T30694] ? oom_killer_disable+0x2b0/0x2b0 [ 2547.025516][T30694] ? rcu_read_unlock+0x9/0x60 [ 2547.030198][T30694] ? find_held_lock+0x2d/0x110 [ 2547.035006][T30694] mem_cgroup_out_of_memory+0x206/0x270 [ 2547.040559][T30694] ? mem_cgroup_margin+0x130/0x130 [ 2547.045683][T30694] ? lock_downgrade+0x690/0x690 [ 2547.050640][T30694] try_charge_memcg+0xf9b/0x13b0 [ 2547.055574][T30694] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2547.061550][T30694] ? rcu_read_unlock+0x9/0x60 [ 2547.066225][T30694] ? lock_downgrade+0x690/0x690 [ 2547.071086][T30694] charge_memcg+0x90/0x3b0 [ 2547.075499][T30694] __mem_cgroup_charge+0x2b/0x90 [ 2547.080441][T30694] do_wp_page+0x8eb/0x3520 [ 2547.084859][T30694] ? lock_release+0x670/0x670 [ 2547.089531][T30694] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2547.095082][T30694] ? do_raw_spin_lock+0x124/0x2b0 [ 2547.100117][T30694] ? spin_bug+0x1c0/0x1c0 [ 2547.104447][T30694] ? lock_downgrade+0x690/0x690 [ 2547.109299][T30694] __handle_mm_fault+0x19a1/0x3e60 [ 2547.114425][T30694] ? vm_iomap_memory+0x190/0x190 [ 2547.119397][T30694] handle_mm_fault+0x2ba/0x9c0 [ 2547.124161][T30694] do_user_addr_fault+0x475/0x1230 [ 2547.129271][T30694] ? rcu_is_watching+0x12/0xb0 [ 2547.134055][T30694] exc_page_fault+0x98/0x170 [ 2547.138668][T30694] asm_exc_page_fault+0x26/0x30 [ 2547.143537][T30694] RIP: 0023:0xf72206e8 [ 2547.147617][T30694] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2547.167233][T30694] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2547.173326][T30694] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2547.181306][T30694] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2547.189284][T30694] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2547.197275][T30694] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2547.205277][T30694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2547.213276][T30694] [ 2547.220906][T30694] memory: usage 307200kB, limit 307200kB, failcnt 3078 [ 2547.228910][T30694] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2547.236342][T30694] Memory cgroup stats for /syz2: [ 2547.236579][T30694] anon 794624 [ 2547.236579][T30694] file 315392 [ 2547.236579][T30694] kernel 313462784 [ 2547.236579][T30694] kernel_stack 327680 [ 2547.236579][T30694] pagetables 503808 [ 2547.236579][T30694] sec_pagetables 0 [ 2547.236579][T30694] percpu 4060640 [ 2547.236579][T30694] sock 0 [ 2547.236579][T30694] vmalloc 0 [ 2547.236579][T30694] shmem 315392 [ 2547.236579][T30694] zswap 0 [ 2547.236579][T30694] zswapped 0 [ 2547.236579][T30694] file_mapped 249856 [ 2547.236579][T30694] file_dirty 0 [ 2547.236579][T30694] file_writeback 0 [ 2547.236579][T30694] swapcached 0 [ 2547.236579][T30694] anon_thp 0 [ 2547.236579][T30694] file_thp 0 [ 2547.236579][T30694] shmem_thp 0 [ 2547.236579][T30694] inactive_anon 65536 [ 2547.236579][T30694] active_anon 1044480 [ 2547.236579][T30694] inactive_file 0 [ 2547.236579][T30694] active_file 0 [ 2547.236579][T30694] unevictable 0 [ 2547.236579][T30694] slab_reclaimable 31088 [ 2547.236579][T30694] slab_unreclaimable 308450344 [ 2547.236579][T30694] slab 308481432 [ 2547.236579][T30694] workingset_refault_anon 0 [ 2547.236579][T30694] workingset_refault_file 0 [ 2547.236579][T30694] workingset_activate_anon 0 [ 2547.236579][T30694] workingset_activate_file 0 [ 2547.236579][T30694] workingset_restore_anon 0 [ 2547.236579][T30694] workingset_restore_file 0 [ 2547.236579][T30694] workingset_nodereclaim 0 [ 2547.236579][T30694] pgscan 0 [ 2547.236579][T30694] pgsteal 0 [ 2547.236579][T30694] pgscan_kswapd 0 [ 2547.236579][T30694] pgscan_direct 0 [ 2547.236579][T30694] pgscan_khugepaged 0 [ 2547.236579][T30694] pgsteal_kswapd 0 [ 2547.236579][T30694] pgsteal_direct 0 [ 2547.236579][T30694] pgsteal_khugepaged 0 [ 2547.236579][T30694] pgfault 498479 [ 2547.236579][T30694] pgmajfault 32 [ 2547.236579][T30694] pgrefill 0 [ 2547.236579][T30694] pgactivate 0 [ 2547.236579][T30694] pgdeactivate 0 [ 2547.236579][T30694] pglazyfree 0 [ 2547.236579][T30694] pglazyfreed 0 [ 2547.236579][T30694] zswpin 0 [ 2547.236579][T30694] zswpout 0 [ 2547.236579][T30694] thp_fault_alloc 0 [ 2547.427268][T30694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30694,uid=0 [ 2547.443656][ T5161] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2547.447675][T30694] Memory cgroup out of memory: Killed process 30694 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2547.453937][ T5161] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2547.484042][ T5161] usb 2-1: Dual-Role OTG device on HNP port [ 2547.506250][ T5161] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.95 [ 2547.518703][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2547.554904][T30675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2547.577659][ T5161] usb 2-1: invalid MIDI in EP 0 [ 2547.741242][T30249] udevd[30249]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2547.778743][ T5161] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2547.814824][ T5161] usb 2-1: USB disconnect, device number 38 13:03:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000000)="5e1dc3cfecd021d56a6101cff477f749138c0569047ccf9f41d4680180838b13493340ff748380ce463b42547b5c146fb3cf622db160881d1de7fecf6668859c7664ef841f805623d49c6453252a85d968d5c0e0e1b527a2f1d9169ff2fb205c246bd236edd76c5098ebf743acf5dda18fb0c9e8187e0b7422966710e4f02723c6dff9fa63f6", 0x86}, {&(0x7f00000000c0)="3cde9c46c66309172d0c0c3a", 0xc}, {&(0x7f0000001140)="b12d9c08b49372bd851ae63aec52b53f8429aec338bc165057091b7c0357707ac16bbb5672991d374b154c5e335383ff89a9bff8fd7171adf8df3fae9399d54f3a84df6880c604144d1ecb42592d24c95cb8ff9e9baefdcf4145431d57d8d334d1e7c88d46590815bf0dc6941f8d5022034ec291e1452d0f3693a6b5253c8eb18190bdba4a60d4035b236b0ab288a6c7a3d21d", 0x93}, {&(0x7f0000001200)="ff79bd059fa02e4ea69143e96ee50244acd4a391e95bb8ea68962bb6289a4d12a20961fb657bc2c300778c74712fa5f6224b0ca7240a7aceafe48e13b3ae984443175e8895f1897853c30b6e186c21a55d37c259baedbe86c49061cad6a3e3bc4f0ba7013f777c1dfe698e6fd7729e9679469ffb97d836e347c64a53b1aa31b7b98ec728bf3f444732a45b64ffb00ec1f1d095a398e2e0264e40dc1c2b7ab6912ef6efd3ddbdda8c1cb20bcb7af07766b2cf995f1be3677e12", 0xb9}, {&(0x7f00000012c0)="455660ffa098ec7898c3afff73f0daf8878b56976eef568710199a5e164259ed17445cb9efd557487032a1502b9e95c716b3ba8cdef0fdec7a666d264e78da3393e4ff261fa08b51c69c255e4265d1d6c24279e573bba4d4be520d7c538857de34c052b1a36a181f76c9189b1dc451ec61e4f6cf98002625ca514be4996ad88e4366a6", 0x83}], 0x6) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd408205140095bb0000000109022400011b00000009040000022a3e740009098b33020000100109050b362f"], 0x0) 13:03:00 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0185502, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:00 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e2c, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025680e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:00 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40085511, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:01 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x14000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(r3) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1e1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xffffffff7fffffff, 0x0, 0xffffffffffffffff, 0x40, 0xd0, 0x0, 0x80000000, 0x5}, {0x0, 0xe44, 0xc45, 0x40}, 0x7, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@local, 0x4d4}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x1, 0xd1d2, 0x7f}}, 0xe4) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000540)=0x14, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_open_dev$sg(&(0x7f0000000e40), 0x5, 0x88401) r11 = getuid() r12 = syz_clone(0x0, &(0x7f0000000e80)="56d04cb556e72562bdb64592b0b3d06d889f982a414e5f5f4d61ecc8f63848a0e43ab5c04850588e579281c7526be2deda67e97048b3bc6b353a686cb70c3f", 0x3f, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="1264c346c5f0e6c5e8e40ac32f3ad37d0dc30195a10c39d453f76c8f2ff9763c04b0568e1614e7e6695fec3b80768dae0cba0d7fd9bc82d1de4806bb8a1720c97e2cfb8205843c80c43c0eb56edbc3f311bb55c03fc5e13574c8818284c9338e8bfe94f8bfd0dd72306f81b3e9684b26af49f4036e51") r13 = getuid() sendmmsg$unix(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="d2ea9d33290dd785b14032231a0377653994f65e19a93cfd1540b1b012c06ceef4bd877b83081fcd0d387edd773a88e1717c380028423050c5b19661eb1ff97ebf8cf9286221608ccc8b7b1bc6dc4828871a8a60c67fc3f164eb817eef3d4949e22b72f42d49dcc2a8f573a91eb1b987088340442eb549af68ec3fdee5d57c218d344bcc5c66c103cc6100a897fc409eb09010ba5e498226f4c84c5947550cafa8fb3dc4a7f806762da31769344cd30736412d35ed49c1a537f3464490711580db08f1fedadeda2dd2847e5d8abd21dbb44d42d7bcbb22ee8b9044dd263d8520b98ce5", 0xe3}, {&(0x7f0000000300)="a0b84ff0a48ccc70974d17450b83f4428a45335547a096b761927a998927bab1de80a66e40090040ec74fb14651097d1a86952803607863b20648390d343b858c4e74e6994bb10f41387e4b7f8db0fbda794601d87232cebbbc00c78ca0c285e2fdef58f2087a1011f5dd0f913c4b063fc2b9557df510ee28a470740fc10ab244a7a9bf07f84f9", 0x87}, {&(0x7f0000000280)="3813752e489cf6ac047de3ab4dc4fba3acc3", 0x12}, {&(0x7f0000000640)="aa06460484848516d5bcfc0dd0c8606def75d93e30a630deac821bbd772a35d6c18c508695f1c46f1ad1b642abc997d13a0f5cf31c7dd6af701b1862046e6870ba27b06bb44309341b70fd1c0cde0c622cf18d132b168be70dcfa4f956a1b18629c7ded07d5ffa626b4d083f47ff781b9b8ea1831da0ca477dcc54b99ac1c4ecfa1dcc1dfd552f478b50c71c2a6ff92062f8e6a3e17f9db35c1265a6dd6eb00eb36c513df54f6c21641dad91d981081c58b9f41acaba5c846d", 0xb9}, {&(0x7f0000000700)="99bd9b4778370b131529e17fe1516aa3f8ca782d0baf65044059d9cbbce5f2486d2d3cd287e8ad6cc87afa558647c4dbfe9f15b9e7225fbb4da19144662335cfbf8ef836686a03e5835b5ae5d5a66d", 0x4f}, {&(0x7f0000000780)="7576eafbcbf79be66fa40f547c8806f92a81cd7c4165b94c6c0c27d4093647d7f0b499b3f03b0714e001b864b3e1b49ff6e0aefcb75266c69c8869f7249ca3499d1dba6a909daa9229dfb13cfe3268d93a72242fbdee14d3ae8828ab7f350a10fffb094fbca61dd7a74f6f1bf6037d0ca7712211bc449a86d5171a840295e7d0af0dada054bf6342e6a15c0b2cd00d2949d7fa90cb6a223f0a5ad438c7b3e9b52a6c30a2f7e181d376aaa785d739760fdd8fbd1008e5be5686cd1cbba0955a1db1ded2", 0xc3}, {&(0x7f0000000880)="5ab6bf99e074cb032c2084290c8c56d345495a19b830e006ae7ec40e7af13b2da2cf013575eacb54af41576d7dcf71c85008b18558ed08ecc89b9db6ddfcca216da68745a095b3e6e9f1ecd4a6c8f15b17228771c36d24759bcbaa8e7ef91198", 0x60}], 0x7, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r5, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="84864f0ea686f486d020813b1a1894c4687ce36011af4a468ec5fa06c1b4f9b350be83a589cdb6d3a791a0c5061037b211d1153ccc7a0cb5093c96a2c6dc12a1bd1a181af4d20c23342f66649b097605505797365134548df4fe2f587047c568a47dfa88c1f3c8a1ed716389f398c49514bf2cae57c875e23b6eb6347c762bf522e6467486efc7e2854077baba74233c231ddc18b456e6e310d0dbbe676c71f75e4e25ac7ecf80cb2e8343e1cd9ab188860801a45b0b05cef922bc7b9d50564941a24a84a4d60a6665c18f18bbde41c0c52f6dba3fd40f81", 0xd8}, {&(0x7f0000000cc0)="98db92f8eac24460dbaba455e8463388c9b53ebcdfe60c64df1eb37a9c151add8756a57c064d7031bad1f9574be229052bfc2afe4f6759a03236c5904e2591314e5be2b507d625bd157ceae8d145ff5e1a5e107a291fade0b4864e1dd6d349853a840ef67713907862ed0423f1c50daa6025f44b2c3b725c7c3dc1673476b1dd599e", 0x82}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1400000001cdf700000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="100000000100000001000000", @ANYRES32=r8, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=0xee00, @ANYBLOB="180000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x9c, 0x805}}], 0x2, 0x41) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="73393a746c6c300200839bcf0592c717d518b42a23b90001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000430000cc00000000000490787f000001ac1414aa4410000000000000000000000000000000028640000000000005c1288c0006cbb573d40012d3781551639fc7494b284a7b6b73ec3500108202794ff6b6b96b0c565bac6538000d919dc3dfc5fed896d65dbc071b00ac1414bb0000000000000000ac1414bb7f000001ac1e0001000100094617d76507aeb744180000000000000000000000000000000000000000000044140003ac14140000000000ac1e000100000000001221efa26052c4fc0813dca4d452498cb70000"]}) 13:03:01 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0189436, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) [ 2548.462689][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2548.470486][T30710] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2548.482693][T30710] CPU: 0 PID: 30710 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2548.493150][T30710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2548.503224][T30710] Call Trace: [ 2548.506496][T30710] [ 2548.509421][T30710] dump_stack_lvl+0x136/0x150 [ 2548.514540][T30710] dump_header+0x10a/0xd70 [ 2548.518984][T30710] oom_kill_process+0x25d/0x600 [ 2548.523844][T30710] out_of_memory+0x35c/0x1660 [ 2548.528550][T30710] ? find_held_lock+0x2d/0x110 [ 2548.533329][T30710] ? oom_killer_disable+0x2b0/0x2b0 [ 2548.538533][T30710] ? rcu_read_unlock+0x9/0x60 [ 2548.543212][T30710] ? find_held_lock+0x2d/0x110 [ 2548.548012][T30710] mem_cgroup_out_of_memory+0x206/0x270 [ 2548.553612][T30710] ? mem_cgroup_margin+0x130/0x130 [ 2548.558757][T30710] ? lock_downgrade+0x690/0x690 [ 2548.563615][T30710] try_charge_memcg+0xf9b/0x13b0 [ 2548.568575][T30710] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2548.574562][T30710] ? rcu_read_unlock+0x9/0x60 [ 2548.579249][T30710] ? lock_downgrade+0x690/0x690 [ 2548.584113][T30710] charge_memcg+0x90/0x3b0 [ 2548.588544][T30710] __mem_cgroup_charge+0x2b/0x90 [ 2548.593488][T30710] do_wp_page+0x8eb/0x3520 [ 2548.597940][T30710] ? lock_release+0x670/0x670 [ 2548.602647][T30710] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2548.608021][T30710] ? do_raw_spin_lock+0x124/0x2b0 [ 2548.613054][T30710] ? spin_bug+0x1c0/0x1c0 [ 2548.617381][T30710] ? lock_downgrade+0x690/0x690 [ 2548.622232][T30710] __handle_mm_fault+0x19a1/0x3e60 [ 2548.627349][T30710] ? vm_iomap_memory+0x190/0x190 [ 2548.632299][T30710] handle_mm_fault+0x2ba/0x9c0 [ 2548.637082][T30710] do_user_addr_fault+0x475/0x1230 [ 2548.642218][T30710] ? rcu_is_watching+0x12/0xb0 [ 2548.646985][T30710] exc_page_fault+0x98/0x170 [ 2548.651676][T30710] asm_exc_page_fault+0x26/0x30 [ 2548.656551][T30710] RIP: 0023:0xf72206e8 [ 2548.660612][T30710] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2548.680300][T30710] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2548.686373][T30710] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2548.694335][T30710] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2548.702295][T30710] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2548.710268][T30710] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2548.718532][T30710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2548.726510][T30710] [ 2548.753042][T30710] memory: usage 307184kB, limit 307200kB, failcnt 3171 13:03:01 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc020660b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2548.768908][T30710] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2548.798779][T30710] Memory cgroup stats for /syz2: [ 2548.799041][T30710] anon 794624 [ 2548.799041][T30710] file 315392 [ 2548.799041][T30710] kernel 313446400 [ 2548.799041][T30710] kernel_stack 327680 [ 2548.799041][T30710] pagetables 503808 [ 2548.799041][T30710] sec_pagetables 0 [ 2548.799041][T30710] percpu 4060576 [ 2548.799041][T30710] sock 0 [ 2548.799041][T30710] vmalloc 0 [ 2548.799041][T30710] shmem 315392 [ 2548.799041][T30710] zswap 0 [ 2548.799041][T30710] zswapped 0 [ 2548.799041][T30710] file_mapped 249856 [ 2548.799041][T30710] file_dirty 0 [ 2548.799041][T30710] file_writeback 0 [ 2548.799041][T30710] swapcached 0 [ 2548.799041][T30710] anon_thp 0 [ 2548.799041][T30710] file_thp 0 [ 2548.799041][T30710] shmem_thp 0 [ 2548.799041][T30710] inactive_anon 65536 [ 2548.799041][T30710] active_anon 1044480 [ 2548.799041][T30710] inactive_file 0 [ 2548.799041][T30710] active_file 0 [ 2548.799041][T30710] unevictable 0 [ 2548.799041][T30710] slab_reclaimable 31088 [ 2548.799041][T30710] slab_unreclaimable 308438432 [ 2548.799041][T30710] slab 308469520 [ 2548.799041][T30710] workingset_refault_anon 0 [ 2548.799041][T30710] workingset_refault_file 0 [ 2548.799041][T30710] workingset_activate_anon 0 [ 2548.799041][T30710] workingset_activate_file 0 [ 2548.799041][T30710] workingset_restore_anon 0 [ 2548.799041][T30710] workingset_restore_file 0 [ 2548.799041][T30710] workingset_nodereclaim 0 [ 2548.799041][T30710] pgscan 0 [ 2548.799041][T30710] pgsteal 0 [ 2548.799041][T30710] pgscan_kswapd 0 [ 2548.799041][T30710] pgscan_direct 0 [ 2548.799041][T30710] pgscan_khugepaged 0 [ 2548.799041][T30710] pgsteal_kswapd 0 [ 2548.799041][T30710] pgsteal_direct 0 [ 2548.799041][T30710] pgsteal_khugepaged 0 [ 2548.799041][T30710] pgfault 498525 [ 2548.799041][T30710] pgmajfault 32 [ 2548.799041][T30710] pgrefill 0 [ 2548.799041][T30710] pgactivate 0 13:03:01 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2548.799041][T30710] pgdeactivate 0 [ 2548.799041][T30710] pglazyfree 0 [ 2548.799041][T30710] pglazyfreed 0 [ 2548.799041][T30710] zswpin 0 [ 2548.799041][T30710] zswpout 0 [ 2548.799041][T30710] thp_fault_alloc 0 [ 2548.806205][T30739] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2548.990715][T30710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30710,uid=0 [ 2549.058521][T30710] Memory cgroup out of memory: Killed process 30710 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025700e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:01 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e2c, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:01 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x2, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:01 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40086602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:02 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x3, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:02 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 13:03:02 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2549.574279][T30751] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2549.614833][T30771] input: syz0 as /devices/virtual/input/input20 [ 2549.641564][T30751] CPU: 1 PID: 30751 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2549.652038][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2549.662119][T30751] Call Trace: [ 2549.665417][T30751] [ 2549.668367][T30751] dump_stack_lvl+0x136/0x150 [ 2549.673079][T30751] dump_header+0x10a/0xd70 [ 2549.677536][T30751] oom_kill_process+0x25d/0x600 [ 2549.682433][T30751] out_of_memory+0x35c/0x1660 [ 2549.687242][T30751] ? find_held_lock+0x2d/0x110 [ 2549.692055][T30751] ? oom_killer_disable+0x2b0/0x2b0 [ 2549.697296][T30751] ? rcu_read_unlock+0x9/0x60 [ 2549.702016][T30751] ? find_held_lock+0x2d/0x110 [ 2549.706838][T30751] mem_cgroup_out_of_memory+0x206/0x270 [ 2549.712954][T30751] ? mem_cgroup_margin+0x130/0x130 [ 2549.718106][T30751] ? lock_downgrade+0x690/0x690 [ 2549.723006][T30751] try_charge_memcg+0xf9b/0x13b0 [ 2549.727986][T30751] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2549.734090][T30751] ? rcu_read_unlock+0x9/0x60 [ 2549.738826][T30751] ? lock_downgrade+0x690/0x690 [ 2549.743733][T30751] charge_memcg+0x90/0x3b0 [ 2549.748198][T30751] __mem_cgroup_charge+0x2b/0x90 [ 2549.753176][T30751] do_wp_page+0x8eb/0x3520 [ 2549.757644][T30751] ? lock_release+0x670/0x670 [ 2549.762357][T30751] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2549.767775][T30751] ? do_raw_spin_lock+0x124/0x2b0 [ 2549.772845][T30751] ? spin_bug+0x1c0/0x1c0 [ 2549.777206][T30751] ? lock_downgrade+0x690/0x690 [ 2549.782097][T30751] __handle_mm_fault+0x19a1/0x3e60 [ 2549.787256][T30751] ? vm_iomap_memory+0x190/0x190 [ 2549.792271][T30751] handle_mm_fault+0x2ba/0x9c0 [ 2549.797085][T30751] do_user_addr_fault+0x475/0x1230 [ 2549.802246][T30751] ? rcu_is_watching+0x12/0xb0 [ 2549.807054][T30751] exc_page_fault+0x98/0x170 [ 2549.811681][T30751] asm_exc_page_fault+0x26/0x30 [ 2549.816574][T30751] RIP: 0023:0xf72206e8 [ 2549.820675][T30751] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2549.840315][T30751] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2549.846415][T30751] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2549.854409][T30751] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec 13:03:02 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40186366, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2549.862407][T30751] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2549.870403][T30751] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2549.878394][T30751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2549.886411][T30751] [ 2549.914701][T30751] memory: usage 307184kB, limit 307200kB, failcnt 3249 [ 2549.921897][T30751] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2549.929313][T30751] Memory cgroup stats for /syz2: [ 2549.929523][T30751] anon 794624 [ 2549.929523][T30751] file 315392 [ 2549.929523][T30751] kernel 313446400 [ 2549.929523][T30751] kernel_stack 327680 [ 2549.929523][T30751] pagetables 503808 [ 2549.929523][T30751] sec_pagetables 0 [ 2549.929523][T30751] percpu 4060576 [ 2549.929523][T30751] sock 0 [ 2549.929523][T30751] vmalloc 0 [ 2549.929523][T30751] shmem 315392 [ 2549.929523][T30751] zswap 0 [ 2549.929523][T30751] zswapped 0 [ 2549.929523][T30751] file_mapped 249856 [ 2549.929523][T30751] file_dirty 0 [ 2549.929523][T30751] file_writeback 0 [ 2549.929523][T30751] swapcached 0 [ 2549.929523][T30751] anon_thp 0 [ 2549.929523][T30751] file_thp 0 [ 2549.929523][T30751] shmem_thp 0 [ 2549.929523][T30751] inactive_anon 65536 [ 2549.929523][T30751] active_anon 1044480 [ 2549.929523][T30751] inactive_file 0 [ 2549.929523][T30751] active_file 0 [ 2549.929523][T30751] unevictable 0 [ 2549.929523][T30751] slab_reclaimable 31088 [ 2549.929523][T30751] slab_unreclaimable 308438432 [ 2549.929523][T30751] slab 308469520 [ 2549.929523][T30751] workingset_refault_anon 0 [ 2549.929523][T30751] workingset_refault_file 0 [ 2549.929523][T30751] workingset_activate_anon 0 [ 2549.929523][T30751] workingset_activate_file 0 [ 2549.929523][T30751] workingset_restore_anon 0 [ 2549.929523][T30751] workingset_restore_file 0 [ 2549.929523][T30751] workingset_nodereclaim 0 [ 2549.929523][T30751] pgscan 0 [ 2549.929523][T30751] pgsteal 0 [ 2549.929523][T30751] pgscan_kswapd 0 [ 2549.929523][T30751] pgscan_direct 0 [ 2549.929523][T30751] pgscan_khugepaged 0 [ 2549.929523][T30751] pgsteal_kswapd 0 [ 2549.929523][T30751] pgsteal_direct 0 [ 2549.929523][T30751] pgsteal_khugepaged 0 [ 2549.929523][T30751] pgfault 498571 [ 2549.929523][T30751] pgmajfault 32 [ 2549.929523][T30751] pgrefill 0 [ 2549.929523][T30751] pgactivate 0 [ 2549.929523][T30751] pgdeactivate 0 [ 2549.929523][T30751] pglazyfree 0 [ 2549.929523][T30751] pglazyfreed 0 [ 2549.929523][T30751] zswpin 0 [ 2549.929523][T30751] zswpout 0 [ 2549.929523][T30751] thp_fault_alloc 0 [ 2550.122120][T30751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30751,uid=0 [ 2550.139903][T30751] Memory cgroup out of memory: Killed process 30751 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:03 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e2c, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025780e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 13:03:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:03 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0x200500, 0x0) r10 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x200000) ppoll(&(0x7f0000000240)=[{r1, 0xd001}, {r4, 0x90}, {r0, 0x3020}, {r5}, {r6, 0x1}, {r9, 0x1}, {r0, 0x4d0}, {r0, 0x4}, {r10, 0x4000}, {r0, 0x100}], 0xa, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)={[0xfffffffe, 0x2]}, 0x8) 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x300, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2550.497192][T30792] input: syz0 as /devices/virtual/input/input21 [ 2550.525331][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x500, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x600, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2550.843187][T30799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2550.868008][T30804] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2550.878381][T30804] CPU: 1 PID: 30804 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2550.888834][T30804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2550.898914][T30804] Call Trace: [ 2550.902212][T30804] [ 2550.905174][T30804] dump_stack_lvl+0x136/0x150 [ 2550.909896][T30804] dump_header+0x10a/0xd70 [ 2550.914369][T30804] oom_kill_process+0x25d/0x600 [ 2550.919270][T30804] out_of_memory+0x35c/0x1660 [ 2550.923996][T30804] ? find_held_lock+0x2d/0x110 [ 2550.928024][T30809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2550.928792][T30804] ? oom_killer_disable+0x2b0/0x2b0 [ 2550.928835][T30804] ? rcu_read_unlock+0x9/0x60 [ 2550.947990][T30804] ? find_held_lock+0x2d/0x110 [ 2550.952792][T30804] mem_cgroup_out_of_memory+0x206/0x270 [ 2550.958366][T30804] ? mem_cgroup_margin+0x130/0x130 [ 2550.963500][T30804] ? lock_downgrade+0x690/0x690 [ 2550.968382][T30804] try_charge_memcg+0xf9b/0x13b0 [ 2550.973342][T30804] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2550.979349][T30804] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2550.985099][T30804] ? lock_downgrade+0x690/0x690 [ 2550.989970][T30804] ? lock_downgrade+0x690/0x690 [ 2550.994849][T30804] obj_cgroup_charge+0x2af/0x5e0 [ 2550.999808][T30804] ? sock_alloc_inode+0x27/0x1d0 [ 2551.004769][T30804] kmem_cache_alloc_lru+0x142/0x600 [ 2551.010005][T30804] sock_alloc_inode+0x27/0x1d0 [ 2551.015221][T30804] ? sock_free_inode+0x30/0x30 [ 2551.020004][T30804] alloc_inode+0x61/0x230 [ 2551.024359][T30804] new_inode_pseudo+0x17/0x80 [ 2551.029074][T30804] sock_alloc+0x40/0x270 [ 2551.033338][T30804] __sock_create+0xbd/0x850 [ 2551.037870][T30804] __sys_socket+0x133/0x250 [ 2551.042399][T30804] ? __sys_socket_file+0x1d0/0x1d0 [ 2551.047629][T30804] ? kcov_ioctl+0x384/0x6f0 [ 2551.052155][T30804] __ia32_sys_socket+0x73/0xb0 [ 2551.056960][T30804] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 2551.063573][T30804] __do_fast_syscall_32+0x65/0xf0 [ 2551.068636][T30804] do_fast_syscall_32+0x33/0x70 [ 2551.073518][T30804] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2551.079899][T30804] RIP: 0023:0xf7f9b579 [ 2551.083980][T30804] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2551.103618][T30804] RSP: 002b:00000000f7f965cc EFLAGS: 00000296 ORIG_RAX: 0000000000000167 [ 2551.112057][T30804] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 2551.120041][T30804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2551.128021][T30804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2551.136007][T30804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 13:03:03 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x401c5820, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:03 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x700, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2551.144004][T30804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2551.152003][T30804] [ 2551.160208][T30804] memory: usage 307200kB, limit 307200kB, failcnt 3345 [ 2551.167538][T30804] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2551.178457][T30804] Memory cgroup stats for /syz2: [ 2551.178712][T30804] anon 782336 [ 2551.178712][T30804] file 315392 [ 2551.178712][T30804] kernel 313475072 [ 2551.178712][T30804] kernel_stack 327680 [ 2551.178712][T30804] pagetables 503808 [ 2551.178712][T30804] sec_pagetables 0 [ 2551.178712][T30804] percpu 4060640 [ 2551.178712][T30804] sock 0 [ 2551.178712][T30804] vmalloc 0 [ 2551.178712][T30804] shmem 315392 [ 2551.178712][T30804] zswap 0 [ 2551.178712][T30804] zswapped 0 [ 2551.178712][T30804] file_mapped 249856 [ 2551.178712][T30804] file_dirty 0 [ 2551.178712][T30804] file_writeback 0 [ 2551.178712][T30804] swapcached 0 [ 2551.178712][T30804] anon_thp 0 [ 2551.178712][T30804] file_thp 0 [ 2551.178712][T30804] shmem_thp 0 [ 2551.178712][T30804] inactive_anon 65536 [ 2551.178712][T30804] active_anon 1032192 [ 2551.178712][T30804] inactive_file 0 [ 2551.178712][T30804] active_file 0 [ 2551.178712][T30804] unevictable 0 [ 2551.178712][T30804] slab_reclaimable 29160 [ 2551.178712][T30804] slab_unreclaimable 308458056 [ 2551.178712][T30804] slab 308487216 [ 2551.178712][T30804] workingset_refault_anon 0 [ 2551.178712][T30804] workingset_refault_file 0 [ 2551.178712][T30804] workingset_activate_anon 0 [ 2551.178712][T30804] workingset_activate_file 0 [ 2551.178712][T30804] workingset_restore_anon 0 [ 2551.178712][T30804] workingset_restore_file 0 [ 2551.178712][T30804] workingset_nodereclaim 0 [ 2551.178712][T30804] pgscan 0 [ 2551.178712][T30804] pgsteal 0 [ 2551.178712][T30804] pgscan_kswapd 0 [ 2551.178712][T30804] pgscan_direct 0 [ 2551.178712][T30804] pgscan_khugepaged 0 [ 2551.178712][T30804] pgsteal_kswapd 0 [ 2551.178712][T30804] pgsteal_direct 0 [ 2551.178712][T30804] pgsteal_khugepaged 0 [ 2551.178712][T30804] pgfault 498609 [ 2551.178712][T30804] pgmajfault 32 [ 2551.178712][T30804] pgrefill 0 [ 2551.178712][T30804] pgactivate 0 [ 2551.178712][T30804] pgdeactivate 0 [ 2551.178712][T30804] pglazyfree 0 [ 2551.178712][T30804] pglazyfreed 0 [ 2551.178712][T30804] zswpin 0 [ 2551.178712][T30804] zswpout 0 [ 2551.178712][T30804] thp_fault_alloc 0 [ 2551.259283][T30814] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:03:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 13:03:04 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xff00, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2551.385109][T30804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30784,uid=0 [ 2551.405078][T30804] Memory cgroup out of memory: Killed process 30784 (syz-executor.2) total-vm:54444kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2551.535854][T30831] input: syz0 as /devices/virtual/input/input22 [ 2551.588575][T30804] socket: no more sockets 13:03:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) (async) unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) (async) 13:03:05 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000) (async) r6 = socket$netlink(0x10, 0x3, 0x12) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0x200500, 0x0) r10 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x200000) ppoll(&(0x7f0000000240)=[{r1, 0xd001}, {r4, 0x90}, {r0, 0x3020}, {r5}, {r6, 0x1}, {r9, 0x1}, {r0, 0x4d0}, {r0, 0x4}, {r10, 0x4000}, {r0, 0x100}], 0xa, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)={[0xfffffffe, 0x2]}, 0x8) 13:03:05 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 13:03:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025800e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:05 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x4020940d, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:05 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x2000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:05 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000) (async) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000) socket$netlink(0x10, 0x3, 0x12) (async) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="00010000000000001c0012000c000100626f6e64000003000c0002000800010006"], 0x3c}}, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0x200500, 0x0) openat$mice(0xffffff9c, &(0x7f0000000180), 0x200000) (async) r10 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x200000) ppoll(&(0x7f0000000240)=[{r1, 0xd001}, {r4, 0x90}, {r0, 0x3020}, {r5}, {r6, 0x1}, {r9, 0x1}, {r0, 0x4d0}, {r0, 0x4}, {r10, 0x4000}, {r0, 0x100}], 0xa, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)={[0xfffffffe, 0x2]}, 0x8) [ 2553.183282][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:03:05 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x3000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2553.273793][T30857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2553.305471][T30849] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2553.345378][T30849] CPU: 1 PID: 30849 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2553.355846][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2553.365930][T30849] Call Trace: [ 2553.369238][T30849] [ 2553.372191][T30849] dump_stack_lvl+0x136/0x150 [ 2553.376902][T30849] dump_header+0x10a/0xd70 [ 2553.381376][T30849] oom_kill_process+0x25d/0x600 [ 2553.386270][T30849] out_of_memory+0x35c/0x1660 [ 2553.391002][T30849] ? find_held_lock+0x2d/0x110 [ 2553.395819][T30849] ? oom_killer_disable+0x2b0/0x2b0 [ 2553.401057][T30849] ? rcu_read_unlock+0x9/0x60 [ 2553.405783][T30849] ? find_held_lock+0x2d/0x110 [ 2553.410603][T30849] mem_cgroup_out_of_memory+0x206/0x270 [ 2553.416198][T30849] ? mem_cgroup_margin+0x130/0x130 [ 2553.421360][T30849] ? lock_downgrade+0x690/0x690 [ 2553.426280][T30849] try_charge_memcg+0xf9b/0x13b0 [ 2553.431259][T30849] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2553.437280][T30849] ? rcu_read_unlock+0x9/0x60 [ 2553.441995][T30849] ? lock_downgrade+0x690/0x690 [ 2553.446890][T30849] charge_memcg+0x90/0x3b0 [ 2553.451332][T30849] __mem_cgroup_charge+0x2b/0x90 [ 2553.456285][T30849] do_wp_page+0x8eb/0x3520 [ 2553.460730][T30849] ? lock_release+0x670/0x670 [ 2553.465432][T30849] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2553.470826][T30849] ? do_raw_spin_lock+0x124/0x2b0 [ 2553.475872][T30849] ? spin_bug+0x1c0/0x1c0 [ 2553.480215][T30849] ? lock_downgrade+0x690/0x690 [ 2553.485086][T30849] __handle_mm_fault+0x19a1/0x3e60 [ 2553.490229][T30849] ? vm_iomap_memory+0x190/0x190 [ 2553.495234][T30849] handle_mm_fault+0x2ba/0x9c0 [ 2553.500028][T30849] do_user_addr_fault+0x475/0x1230 [ 2553.505181][T30849] ? rcu_is_watching+0x12/0xb0 [ 2553.509967][T30849] exc_page_fault+0x98/0x170 [ 2553.514579][T30849] asm_exc_page_fault+0x26/0x30 [ 2553.519453][T30849] RIP: 0023:0xf72206e8 [ 2553.523545][T30849] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 13:03:06 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:06 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2553.543167][T30849] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2553.549246][T30849] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2553.557228][T30849] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2553.565228][T30849] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2553.573229][T30849] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2553.581219][T30849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2553.589240][T30849] 13:03:06 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2553.621533][T30861] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2553.656136][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2553.730436][T30877] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2553.817285][T30849] memory: usage 307184kB, limit 307200kB, failcnt 3454 [ 2553.824201][T30849] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2553.846540][T30849] Memory cgroup stats for /syz2: [ 2553.846811][T30849] anon 811008 [ 2553.846811][T30849] file 315392 [ 2553.846811][T30849] kernel 313430016 [ 2553.846811][T30849] kernel_stack 327680 [ 2553.846811][T30849] pagetables 503808 [ 2553.846811][T30849] sec_pagetables 0 [ 2553.846811][T30849] percpu 4060512 [ 2553.846811][T30849] sock 0 [ 2553.846811][T30849] vmalloc 0 [ 2553.846811][T30849] shmem 315392 [ 2553.846811][T30849] zswap 0 [ 2553.846811][T30849] zswapped 0 [ 2553.846811][T30849] file_mapped 249856 [ 2553.846811][T30849] file_dirty 0 [ 2553.846811][T30849] file_writeback 0 [ 2553.846811][T30849] swapcached 0 [ 2553.846811][T30849] anon_thp 0 [ 2553.846811][T30849] file_thp 0 [ 2553.846811][T30849] shmem_thp 0 [ 2553.846811][T30849] inactive_anon 65536 [ 2553.846811][T30849] active_anon 1060864 [ 2553.846811][T30849] inactive_file 0 [ 2553.846811][T30849] active_file 0 [ 2553.846811][T30849] unevictable 0 [ 2553.846811][T30849] slab_reclaimable 31088 [ 2553.846811][T30849] slab_unreclaimable 308426520 [ 2553.846811][T30849] slab 308457608 [ 2553.846811][T30849] workingset_refault_anon 0 [ 2553.846811][T30849] workingset_refault_file 0 [ 2553.846811][T30849] workingset_activate_anon 0 [ 2553.846811][T30849] workingset_activate_file 0 [ 2553.846811][T30849] workingset_restore_anon 0 [ 2553.846811][T30849] workingset_restore_file 0 [ 2553.846811][T30849] workingset_nodereclaim 0 [ 2553.846811][T30849] pgscan 0 [ 2553.846811][T30849] pgsteal 0 [ 2553.846811][T30849] pgscan_kswapd 0 [ 2553.846811][T30849] pgscan_direct 0 [ 2553.846811][T30849] pgscan_khugepaged 0 [ 2553.846811][T30849] pgsteal_kswapd 0 [ 2553.846811][T30849] pgsteal_direct 0 [ 2553.846811][T30849] pgsteal_khugepaged 0 [ 2553.846811][T30849] pgfault 498663 [ 2553.846811][T30849] pgmajfault 32 [ 2553.846811][T30849] pgrefill 0 [ 2553.846811][T30849] pgactivate 0 [ 2553.846811][T30849] pgdeactivate 0 [ 2553.846811][T30849] pglazyfree 0 [ 2553.846811][T30849] pglazyfreed 0 [ 2553.846811][T30849] zswpin 0 [ 2553.846811][T30849] zswpout 0 [ 2553.846811][T30849] thp_fault_alloc 0 [ 2554.113401][T30849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30849,uid=0 [ 2554.220706][T30849] Memory cgroup out of memory: Killed process 30849 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2554.225428][T30869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:03:07 executing program 1: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x4000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:07 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:07 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x402c5828, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025880e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:07 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="749d80210f82686ff61f3fbf2a9b42b4343c82c348d1581068e40f4a0a29753de3b693a5b4de606c0e6de2c60e08c5a9326bf4e2cc3b15ad52cadf79b56d10f74aaa63a2c8591424fc7400cf0360b7c18425ac3ccbf5c4af2dec218a90a3b872a5263bd6b2899647df59ab7c516f92a082255eed479d27386f279a35131de0dbfdb333ba30c95b92f709d95428c0bd4c690d86b234abb5ffe188bf6bcd03ba8584a98598517c2d7d9401c78ebc07e5858bd6436d12216c5e771433a64af62a7a15482dd9c1d03e6d17a6b7b713fc7359", 0xd0, 0x81, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:07 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xff000000, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:07 executing program 5: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x40086602, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)={r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e000000000000000000080000", @ANYRES32=r2, @ANYBLOB="0000002d85ba4d666200"/19], 0x58}}, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r5, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000400)="b890c64ee50f8d0249c3611871abda24154be3dad9ebf8859a205205fa53092f553e989f20e5c10fa6c11fdf4961ae041851c8b839a1897ce530b0e94e3be81452d5fa4feeaa2f6674db1a86cea6ecf003eca83df7becfea429e81498941d30d813371254b3776cd4b5c5c801ee5be2079ffa0951527eda520f8909eb15aacf996ecdd96e51b1ab8ea16a2c013121777f01fc34a3bd1f996e6a18a518fb8f6adeea7a7a2a9bff07dd36c852659133ebfe8ecf7b25eeff1f1c267853d98049ffaa8ec83299a111a055c70087b0787679466ccecc49a", 0xd5, 0x8000, &(0x7f0000000500)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 13:03:07 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xffffff7f, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2554.586510][T30913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2554.682336][T30907] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2554.723128][T30919] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2554.737636][T30907] CPU: 1 PID: 30907 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2554.748100][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2554.758179][T30907] Call Trace: [ 2554.761483][T30907] [ 2554.764443][T30907] dump_stack_lvl+0x136/0x150 [ 2554.769166][T30907] dump_header+0x10a/0xd70 [ 2554.773628][T30907] oom_kill_process+0x25d/0x600 [ 2554.778520][T30907] out_of_memory+0x35c/0x1660 [ 2554.783248][T30907] ? find_held_lock+0x2d/0x110 [ 2554.788061][T30907] ? oom_killer_disable+0x2b0/0x2b0 [ 2554.793293][T30907] ? rcu_read_unlock+0x9/0x60 [ 2554.798025][T30907] ? find_held_lock+0x2d/0x110 [ 2554.802830][T30907] mem_cgroup_out_of_memory+0x206/0x270 [ 2554.808413][T30907] ? mem_cgroup_margin+0x130/0x130 [ 2554.813555][T30907] ? lock_downgrade+0x690/0x690 [ 2554.818438][T30907] try_charge_memcg+0xf9b/0x13b0 [ 2554.823403][T30907] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2554.829407][T30907] ? rcu_read_unlock+0x9/0x60 [ 2554.834105][T30907] ? lock_downgrade+0x690/0x690 [ 2554.838990][T30907] charge_memcg+0x90/0x3b0 [ 2554.843424][T30907] __mem_cgroup_charge+0x2b/0x90 [ 2554.848382][T30907] do_wp_page+0x8eb/0x3520 [ 2554.852835][T30907] ? lock_release+0x670/0x670 [ 2554.857546][T30907] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2554.862964][T30907] ? do_raw_spin_lock+0x124/0x2b0 [ 2554.868010][T30907] ? spin_bug+0x1c0/0x1c0 [ 2554.872355][T30907] ? lock_downgrade+0x690/0x690 [ 2554.877230][T30907] __handle_mm_fault+0x19a1/0x3e60 [ 2554.882380][T30907] ? vm_iomap_memory+0x190/0x190 [ 2554.887366][T30907] handle_mm_fault+0x2ba/0x9c0 [ 2554.892156][T30907] do_user_addr_fault+0x475/0x1230 [ 2554.897302][T30907] ? rcu_is_watching+0x12/0xb0 [ 2554.902090][T30907] exc_page_fault+0x98/0x170 [ 2554.906702][T30907] asm_exc_page_fault+0x26/0x30 [ 2554.911585][T30907] RIP: 0023:0xf72206e8 [ 2554.915665][T30907] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2554.935290][T30907] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2554.941370][T30907] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2554.949349][T30907] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2554.957332][T30907] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2554.965315][T30907] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 13:03:07 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5516, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2554.973298][T30907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2554.981319][T30907] 13:03:07 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x551c, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2555.061483][T30907] memory: usage 307200kB, limit 307200kB, failcnt 3518 [ 2555.084447][T30907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2555.109958][T30907] Memory cgroup stats for /syz2: [ 2555.110226][T30907] anon 811008 [ 2555.110226][T30907] file 315392 [ 2555.110226][T30907] kernel 313446400 [ 2555.110226][T30907] kernel_stack 327680 [ 2555.110226][T30907] pagetables 503808 [ 2555.110226][T30907] sec_pagetables 0 [ 2555.110226][T30907] percpu 4060576 [ 2555.110226][T30907] sock 0 [ 2555.110226][T30907] vmalloc 0 [ 2555.110226][T30907] shmem 315392 [ 2555.110226][T30907] zswap 0 [ 2555.110226][T30907] zswapped 0 [ 2555.110226][T30907] file_mapped 249856 [ 2555.110226][T30907] file_dirty 0 [ 2555.110226][T30907] file_writeback 0 [ 2555.110226][T30907] swapcached 0 [ 2555.110226][T30907] anon_thp 0 [ 2555.110226][T30907] file_thp 0 [ 2555.110226][T30907] shmem_thp 0 [ 2555.110226][T30907] inactive_anon 65536 [ 2555.110226][T30907] active_anon 1060864 [ 2555.110226][T30907] inactive_file 0 [ 2555.110226][T30907] active_file 0 [ 2555.110226][T30907] unevictable 0 [ 2555.110226][T30907] slab_reclaimable 31088 [ 2555.110226][T30907] slab_unreclaimable 308438432 [ 2555.110226][T30907] slab 308469520 [ 2555.110226][T30907] workingset_refault_anon 0 13:03:07 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x402c5829, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2555.110226][T30907] workingset_refault_file 0 [ 2555.110226][T30907] workingset_activate_anon 0 [ 2555.110226][T30907] workingset_activate_file 0 [ 2555.110226][T30907] workingset_restore_anon 0 [ 2555.110226][T30907] workingset_restore_file 0 [ 2555.110226][T30907] workingset_nodereclaim 0 [ 2555.110226][T30907] pgscan 0 [ 2555.110226][T30907] pgsteal 0 [ 2555.110226][T30907] pgscan_kswapd 0 [ 2555.110226][T30907] pgscan_direct 0 [ 2555.110226][T30907] pgscan_khugepaged 0 [ 2555.110226][T30907] pgsteal_kswapd 0 [ 2555.110226][T30907] pgsteal_direct 0 [ 2555.110226][T30907] pgsteal_khugepaged 0 [ 2555.110226][T30907] pgfault 498717 [ 2555.110226][T30907] pgmajfault 32 [ 2555.110226][T30907] pgrefill 0 [ 2555.110226][T30907] pgactivate 0 [ 2555.110226][T30907] pgdeactivate 0 [ 2555.110226][T30907] pglazyfree 0 [ 2555.110226][T30907] pglazyfreed 0 [ 2555.110226][T30907] zswpin 0 [ 2555.110226][T30907] zswpout 0 [ 2555.110226][T30907] thp_fault_alloc 0 [ 2555.321967][T30907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30907,uid=0 [ 2555.344177][T30907] Memory cgroup out of memory: Killed process 30907 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025900e000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:08 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000002}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:08 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="749d80210f82686ff61f3fbf2a9b42b4343c82c348d1581068e40f4a0a29753de3b693a5b4de606c0e6de2c60e08c5a9326bf4e2cc3b15ad52cadf79b56d10f74aaa63a2c8591424fc7400cf0360b7c18425ac3ccbf5c4af2dec218a90a3b872a5263bd6b2899647df59ab7c516f92a082255eed479d27386f279a35131de0dbfdb333ba30c95b92f709d95428c0bd4c690d86b234abb5ffe188bf6bcd03ba8584a98598517c2d7d9401c78ebc07e5858bd6436d12216c5e771433a64af62a7a15482dd9c1d03e6d17a6b7b713fc7359", 0xd0, 0x81, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:08 executing program 5: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xffffff7f, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:08 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="749d80210f82686ff61f3fbf2a9b42b4343c82c348d1581068e40f4a0a29753de3b693a5b4de606c0e6de2c60e08c5a9326bf4e2cc3b15ad52cadf79b56d10f74aaa63a2c8591424fc7400cf0360b7c18425ac3ccbf5c4af2dec218a90a3b872a5263bd6b2899647df59ab7c516f92a082255eed479d27386f279a35131de0dbfdb333ba30c95b92f709d95428c0bd4c690d86b234abb5ffe188bf6bcd03ba8584a98598517c2d7d9401c78ebc07e5858bd6436d12216c5e771433a64af62a7a15482dd9c1d03e6d17a6b7b713fc7359", 0xd0, 0x81, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:08 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x402c582a, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:08 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000003}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2555.730360][T30935] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2555.794741][T30935] CPU: 1 PID: 30935 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2555.805235][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2555.815325][T30935] Call Trace: [ 2555.818630][T30935] [ 2555.821590][T30935] dump_stack_lvl+0x136/0x150 [ 2555.826313][T30935] dump_header+0x10a/0xd70 [ 2555.830779][T30935] oom_kill_process+0x25d/0x600 [ 2555.835715][T30935] out_of_memory+0x35c/0x1660 [ 2555.840477][T30935] ? find_held_lock+0x2d/0x110 [ 2555.845290][T30935] ? oom_killer_disable+0x2b0/0x2b0 [ 2555.850533][T30935] ? rcu_read_unlock+0x9/0x60 [ 2555.855258][T30935] ? find_held_lock+0x2d/0x110 [ 2555.860073][T30935] mem_cgroup_out_of_memory+0x206/0x270 [ 2555.865666][T30935] ? mem_cgroup_margin+0x130/0x130 [ 2555.870828][T30935] ? lock_downgrade+0x690/0x690 [ 2555.875736][T30935] try_charge_memcg+0xf9b/0x13b0 [ 2555.880719][T30935] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2555.886747][T30935] ? rcu_read_unlock+0x9/0x60 [ 2555.891472][T30935] ? lock_downgrade+0x690/0x690 [ 2555.896383][T30935] charge_memcg+0x90/0x3b0 [ 2555.900841][T30935] __mem_cgroup_charge+0x2b/0x90 [ 2555.905827][T30935] do_wp_page+0x8eb/0x3520 [ 2555.910293][T30935] ? lock_release+0x670/0x670 [ 2555.915004][T30935] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2555.920421][T30935] ? do_raw_spin_lock+0x124/0x2b0 [ 2555.925496][T30935] ? spin_bug+0x1c0/0x1c0 [ 2555.929862][T30935] ? lock_downgrade+0x690/0x690 [ 2555.934772][T30935] __handle_mm_fault+0x19a1/0x3e60 [ 2555.939934][T30935] ? vm_iomap_memory+0x190/0x190 [ 2555.944940][T30935] handle_mm_fault+0x2ba/0x9c0 [ 2555.949748][T30935] do_user_addr_fault+0x475/0x1230 [ 2555.954908][T30935] ? rcu_is_watching+0x12/0xb0 [ 2555.959716][T30935] exc_page_fault+0x98/0x170 [ 2555.964345][T30935] asm_exc_page_fault+0x26/0x30 [ 2555.969240][T30935] RIP: 0023:0xf72206e8 [ 2555.973336][T30935] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2555.992982][T30935] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2555.999084][T30935] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2556.007087][T30935] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2556.015091][T30935] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2556.023092][T30935] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2556.031113][T30935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2556.039131][T30935] [ 2556.051316][T30935] memory: usage 307200kB, limit 307200kB, failcnt 3603 [ 2556.058602][T30935] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2556.075490][T30935] Memory cgroup stats for /syz2: [ 2556.075757][T30935] anon 794624 [ 2556.075757][T30935] file 315392 [ 2556.075757][T30935] kernel 313462784 [ 2556.075757][T30935] kernel_stack 327680 [ 2556.075757][T30935] pagetables 503808 [ 2556.075757][T30935] sec_pagetables 0 [ 2556.075757][T30935] percpu 4060640 [ 2556.075757][T30935] sock 0 [ 2556.075757][T30935] vmalloc 0 [ 2556.075757][T30935] shmem 315392 [ 2556.075757][T30935] zswap 0 [ 2556.075757][T30935] zswapped 0 [ 2556.075757][T30935] file_mapped 249856 [ 2556.075757][T30935] file_dirty 0 [ 2556.075757][T30935] file_writeback 0 [ 2556.075757][T30935] swapcached 0 [ 2556.075757][T30935] anon_thp 0 [ 2556.075757][T30935] file_thp 0 [ 2556.075757][T30935] shmem_thp 0 [ 2556.075757][T30935] inactive_anon 65536 [ 2556.075757][T30935] active_anon 1044480 [ 2556.075757][T30935] inactive_file 0 [ 2556.075757][T30935] active_file 0 [ 2556.075757][T30935] unevictable 0 [ 2556.075757][T30935] slab_reclaimable 31088 [ 2556.075757][T30935] slab_unreclaimable 308450344 [ 2556.075757][T30935] slab 308481432 [ 2556.075757][T30935] workingset_refault_anon 0 [ 2556.075757][T30935] workingset_refault_file 0 [ 2556.075757][T30935] workingset_activate_anon 0 [ 2556.075757][T30935] workingset_activate_file 0 [ 2556.075757][T30935] workingset_restore_anon 0 [ 2556.075757][T30935] workingset_restore_file 0 [ 2556.075757][T30935] workingset_nodereclaim 0 [ 2556.075757][T30935] pgscan 0 [ 2556.075757][T30935] pgsteal 0 [ 2556.075757][T30935] pgscan_kswapd 0 [ 2556.075757][T30935] pgscan_direct 0 [ 2556.075757][T30935] pgscan_khugepaged 0 [ 2556.075757][T30935] pgsteal_kswapd 0 [ 2556.075757][T30935] pgsteal_direct 0 [ 2556.075757][T30935] pgsteal_khugepaged 0 [ 2556.075757][T30935] pgfault 498763 [ 2556.075757][T30935] pgmajfault 32 [ 2556.075757][T30935] pgrefill 0 [ 2556.075757][T30935] pgactivate 0 [ 2556.075757][T30935] pgdeactivate 0 [ 2556.075757][T30935] pglazyfree 0 [ 2556.075757][T30935] pglazyfreed 0 [ 2556.075757][T30935] zswpin 0 [ 2556.075757][T30935] zswpout 0 [ 2556.075757][T30935] thp_fault_alloc 0 13:03:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') fchdir(r1) close(r0) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x40013}}], 0x2, 0x40040) 13:03:09 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000004}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:09 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) read$dsp(r2, &(0x7f0000000100)=""/163, 0xa3) [ 2556.391189][T30935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30935,uid=0 13:03:09 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000005}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2556.442344][T30935] Memory cgroup out of memory: Killed process 30935 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') fchdir(r1) close(r0) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x40013}}], 0x2, 0x40040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') (async) fchdir(r1) (async) close(r0) (async) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x40013}}], 0x2, 0x40040) (async) 13:03:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250802000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:09 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="16", 0x1}], 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x151840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x9, 0x1, 0xa680000000000000, 0xff9a, 0x401, 0xfffffffffffffff7, 0x2, 0x6, 0x3db, 0x400, 0x81, 0x7, 0x400, 0x6}, 0x10, [0x0, 0x0]}) 13:03:09 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000006}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') fchdir(r1) close(r0) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x40013}}], 0x2, 0x40040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') (async) fchdir(r1) (async) close(r0) (async) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x40013}}], 0x2, 0x40040) (async) 13:03:09 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000007}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2556.872267][T30989] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2556.893476][T30989] CPU: 0 PID: 30989 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2556.903958][T30989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2556.914041][T30989] Call Trace: [ 2556.917332][T30989] [ 2556.920279][T30989] dump_stack_lvl+0x136/0x150 [ 2556.924986][T30989] dump_header+0x10a/0xd70 [ 2556.929435][T30989] oom_kill_process+0x25d/0x600 [ 2556.934307][T30989] out_of_memory+0x35c/0x1660 [ 2556.939012][T30989] ? find_held_lock+0x2d/0x110 [ 2556.943811][T30989] ? oom_killer_disable+0x2b0/0x2b0 [ 2556.949029][T30989] ? rcu_read_unlock+0x9/0x60 [ 2556.953730][T30989] ? find_held_lock+0x2d/0x110 [ 2556.958547][T30989] mem_cgroup_out_of_memory+0x206/0x270 [ 2556.964119][T30989] ? mem_cgroup_margin+0x130/0x130 [ 2556.969274][T30989] ? lock_downgrade+0x690/0x690 [ 2556.974157][T30989] try_charge_memcg+0xf9b/0x13b0 [ 2556.979114][T30989] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2556.985115][T30989] ? rcu_read_unlock+0x9/0x60 [ 2556.989822][T30989] ? lock_downgrade+0x690/0x690 [ 2556.994701][T30989] charge_memcg+0x90/0x3b0 [ 2556.999139][T30989] __mem_cgroup_charge+0x2b/0x90 [ 2557.004185][T30989] do_wp_page+0x8eb/0x3520 [ 2557.008630][T30989] ? lock_release+0x670/0x670 [ 2557.013323][T30989] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2557.018809][T30989] ? do_raw_spin_lock+0x124/0x2b0 [ 2557.023855][T30989] ? spin_bug+0x1c0/0x1c0 [ 2557.028202][T30989] ? lock_downgrade+0x690/0x690 [ 2557.033088][T30989] __handle_mm_fault+0x19a1/0x3e60 [ 2557.038225][T30989] ? vm_iomap_memory+0x190/0x190 [ 2557.043289][T30989] handle_mm_fault+0x2ba/0x9c0 [ 2557.048082][T30989] do_user_addr_fault+0x475/0x1230 [ 2557.053230][T30989] ? rcu_is_watching+0x12/0xb0 [ 2557.058018][T30989] exc_page_fault+0x98/0x170 [ 2557.062633][T30989] asm_exc_page_fault+0x26/0x30 [ 2557.067508][T30989] RIP: 0023:0xf72206e8 [ 2557.071587][T30989] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2557.091211][T30989] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2557.097310][T30989] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2557.105299][T30989] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2557.113297][T30989] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 13:03:09 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x402c582b, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x2, @loopback, 0xc}, 0xffffffffffffff01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x100008000002b) [ 2557.121281][T30989] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2557.129264][T30989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2557.137261][T30989] 13:03:09 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000300}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x2, @loopback, 0xc}, 0xffffffffffffff01) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) (async, rerun: 32) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0xfffffd9d) (async, rerun: 32) sendfile(r0, r1, 0x0, 0x100008000002b) 13:03:10 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) (async) write$binfmt_elf32(r0, 0x0, 0x4cd) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) (async) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) (async) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) read$dsp(r2, &(0x7f0000000100)=""/163, 0xa3) 13:03:10 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000500}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x2, @loopback, 0xc}, 0xffffffffffffff01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[], 0xfffffd9d) (async) sendfile(r0, r1, 0x0, 0x100008000002b) [ 2557.648120][T30989] memory: usage 307184kB, limit 307200kB, failcnt 3686 [ 2557.656414][T30989] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2557.690818][T30989] Memory cgroup stats for /syz2: [ 2557.691077][T30989] anon 794624 [ 2557.691077][T30989] file 315392 [ 2557.691077][T30989] kernel 313446400 [ 2557.691077][T30989] kernel_stack 327680 [ 2557.691077][T30989] pagetables 503808 [ 2557.691077][T30989] sec_pagetables 0 [ 2557.691077][T30989] percpu 4060576 [ 2557.691077][T30989] sock 0 [ 2557.691077][T30989] vmalloc 0 [ 2557.691077][T30989] shmem 315392 [ 2557.691077][T30989] zswap 0 [ 2557.691077][T30989] zswapped 0 [ 2557.691077][T30989] file_mapped 249856 [ 2557.691077][T30989] file_dirty 0 [ 2557.691077][T30989] file_writeback 0 [ 2557.691077][T30989] swapcached 0 [ 2557.691077][T30989] anon_thp 0 [ 2557.691077][T30989] file_thp 0 [ 2557.691077][T30989] shmem_thp 0 [ 2557.691077][T30989] inactive_anon 65536 [ 2557.691077][T30989] active_anon 1044480 [ 2557.691077][T30989] inactive_file 0 [ 2557.691077][T30989] active_file 0 [ 2557.691077][T30989] unevictable 0 [ 2557.691077][T30989] slab_reclaimable 31088 [ 2557.691077][T30989] slab_unreclaimable 308438432 [ 2557.691077][T30989] slab 308469520 [ 2557.691077][T30989] workingset_refault_anon 0 [ 2557.691077][T30989] workingset_refault_file 0 [ 2557.691077][T30989] workingset_activate_anon 0 [ 2557.691077][T30989] workingset_activate_file 0 [ 2557.691077][T30989] workingset_restore_anon 0 [ 2557.691077][T30989] workingset_restore_file 0 [ 2557.691077][T30989] workingset_nodereclaim 0 [ 2557.691077][T30989] pgscan 0 [ 2557.691077][T30989] pgsteal 0 [ 2557.691077][T30989] pgscan_kswapd 0 [ 2557.691077][T30989] pgscan_direct 0 [ 2557.691077][T30989] pgscan_khugepaged 0 [ 2557.691077][T30989] pgsteal_kswapd 0 [ 2557.691077][T30989] pgsteal_direct 0 [ 2557.691077][T30989] pgsteal_khugepaged 0 [ 2557.691077][T30989] pgfault 498809 [ 2557.691077][T30989] pgmajfault 32 [ 2557.691077][T30989] pgrefill 0 [ 2557.691077][T30989] pgactivate 0 [ 2557.691077][T30989] pgdeactivate 0 [ 2557.691077][T30989] pglazyfree 0 [ 2557.691077][T30989] pglazyfreed 0 [ 2557.691077][T30989] zswpin 0 [ 2557.691077][T30989] zswpout 0 [ 2557.691077][T30989] thp_fault_alloc 0 13:03:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250803000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3c5e9ee00e2697193a2eb09a7750fb9a4d25bb84a4e8653a4299c87f43a8f77e07cab450296d1475") syz_open_procfs$namespace(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x4c, 0x1c, 0x2, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xfffffff7}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x200}, @NDA_PROTOCOL={0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="440f20c0663503000000440f22c00f01c2334d92f30f0966b9140a00000f32660f38cfc566b94703000066b80000000066ba000000800f300f01c5360fc75c0c650f79fc", 0x44}], 0x1, 0x1, &(0x7f0000000200), 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) syz_clone(0x64000000, &(0x7f00000072c0), 0x0, &(0x7f00000082c0), &(0x7f0000008300), 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getresuid(&(0x7f0000009980), 0x0, &(0x7f0000009a00)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) socket$netlink(0x10, 0x3, 0x0) getegid() 13:03:10 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="16", 0x1}], 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x151840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x9, 0x1, 0xa680000000000000, 0xff9a, 0x401, 0xfffffffffffffff7, 0x2, 0x6, 0x3db, 0x400, 0x81, 0x7, 0x400, 0x6}, 0x10, [0x0, 0x0]}) 13:03:10 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000600}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:10 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) (async) write$binfmt_elf32(r0, 0x0, 0x4cd) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) read$dsp(r2, &(0x7f0000000100)=""/163, 0xa3) (async) read$dsp(r2, &(0x7f0000000100)=""/163, 0xa3) [ 2557.895338][T30989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30989,uid=0 [ 2557.913691][T30989] Memory cgroup out of memory: Killed process 30989 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:10 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x402c5839, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:10 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000700}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:10 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x4800ff00}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2558.220626][T31037] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2558.281771][T31037] CPU: 0 PID: 31037 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2558.292253][T31037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2558.302351][T31037] Call Trace: [ 2558.305655][T31037] [ 2558.308606][T31037] dump_stack_lvl+0x136/0x150 [ 2558.313321][T31037] dump_header+0x10a/0xd70 [ 2558.317782][T31037] oom_kill_process+0x25d/0x600 [ 2558.322675][T31037] out_of_memory+0x35c/0x1660 [ 2558.327400][T31037] ? find_held_lock+0x2d/0x110 [ 2558.332216][T31037] ? oom_killer_disable+0x2b0/0x2b0 [ 2558.337460][T31037] ? rcu_read_unlock+0x9/0x60 [ 2558.342173][T31037] ? find_held_lock+0x2d/0x110 [ 2558.346986][T31037] mem_cgroup_out_of_memory+0x206/0x270 [ 2558.352573][T31037] ? mem_cgroup_margin+0x130/0x130 [ 2558.357724][T31037] ? lock_downgrade+0x690/0x690 [ 2558.362632][T31037] try_charge_memcg+0xf9b/0x13b0 [ 2558.367606][T31037] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2558.373621][T31037] ? rcu_read_unlock+0x9/0x60 [ 2558.378336][T31037] ? lock_downgrade+0x690/0x690 [ 2558.383241][T31037] charge_memcg+0x90/0x3b0 [ 2558.387693][T31037] __mem_cgroup_charge+0x2b/0x90 [ 2558.392664][T31037] do_wp_page+0x8eb/0x3520 [ 2558.397126][T31037] ? lock_release+0x670/0x670 [ 2558.401846][T31037] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2558.407261][T31037] ? do_raw_spin_lock+0x124/0x2b0 [ 2558.412324][T31037] ? spin_bug+0x1c0/0x1c0 [ 2558.416685][T31037] ? lock_downgrade+0x690/0x690 [ 2558.421579][T31037] __handle_mm_fault+0x19a1/0x3e60 [ 2558.426734][T31037] ? vm_iomap_memory+0x190/0x190 [ 2558.431759][T31037] handle_mm_fault+0x2ba/0x9c0 [ 2558.436565][T31037] do_user_addr_fault+0x475/0x1230 [ 2558.441716][T31037] ? rcu_is_watching+0x12/0xb0 [ 2558.446522][T31037] exc_page_fault+0x98/0x170 [ 2558.451148][T31037] asm_exc_page_fault+0x26/0x30 [ 2558.456040][T31037] RIP: 0023:0xf72206e8 [ 2558.460133][T31037] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 13:03:11 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0xff000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2558.479774][T31037] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2558.485873][T31037] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2558.493873][T31037] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2558.501870][T31037] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2558.509870][T31037] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2558.517887][T31037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2558.525914][T31037] [ 2558.558491][T31037] memory: usage 307184kB, limit 307200kB, failcnt 3767 [ 2558.566651][T31037] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2558.579246][T31037] Memory cgroup stats for /syz2: [ 2558.579493][T31037] anon 794624 [ 2558.579493][T31037] file 315392 [ 2558.579493][T31037] kernel 313446400 [ 2558.579493][T31037] kernel_stack 327680 [ 2558.579493][T31037] pagetables 503808 [ 2558.579493][T31037] sec_pagetables 0 [ 2558.579493][T31037] percpu 4060576 [ 2558.579493][T31037] sock 0 [ 2558.579493][T31037] vmalloc 0 [ 2558.579493][T31037] shmem 315392 [ 2558.579493][T31037] zswap 0 [ 2558.579493][T31037] zswapped 0 [ 2558.579493][T31037] file_mapped 249856 [ 2558.579493][T31037] file_dirty 0 [ 2558.579493][T31037] file_writeback 0 [ 2558.579493][T31037] swapcached 0 [ 2558.579493][T31037] anon_thp 0 [ 2558.579493][T31037] file_thp 0 [ 2558.579493][T31037] shmem_thp 0 [ 2558.579493][T31037] inactive_anon 65536 [ 2558.579493][T31037] active_anon 1044480 [ 2558.579493][T31037] inactive_file 0 13:03:11 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000100)=@usbdevfs_disconnect={0x401}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2558.579493][T31037] active_file 0 [ 2558.579493][T31037] unevictable 0 [ 2558.579493][T31037] slab_reclaimable 31088 [ 2558.579493][T31037] slab_unreclaimable 308438736 [ 2558.579493][T31037] slab 308469824 [ 2558.579493][T31037] workingset_refault_anon 0 [ 2558.579493][T31037] workingset_refault_file 0 [ 2558.579493][T31037] workingset_activate_anon 0 [ 2558.579493][T31037] workingset_activate_file 0 [ 2558.579493][T31037] workingset_restore_anon 0 [ 2558.579493][T31037] workingset_restore_file 0 [ 2558.579493][T31037] workingset_nodereclaim 0 13:03:11 executing program 3: msgget$private(0x0, 0x481) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000100)=@usbdevfs_disconnect={0x401}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2558.579493][T31037] pgscan 0 [ 2558.579493][T31037] pgsteal 0 [ 2558.579493][T31037] pgscan_kswapd 0 [ 2558.579493][T31037] pgscan_direct 0 [ 2558.579493][T31037] pgscan_khugepaged 0 [ 2558.579493][T31037] pgsteal_kswapd 0 [ 2558.579493][T31037] pgsteal_direct 0 [ 2558.579493][T31037] pgsteal_khugepaged 0 [ 2558.579493][T31037] pgfault 498855 [ 2558.579493][T31037] pgmajfault 32 [ 2558.579493][T31037] pgrefill 0 [ 2558.579493][T31037] pgactivate 0 [ 2558.579493][T31037] pgdeactivate 0 [ 2558.579493][T31037] pglazyfree 0 [ 2558.579493][T31037] pglazyfreed 0 13:03:11 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="16", 0x1}], 0x1) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x151840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x9, 0x1, 0xa680000000000000, 0xff9a, 0x401, 0xfffffffffffffff7, 0x2, 0x6, 0x3db, 0x400, 0x81, 0x7, 0x400, 0x6}, 0x10, [0x0, 0x0]}) [ 2558.579493][T31037] zswpin 0 [ 2558.579493][T31037] zswpout 0 [ 2558.579493][T31037] thp_fault_alloc 0 [ 2558.912755][T31037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31037,uid=0 [ 2558.945436][T31037] Memory cgroup out of memory: Killed process 31037 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250804000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2559.214300][T31075] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2559.231041][T31075] CPU: 1 PID: 31075 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2559.241505][T31075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2559.251594][T31075] Call Trace: [ 2559.254900][T31075] [ 2559.257862][T31075] dump_stack_lvl+0x136/0x150 [ 2559.262579][T31075] dump_header+0x10a/0xd70 [ 2559.267046][T31075] oom_kill_process+0x25d/0x600 [ 2559.271936][T31075] out_of_memory+0x35c/0x1660 [ 2559.276658][T31075] ? find_held_lock+0x2d/0x110 [ 2559.281475][T31075] ? oom_killer_disable+0x2b0/0x2b0 [ 2559.286716][T31075] ? rcu_read_unlock+0x9/0x60 [ 2559.291432][T31075] ? find_held_lock+0x2d/0x110 [ 2559.296255][T31075] mem_cgroup_out_of_memory+0x206/0x270 [ 2559.301855][T31075] ? mem_cgroup_margin+0x130/0x130 [ 2559.307022][T31075] ? lock_downgrade+0x690/0x690 [ 2559.311941][T31075] try_charge_memcg+0xf9b/0x13b0 [ 2559.316925][T31075] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2559.322952][T31075] ? rcu_read_unlock+0x9/0x60 [ 2559.327682][T31075] ? lock_downgrade+0x690/0x690 [ 2559.332589][T31075] charge_memcg+0x90/0x3b0 [ 2559.337129][T31075] __mem_cgroup_charge+0x2b/0x90 [ 2559.342105][T31075] do_wp_page+0x8eb/0x3520 [ 2559.346566][T31075] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2559.352943][T31075] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2559.358355][T31075] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2559.364562][T31075] ? __handle_mm_fault+0x13ad/0x3e60 [ 2559.369890][T31075] __handle_mm_fault+0x19a1/0x3e60 [ 2559.375048][T31075] ? vm_iomap_memory+0x190/0x190 [ 2559.380050][T31075] handle_mm_fault+0x2ba/0x9c0 [ 2559.384875][T31075] do_user_addr_fault+0x475/0x1230 [ 2559.390031][T31075] ? rcu_is_watching+0x12/0xb0 [ 2559.394822][T31075] exc_page_fault+0x98/0x170 [ 2559.399438][T31075] asm_exc_page_fault+0x26/0x30 [ 2559.404396][T31075] RIP: 0023:0xf72206e8 [ 2559.408477][T31075] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2559.428114][T31075] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2559.434204][T31075] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2559.442205][T31075] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2559.450194][T31075] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2559.459047][T31075] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2559.467025][T31075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2559.475025][T31075] [ 2559.587499][T31075] memory: usage 307200kB, limit 307200kB, failcnt 3847 [ 2559.594858][T31075] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2559.602680][T31075] Memory cgroup stats for /syz2: [ 2559.603801][T31075] anon 794624 [ 2559.603801][T31075] file 315392 [ 2559.603801][T31075] kernel 313462784 [ 2559.603801][T31075] kernel_stack 327680 [ 2559.603801][T31075] pagetables 503808 [ 2559.603801][T31075] sec_pagetables 0 [ 2559.603801][T31075] percpu 4060640 [ 2559.603801][T31075] sock 0 [ 2559.603801][T31075] vmalloc 0 [ 2559.603801][T31075] shmem 315392 [ 2559.603801][T31075] zswap 0 [ 2559.603801][T31075] zswapped 0 [ 2559.603801][T31075] file_mapped 249856 [ 2559.603801][T31075] file_dirty 0 [ 2559.603801][T31075] file_writeback 0 [ 2559.603801][T31075] swapcached 0 [ 2559.603801][T31075] anon_thp 0 [ 2559.603801][T31075] file_thp 0 [ 2559.603801][T31075] shmem_thp 0 [ 2559.603801][T31075] inactive_anon 65536 [ 2559.603801][T31075] active_anon 1044480 [ 2559.603801][T31075] inactive_file 0 [ 2559.603801][T31075] active_file 0 [ 2559.603801][T31075] unevictable 0 [ 2559.603801][T31075] slab_reclaimable 31088 [ 2559.603801][T31075] slab_unreclaimable 308450344 [ 2559.603801][T31075] slab 308481432 [ 2559.603801][T31075] workingset_refault_anon 0 [ 2559.603801][T31075] workingset_refault_file 0 [ 2559.603801][T31075] workingset_activate_anon 0 [ 2559.603801][T31075] workingset_activate_file 0 [ 2559.603801][T31075] workingset_restore_anon 0 [ 2559.603801][T31075] workingset_restore_file 0 [ 2559.603801][T31075] workingset_nodereclaim 0 [ 2559.603801][T31075] pgscan 0 [ 2559.603801][T31075] pgsteal 0 [ 2559.603801][T31075] pgscan_kswapd 0 [ 2559.603801][T31075] pgscan_direct 0 [ 2559.603801][T31075] pgscan_khugepaged 0 [ 2559.603801][T31075] pgsteal_kswapd 0 [ 2559.603801][T31075] pgsteal_direct 0 [ 2559.603801][T31075] pgsteal_khugepaged 0 [ 2559.603801][T31075] pgfault 498901 [ 2559.603801][T31075] pgmajfault 32 [ 2559.603801][T31075] pgrefill 0 [ 2559.603801][T31075] pgactivate 0 [ 2559.603801][T31075] pgdeactivate 0 [ 2559.603801][T31075] pglazyfree 0 [ 2559.603801][T31075] pglazyfreed 0 [ 2559.603801][T31075] zswpin 0 [ 2559.603801][T31075] zswpout 0 [ 2559.603801][T31075] thp_fault_alloc 0 [ 2559.806241][T31075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31075,uid=0 [ 2559.822561][T31075] Memory cgroup out of memory: Killed process 31075 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3c5e9ee00e2697193a2eb09a7750fb9a4d25bb84a4e8653a4299c87f43a8f77e07cab450296d1475") (async) syz_open_procfs$namespace(r0, 0x0) (async, rerun: 32) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x4c, 0x1c, 0x2, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xfffffff7}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x200}, @NDA_PROTOCOL={0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async, rerun: 64) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 64) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="440f20c0663503000000440f22c00f01c2334d92f30f0966b9140a00000f32660f38cfc566b94703000066b80000000066ba000000800f300f01c5360fc75c0c650f79fc", 0x44}], 0x1, 0x1, &(0x7f0000000200), 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) (async) syz_clone(0x64000000, &(0x7f00000072c0), 0x0, &(0x7f00000082c0), &(0x7f0000008300), 0x0) (async, rerun: 32) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_open_procfs$namespace(r5, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getresuid(&(0x7f0000009980), 0x0, &(0x7f0000009a00)) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getegid() 13:03:13 executing program 3: msgget$private(0x0, 0x481) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000100)=@usbdevfs_disconnect={0x401}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:13 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x41045508, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:13 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r2 = io_uring_setup(0xd8e, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r4, 0x1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2b4, &(0x7f00000004c0)={[{0xee, 0x4e00, "78a7e1fa0ab630c47b2c7ef18202d9f1dd94df34f81e87655eea0a5ed6ef6f36d6fccda558612088fef3aef3ec89ff417f637d5b37edc1772b018f2415b89c17515bf2f515a02e1b07acfed7c7b73c3f3b7f913692b2017f668dffdad68294e71323ef0b0b8c62180d1227b0d08b2daf601b83d05d2cef367893baa460a5c361c6a0db2753e5f0271c2524c9491789408e5f938f208d11a6d839e48a22cd2ce01a4c9a3bbc5e6da04aa1c2dc56e9bdbd639172104fff774e69ebad5be9be431219a18be2407a7d1cc20fe47946a5589f96ea34790cb6b0aa67c365ee84d88cade775eb8a7fa043d2bbbce40ea4ac"}, {0xd2, 0x4e00, "54be304af85e284b5790877777ad96ad915a923f6f2bf4b78f8afe9acee3c4cbc1846c289f2d0e632bfb8413c9f9c6da87a8a0771aa5e5508bfb9517a6b3cc77d41df810510b0f614ec91b888a05522c2bd546c1a43fb6c2a1a40e72d7f88f29d4bdbe65c7e8a91a2e27101d3dc45881dd62d61ecc5ede2a8e45dfdbf274ef0039a439daefe7df2754b90c8186536cdf91681078aa495dc58532530aeba260221bb49ceeab84f94bb3a42ce9f8ce77db1ea26a46b4dede20abcff036d00a280a19f36a11bb6ebf4084f889c2f9e3e4bf86fd"}, {0xe4, 0x4e00, "ff6cd64899f7ab505805679fe6b2afff35f99c4f3d81ff3d4d77eba9ec412fe4786653f489c069356623f52cfb3393c3d3c1e4ffadb6af113b5e12a5c04e84f52498b63c7b7cc2a59a7e43d80237c319f0cfb6cc8e259f75f43a05e14c08a3626036a88c99487b491d31f85efc8da8ebbd92427f8baf7ca3bcb34b23f5fd6fde2bdfa87e23d1d986b47e2faf1c40563516365229ff9d04a5627ae707d0b6b8c91cf7ac2446ac18931f16b63516bc97cf3c53c43c1499a3b5cb61abc5fc0649913b1070dd1b03adf90b8595eb420fc347666cc088c7145769c388bab17d0ea9b28fd99f00"}]}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:13 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x30000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = open(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x6}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x800, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) splice(r5, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffbfffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x65664e38a77e93ef, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r4}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) creat(&(0x7f00000005c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000080000000000000000fffffff00000b9b8", @ANYRES32=0x0, @ANYBLOB="0000000008000000140014006772653000000000000000000000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) madvise(&(0x7f000052e000/0x2000)=nil, 0x2000, 0xc) fcntl$notify(r5, 0x402, 0x20) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 13:03:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250805000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2561.410185][T31087] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2561.470947][T31087] CPU: 1 PID: 31087 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2561.481441][T31087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2561.491521][T31087] Call Trace: [ 2561.494800][T31087] [ 2561.497729][T31087] dump_stack_lvl+0x136/0x150 [ 2561.502412][T31087] dump_header+0x10a/0xd70 [ 2561.506853][T31087] oom_kill_process+0x25d/0x600 [ 2561.511712][T31087] out_of_memory+0x35c/0x1660 [ 2561.516394][T31087] ? find_held_lock+0x2d/0x110 [ 2561.521166][T31087] ? oom_killer_disable+0x2b0/0x2b0 [ 2561.526388][T31087] ? rcu_read_unlock+0x9/0x60 [ 2561.531070][T31087] ? find_held_lock+0x2d/0x110 [ 2561.535862][T31087] mem_cgroup_out_of_memory+0x206/0x270 [ 2561.541421][T31087] ? mem_cgroup_margin+0x130/0x130 [ 2561.546535][T31087] ? lock_downgrade+0x690/0x690 [ 2561.551390][T31087] try_charge_memcg+0xf9b/0x13b0 [ 2561.556341][T31087] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2561.562325][T31087] ? rcu_read_unlock+0x9/0x60 [ 2561.567005][T31087] ? lock_downgrade+0x690/0x690 [ 2561.571973][T31087] charge_memcg+0x90/0x3b0 [ 2561.576416][T31087] __mem_cgroup_charge+0x2b/0x90 [ 2561.581383][T31087] do_wp_page+0x8eb/0x3520 [ 2561.585805][T31087] ? lock_release+0x670/0x670 [ 2561.590480][T31087] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2561.595855][T31087] ? do_raw_spin_lock+0x124/0x2b0 [ 2561.600882][T31087] ? spin_bug+0x1c0/0x1c0 [ 2561.605205][T31087] ? lock_downgrade+0x690/0x690 [ 2561.610064][T31087] __handle_mm_fault+0x19a1/0x3e60 [ 2561.615180][T31087] ? vm_iomap_memory+0x190/0x190 [ 2561.620132][T31087] handle_mm_fault+0x2ba/0x9c0 [ 2561.624896][T31087] do_user_addr_fault+0x475/0x1230 [ 2561.630009][T31087] ? rcu_is_watching+0x12/0xb0 [ 2561.634773][T31087] exc_page_fault+0x98/0x170 [ 2561.639361][T31087] asm_exc_page_fault+0x26/0x30 [ 2561.644208][T31087] RIP: 0023:0xf72206e8 [ 2561.648283][T31087] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2561.667985][T31087] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2561.674048][T31087] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2561.682015][T31087] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2561.689981][T31087] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2561.697947][T31087] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2561.705910][T31087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2561.713905][T31087] 13:03:14 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400028f3030000007a7e912f20de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) msgrcv(r4, &(0x7f0000001640)={0x0, ""/252}, 0x104, 0x0, 0x0) msgsnd(r4, &(0x7f0000001900)={0x3}, 0x4, 0x0) msgrcv(r4, &(0x7f00000001c0)={0x0, ""/255}, 0x103, 0x1, 0x2000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2561.722703][ T5162] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2561.744877][T31087] memory: usage 307200kB, limit 307200kB, failcnt 3903 [ 2561.753722][T31087] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2561.781487][T31087] Memory cgroup stats for /syz2: [ 2561.783100][T31087] anon 811008 [ 2561.783100][T31087] file 315392 [ 2561.783100][T31087] kernel 313446400 [ 2561.783100][T31087] kernel_stack 327680 [ 2561.783100][T31087] pagetables 503808 [ 2561.783100][T31087] sec_pagetables 0 [ 2561.783100][T31087] percpu 4060576 [ 2561.783100][T31087] sock 0 [ 2561.783100][T31087] vmalloc 0 [ 2561.783100][T31087] shmem 315392 [ 2561.783100][T31087] zswap 0 [ 2561.783100][T31087] zswapped 0 [ 2561.783100][T31087] file_mapped 249856 [ 2561.783100][T31087] file_dirty 0 [ 2561.783100][T31087] file_writeback 0 [ 2561.783100][T31087] swapcached 0 [ 2561.783100][T31087] anon_thp 0 [ 2561.783100][T31087] file_thp 0 [ 2561.783100][T31087] shmem_thp 0 [ 2561.783100][T31087] inactive_anon 65536 [ 2561.783100][T31087] active_anon 1060864 [ 2561.783100][T31087] inactive_file 0 [ 2561.783100][T31087] active_file 0 [ 2561.783100][T31087] unevictable 0 [ 2561.783100][T31087] slab_reclaimable 31088 [ 2561.783100][T31087] slab_unreclaimable 308438432 [ 2561.783100][T31087] slab 308469520 [ 2561.783100][T31087] workingset_refault_anon 0 [ 2561.783100][T31087] workingset_refault_file 0 [ 2561.783100][T31087] workingset_activate_anon 0 [ 2561.783100][T31087] workingset_activate_file 0 [ 2561.783100][T31087] workingset_restore_anon 0 [ 2561.783100][T31087] workingset_restore_file 0 [ 2561.783100][T31087] workingset_nodereclaim 0 [ 2561.783100][T31087] pgscan 0 [ 2561.783100][T31087] pgsteal 0 [ 2561.783100][T31087] pgscan_kswapd 0 [ 2561.783100][T31087] pgscan_direct 0 [ 2561.783100][T31087] pgscan_khugepaged 0 [ 2561.783100][T31087] pgsteal_kswapd 0 [ 2561.783100][T31087] pgsteal_direct 0 13:03:14 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3c5e9ee00e2697193a2eb09a7750fb9a4d25bb84a4e8653a4299c87f43a8f77e07cab450296d1475") syz_open_procfs$namespace(r0, 0x0) (async) syz_open_procfs$namespace(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x4c, 0x1c, 0x2, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xfffffff7}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x200}, @NDA_PROTOCOL={0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)) (async) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r2) (async) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="440f20c0663503000000440f22c00f01c2334d92f30f0966b9140a00000f32660f38cfc566b94703000066b80000000066ba000000800f300f01c5360fc75c0c650f79fc", 0x44}], 0x1, 0x1, &(0x7f0000000200), 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) syz_clone(0x64000000, &(0x7f00000072c0), 0x0, &(0x7f00000082c0), &(0x7f0000008300), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getresuid(&(0x7f0000009980), 0x0, &(0x7f0000009a00)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) getegid() [ 2561.783100][T31087] pgsteal_khugepaged 0 [ 2561.783100][T31087] pgfault 498955 [ 2561.783100][T31087] pgmajfault 32 [ 2561.783100][T31087] pgrefill 0 [ 2561.783100][T31087] pgactivate 0 [ 2561.783100][T31087] pgdeactivate 0 [ 2561.783100][T31087] pglazyfree 0 [ 2561.783100][T31087] pglazyfreed 0 [ 2561.783100][T31087] zswpin 0 [ 2561.783100][T31087] zswpout 0 [ 2561.783100][T31087] thp_fault_alloc 0 13:03:14 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x80045503, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3c5e9ee00e2697193a2eb09a7750fb9a4d25bb84a4e8653a4299c87f43a8f77e07cab450296d1475") syz_open_procfs$namespace(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x4c, 0x1c, 0x2, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xfffffff7}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x200}, @NDA_PROTOCOL={0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="440f20c0663503000000440f22c00f01c2334d92f30f0966b9140a00000f32660f38cfc566b94703000066b80000000066ba000000800f300f01c5360fc75c0c650f79fc", 0x44}], 0x1, 0x1, &(0x7f0000000200), 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) syz_clone(0x64000000, &(0x7f00000072c0), 0x0, &(0x7f00000082c0), &(0x7f0000008300), 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getresuid(&(0x7f0000009980), 0x0, &(0x7f0000009a00)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) socket$netlink(0x10, 0x3, 0x0) getegid() [ 2562.117740][T31087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31087,uid=0 [ 2562.162414][T31087] Memory cgroup out of memory: Killed process 31087 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2562.195140][ T5162] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2562.208919][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.236262][ T5162] usb 5-1: config 0 descriptor?? 13:03:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250806000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) 13:03:15 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x30000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 32) r2 = open(0x0, 0x0, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x6}, 0x90) (rerun: 32) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x800, 0x4) (async) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) splice(r5, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffbfffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x65664e38a77e93ef, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r4}, 0x10) (async) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) (async) creat(&(0x7f00000005c0)='./bus\x00', 0x0) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x208200) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000080000000000000000fffffff00000b9b8", @ANYRES32=0x0, @ANYBLOB="0000000008000000140014006772653000000000000000000000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) (async, rerun: 32) madvise(&(0x7f000052e000/0x2000)=nil, 0x2000, 0xc) (async, rerun: 32) fcntl$notify(r5, 0x402, 0x20) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 13:03:15 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x30000, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = open(0x0, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x6}, 0x90) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x800, 0x4) (async) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) splice(r5, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffbfffffffff, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x65664e38a77e93ef, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r4}, 0x10) (async) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) (async) creat(&(0x7f00000005c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000080000000000000000fffffff00000b9b8", @ANYRES32=0x0, @ANYBLOB="0000000008000000140014006772653000000000000000000000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) (async) madvise(&(0x7f000052e000/0x2000)=nil, 0x2000, 0xc) fcntl$notify(r5, 0x402, 0x20) (async) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 13:03:15 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2562.430203][T31142] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2562.449887][T31142] CPU: 0 PID: 31142 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2562.460369][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2562.470456][T31142] Call Trace: [ 2562.473763][T31142] [ 2562.476721][T31142] dump_stack_lvl+0x136/0x150 [ 2562.481438][T31142] dump_header+0x10a/0xd70 [ 2562.485904][T31142] oom_kill_process+0x25d/0x600 [ 2562.490807][T31142] out_of_memory+0x35c/0x1660 [ 2562.495538][T31142] ? find_held_lock+0x2d/0x110 [ 2562.500358][T31142] ? oom_killer_disable+0x2b0/0x2b0 [ 2562.505607][T31142] ? rcu_read_unlock+0x9/0x60 [ 2562.510333][T31142] ? find_held_lock+0x2d/0x110 [ 2562.515193][T31142] mem_cgroup_out_of_memory+0x206/0x270 [ 2562.520791][T31142] ? mem_cgroup_margin+0x130/0x130 [ 2562.525952][T31142] ? lock_downgrade+0x690/0x690 [ 2562.530862][T31142] try_charge_memcg+0xf9b/0x13b0 [ 2562.535937][T31142] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2562.541959][T31142] ? rcu_read_unlock+0x9/0x60 [ 2562.546680][T31142] ? lock_downgrade+0x690/0x690 [ 2562.551591][T31142] charge_memcg+0x90/0x3b0 [ 2562.556043][T31142] __mem_cgroup_charge+0x2b/0x90 [ 2562.561016][T31142] do_wp_page+0x8eb/0x3520 [ 2562.565481][T31142] ? lock_release+0x670/0x670 [ 2562.570195][T31142] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2562.575615][T31142] ? do_raw_spin_lock+0x124/0x2b0 [ 2562.580685][T31142] ? spin_bug+0x1c0/0x1c0 [ 2562.585142][T31142] ? lock_downgrade+0x690/0x690 [ 2562.590123][T31142] __handle_mm_fault+0x19a1/0x3e60 [ 2562.595291][T31142] ? vm_iomap_memory+0x190/0x190 [ 2562.600305][T31142] handle_mm_fault+0x2ba/0x9c0 [ 2562.605117][T31142] do_user_addr_fault+0x475/0x1230 [ 2562.610280][T31142] ? rcu_is_watching+0x12/0xb0 [ 2562.615092][T31142] exc_page_fault+0x98/0x170 [ 2562.619726][T31142] asm_exc_page_fault+0x26/0x30 [ 2562.624631][T31142] RIP: 0023:0xf72206e8 [ 2562.628727][T31142] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2562.648375][T31142] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2562.654519][T31142] RAX: 00000000f7370000 RBX: 00000000079d12fc RCX: 00000000000012fc [ 2562.662563][T31142] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000083d3df82 [ 2562.670569][T31142] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2562.678573][T31142] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2562.686579][T31142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2562.694597][T31142] [ 2562.704118][T31142] memory: usage 307200kB, limit 307200kB, failcnt 3986 [ 2562.712075][T31142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:03:15 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) io_uring_setup(0xd8e, &(0x7f0000000000)) (async) r2 = io_uring_setup(0xd8e, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r4, 0x1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2b4, &(0x7f00000004c0)={[{0xee, 0x4e00, "78a7e1fa0ab630c47b2c7ef18202d9f1dd94df34f81e87655eea0a5ed6ef6f36d6fccda558612088fef3aef3ec89ff417f637d5b37edc1772b018f2415b89c17515bf2f515a02e1b07acfed7c7b73c3f3b7f913692b2017f668dffdad68294e71323ef0b0b8c62180d1227b0d08b2daf601b83d05d2cef367893baa460a5c361c6a0db2753e5f0271c2524c9491789408e5f938f208d11a6d839e48a22cd2ce01a4c9a3bbc5e6da04aa1c2dc56e9bdbd639172104fff774e69ebad5be9be431219a18be2407a7d1cc20fe47946a5589f96ea34790cb6b0aa67c365ee84d88cade775eb8a7fa043d2bbbce40ea4ac"}, {0xd2, 0x4e00, "54be304af85e284b5790877777ad96ad915a923f6f2bf4b78f8afe9acee3c4cbc1846c289f2d0e632bfb8413c9f9c6da87a8a0771aa5e5508bfb9517a6b3cc77d41df810510b0f614ec91b888a05522c2bd546c1a43fb6c2a1a40e72d7f88f29d4bdbe65c7e8a91a2e27101d3dc45881dd62d61ecc5ede2a8e45dfdbf274ef0039a439daefe7df2754b90c8186536cdf91681078aa495dc58532530aeba260221bb49ceeab84f94bb3a42ce9f8ce77db1ea26a46b4dede20abcff036d00a280a19f36a11bb6ebf4084f889c2f9e3e4bf86fd"}, {0xe4, 0x4e00, "ff6cd64899f7ab505805679fe6b2afff35f99c4f3d81ff3d4d77eba9ec412fe4786653f489c069356623f52cfb3393c3d3c1e4ffadb6af113b5e12a5c04e84f52498b63c7b7cc2a59a7e43d80237c319f0cfb6cc8e259f75f43a05e14c08a3626036a88c99487b491d31f85efc8da8ebbd92427f8baf7ca3bcb34b23f5fd6fde2bdfa87e23d1d986b47e2faf1c40563516365229ff9d04a5627ae707d0b6b8c91cf7ac2446ac18931f16b63516bc97cf3c53c43c1499a3b5cb61abc5fc0649913b1070dd1b03adf90b8595eb420fc347666cc088c7145769c388bab17d0ea9b28fd99f00"}]}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 13:03:15 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400028f3030000007a7e912f20de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) (async) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) msgrcv(r4, &(0x7f0000001640)={0x0, ""/252}, 0x104, 0x0, 0x0) (async) msgrcv(r4, &(0x7f0000001640)={0x0, ""/252}, 0x104, 0x0, 0x0) msgsnd(r4, &(0x7f0000001900)={0x3}, 0x4, 0x0) msgrcv(r4, &(0x7f00000001c0)={0x0, ""/255}, 0x103, 0x1, 0x2000) (async) msgrcv(r4, &(0x7f00000001c0)={0x0, ""/255}, 0x103, 0x1, 0x2000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) (async) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2562.776756][ T5162] ath6kl: Failed to submit usb control message: -71 [ 2562.783399][ T5162] ath6kl: unable to send the bmi data to the device: -71 [ 2562.804310][ T5162] ath6kl: Unable to send get target info: -71 [ 2562.827593][ T5162] ath6kl: Failed to init ath6kl core: -71 [ 2562.882310][ T5162] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 2562.896401][ T5162] usb 5-1: USB disconnect, device number 12 [ 2562.907861][T31142] Memory cgroup stats for /syz2: [ 2562.908102][T31142] anon 811008 [ 2562.908102][T31142] file 315392 [ 2562.908102][T31142] kernel 313446400 [ 2562.908102][T31142] kernel_stack 327680 [ 2562.908102][T31142] pagetables 503808 [ 2562.908102][T31142] sec_pagetables 0 [ 2562.908102][T31142] percpu 4060576 [ 2562.908102][T31142] sock 0 [ 2562.908102][T31142] vmalloc 0 [ 2562.908102][T31142] shmem 315392 [ 2562.908102][T31142] zswap 0 [ 2562.908102][T31142] zswapped 0 [ 2562.908102][T31142] file_mapped 249856 [ 2562.908102][T31142] file_dirty 0 [ 2562.908102][T31142] file_writeback 0 [ 2562.908102][T31142] swapcached 0 [ 2562.908102][T31142] anon_thp 0 [ 2562.908102][T31142] file_thp 0 [ 2562.908102][T31142] shmem_thp 0 [ 2562.908102][T31142] inactive_anon 65536 [ 2562.908102][T31142] active_anon 1060864 [ 2562.908102][T31142] inactive_file 0 [ 2562.908102][T31142] active_file 0 [ 2562.908102][T31142] unevictable 0 [ 2562.908102][T31142] slab_reclaimable 31088 [ 2562.908102][T31142] slab_unreclaimable 308438432 [ 2562.908102][T31142] slab 308469520 [ 2562.908102][T31142] workingset_refault_anon 0 [ 2562.908102][T31142] workingset_refault_file 0 [ 2562.908102][T31142] workingset_activate_anon 0 [ 2562.908102][T31142] workingset_activate_file 0 [ 2562.908102][T31142] workingset_restore_anon 0 [ 2562.908102][T31142] workingset_restore_file 0 [ 2562.908102][T31142] workingset_nodereclaim 0 [ 2562.908102][T31142] pgscan 0 [ 2562.908102][T31142] pgsteal 0 [ 2562.908102][T31142] pgscan_kswapd 0 [ 2562.908102][T31142] pgscan_direct 0 [ 2562.908102][T31142] pgscan_khugepaged 0 [ 2562.908102][T31142] pgsteal_kswapd 0 [ 2562.908102][T31142] pgsteal_direct 0 [ 2562.908102][T31142] pgsteal_khugepaged 0 [ 2562.908102][T31142] pgfault 499009 [ 2562.908102][T31142] pgmajfault 32 [ 2562.908102][T31142] pgrefill 0 [ 2562.908102][T31142] pgactivate 0 [ 2562.908102][T31142] pgdeactivate 0 [ 2562.908102][T31142] pglazyfree 0 [ 2562.908102][T31142] pglazyfreed 0 [ 2562.908102][T31142] zswpin 0 [ 2562.908102][T31142] zswpout 0 [ 2562.908102][T31142] thp_fault_alloc 0 [ 2563.111374][T31142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31142,uid=0 13:03:15 executing program 3: msgget$private(0x0, 0x481) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400028f3030000007a7e912f20de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x7, "14b3189ffd5c99"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) (async) msgrcv(r4, &(0x7f0000001640)={0x0, ""/252}, 0x104, 0x0, 0x0) msgsnd(r4, &(0x7f0000001900)={0x3}, 0x4, 0x0) (async) msgrcv(r4, &(0x7f00000001c0)={0x0, ""/255}, 0x103, 0x1, 0x2000) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:15 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x30000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = open(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x6}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x800, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) splice(r5, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffbfffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x65664e38a77e93ef, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r4}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) creat(&(0x7f00000005c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000080000000000000000fffffff00000b9b8", @ANYRES32=0x0, @ANYBLOB="0000000008000000140014006772653000000000000000000000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) madvise(&(0x7f000052e000/0x2000)=nil, 0x2000, 0xc) fcntl$notify(r5, 0x402, 0x20) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 13:03:16 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32, @ANYBLOB="040000f5ffff000000000000003000"]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='objagg_obj_get\x00'}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r5, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_disconnect={0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001040)={0x2, [{r7, r9}, {r8, r9}, {r1, r9}, {r8, r9}, {r0, r9}, {r7, r2}, {0x0, r9}, {r0, r9}, {r0, r2}, {r7, r2}, {0x0, r9}, {r1, r9}, {r0, r9}, {r0, r9}, {r7, r9}, {r7, r9}, {r0, r9}, {r8, r2}, {0x0, r2}, {r1, r9}, {r1, r9}, {r0, r9}, {r1, r9}, {r0}, {0x0, r2}, {r0, r2}, {r1, r2}, {r7, r2}, {r8, r2}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r2}, {r7, r9}, {r1, r2}, {r1, r2}, {r7, r9}, {r1, r2}, {r7, r2}, {r0, r2}, {r0, r2}, {r1, r9}, {r0, r2}, {r8, r9}, {r0, r9}, {r0, r9}, {r0, r9}, {r8, r2}, {r7, r2}, {r1, r9}, {r1, r9}, {r0}, {r8, r2}, {r7, r9}, {r0, r9}, {r0, r2}, {r0, r2}, {r8, r2}, {r1, r2}, {0x0, r9}, {r1, r2}, {r0, r9}, {r0, r9}, {r0, r2}, {r7, r9}, {}, {r7, r9}, {r8, r9}, {r1, r2}, {r0, r9}, {r8, r2}, {r7, r9}, {r0, r9}, {r1, r2}, {r1, r9}, {r7, r2}, {r1, r2}, {r7, r2}, {r1, r9}, {r8, r9}, {r0, r2}, {r8, r2}, {r1, r2}, {r1, r9}, {r1, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r7, r2}, {r7, r2}, {r7, r9}, {r0, r2}, {r8, r9}, {r8, r9}, {0x0, r2}, {r7, r9}, {r7, r2}, {r1, r2}, {r1, r2}, {r7}, {r0, r9}, {r0, r9}, {r0, r2}, {r8, r2}, {r7, r9}, {r8, r9}, {r0}, {r7, r9}, {0x0, r9}, {r8, r9}, {r0, r2}, {r7}, {r7, r2}, {r8, r9}, {0x0, r2}, {r7, r2}, {r7, r9}, {r7}, {r8, r2}, {r0, r9}, {r7, r9}, {r8, r9}, {r8, r2}, {r8, r2}, {0x0, r9}, {r0, r2}, {r7, r2}, {r1, r9}, {r7, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {r0, r2}, {r7, r2}, {r7, r2}, {0x0, r9}, {r0, r9}, {r1, r9}, {r0, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {0x0, r9}, {r8, r2}, {r8, r2}, {r7, r9}, {r1, r2}, {0x0, r9}, {r1}, {r7, r9}, {r7, r2}, {r7, r9}, {r7, r9}, {r0, r2}, {r0, r2}, {r8, r9}, {r0}, {r1, r2}, {}, {0x0, r9}, {r7, r2}, {0x0, r2}, {r7, r9}, {r7, r9}, {r0, r9}, {0x0, r9}, {r0, r2}, {r1, r2}, {r0}, {r7, r2}, {r1, r2}, {r0, r9}, {r7, r2}, {r0, r2}, {r8, r2}, {0x0, r9}, {r8, r2}, {r0, r9}, {r1, r9}, {r1, r9}, {r0}, {r7, r2}, {r0, r9}, {r7}, {r8, r2}, {r7, r2}, {r7}, {r8, r9}, {r7, r9}, {r8}, {r7, r9}, {r0, r9}, {r7, r2}, {r0, r2}, {r7}, {r8, r2}, {0x0, r2}, {r8, r9}, {r8, r2}, {r7}, {r8, r9}, {r8, r2}, {r8, r9}, {r1, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r7}, {}, {r8, r2}, {r0, r9}, {r7, r9}, {r7, r2}, {r1, r9}, {r0, r9}, {r7, r9}, {r1, r9}, {r8, r9}, {r8, r9}, {r8, r2}, {r8, r9}, {r7, r2}, {r7, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r8, r2}, {r7, r2}, {r0, r2}, {r1, r2}, {r8, r9}, {r7, r2}, {r8, r2}, {r8, r9}, {r7, r2}, {r8, r9}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r0}, {r1, r2}, {r8, r2}, {r8, r2}, {r7}, {r1}, {r1, r9}, {r1, r9}, {r8, r2}, {r1}], 0x7, "cd0885e077126f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2563.304689][T31142] Memory cgroup out of memory: Killed process 31142 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 13:03:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250807000000000000000a100000", @ANYRES32=r5, @ANYBLOB="0000000000007a0008000a0010"], 0x28}}, 0x0) [ 2563.414872][ T5162] usb 5-1: new high-speed USB device number 13 using dummy_hcd 13:03:16 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32, @ANYBLOB="040000f5ffff000000000000003000"]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='objagg_obj_get\x00'}, 0x10) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='objagg_obj_get\x00'}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) (async) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r5, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_disconnect={0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001040)={0x2, [{r7, r9}, {r8, r9}, {r1, r9}, {r8, r9}, {r0, r9}, {r7, r2}, {0x0, r9}, {r0, r9}, {r0, r2}, {r7, r2}, {0x0, r9}, {r1, r9}, {r0, r9}, {r0, r9}, {r7, r9}, {r7, r9}, {r0, r9}, {r8, r2}, {0x0, r2}, {r1, r9}, {r1, r9}, {r0, r9}, {r1, r9}, {r0}, {0x0, r2}, {r0, r2}, {r1, r2}, {r7, r2}, {r8, r2}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r2}, {r7, r9}, {r1, r2}, {r1, r2}, {r7, r9}, {r1, r2}, {r7, r2}, {r0, r2}, {r0, r2}, {r1, r9}, {r0, r2}, {r8, r9}, {r0, r9}, {r0, r9}, {r0, r9}, {r8, r2}, {r7, r2}, {r1, r9}, {r1, r9}, {r0}, {r8, r2}, {r7, r9}, {r0, r9}, {r0, r2}, {r0, r2}, {r8, r2}, {r1, r2}, {0x0, r9}, {r1, r2}, {r0, r9}, {r0, r9}, {r0, r2}, {r7, r9}, {}, {r7, r9}, {r8, r9}, {r1, r2}, {r0, r9}, {r8, r2}, {r7, r9}, {r0, r9}, {r1, r2}, {r1, r9}, {r7, r2}, {r1, r2}, {r7, r2}, {r1, r9}, {r8, r9}, {r0, r2}, {r8, r2}, {r1, r2}, {r1, r9}, {r1, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r7, r2}, {r7, r2}, {r7, r9}, {r0, r2}, {r8, r9}, {r8, r9}, {0x0, r2}, {r7, r9}, {r7, r2}, {r1, r2}, {r1, r2}, {r7}, {r0, r9}, {r0, r9}, {r0, r2}, {r8, r2}, {r7, r9}, {r8, r9}, {r0}, {r7, r9}, {0x0, r9}, {r8, r9}, {r0, r2}, {r7}, {r7, r2}, {r8, r9}, {0x0, r2}, {r7, r2}, {r7, r9}, {r7}, {r8, r2}, {r0, r9}, {r7, r9}, {r8, r9}, {r8, r2}, {r8, r2}, {0x0, r9}, {r0, r2}, {r7, r2}, {r1, r9}, {r7, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {r0, r2}, {r7, r2}, {r7, r2}, {0x0, r9}, {r0, r9}, {r1, r9}, {r0, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {0x0, r9}, {r8, r2}, {r8, r2}, {r7, r9}, {r1, r2}, {0x0, r9}, {r1}, {r7, r9}, {r7, r2}, {r7, r9}, {r7, r9}, {r0, r2}, {r0, r2}, {r8, r9}, {r0}, {r1, r2}, {}, {0x0, r9}, {r7, r2}, {0x0, r2}, {r7, r9}, {r7, r9}, {r0, r9}, {0x0, r9}, {r0, r2}, {r1, r2}, {r0}, {r7, r2}, {r1, r2}, {r0, r9}, {r7, r2}, {r0, r2}, {r8, r2}, {0x0, r9}, {r8, r2}, {r0, r9}, {r1, r9}, {r1, r9}, {r0}, {r7, r2}, {r0, r9}, {r7}, {r8, r2}, {r7, r2}, {r7}, {r8, r9}, {r7, r9}, {r8}, {r7, r9}, {r0, r9}, {r7, r2}, {r0, r2}, {r7}, {r8, r2}, {0x0, r2}, {r8, r9}, {r8, r2}, {r7}, {r8, r9}, {r8, r2}, {r8, r9}, {r1, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r7}, {}, {r8, r2}, {r0, r9}, {r7, r9}, {r7, r2}, {r1, r9}, {r0, r9}, {r7, r9}, {r1, r9}, {r8, r9}, {r8, r9}, {r8, r2}, {r8, r9}, {r7, r2}, {r7, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r8, r2}, {r7, r2}, {r0, r2}, {r1, r2}, {r8, r9}, {r7, r2}, {r8, r2}, {r8, r9}, {r7, r2}, {r8, r9}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r0}, {r1, r2}, {r8, r2}, {r8, r2}, {r7}, {r1}, {r1, r9}, {r1, r9}, {r8, r2}, {r1}], 0x7, "cd0885e077126f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2563.609018][T31183] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2563.669340][T31183] CPU: 1 PID: 31183 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2563.679844][T31183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2563.689922][T31183] Call Trace: [ 2563.693203][T31183] [ 2563.696131][T31183] dump_stack_lvl+0x136/0x150 [ 2563.700808][T31183] dump_header+0x10a/0xd70 [ 2563.705229][T31183] oom_kill_process+0x25d/0x600 [ 2563.710099][T31183] out_of_memory+0x35c/0x1660 [ 2563.714803][T31183] ? find_held_lock+0x2d/0x110 [ 2563.719572][T31183] ? oom_killer_disable+0x2b0/0x2b0 [ 2563.724772][T31183] ? rcu_read_unlock+0x9/0x60 [ 2563.729450][T31183] ? find_held_lock+0x2d/0x110 [ 2563.734223][T31183] mem_cgroup_out_of_memory+0x206/0x270 [ 2563.739770][T31183] ? mem_cgroup_margin+0x130/0x130 [ 2563.744905][T31183] ? lock_downgrade+0x690/0x690 [ 2563.749769][T31183] try_charge_memcg+0xf9b/0x13b0 [ 2563.754721][T31183] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2563.760728][T31183] ? rcu_read_unlock+0x9/0x60 [ 2563.765435][T31183] ? lock_downgrade+0x690/0x690 [ 2563.770327][T31183] charge_memcg+0x90/0x3b0 [ 2563.774768][T31183] __mem_cgroup_charge+0x2b/0x90 [ 2563.779727][T31183] do_wp_page+0x8eb/0x3520 [ 2563.784181][T31183] ? lock_release+0x670/0x670 [ 2563.788879][T31183] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2563.794280][T31183] ? do_raw_spin_lock+0x124/0x2b0 [ 2563.799331][T31183] ? spin_bug+0x1c0/0x1c0 [ 2563.803681][T31183] ? lock_downgrade+0x690/0x690 [ 2563.808562][T31183] __handle_mm_fault+0x19a1/0x3e60 [ 2563.813701][T31183] ? vm_iomap_memory+0x190/0x190 [ 2563.818680][T31183] handle_mm_fault+0x2ba/0x9c0 [ 2563.823473][T31183] do_user_addr_fault+0x475/0x1230 [ 2563.828613][T31183] ? rcu_is_watching+0x12/0xb0 [ 2563.833405][T31183] exc_page_fault+0x98/0x170 [ 2563.838025][T31183] asm_exc_page_fault+0x26/0x30 [ 2563.842899][T31183] RIP: 0023:0xf72206e8 [ 2563.846976][T31183] Code: 39 dd 75 ee 8b 44 24 58 89 28 83 c4 3c 5b 5e 5f 5d c3 8b 7c 24 18 e9 9a fd ff ff 8d b4 26 00 00 00 00 8b 44 24 24 8b 7c 24 18 <89> 1c 88 e9 70 fe ff ff 8b 7c 24 50 39 54 24 0c 0f 84 80 00 00 00 [ 2563.866605][T31183] RSP: 002b:00000000f749fa60 EFLAGS: 00010246 [ 2563.872688][T31183] RAX: 00000000f7370000 RBX: 00000000f5e70c3a RCX: 0000000000000c3a [ 2563.880672][T31183] RDX: 0000000000000000 RSI: 00000000f734e000 RDI: 0000000087f994ec [ 2563.888654][T31183] RBP: 00000000f7370000 R08: 0000000000000000 R09: 0000000000000000 [ 2563.896810][T31183] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2563.904793][T31183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2563.912793][T31183] [ 2564.014884][ T5162] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2564.041320][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.060401][ T5162] usb 5-1: config 0 descriptor?? [ 2564.114738][T31183] memory: usage 307200kB, limit 307200kB, failcnt 4067 [ 2564.121829][T31183] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2564.170534][T31183] Memory cgroup stats for /syz2: [ 2564.170776][T31183] anon 794624 [ 2564.170776][T31183] file 315392 [ 2564.170776][T31183] kernel 313462784 [ 2564.170776][T31183] kernel_stack 327680 [ 2564.170776][T31183] pagetables 503808 [ 2564.170776][T31183] sec_pagetables 0 [ 2564.170776][T31183] percpu 4060640 [ 2564.170776][T31183] sock 0 [ 2564.170776][T31183] vmalloc 0 [ 2564.170776][T31183] shmem 315392 [ 2564.170776][T31183] zswap 0 [ 2564.170776][T31183] zswapped 0 [ 2564.170776][T31183] file_mapped 249856 13:03:16 executing program 1: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x30000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = open(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x6}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=0x800, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) splice(r5, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffbfffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x65664e38a77e93ef, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r4}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) creat(&(0x7f00000005c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000080000000000000000fffffff00000b9b8", @ANYRES32=0x0, @ANYBLOB="0000000008000000140014006772653000000000000000000000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) madvise(&(0x7f000052e000/0x2000)=nil, 0x2000, 0xc) fcntl$notify(r5, 0x402, 0x20) syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 13:03:16 executing program 0: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040000f5ffff000000000000003000"]) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x4e22, 0x2, 'fo\x00', 0x0, 0x0, 0x19}, {@empty, 0x4e24, 0x2000, 0x81, 0x1b5, 0x80000001}}, 0x44) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042ac0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x66, "0aa78fc559522d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r5}, {r6}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000044d80)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="f900004d75fca900d50000000000000001000080000000000100d09005fe00000617e7b501ad8436b9175db700000000000000000100000000000080f0030005000000240100000700000004000000000000000500000000000000000000000100000003000010000000001000000000000000000000000000000000000000000000000ed06570bd267d5bbd459af7dd759aa4077dc125389a4e2474360663fb342919deed49e4dde889fdf349c2a6fe0c96fb9306cef176589f8bb02c8395a79b7d1a42ef12ee7520c2da29520c76c925"]) r12 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r12, 0x8004550f, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r12, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f00000428c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r15}], 0x1, "df280464b364ce"}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r16, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 13:03:16 executing program 3: msgget$private(0x0, 0x481) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100400018000000bdd67ab4d14b06de0d46", @ANYRES32, @ANYBLOB="040000f5ffff000000000000003000"]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='objagg_obj_get\x00'}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) (async) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_IOCTL(r6, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000428c0)={0x0, ""/256, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r5, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_disconnect={0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001040)={0x2, [{r7, r9}, {r8, r9}, {r1, r9}, {r8, r9}, {r0, r9}, {r7, r2}, {0x0, r9}, {r0, r9}, {r0, r2}, {r7, r2}, {0x0, r9}, {r1, r9}, {r0, r9}, {r0, r9}, {r7, r9}, {r7, r9}, {r0, r9}, {r8, r2}, {0x0, r2}, {r1, r9}, {r1, r9}, {r0, r9}, {r1, r9}, {r0}, {0x0, r2}, {r0, r2}, {r1, r2}, {r7, r2}, {r8, r2}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r2}, {r7, r9}, {r1, r2}, {r1, r2}, {r7, r9}, {r1, r2}, {r7, r2}, {r0, r2}, {r0, r2}, {r1, r9}, {r0, r2}, {r8, r9}, {r0, r9}, {r0, r9}, {r0, r9}, {r8, r2}, {r7, r2}, {r1, r9}, {r1, r9}, {r0}, {r8, r2}, {r7, r9}, {r0, r9}, {r0, r2}, {r0, r2}, {r8, r2}, {r1, r2}, {0x0, r9}, {r1, r2}, {r0, r9}, {r0, r9}, {r0, r2}, {r7, r9}, {}, {r7, r9}, {r8, r9}, {r1, r2}, {r0, r9}, {r8, r2}, {r7, r9}, {r0, r9}, {r1, r2}, {r1, r9}, {r7, r2}, {r1, r2}, {r7, r2}, {r1, r9}, {r8, r9}, {r0, r2}, {r8, r2}, {r1, r2}, {r1, r9}, {r1, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r7, r2}, {r7, r2}, {r7, r9}, {r0, r2}, {r8, r9}, {r8, r9}, {0x0, r2}, {r7, r9}, {r7, r2}, {r1, r2}, {r1, r2}, {r7}, {r0, r9}, {r0, r9}, {r0, r2}, {r8, r2}, {r7, r9}, {r8, r9}, {r0}, {r7, r9}, {0x0, r9}, {r8, r9}, {r0, r2}, {r7}, {r7, r2}, {r8, r9}, {0x0, r2}, {r7, r2}, {r7, r9}, {r7}, {r8, r2}, {r0, r9}, {r7, r9}, {r8, r9}, {r8, r2}, {r8, r2}, {0x0, r9}, {r0, r2}, {r7, r2}, {r1, r9}, {r7, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {r0, r2}, {r7, r2}, {r7, r2}, {0x0, r9}, {r0, r9}, {r1, r9}, {r0, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {0x0, r9}, {r8, r2}, {r8, r2}, {r7, r9}, {r1, r2}, {0x0, r9}, {r1}, {r7, r9}, {r7, r2}, {r7, r9}, {r7, r9}, {r0, r2}, {r0, r2}, {r8, r9}, {r0}, {r1, r2}, {}, {0x0, r9}, {r7, r2}, {0x0, r2}, {r7, r9}, {r7, r9}, {r0, r9}, {0x0, r9}, {r0, r2}, {r1, r2}, {r0}, {r7, r2}, {r1, r2}, {r0, r9}, {r7, r2}, {r0, r2}, {r8, r2}, {0x0, r9}, {r8, r2}, {r0, r9}, {r1, r9}, {r1, r9}, {r0}, {r7, r2}, {r0, r9}, {r7}, {r8, r2}, {r7, r2}, {r7}, {r8, r9}, {r7, r9}, {r8}, {r7, r9}, {r0, r9}, {r7, r2}, {r0, r2}, {r7}, {r8, r2}, {0x0, r2}, {r8, r9}, {r8, r2}, {r7}, {r8, r9}, {r8, r2}, {r8, r9}, {r1, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r7}, {}, {r8, r2}, {r0, r9}, {r7, r9}, {r7, r2}, {r1, r9}, {r0, r9}, {r7, r9}, {r1, r9}, {r8, r9}, {r8, r9}, {r8, r2}, {r8, r9}, {r7, r2}, {r7, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r8, r2}, {r7, r2}, {r0, r2}, {r1, r2}, {r8, r9}, {r7, r2}, {r8, r2}, {r8, r9}, {r7, r2}, {r8, r9}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r0}, {r1, r2}, {r8, r2}, {r8, r2}, {r7}, {r1}, {r1, r9}, {r1, r9}, {r8, r2}, {r1}], 0x7, "cd0885e077126f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001040)={0x2, [{r7, r9}, {r8, r9}, {r1, r9}, {r8, r9}, {r0, r9}, {r7, r2}, {0x0, r9}, {r0, r9}, {r0, r2}, {r7, r2}, {0x0, r9}, {r1, r9}, {r0, r9}, {r0, r9}, {r7, r9}, {r7, r9}, {r0, r9}, {r8, r2}, {0x0, r2}, {r1, r9}, {r1, r9}, {r0, r9}, {r1, r9}, {r0}, {0x0, r2}, {r0, r2}, {r1, r2}, {r7, r2}, {r8, r2}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r2}, {r7, r9}, {r1, r2}, {r1, r2}, {r7, r9}, {r1, r2}, {r7, r2}, {r0, r2}, {r0, r2}, {r1, r9}, {r0, r2}, {r8, r9}, {r0, r9}, {r0, r9}, {r0, r9}, {r8, r2}, {r7, r2}, {r1, r9}, {r1, r9}, {r0}, {r8, r2}, {r7, r9}, {r0, r9}, {r0, r2}, {r0, r2}, {r8, r2}, {r1, r2}, {0x0, r9}, {r1, r2}, {r0, r9}, {r0, r9}, {r0, r2}, {r7, r9}, {}, {r7, r9}, {r8, r9}, {r1, r2}, {r0, r9}, {r8, r2}, {r7, r9}, {r0, r9}, {r1, r2}, {r1, r9}, {r7, r2}, {r1, r2}, {r7, r2}, {r1, r9}, {r8, r9}, {r0, r2}, {r8, r2}, {r1, r2}, {r1, r9}, {r1, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r7, r2}, {r7, r2}, {r7, r9}, {r0, r2}, {r8, r9}, {r8, r9}, {0x0, r2}, {r7, r9}, {r7, r2}, {r1, r2}, {r1, r2}, {r7}, {r0, r9}, {r0, r9}, {r0, r2}, {r8, r2}, {r7, r9}, {r8, r9}, {r0}, {r7, r9}, {0x0, r9}, {r8, r9}, {r0, r2}, {r7}, {r7, r2}, {r8, r9}, {0x0, r2}, {r7, r2}, {r7, r9}, {r7}, {r8, r2}, {r0, r9}, {r7, r9}, {r8, r9}, {r8, r2}, {r8, r2}, {0x0, r9}, {r0, r2}, {r7, r2}, {r1, r9}, {r7, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {r0, r2}, {r7, r2}, {r7, r2}, {0x0, r9}, {r0, r9}, {r1, r9}, {r0, r9}, {r1, r2}, {0x0, r2}, {r8, r9}, {0x0, r9}, {r8, r2}, {r8, r2}, {r7, r9}, {r1, r2}, {0x0, r9}, {r1}, {r7, r9}, {r7, r2}, {r7, r9}, {r7, r9}, {r0, r2}, {r0, r2}, {r8, r9}, {r0}, {r1, r2}, {}, {0x0, r9}, {r7, r2}, {0x0, r2}, {r7, r9}, {r7, r9}, {r0, r9}, {0x0, r9}, {r0, r2}, {r1, r2}, {r0}, {r7, r2}, {r1, r2}, {r0, r9}, {r7, r2}, {r0, r2}, {r8, r2}, {0x0, r9}, {r8, r2}, {r0, r9}, {r1, r9}, {r1, r9}, {r0}, {r7, r2}, {r0, r9}, {r7}, {r8, r2}, {r7, r2}, {r7}, {r8, r9}, {r7, r9}, {r8}, {r7, r9}, {r0, r9}, {r7, r2}, {r0, r2}, {r7}, {r8, r2}, {0x0, r2}, {r8, r9}, {r8, r2}, {r7}, {r8, r9}, {r8, r2}, {r8, r9}, {r1, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r7}, {}, {r8, r2}, {r0, r9}, {r7, r9}, {r7, r2}, {r1, r9}, {r0, r9}, {r7, r9}, {r1, r9}, {r8, r9}, {r8, r9}, {r8, r2}, {r8, r9}, {r7, r2}, {r7, r2}, {0x0, r2}, {r0, r2}, {0x0, r2}, {r8, r2}, {r7, r2}, {r0, r2}, {r1, r2}, {r8, r9}, {r7, r2}, {r8, r2}, {r8, r9}, {r7, r2}, {r8, r9}, {r0, r2}, {0x0, r2}, {r0, r2}, {r7, r9}, {r0}, {r1, r2}, {r8, r2}, {r8, r2}, {r7}, {r1}, {r1, r9}, {r1, r9}, {r8, r2}, {r1}], 0x7, "cd0885e077126f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7, "14b3189ffd5c99"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044f80)={0x0, [], 0x1, "df280464b364ce"}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) (async) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 2564.170776][T31183] file_dirty 0 [ 2564.170776][T31183] file_writeback 0 [ 2564.170776][T31183] swapcached 0 [ 2564.170776][T31183] anon_thp 0 [ 2564.170776][T31183] file_thp 0 [ 2564.170776][T31183] shmem_thp 0 [ 2564.170776][T31183] inactive_anon 65536 [ 2564.170776][T31183] active_anon 1044480 [ 2564.170776][T31183] inactive_file 0 [ 2564.170776][T31183] active_file 0 [ 2564.170776][T31183] unevictable 0 [ 2564.170776][T31183] slab_reclaimable 31088 [ 2564.170776][T31183] slab_unreclaimable 308450344 [ 2564.170776][T31183] slab 308481432 [ 2564.170776][T31183] workingset_refault_anon 0 [ 2564.170776][T31183] workingset_refault_file 0 [ 2564.170776][T31183] workingset_activate_anon 0 [ 2564.170776][T31183] workingset_activate_file 0 [ 2564.170776][T31183] workingset_restore_anon 0 [ 2564.170776][T31183] workingset_restore_file 0 [ 2564.170776][T31183] workingset_nodereclaim 0 [ 2564.170776][T31183] pgscan 0 [ 2564.170776][T31183] pgsteal 0 [ 2564.170776][T31183] pgscan_kswapd 0 [ 2564.170776][T31183] pgscan_direct 0 [ 2564.170776][T31183] pgscan_khugepaged 0 [ 2564.170776][T31183] pgsteal_kswapd 0 [ 2564.170776][T31183] pgsteal_direct 0 [ 2564.170776][T31183] pgsteal_khugepaged 0 [ 2564.170776][T31183] pgfault 499055 [ 2564.170776][T31183] pgmajfault 32 [ 2564.170776][T31183] pgrefill 0 [ 2564.170776][T31183] pgactivate 0 [ 2564.170776][T31183] pgdeactivate 0 [ 2564.170776][T31183] pglazyfree 0 [ 2564.170776][T31183] pglazyfreed 0 [ 2564.170776][T31183] zswpin 0 [ 2564.170776][T31183] zswpout 0 [ 2564.170776][T31183] thp_fault_alloc 0 [ 2564.425692][T31183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31183,uid=0 [ 2564.655342][T31183] Memory cgroup out of memory: Killed process 31183 (syz-executor.2) total-vm:54312kB, anon-rss:312kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2564.678039][T31050] ------------[ cut here ]------------ [ 2564.683994][T31050] WARNING: CPU: 1 PID: 31050 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2564.696837][T31050] Modules linked in: [ 2564.700775][T31050] CPU: 1 PID: 31050 Comm: kworker/1:4 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2564.711503][T31050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2564.721953][T31050] Workqueue: ath6kl_wq ath6kl_usb_io_comp_work [ 2564.728298][T31050] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2564.735066][T31050] Code: e4 e8 b3 27 34 04 48 c7 44 24 38 00 00 00 00 e9 66 fa ff ff e8 40 c8 b3 fb 8b 9c 24 8c 00 00 00 e9 4b f8 ff ff e8 2f c8 b3 fb <0f> 0b 48 c7 c7 80 20 ee 8a 41 bc ea ff ff ff e8 db 71 fe ff e9 37 [ 2564.754761][T31050] RSP: 0018:ffffc9002cf4fba8 EFLAGS: 00010293 [ 2564.760866][T31050] RAX: 0000000000000000 RBX: ffff88817b860de0 RCX: 0000000000000000 [ 2564.768998][T31050] RDX: ffff888169e78000 RSI: ffffffff85cf2331 RDI: ffff88817b860e50 [ 2564.777026][T31050] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2564.785056][T31050] R10: 0000000000000000 R11: 1ffffffff21b8a48 R12: ffff888020b1c000 [ 2564.793044][T31050] R13: ffff88817b860de0 R14: 0000000000000000 R15: ffff888020b1c920 [ 2564.801068][T31050] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2564.810077][T31050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2564.816888][T31050] CR2: 000000c001a6e580 CR3: 000000001c826000 CR4: 00000000003506e0 [ 2564.824907][T31050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000c8 [ 2564.832884][T31050] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2564.840900][T31050] Call Trace: [ 2564.844187][T31050] [ 2564.847166][T31050] ? skb_dequeue+0x129/0x180 [ 2564.851786][T31050] ? mark_held_locks+0x9f/0xe0 [ 2564.856597][T31050] ? htc_try_send.isra.0+0x2460/0x2460 [ 2564.862084][T31050] ? lockdep_hardirqs_on+0x7d/0x100 [ 2564.867405][T31050] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2564.873243][T31050] ath6kl_usb_io_comp_work+0x122/0x170 [ 2564.878777][T31050] process_one_work+0x991/0x15c0 [ 2564.883749][T31050] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2564.889195][T31050] ? spin_bug+0x1c0/0x1c0 [ 2564.893545][T31050] ? _raw_spin_lock_irq+0x45/0x50 [ 2564.898666][T31050] worker_thread+0x669/0x1090 [ 2564.903376][T31050] ? __kthread_parkme+0x163/0x220 [ 2564.908456][T31050] ? process_one_work+0x15c0/0x15c0 [ 2564.913681][T31050] kthread+0x2e8/0x3a0 [ 2564.917808][T31050] ? kthread_complete_and_exit+0x40/0x40 [ 2564.923486][T31050] ret_from_fork+0x1f/0x30 [ 2564.927978][T31050] [ 2564.931007][T31050] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2564.938275][T31050] CPU: 1 PID: 31050 Comm: kworker/1:4 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2564.948598][T31050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2564.958650][T31050] Workqueue: ath6kl_wq ath6kl_usb_io_comp_work [ 2564.964804][T31050] Call Trace: [ 2564.968089][T31050] [ 2564.971030][T31050] dump_stack_lvl+0xd9/0x150 [ 2564.975645][T31050] panic+0x688/0x730 [ 2564.979539][T31050] ? panic_smp_self_stop+0x90/0x90 [ 2564.984648][T31050] ? show_trace_log_lvl+0x285/0x390 [ 2564.989852][T31050] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2564.995915][T31050] check_panic_on_warn+0xb1/0xc0 [ 2565.000852][T31050] __warn+0xf2/0x390 [ 2565.004743][T31050] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2565.010806][T31050] report_bug+0x2da/0x500 [ 2565.015131][T31050] handle_bug+0x3c/0x70 [ 2565.019318][T31050] exc_invalid_op+0x18/0x50 [ 2565.023827][T31050] asm_exc_invalid_op+0x1a/0x20 [ 2565.028673][T31050] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2565.035347][T31050] Code: e4 e8 b3 27 34 04 48 c7 44 24 38 00 00 00 00 e9 66 fa ff ff e8 40 c8 b3 fb 8b 9c 24 8c 00 00 00 e9 4b f8 ff ff e8 2f c8 b3 fb <0f> 0b 48 c7 c7 80 20 ee 8a 41 bc ea ff ff ff e8 db 71 fe ff e9 37 [ 2565.054948][T31050] RSP: 0018:ffffc9002cf4fba8 EFLAGS: 00010293 [ 2565.061009][T31050] RAX: 0000000000000000 RBX: ffff88817b860de0 RCX: 0000000000000000 [ 2565.068972][T31050] RDX: ffff888169e78000 RSI: ffffffff85cf2331 RDI: ffff88817b860e50 [ 2565.076938][T31050] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2565.084900][T31050] R10: 0000000000000000 R11: 1ffffffff21b8a48 R12: ffff888020b1c000 [ 2565.092861][T31050] R13: ffff88817b860de0 R14: 0000000000000000 R15: ffff888020b1c920 [ 2565.100847][T31050] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2565.106921][T31050] ? ath6kl_htc_pipe_rx_complete+0xdc1/0x1130 [ 2565.112984][T31050] ? skb_dequeue+0x129/0x180 [ 2565.117591][T31050] ? mark_held_locks+0x9f/0xe0 [ 2565.122350][T31050] ? htc_try_send.isra.0+0x2460/0x2460 [ 2565.127808][T31050] ? lockdep_hardirqs_on+0x7d/0x100 [ 2565.133017][T31050] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2565.138821][T31050] ath6kl_usb_io_comp_work+0x122/0x170 [ 2565.144277][T31050] process_one_work+0x991/0x15c0 [ 2565.149312][T31050] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2565.154684][T31050] ? spin_bug+0x1c0/0x1c0 [ 2565.159005][T31050] ? _raw_spin_lock_irq+0x45/0x50 [ 2565.164029][T31050] worker_thread+0x669/0x1090 [ 2565.168706][T31050] ? __kthread_parkme+0x163/0x220 [ 2565.173724][T31050] ? process_one_work+0x15c0/0x15c0 [ 2565.178918][T31050] kthread+0x2e8/0x3a0 [ 2565.182977][T31050] ? kthread_complete_and_exit+0x40/0x40 [ 2565.188600][T31050] ret_from_fork+0x1f/0x30 [ 2565.193020][T31050] [ 2565.196191][T31050] Kernel Offset: disabled [ 2565.200760][T31050] Rebooting in 86400 seconds..