last executing test programs: 1.418955086s ago: executing program 4 (id=1080): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x4004550d, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003f09606aba34b70300"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x18) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/71, 0x47}], 0x1, &(0x7f00000006c0)}, 0x0) 1.356549874s ago: executing program 0 (id=1081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xa) dup(r4) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 1.279567952s ago: executing program 0 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.240983267s ago: executing program 2 (id=1084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0x5, 0x12) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000240)) ftruncate(r3, 0x9) writev(r8, &(0x7f0000002080)=[{&(0x7f0000000d40)="9e562c155597f99cf3df34fb83209e9c947e6614fce4e764fc1b92e9f05d5c3c069a1ac44ee8efbbc8ea44ba06fa53be0b9e2ca3d3cf0c1b9b82246c93d9e9e043f3b4956295f6566034fb7b330cf94ed3de7c845278e26aab061a2ec2c27fff968ffa36fa4cbfd1db3fcb500f7ec6c9279df80d160036340ebbcaf7157c97802d897861ae502c684e819d41bd17a0f6e517192b45ceef05c35df92529ad4f0fb4f6356acdc0d663ce85ce3209c1b488886b5949e023fa1b322750d011e3b82159f47043be428c6f2cb6d11ca0587648fbf0eb2e4e722eb73ad4a0", 0xdb}, {&(0x7f00000003c0)="79bf314b97d21af05f2e89a548d817299eb33903907070345661c4f6df40539a05989b962e9cc0b57da9218e405fc8b95cfe0ff0b28c21", 0x37}, {&(0x7f0000000e40)="a69a67ef5eef976f9f08ecab68c19aec6532ee78f771523ef32a03a8b37e2c9d26c65435859543d6276a6ad1e05c8bf1362545de15fc796755a6019ecaca02047e9a0d08cb9d4da8059f127f131e44d7fdc38499434b49aa7e59c9c61872adae2eac724e05948c9fd4582d407127b0ff42ab749420742a5954430fb524821e87a3bc4545d5d6272c3a1d8552b415437547a69038e370e8602489bfc58bf543f4b5037aaa30151f1f3bf105207c56bcfeed0010e02c08b449239184787385a78936cb4c3e6d470c8de959ae5d", 0xcc}, {&(0x7f0000000340)="94f038129c5e72cbac2554176ff0f077c998e7856a3ef7ca057ff058f9cf7cfe37a12592432bfa6b133195d3c12939e4baebbf47b26ef03f95324b03c27724e37d", 0x41}, {&(0x7f0000002140)="50ea4d6e14cf61dd427a529a23db80301215745c15087a0873ee38021dd6ae8c696d353872c10ce47f0400000017bd81bb5635c31fcd428a9591286939e2266bb30e64fa8241f390ac74f7a0874f44991e18ae082e7699726679485853973e00fc00107e424c816617076e0a556e4c08d8714a1bd87ebb9e387852cf25fa0ab7a2d8cb9780ee7c61d552fb636f7fef1fbfba124bc71e3480548a28f6df47bc33fe1b20b38bcbb9b7f7265dc388e2d29bf26cb53dd6ac0e62b3908fdc3e41adaaa09ad6b9dda8afe343477cd745c7154f6c1ea16f279371f6d094e0a2890ea6ca80dedd63c58290a3893f4cd3748a5f85590b5d87fb178bcfcf31dea4b1ce620cbe0c8bde5c7b60d2b3b73a2f834648de50161aaacd7013c67d607c254a1fa92a9970fac70b9a20ad9e0bbb432582c9f92dda5f95620d6ddfc19ee957248d89da018b1e23894ae5dda709d65937e7d566443471b2ca6c7dcc29d5460c33ee49b8ec5ba5ac48287b482ab3c35099", 0xffffff59}, {&(0x7f0000002100)="3ef1a50384f32c411304f1e95e3c", 0xe}, {&(0x7f0000001080)="80a25abee430c753454f671a8f2cf2805270d93a381dc997315ef2f6a426e41bc408a2d89203b6a81071bddbe70be5393b861e795235a6db1d5226bda887640ca0606634f832da8024c82359473cb428961898ea79a7449ac614b6efdf0373cdd309d4dbb6b257bd7a504c43471f5a06e607700edcc623900d904ba2f480c0d9d8eb12171bcfffe7e773e108a4e649df7a7a4742d197dba5543ceea8ec0e8c2f7a01a8d1dc5c9c6f7872c6442c03e771aa144ea6a23c4d1f5719c9a603159f772a9a1c37b5f60f6e7eb201fb199d450deed8b9e5d72dbff9f5cba7ce591fb496b39fea747042d1b2cd762d4c189a881ddc25e15117b5e62691b3501ae1e07d3a790f2a5639096fb75aab812241ac320ea609621f49da73bc0849c9114aa44b11bb4475f9b78fd9c784326fd322acdb2d3e558c1a4c17ab3fdfdbbdfc492f17732394357ccc60763acb5665c21c1a531031f478d525e8aaa3190c4e8e973f06b9a7867192baf5a67c3ceca7f91ad96f87ff68dc9604f09611a93997ffb2385eef38320b328500a9a116e1519b8d41efd5a83ac955916e6a22c368a4f31e18425fe7f582bb300a9af97c02c858152146fed5baf7a6abf1b55d7b5df12c4134dbff2e2cd0a4dc66a343030aae5bcf6d4e829e964d2b9cb07951610f5f75f2b924945288f6d194df5b369368322017b1724cd4b49cea84ee851e33348d35ba22f0f669e4fe539c328e64e22fecc96cb005784531b10222d08a5e34bc81d31ea51cb1fec6c91d3294a192f1899d543a418493ceef43901a6a1aa5803c2a9531e634bdffda48bfe2eb05a14ab4e8c652576d0918271928a80e737b2bb5b4a20cca9cd4b38cb35c05ec3beff28126deba8ac0592980c1a9b0838dd7db2ee24b20fef5338fa1416f99bb99a78267157f0a9772997657ac5d682bdcc7f33c9ff923f14d90350e6ec1876bef8eeae6c2ec2fd240d87880e0fb6275a4610d32f1a85c89ef1a08a995ad5902af2fadc8a0384b9b3bc1079e3aad6bfff6b0d44fada2db8f47276eb1ad69fa9b9861c44317035b3c999f0e9acac8697085af7381101e2ea3e1ed4d7d867947205dfe90fa79ba39a2949a0ab78ba18fea52e57dabd6efde0c283012626867f9323e091135b79a7163b30a89b7aba04af28e975d9858f774efd73733b863b3d3ec1ce81bae884230b90311e2e02b5f74c91296559acecaa7d091e718427d523218c5cd27add8f64f3ed843dd16acfc3778a94439bc937182059c7b9d9f7a78398a4a11094a0205f8fb2b33891bbb8d8744fa798240635eae220a952eabd378bddf66a71e59ffbb1477027f85ade494aa320e089a39745a2c368ce85fe9129af109f1e04eb42c0c81cb10ee83e5409a9ef014596845c75270aa8b74f312d1c0ae15a00c9126eb3be4cb64ef6137063fd764bd5bca6837361c9e9b80949155fad2036901b23cd9264075a2b6a74423316afc7ed95b8126baef14a1c2c6db5c6707322e55f02c06a55c2d8ec6c6608d04177383a01870abaa5495f8069280894080a52821ff8fb86fa9e73baceccfa3e8a2590a501ca9e4436520af6df5e134c792022ef4c641643b7bac48d718ca459f22bc76fa8aa881f69c6befd609a633de91d80a9aced610cdb307996a6ae13095e2542fcb4e33df33ec2cb92a0dd2da9e798ce6452d6b06b6b51c2b23bd47d47b86315b925dd3fb0c85b04bb60b380ae980e521018ac1172ee4ec8fb6692093c21d7ee0cc0f31004c0a77fe9f90c454d955379797c07dc4d2eae34401cb9f703aec8add9449301f0e2d315c9afecff98eabc7f3a8428c5566095d771400748cb87077657733a4e535af2f90aa603df27d341a2b2ca2fbba71562ad6a9610088c867fde202a49ecfe235a354fd7774ca879fafd447e4307306e6ed3507a05d48f2b105559ca310aee7128ad489297248eb0800579b4a95631de5f9baba258182c3b1e4e8aba09c314247a3dd5b3981313fd161c587304242f25a4f76798eb4477dd02070673226cd84bd8a3fcc23ce940481ff3c4a7ad77610ecef3e9c0b39324e688b233be0fc35ae86470344663b9a06934cff823f35c94a4a5ef328ccb83541612a2a5bbd1d339a3480682d55e498cc4d6890ea161136f84835aa88bb4c52db1d50b01ad723db72f4f47872ad9e182e195232fbee49eb34852fb0e148e264a3c0bacf8de2b6e6819d9645d7fd130f7ec16258b32b5fb06601c01e138fa0d7916d49739372694e2b1be29ec9bc33c136dd080a74298fd9b3ae9993b6357db3a2ec5d0a9eb01b6690a5826ec999f6581bf61b0608d97d36ee5db4407cce4da4b3e787d9b21c7050523287bc819581e889f6df3ad9d8a7428e70d66aa3bbc68548b25402def8dbec9688535509f917f5c723f94270f7eb95766bf8372b9cc6b6375d8c4f59f35e1adc309b5c337d3f00c4519680e97d4437b15acf1e1c0eabdabdc30a46892ac12c66b63a35fccfff97c71a6cc4f831ceebe6a1ceebd20e86797b207c33de1ef6442225025fb85a95eacc680495de85ded9918f201736ba81199e5f74e58fceea5571e5d0e5bc1952cbe589e2bb5a4ff9e5ca6d2d4caef791d62cfca22e68e42bacbbdeff60aed8e4792dc804e03311363c380e60e36a692c6dadc0ba9c54a4499e06e50a3392862e0c5e69df054c2b058270ed1d976e3e25afc8935b9239adbeb2e61ded5fa0b9c1cad9ce13b37baed7e2a77d08311e821e4a5087d9e2df77a88a7732c5d3e218854e25f8879ce60e6be2d384bd5bf666410aa7cc7995e580a6d3a8004082609de4b1bf37b52799ee577b00d6eb5681b5ff03b1a93a422186ae877e55382a589d3febac1f899277cb6db387b62db3c3b1167d67e88ad4f61fff53a871e19a0ea1a38afb7a5dc7adb595073112639e6bf18ce452588c4075dabb8c60d892647d715587adeb5ef724c49835a0d0d8f9b2754f942d0fb33d787782941a4bd55aa293905e23948c8d457a1a23f5f088881bfa2ac0977d791eb857eca9312d87d29108815a87fff2b68b9d907d243696ec7b74ead2cc19396de70311871f0632f495824da4702aeb0ebd995d25b3a63b00ef409152372241a725e5fd02fe891cd1ed5143542758924d0b6f505b3911c57b0960cb273b8202264c0175fb8756f287f4edbe5c00c2d3816f62b794305d41bd50ae419899461168440a3fa9ad88936cec039e89f991e4131ac8c83cf755bfdbe51e23889e0121678a52b8043bda0c36acdba7dea0612afacbe2b576bfa1a80c36d557dae888c9b6ba0cd07137cc6f971baaf25136e8d875bdb9126de72ff7ae73294c124bb732e721e5f1feebda05d5c8b10c16ae99d3ac6f46626836e837a869290c0c7f9fc86bab3cbe3d49f75041e3b0e5f6299b1357a496317d385145bd8d122220bafce4828475f30262f51c5206ce40cf5baed493bce1e9dcf44c53e1eb26587aa0135954f3e9461803b306e9d8d4b9be1a3c0375b85c2236115e6d863b1abff015e2f4e6f2540e574143445701376c2a901a884f525283e5e9a4ed61c61a9c87ef5c540d2e2d159db21ebce17712791b66adfa8d171cede626b5b9b1ee0a4dee11d273c38ac253406fbd28a1f36b6c4880269d0775f5348b88f936029deee54eaa19f7107b71b55d77ff2309a91b8716119db063a51287d1472323f14c1bada3fa702af9fb6c4091c21f5a4f4cb315f831d449a9b38f9978b4188ec987df2f73fe396dcacb6e990bd9178346490cb30886dc6675214043ef4fac95bb336f95374eb5db883160239156cbb5c32ee29ad00c18f309461daa93d23beecec855626ede0fec4d0b3e750428caa7f5747c847c0f2da09ece0d0d3b098c3c22e40394513c935bbbcca50553639831fe8ebd7547f00899808483d1328ed730c0cceb0a3843c9886f5363d9a3ec1b9882e313be0db1db6b12a68c52c944ed1fac210864b03da8542073141eec6f4287a703315e7546a4207f33db1e8c5134383201bf92a7cb834dea09eaf1bce27a802af05c4be6107d9b66733206e5bab8bc74b7ebb4215d2305f46ee4bb3559da900ff4eaa5a735de8345c2c4a938e681fb3f6d6f3bb3fa533cd4fb6b93d553c04f3aa42ebdcfd4293439ac80e558ac8123ba1ba1e69c9050922181f2b27bbcbf43b16625c1cc20272a994244cd0ac14d7a28ec7af4e5873eff15ef371c966ed810b780d46c1107b1bc5b936da7aced5f73101f8188031bd7994cdb8d4b56335acd1fd3c9fabdec4feb0052fd223ea4a955be10b1de2f43d48a1ef578863427aa2a368f0cba66e7175d45503c40cef03ffd84a93b8e5f210a2f5efceda5567d4bd7f880dbc77fed411d0d7c954a2f4addc9c3c1c32274583b8a13d341335fd0968c3a6a6dea23c253d39f3d8dd0db61d0dc46458ce33b42658ac99388cfb8047799348630061bce58b01c115ccae2eb138c7f1a42d8b77aa9a20e08150418f50f23efabdab7bcd9985ab2ca30f71bce89c3ec29897d68e9cb39afab61de5c58cf8acdd6a3b8f83940b4373309c3fa9fe0b08fcd14c9bb3c4b21260583d58f291b9cc6db017326bad1e7b3a489b0d0aefca19897af476a4a757b88ca2d7880c470a5bd1cd2890fe0824dbb8d1f7c9b03c915008f68014972c8d81d60758f79095a6c84a0aa81ea4736ded13ba00c586f1679f28bf27a9975d3646884c6416899973572012eb79d8dc2a9fd6c0929aee2b96dbbfb142d041348fdeab282e8aec87bdb5780370a127cf1bb0f96a573c1370057592674a62ded4bc226021630bcf7fa53bf5a03999516ae783155e65214a52324bb3ceae144c32278233130483a2573ba8fb179b81e5b9a28d5e926a1564d2e4125ae3d8283402682649dbbedd9964fb4b348746f8ee68432ace1b1479914154342b98ac4161b3f35221bef3f1dd52ff0a57a72bbfe9ac090e3ebafbcbb11245b0a3617b56d79f6a5e31e375e0391fe3745c7547f1c947faf2709af862502e72bc15e026f195f72a4cfad409a395a467a7c25503421709d611b612e8050c6848359ff94900928474cce0857377a3180cef9c6f803824a322ff8d62b722ec80ca754f38a32d374260e858ab7605c08afd94085f5d21953fe484fe7d5c18d581d3aec095e664de7060fb1871cda9b6b6136e665e1da8d454a90136343e420fbf47ffcfbe963bba0460c741ffa3ccf5f7d1ba497046ace85e12ff5b87c5f9217ef367c52d3ed1159e6adfc161d8671ecda68ab92986144d613c5bff16d974ea97396f9402cafb2f3714ec535b1694b11ae49c973c0a5936ecb5b467ee6d22b3061af0ae7522a35a73dce99f8f0c7b2cb341406e5eed48f05d4a96f1416532d8c55ea61ce44bd69e8cd2e5a89e70bdff48db5016416fba85a13aad8d8703a391a0ad64790ef0c716d91c4679e36bda96b634a5f5b72ba4ada0ffaf057b928e677d21965a90e624ef8c6baf9264fac369f6dc9c3277c991256c1e29ca4075363251eb068a9863e45e12c1ba9c5774ecbe8c4a2da968a49ae84c5d74b52937549b2e453c2d9e07a5061aab314d9a5ac7db83066812bb386f07d4a44797e48a91e89cc3916b9c4087d1782cbe278a12b280ef247b7b35de5690315f644a28adebd7243338e2039c64f90993ac8d622298e49fc32f1fcdac1c6606ba2a3ac88c50f6e356986b4540469b5e7ef8d76c720f89eeaf16083a07186d0d012b8c09a4614e00c59c243677114b58838462b01efea7c400933d53ed3a3ed1a7a100cd08120f538cf6e8c292d16e79036c6c7188e0f690aaf51ba", 0x1000}], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.145691968s ago: executing program 0 (id=1086): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3208012, &(0x7f0000000300), 0x1, 0x561, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) 907.170905ms ago: executing program 2 (id=1088): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x8001) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0x100, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000007}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x9, 0xfff80000, 0x45, 0x0, 0xffffffffffffffff, 0xb64f, '\x00', 0x0, r3, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="320e11efe48fed73206ef91dde12a09419", 0x11, 0x63ca, &(0x7f00000001c0)={0x0, 0x3938700}) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x18, 0x0, &(0x7f00000002c0)="e633a52249d440a129f79e26979ce4898941590605fffee2"}, 0x50) 825.086075ms ago: executing program 3 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)="9c0000000000fd70242bcb019dd5aa89c05ddb72bb17e1fca70121add7af0fa6f14c7829e8aed3494e1e17d309ee0c56e1f38fad526f1648e785650dbd54c5aad802e33f673c9858766dd23019c864c6f2f8d0e4f30dfb7f346fe98c76257cb46f16e57685682b7900004ea88ce2d041d66613f95997c19f53d90149f66751e9f02d09f3f9a2f29b3fe0db31d5609bda34e2759b63467fd760288e82c2deee30", &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004e0000bfa2000000000000f3010000f8ffffffb703000008000000b70400000000000085000000030000009500000000000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = memfd_secret(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000009c0)={'dvmrp1\x00', &(0x7f0000000b00)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x3, 0x40000000, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000029c0)}, 0x41) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_io_uring_setup(0x44fe, &(0x7f00000000c0)={0x0, 0x10000, 0x7, 0x3}, 0x0, 0x0) 733.504295ms ago: executing program 1 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8937, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x1000007, 0x10001, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x2}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) 589.941492ms ago: executing program 1 (id=1092): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) futex_waitv(&(0x7f0000002180)=[{0x6, &(0x7f00000001c0)=0x56c, 0x82}, {0xd9d, &(0x7f0000000200)=0x2561, 0x82}, {0x8, &(0x7f0000000280)=0x2, 0x2}, {0xfff, &(0x7f0000000400)=0x3, 0x82}, {0x5, &(0x7f00000004c0)=0x8, 0x82}, {0xff, &(0x7f0000000500)=0xff, 0x2}, {0x97, &(0x7f0000000640)=0xd4, 0x82}, {0x0, &(0x7f0000000680)=0x81, 0x2}, {0x5, &(0x7f00000006c0)=0x8, 0x2}, {0x43a, &(0x7f0000000700)=0x9, 0x2}, {0xfffffffffffffff8, &(0x7f0000000740)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000000840)=0xc3, 0x80}, {0x723b, &(0x7f0000000880)=0x5, 0x2}, {0x363, &(0x7f00000008c0)=0x4, 0x82}, {0x0, &(0x7f0000000900), 0x82}, {0x7, &(0x7f0000000940)=0xfff, 0x2}, {0x3, &(0x7f0000000980), 0x82}, {0x0, &(0x7f00000009c0)=0x8, 0x82}, {0x1, &(0x7f0000000a00)=0x9, 0x2}, {0x6, &(0x7f0000000a40)=0x6, 0x2}, {0xaa, &(0x7f0000000a80)=0xf, 0x2}, {0xd921, &(0x7f0000000ac0)=0x8000000000000001, 0x2}, {0x1, &(0x7f0000000b00)=0xfffffffffffffff7}, {0x1, &(0x7f0000000b40)=0xfffffffffffffffe, 0x2}, {0xd5, &(0x7f0000000b80)=0x2, 0x2}, {0x8, &(0x7f0000000bc0)=0x10001, 0x82}, {0x8, &(0x7f0000000c00)=0x5, 0x2}, {0x7, &(0x7f0000000c40)=0x2, 0x82}, {0x8, &(0x7f0000000c80)=0x8, 0x2}, {0x57a, &(0x7f0000000cc0)=0x7a, 0x82}, {0x9, &(0x7f0000000d00)=0x81, 0x82}, {0x6, &(0x7f0000000d40)=0x1, 0x82}, {0x7, &(0x7f0000000d80)=0xbae5, 0x82}, {0x5, &(0x7f0000000dc0)=0x182a, 0x82}, {0x5, &(0x7f0000000e00)=0x5, 0x82}, {0x970, &(0x7f0000000e40)=0x9, 0x82}, {0xa4, &(0x7f0000000e80)=0x8, 0x2}, {0x3, &(0x7f0000000ec0)=0x3, 0x82}, {0x5, &(0x7f0000000f00), 0x2}, {0x5, &(0x7f0000000f40)=0x10000, 0x82}, {0xffffffffffffffff, &(0x7f0000000f80)=0x1, 0x2}, {0x2, &(0x7f0000000fc0)=0x8a, 0x2}, {0x9, &(0x7f0000001000)=0xffff, 0x82}, {0x6, &(0x7f0000001040)=0x400, 0x82}, {0x8, &(0x7f0000001080)}, {0x6, &(0x7f00000010c0)=0x5f3, 0x2}, {0x2, &(0x7f0000001100)=0x9, 0x2}, {0x4f10, &(0x7f0000001140)=0x20000000000, 0x2}, {0xfffffffffffffc01, &(0x7f0000001180)=0xfffffffffffffff9, 0x82}, {0x8, &(0x7f00000011c0)=0x3, 0x2}, {0xfffffffffffffff9, &(0x7f0000001200)=0x8000, 0x82}, {0xff, &(0x7f0000001240)=0x9d7, 0x82}, {0xf, &(0x7f0000001280)=0xb48, 0x82}, {0x40, &(0x7f00000012c0)=0x6, 0x2}, {0x46, &(0x7f0000001300)=0xffffffffffffffff, 0x2}, {0xfffffffffffffffd, &(0x7f0000001340)=0x3, 0x82}, {0x3, &(0x7f0000001380)=0x6, 0x2}, {0x7, &(0x7f00000013c0)=0x3, 0x2}, {0x3, &(0x7f0000001400)=0x33f, 0x82}, {0x8, &(0x7f0000001440)=0x4, 0x82}, {0xffff, &(0x7f0000001480)=0x53df, 0x82}, {0x0, &(0x7f00000014c0)=0x5, 0x2}, {0x2a55, &(0x7f0000001500)=0x7f, 0x2}, {0x3ff, &(0x7f0000001540)=0x8000000000000000, 0x4}, {0xf51c, &(0x7f0000001580)=0x5, 0x2}, {0x9, &(0x7f00000015c0)=0xffffffffffffff3b, 0x2}, {0x100000000000000, &(0x7f0000001600)=0x4, 0x2}, {0x0, &(0x7f0000001640)=0x5}, {0x8, &(0x7f0000001680)=0x1, 0x2}, {0xf4, &(0x7f00000016c0)=0xfffffffffffffffb, 0x82}, {0x7, &(0x7f0000001700), 0x2}, {0x7, &(0x7f0000001740)=0x3, 0x2}, {0x3, &(0x7f0000001780)=0x40, 0x2}, {0x0, &(0x7f00000017c0)=0x757, 0x82}, {0x3, &(0x7f0000001800)=0xb, 0x2}, {0x9, &(0x7f0000001840)=0x49, 0x2}, {0x2, &(0x7f0000001880)=0xfa, 0x82}, {0x0, &(0x7f00000018c0)=0x9, 0x2}, {0x7, &(0x7f0000001900)=0x9, 0x82}, {0x7fff, &(0x7f0000001940)=0x3, 0x1c5}, {0x7fffffffffffffff, 0x0, 0x2}, {0xfffffffffffffffb, &(0x7f0000001a00), 0x82}, {0x3, &(0x7f0000001a40)=0xa49b, 0x82}, {0x7, &(0x7f0000001a80)=0x6, 0x82}, {0x1, &(0x7f0000001b00)=0x80, 0x2}, {0x5d, &(0x7f0000001b40)=0x3, 0x2}, {0xffffffffffffff80, &(0x7f0000001b80)=0x5, 0x2}, {0x2f0, &(0x7f0000001bc0)=0xdd, 0x82}, {0xfffffffffffffff7, 0x0, 0x1}, {0x4, &(0x7f0000001c40)=0x4, 0x82}, {0x0, &(0x7f0000001c80)=0xffffffff, 0x2}, {0xfffffffffffffffc, &(0x7f0000001cc0)=0x7f, 0x82}, {0xb9, &(0x7f0000001d00)=0x7f, 0x82}, {0xc5, &(0x7f0000001d40)=0x4, 0x2}, {0x9, &(0x7f0000001d80)=0x1ff, 0x2}, {0x1ff, &(0x7f0000001dc0)=0x1, 0x2}, {0x7, &(0x7f0000001e00)=0x7, 0x2}, {0x9, &(0x7f0000001e40)=0x2000, 0x2}, {0xd8, &(0x7f0000001e80)=0x800}, {0x3, &(0x7f0000001ec0)=0x80000001, 0x82}, {0x2, &(0x7f0000001f00)=0x7d9, 0x82}, {0xb9, &(0x7f0000001f40)=0x5, 0x2}, {0x58f, &(0x7f0000001f80)=0x1, 0x82}, {0x5, &(0x7f0000001fc0)=0x1c60}, {0x1, &(0x7f0000002000)=0x6, 0x82}, {0x29f51cd5, 0x0, 0x2}, {0xffff, 0x0, 0x2}, {0x1000, &(0x7f00000020c0)=0xf, 0x2}, {0x0, &(0x7f0000002100)=0x8000000000000001, 0x82}, {0x1, &(0x7f0000002140)=0xff, 0x2}], 0x6e, 0x0, &(0x7f0000002c00)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(r4, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) 577.831924ms ago: executing program 2 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0xb2, 0x17) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="0020c01a1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b000080d20090800f", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) read$char_usb(r3, &(0x7f00000030c0)=""/4110, 0x100e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a3f85cb21835ac6ae80a2e5b3923559721de2fc2e9aab77120d6e3fce4f837eccf109e41df47da231940c98e723be21a65eae43063527e50da85294e22850132f65122ff3080db9706d05d3dfd32b55e4524bb090afff1eaa71cf9bcf3c2531f6370d78b87f17604c023120480ca83cb84da07667ead315f1e1e27acf653adc81a55f881280d531df8d87d851d9d2b1547e95310816e54723a7a8a71a75b829f1614db023", @ANYRES64=0x0], 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000080)=""/10, 0x35, 0xa, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000)) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 518.02607ms ago: executing program 1 (id=1094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") 517.059381ms ago: executing program 4 (id=1095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0xb2, 0x17) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="0020c01a1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b000080d20090800f", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) read$char_usb(r3, &(0x7f00000030c0)=""/4110, 0x100e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a3f85cb21835ac6ae80a2e5b3923559721de2fc2e9aab77120d6e3fce4f837eccf109e41df47da231940c98e723be21a65eae43063527e50da85294e22850132f65122ff3080db9706d05d3dfd32b55e4524bb090afff1eaa71cf9bcf3c2531f6370d78b87f17604c023120480ca83cb84da07667ead315f1e1e27acf653adc81a55f881280d531df8d87d851d9d2b1547e95310816e54723a7a8a71a75b829f1614db023", @ANYRES64=0x0], 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000080)=""/10, 0x35, 0xa, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000)) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 477.721935ms ago: executing program 3 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 441.60381ms ago: executing program 1 (id=1097): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaac0aaaaaa000800000020000c907801000000"], 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="1e", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES64=r5, @ANYRES8], 0x0, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="008000"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000005000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 434.9631ms ago: executing program 2 (id=1098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 375.925787ms ago: executing program 2 (id=1099): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000100000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000040000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000edffffff0000000000"]}, 0x3c0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) 372.121637ms ago: executing program 1 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0xb2, 0x17) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="0020c01a1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b000080d20090800f", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) read$char_usb(r3, &(0x7f00000030c0)=""/4110, 0x100e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a3f85cb21835ac6ae80a2e5b3923559721de2fc2e9aab77120d6e3fce4f837eccf109e41df47da231940c98e723be21a65eae43063527e50da85294e22850132f65122ff3080db9706d05d3dfd32b55e4524bb090afff1eaa71cf9bcf3c2531f6370d78b87f17604c023120480ca83cb84da07667ead315f1e1e27acf653adc81a55f881280d531df8d87d851d9d2b1547e95310816e54723a7a8a71a75b829f1614db023", @ANYRES64=0x0], 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000080)=""/10, 0x35, 0xa, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000)) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 353.43329ms ago: executing program 4 (id=1101): syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 324.685583ms ago: executing program 3 (id=1102): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 287.345197ms ago: executing program 0 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8937, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x1000007, 0x10001, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x2}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) 249.962442ms ago: executing program 3 (id=1104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xa) dup(r4) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 241.463942ms ago: executing program 1 (id=1105): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x8001) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0x100, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000007}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x9, 0xfff80000, 0x45, 0x0, 0xffffffffffffffff, 0xb64f, '\x00', 0x0, r3, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="320e11efe48fed73206ef91dde12a09419", 0x11, 0x63ca, &(0x7f00000001c0)={0x0, 0x3938700}) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x18, 0x0, &(0x7f00000002c0)="e633a52249d440a129f79e26979ce4898941590605fffee2"}, 0x50) 235.770913ms ago: executing program 2 (id=1106): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x4004550d, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003f09606aba34b70300"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x18) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/71, 0x47}], 0x1, &(0x7f00000006c0)}, 0x0) 223.916555ms ago: executing program 4 (id=1107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x41, 0xa8, @random="43df75d08063090b4df09a5f742b26ef6a68a9f82d58d584a6e2925c7101438039207810c39d34885f8d456a723eade8665f745b07e9587b27b026e3ca"}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000600)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) listen(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 218.277425ms ago: executing program 3 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") 189.097698ms ago: executing program 4 (id=1109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xa) dup(r4) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 96.591779ms ago: executing program 4 (id=1110): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000005002f000200000008000300", @ANYRES32=r3], 0x24}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@struct={0xa, 0x3, 0x0, 0x4, 0x0, 0x5, [{0x2, 0x1, 0x9}, {0x3, 0x4, 0x10000}, {0xe, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @struct={0x10, 0x1, 0x0, 0x4, 0x0, 0x80, [{0x4, 0x0, 0xfffffff9}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000500)=""/175, 0x7c, 0xaf, 0x1, 0x7ff, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r3, r4, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2b, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) clock_gettime(0x0, 0x0) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000001500)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 82.601801ms ago: executing program 3 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000000)=0xb2, 0x17) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="0020c01a1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b000080d20090800f", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) read$char_usb(r3, &(0x7f00000030c0)=""/4110, 0x100e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a3f85cb21835ac6ae80a2e5b3923559721de2fc2e9aab77120d6e3fce4f837eccf109e41df47da231940c98e723be21a65eae43063527e50da85294e22850132f65122ff3080db9706d05d3dfd32b55e4524bb090afff1eaa71cf9bcf3c2531f6370d78b87f17604c023120480ca83cb84da07667ead315f1e1e27acf653adc81a55f881280d531df8d87d851d9d2b1547e95310816e54723a7a8a71a75b829f1614db023", @ANYRES64=0x0], 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000080)=""/10, 0x35, 0xa, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000)) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 79.692561ms ago: executing program 0 (id=1112): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001200010a00000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100e8ffffff0000000026000000200001800800", @ANYRES32=r7, @ANYBLOB="14000200776731"], 0x34}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000280)={0xb}, 0xb) r8 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x40) r9 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x11) sendfile(r8, r9, 0x0, 0x1000000201005) 0s ago: executing program 0 (id=1113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b40200000000000061114800000000002f1100000000000095000000000000008ac9e6cf625a3c5f936a12414cdcfbbf97685a454cdb725a551d23c3a5d9a39b2e628fa4206fe638902a06309145e1fa9868e468eb0b07490cb00488fc7b60eeff8e19b703b153577aca3af3bebec7b11a2a3788412d6e42c30a7de7b8"], &(0x7f0000000080)='GPL\x00', 0xb, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x33) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00001c02060108000000000000000001000005ffff0d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = open(0x0, 0x149442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r8 = gettid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x10, 0x7800, 0x200000, 0x2, {{0x19, 0x4, 0x2, 0x5, 0x64, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x9, [@empty, @empty, @local, @private=0xa010100]}, @end, @generic={0x86, 0x8, "d2b52358c44e"}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x2, 0xd, "364e2b2834105d1549a4aa"}, {0x1, 0xe, "0da79f6242380231b8291a8b"}, {0x1, 0x2}, {0x1, 0x8, "e443e22beee3"}, {0x2, 0x8, "191d14641a85"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r9, 0x29, 0x2, 0x7, 0x1, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x7800, 0x7, 0x8}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r10, 0x0, 0xfffffffffffffee3, 0x0, 0x0) write$P9_RLERRORu(r5, 0x0, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000500)={0x8, "b9fd0e"}, 0x6) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x28, 0x0, 0x4, 0xfffffffd}]}) kernel console output (not intermixed with test programs): .075:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 83.245251][ T29] audit: type=1326 audit(1729941561.075:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 83.288977][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.315800][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 83.319183][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.342419][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 83.349242][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.372719][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 83.380308][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.411148][ T5428] loop4: detected capacity change from 0 to 764 [ 83.417685][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.418883][ T5427] hub 2-0:1.0: USB hub found [ 83.428231][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.433051][ T5427] hub 2-0:1.0: 8 ports detected [ 83.442679][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.458034][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.468837][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 83.496206][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 83.517769][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 83.547408][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 83.586140][ T5423] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.733: lblock 23 mapped to illegal pblock 18 (length 1) [ 83.603369][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 19: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 83.634481][ T5423] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 20: comm syz.1.733: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 83.672512][ T5441] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.101749][ T5445] loop3: detected capacity change from 0 to 128 [ 84.142675][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.153223][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.163138][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.173623][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.183562][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.194048][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.203901][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.214382][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.240207][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.266557][ T5451] loop1: detected capacity change from 0 to 128 [ 84.312387][ T5449] loop3: detected capacity change from 0 to 764 [ 84.333058][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 84.342378][ T5436] tipc: Cannot configure node identity twice [ 84.388830][ T5455] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.498533][ T5460] hub 2-0:1.0: USB hub found [ 84.503239][ T5460] hub 2-0:1.0: 8 ports detected [ 84.591360][ T5443] syz.0.735 (5443) used greatest stack depth: 6264 bytes left [ 84.647408][ T5467] bond_slave_1: mtu less than device minimum [ 84.750534][ T5480] hub 2-0:1.0: USB hub found [ 84.755513][ T5480] hub 2-0:1.0: 8 ports detected [ 84.767439][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.778198][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.788147][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.798786][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.801323][ T5486] loop4: detected capacity change from 0 to 164 [ 84.808644][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.825445][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.825647][ T5486] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 84.835281][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.835303][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.868309][ T5486] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 84.871483][ T5484] loop0: detected capacity change from 0 to 764 [ 84.887772][ T5486] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 84.897009][ T5486] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 84.936186][ T5492] loop5: detected capacity change from 0 to 7 [ 84.938011][ T5494] loop4: detected capacity change from 0 to 512 [ 84.949500][ T5492] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.958324][ T5492] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.966341][ T5492] loop5: unable to read partition table [ 84.967263][ T5494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.972245][ T5492] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 84.972245][ T5492] ) failed (rc=-5) [ 84.985740][ T5494] ext4 filesystem being mounted at /149/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.034240][ T5501] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.123187][ T5504] bond_slave_1: mtu less than device minimum [ 85.290238][ T5511] loop1: detected capacity change from 0 to 128 [ 85.305978][ T5511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 85.315770][ T5511] netlink: 'syz.1.761': attribute type 21 has an invalid length. [ 85.323653][ T5511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.761'. [ 86.181222][ T5512] syz.3.760 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 86.195305][ T5512] CPU: 1 UID: 0 PID: 5512 Comm: syz.3.760 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 86.205909][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.216045][ T5512] Call Trace: [ 86.219367][ T5512] [ 86.222307][ T5512] dump_stack_lvl+0xf2/0x150 [ 86.226998][ T5512] dump_stack+0x15/0x20 [ 86.231185][ T5512] dump_header+0x83/0x2d0 [ 86.235631][ T5512] oom_kill_process+0x341/0x4c0 [ 86.240518][ T5512] out_of_memory+0x9af/0xbe0 [ 86.245136][ T5512] ? css_next_descendant_pre+0x11c/0x140 [ 86.250877][ T5512] mem_cgroup_out_of_memory+0x13e/0x190 [ 86.256448][ T5512] try_charge_memcg+0x51b/0x810 [ 86.261365][ T5512] obj_cgroup_charge_pages+0xbd/0x1a0 [ 86.266761][ T5512] __memcg_kmem_charge_page+0x9d/0x170 [ 86.272277][ T5512] __alloc_pages_noprof+0x1bc/0x340 [ 86.277511][ T5512] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 86.282941][ T5512] alloc_pages_noprof+0xe1/0x100 [ 86.287946][ T5512] __vmalloc_node_range_noprof+0x72e/0xec0 [ 86.293781][ T5512] __kvmalloc_node_noprof+0x121/0x170 [ 86.299169][ T5512] ? ip_set_alloc+0x1f/0x30 [ 86.303775][ T5512] ip_set_alloc+0x1f/0x30 [ 86.308133][ T5512] hash_netiface_create+0x273/0x730 [ 86.313346][ T5512] ? __nla_parse+0x40/0x60 [ 86.317831][ T5512] ? __pfx_hash_netiface_create+0x10/0x10 [ 86.323656][ T5512] ip_set_create+0x359/0x8a0 [ 86.328264][ T5512] ? bpf_trace_run4+0x133/0x1e0 [ 86.333200][ T5512] nfnetlink_rcv_msg+0x4a9/0x570 [ 86.338191][ T5512] netlink_rcv_skb+0x12c/0x230 [ 86.343062][ T5512] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 86.348595][ T5512] nfnetlink_rcv+0x16c/0x15c0 [ 86.353289][ T5512] ? kmem_cache_free+0xdc/0x2d0 [ 86.358198][ T5512] ? nlmon_xmit+0x51/0x60 [ 86.362559][ T5512] ? __kfree_skb+0x102/0x150 [ 86.367180][ T5512] ? consume_skb+0x49/0x160 [ 86.371718][ T5512] ? nlmon_xmit+0x51/0x60 [ 86.376123][ T5512] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 86.381464][ T5512] ? __dev_queue_xmit+0xb4c/0x2040 [ 86.386628][ T5512] ? ref_tracker_free+0x3a5/0x410 [ 86.391718][ T5512] ? __dev_queue_xmit+0x161/0x2040 [ 86.396880][ T5512] ? ref_tracker_alloc+0x1f5/0x2f0 [ 86.402102][ T5512] ? __netlink_deliver_tap+0x495/0x4c0 [ 86.407587][ T5512] netlink_unicast+0x599/0x670 [ 86.412396][ T5512] netlink_sendmsg+0x5cc/0x6e0 [ 86.417180][ T5512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.422478][ T5512] __sock_sendmsg+0x140/0x180 [ 86.427182][ T5512] ____sys_sendmsg+0x312/0x410 [ 86.432050][ T5512] __sys_sendmsg+0x1d9/0x270 [ 86.436746][ T5512] ? futex_wait+0x18e/0x1c0 [ 86.441356][ T5512] __x64_sys_sendmsg+0x46/0x50 [ 86.446141][ T5512] x64_sys_call+0x2689/0x2d60 [ 86.450834][ T5512] do_syscall_64+0xc9/0x1c0 [ 86.455348][ T5512] ? clear_bhb_loop+0x55/0xb0 [ 86.460204][ T5512] ? clear_bhb_loop+0x55/0xb0 [ 86.464909][ T5512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.470822][ T5512] RIP: 0033:0x7f1e8202e719 [ 86.475287][ T5512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.494956][ T5512] RSP: 002b:00007f1e80c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.503378][ T5512] RAX: ffffffffffffffda RBX: 00007f1e821e6130 RCX: 00007f1e8202e719 [ 86.511372][ T5512] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 86.519407][ T5512] RBP: 00007f1e820a132e R08: 0000000000000000 R09: 0000000000000000 [ 86.527416][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.535438][ T5512] R13: 0000000000000000 R14: 00007f1e821e6130 R15: 00007fffff9ec198 [ 86.543422][ T5512] [ 86.546607][ T5512] memory: usage 307200kB, limit 307200kB, failcnt 351 [ 86.553392][ T5512] memory+swap: usage 311732kB, limit 9007199254740988kB, failcnt 0 [ 86.561624][ T5512] kmem: usage 306880kB, limit 9007199254740988kB, failcnt 0 [ 86.562180][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.568960][ T5512] Memory cgroup stats for /syz3: [ 86.580581][ T5512] cache 323584 [ 86.588948][ T5512] rss 0 [ 86.591722][ T5512] shmem 0 [ 86.594732][ T5512] mapped_file 323584 [ 86.598713][ T5512] dirty 323584 [ 86.602093][ T5512] writeback 0 [ 86.605437][ T5512] workingset_refault_anon 184 [ 86.610177][ T5512] workingset_refault_file 137 [ 86.614894][ T5512] swap 4640768 [ 86.618352][ T5512] swapcached 0 [ 86.621823][ T5512] pgpgin 49078 [ 86.625366][ T5512] pgpgout 48999 [ 86.629063][ T5512] pgfault 73043 [ 86.632656][ T5512] pgmajfault 120 [ 86.636244][ T5512] inactive_anon 0 [ 86.639902][ T5512] active_anon 0 [ 86.643551][ T5512] inactive_file 0 [ 86.647225][ T5512] active_file 323584 [ 86.651204][ T5512] unevictable 0 [ 86.654701][ T5512] hierarchical_memory_limit 314572800 [ 86.660157][ T5512] hierarchical_memsw_limit 9223372036854771712 [ 86.666312][ T5512] total_cache 323584 [ 86.670189][ T5512] total_rss 0 [ 86.673458][ T5512] total_shmem 0 [ 86.676933][ T5512] total_mapped_file 323584 [ 86.681363][ T5512] total_dirty 323584 [ 86.685257][ T5512] total_writeback 0 [ 86.689050][ T5512] total_workingset_refault_anon 184 [ 86.694266][ T5512] total_workingset_refault_file 137 [ 86.699539][ T5512] total_swap 4640768 [ 86.703418][ T5512] total_swapcached 0 [ 86.707342][ T5512] total_pgpgin 49078 [ 86.711223][ T5512] total_pgpgout 48999 [ 86.715197][ T5512] total_pgfault 73043 [ 86.719164][ T5512] total_pgmajfault 120 [ 86.723238][ T5512] total_inactive_anon 0 [ 86.727462][ T5512] total_active_anon 0 [ 86.731433][ T5512] total_inactive_file 0 [ 86.735588][ T5512] total_active_file 323584 [ 86.739990][ T5512] total_unevictable 0 [ 86.744015][ T5512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.760,pid=5505,uid=0 [ 86.758504][ T5512] Memory cgroup out of memory: Killed process 5505 (syz.3.760) total-vm:91488kB, anon-rss:740kB, file-rss:18248kB, shmem-rss:128kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 86.908493][ T5533] loop5: detected capacity change from 0 to 7 [ 86.927045][ T5533] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.950832][ T5533] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.958749][ T5533] loop5: unable to read partition table [ 86.979695][ T5537] loop0: detected capacity change from 0 to 164 [ 86.990909][ T5538] wireguard0: entered promiscuous mode [ 86.993728][ T5533] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 86.993728][ T5533] ) failed (rc=-5) [ 86.996457][ T5538] wireguard0: entered allmulticast mode [ 87.010086][ T5537] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 87.078226][ T5549] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.110516][ T5545] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.206514][ T5545] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.326980][ T5545] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.397574][ T5545] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.460159][ T5545] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.475448][ T5545] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.490647][ T5545] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507482][ T5545] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.768616][ T5566] hub 2-0:1.0: USB hub found [ 87.773567][ T5566] hub 2-0:1.0: 8 ports detected [ 88.777594][ T5567] syz.3.778 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 88.787472][ T5567] CPU: 0 UID: 0 PID: 5567 Comm: syz.3.778 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 88.798078][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.808233][ T5567] Call Trace: [ 88.811584][ T5567] [ 88.814593][ T5567] dump_stack_lvl+0xf2/0x150 [ 88.819282][ T5567] dump_stack+0x15/0x20 [ 88.823469][ T5567] dump_header+0x83/0x2d0 [ 88.827840][ T5567] oom_kill_process+0x341/0x4c0 [ 88.832805][ T5567] out_of_memory+0x9af/0xbe0 [ 88.837482][ T5567] ? css_next_descendant_pre+0x11c/0x140 [ 88.843212][ T5567] mem_cgroup_out_of_memory+0x13e/0x190 [ 88.848802][ T5567] try_charge_memcg+0x51b/0x810 [ 88.853781][ T5567] charge_memcg+0x50/0xc0 [ 88.858145][ T5567] __mem_cgroup_charge+0x29/0xb0 [ 88.863134][ T5567] shmem_get_folio_gfp+0x47e/0xd90 [ 88.868279][ T5567] shmem_fault+0xfa/0x250 [ 88.872680][ T5567] __do_fault+0xb6/0x200 [ 88.876991][ T5567] handle_mm_fault+0xe7f/0x2a80 [ 88.881867][ T5567] exc_page_fault+0x296/0x650 [ 88.886642][ T5567] asm_exc_page_fault+0x26/0x30 [ 88.891543][ T5567] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 88.897376][ T5567] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 88.917061][ T5567] RSP: 0000:ffffc900001cbc68 EFLAGS: 00050206 [ 88.923132][ T5567] RAX: ffff888103154c78 RBX: 00000000203d5038 RCX: 0000000000000038 [ 88.931188][ T5567] RDX: 0000000000000001 RSI: 00000000203d5000 RDI: ffffc900001cbca8 [ 88.939174][ T5567] RBP: ffffc900001cbca8 R08: 0000000080000000 R09: 001188811594c008 [ 88.947147][ T5567] R10: 0001c900001cbca8 R11: 0001c900001cbcdf R12: 00000000203d5000 [ 88.955124][ T5567] R13: 00007fffffffefff R14: ffffc900001cbca8 R15: 0000000000000038 [ 88.963126][ T5567] _copy_from_user+0x85/0xe0 [ 88.967784][ T5567] copy_msghdr_from_user+0x54/0x2a0 [ 88.972998][ T5567] do_recvmmsg+0x282/0x740 [ 88.977492][ T5567] __x64_sys_recvmmsg+0xe2/0x170 [ 88.982466][ T5567] x64_sys_call+0x26e3/0x2d60 [ 88.987269][ T5567] do_syscall_64+0xc9/0x1c0 [ 88.991780][ T5567] ? clear_bhb_loop+0x55/0xb0 [ 88.996619][ T5567] ? clear_bhb_loop+0x55/0xb0 [ 89.001319][ T5567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.007240][ T5567] RIP: 0033:0x7f1e8202e719 [ 89.011685][ T5567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.031317][ T5567] RSP: 002b:00007f1e80c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 89.039774][ T5567] RAX: ffffffffffffffda RBX: 00007f1e821e6058 RCX: 00007f1e8202e719 [ 89.047754][ T5567] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 89.055731][ T5567] RBP: 00007f1e820a132e R08: 0000000000000000 R09: 0000000000000000 [ 89.063711][ T5567] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 89.071690][ T5567] R13: 0000000000000000 R14: 00007f1e821e6058 R15: 00007fffff9ec198 [ 89.079677][ T5567] [ 89.082827][ T5567] memory: usage 307200kB, limit 307200kB, failcnt 572 [ 89.089658][ T5567] memory+swap: usage 311492kB, limit 9007199254740988kB, failcnt 0 [ 89.097570][ T5567] kmem: usage 306860kB, limit 9007199254740988kB, failcnt 0 [ 89.104881][ T5567] Memory cgroup stats for /syz3: [ 89.105515][ T5567] cache 335872 [ 89.113840][ T5567] rss 0 [ 89.116632][ T5567] shmem 0 [ 89.119595][ T5567] mapped_file 335872 [ 89.123511][ T5567] dirty 335872 [ 89.126919][ T5567] writeback 4096 [ 89.130472][ T5567] workingset_refault_anon 224 [ 89.135191][ T5567] workingset_refault_file 206 [ 89.139886][ T5567] swap 4395008 [ 89.143257][ T5567] swapcached 12288 [ 89.146998][ T5567] pgpgin 52714 [ 89.150379][ T5567] pgpgout 52629 [ 89.153908][ T5567] pgfault 76863 [ 89.157456][ T5567] pgmajfault 141 [ 89.161077][ T5567] inactive_anon 0 [ 89.164729][ T5567] active_anon 8192 [ 89.168485][ T5567] inactive_file 0 [ 89.172138][ T5567] active_file 335872 [ 89.176040][ T5567] unevictable 0 [ 89.179496][ T5567] hierarchical_memory_limit 314572800 [ 89.184952][ T5567] hierarchical_memsw_limit 9223372036854771712 [ 89.191116][ T5567] total_cache 335872 [ 89.195020][ T5567] total_rss 0 [ 89.198300][ T5567] total_shmem 0 [ 89.201760][ T5567] total_mapped_file 335872 [ 89.206260][ T5567] total_dirty 335872 [ 89.210153][ T5567] total_writeback 4096 [ 89.214215][ T5567] total_workingset_refault_anon 224 [ 89.219724][ T5567] total_workingset_refault_file 206 [ 89.225158][ T5567] total_swap 4395008 [ 89.229141][ T5567] total_swapcached 12288 [ 89.233512][ T5567] total_pgpgin 52714 [ 89.237427][ T5567] total_pgpgout 52629 [ 89.241439][ T5567] total_pgfault 76863 [ 89.245439][ T5567] total_pgmajfault 141 [ 89.249546][ T5567] total_inactive_anon 0 [ 89.253767][ T5567] total_active_anon 8192 [ 89.258028][ T5567] total_inactive_file 0 [ 89.262185][ T5567] total_active_file 335872 [ 89.266613][ T5567] total_unevictable 0 [ 89.270749][ T5567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.778,pid=5563,uid=0 [ 89.285327][ T5567] Memory cgroup out of memory: Killed process 5563 (syz.3.778) total-vm:89440kB, anon-rss:736kB, file-rss:17972kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 89.590079][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 89.590129][ T29] audit: type=1326 audit(1729941567.535:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.619755][ T29] audit: type=1326 audit(1729941567.535:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.643231][ T29] audit: type=1326 audit(1729941567.535:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.666624][ T29] audit: type=1326 audit(1729941567.535:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.690040][ T29] audit: type=1326 audit(1729941567.535:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.713452][ T29] audit: type=1326 audit(1729941567.535:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.737181][ T29] audit: type=1326 audit(1729941567.685:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.760726][ T29] audit: type=1326 audit(1729941567.685:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.784089][ T29] audit: type=1326 audit(1729941567.685:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.807489][ T29] audit: type=1326 audit(1729941567.685:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 89.833641][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.844308][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.854252][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.864906][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.874883][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.885342][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.895166][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.905597][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.923351][ T5579] loop0: detected capacity change from 0 to 764 [ 89.974853][ T5596] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.003680][ T5599] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.058566][ T5602] hub 2-0:1.0: USB hub found [ 90.063504][ T5602] hub 2-0:1.0: 8 ports detected [ 90.107306][ T5596] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.219489][ T5596] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.702580][ T5596] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.742991][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.753753][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.763642][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.774126][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.783968][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.794454][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804289][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.814776][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.891634][ T5619] loop1: detected capacity change from 0 to 764 [ 90.954180][ T5625] loop1: detected capacity change from 0 to 512 [ 91.035901][ T5625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.061582][ T5638] loop0: detected capacity change from 0 to 128 [ 91.074777][ T5625] ext4 filesystem being mounted at /155/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.121617][ T5646] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.127570][ T5642] hub 2-0:1.0: USB hub found [ 91.133775][ T5642] hub 2-0:1.0: 8 ports detected [ 91.285155][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.295922][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.305855][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.316389][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.326247][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.336787][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.346721][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.357208][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.399798][ T5657] loop2: detected capacity change from 0 to 764 [ 92.312767][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 92.321784][ T5654] tipc: Cannot configure node identity twice [ 92.341831][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.498531][ T5649] syz.0.810 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 92.509474][ T5649] CPU: 1 UID: 0 PID: 5649 Comm: syz.0.810 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 92.520147][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.530276][ T5649] Call Trace: [ 92.533567][ T5649] [ 92.536519][ T5649] dump_stack_lvl+0xf2/0x150 [ 92.541143][ T5649] dump_stack+0x15/0x20 [ 92.545382][ T5649] dump_header+0x83/0x2d0 [ 92.549748][ T5649] oom_kill_process+0x341/0x4c0 [ 92.554636][ T5649] out_of_memory+0x9af/0xbe0 [ 92.559265][ T5649] ? css_next_descendant_pre+0x11c/0x140 [ 92.564945][ T5649] mem_cgroup_out_of_memory+0x13e/0x190 [ 92.570526][ T5649] try_charge_memcg+0x51b/0x810 [ 92.575415][ T5649] charge_memcg+0x50/0xc0 [ 92.575752][ T5675] loop4: detected capacity change from 0 to 128 [ 92.579773][ T5649] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 92.591998][ T5649] __read_swap_cache_async+0x236/0x480 [ 92.597564][ T5649] swap_cluster_readahead+0x276/0x3f0 [ 92.602963][ T5649] swapin_readahead+0xe4/0x6f0 [ 92.607807][ T5649] ? __filemap_get_folio+0x420/0x5b0 [ 92.613099][ T5649] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 92.618706][ T5649] ? swap_cache_get_folio+0x77/0x210 [ 92.624030][ T5649] do_swap_page+0x2af/0x23e0 [ 92.628706][ T5649] ? __rcu_read_lock+0x36/0x50 [ 92.633502][ T5649] ? pte_offset_map_nolock+0x124/0x1d0 [ 92.638961][ T5649] handle_mm_fault+0x8c5/0x2a80 [ 92.643822][ T5649] exc_page_fault+0x3b9/0x650 [ 92.648574][ T5649] asm_exc_page_fault+0x26/0x30 [ 92.653443][ T5649] RIP: 0033:0x7faf34fce8bf [ 92.657909][ T5649] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 37 2e 00 89 f0 4c 8d 05 49 17 2e 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 92.677535][ T5649] RSP: 002b:00007ffd72def2d8 EFLAGS: 00010206 [ 92.683716][ T5649] RAX: 000000008413ce55 RBX: 00007faf35df5720 RCX: 0000000000000005 [ 92.691692][ T5649] RDX: 0000000000000e55 RSI: ffffffff8413ce55 RDI: 0000000000000009 [ 92.699665][ T5649] RBP: 0000000000000000 R08: 00007faf352b0000 R09: 00007faf352b2000 [ 92.707641][ T5649] R10: 000000008413ce59 R11: 0000000000000009 R12: ffffffff8413cb20 [ 92.715616][ T5649] R13: 00007faf352c6018 R14: 0000000000000008 R15: 0000000000000001 [ 92.723592][ T5649] ? __sys_sendmmsg+0x40/0x500 [ 92.728498][ T5649] ? __sys_sendmmsg+0x375/0x500 [ 92.733379][ T5649] [ 92.736549][ T5649] memory: usage 307200kB, limit 307200kB, failcnt 745 [ 92.743785][ T5649] memory+swap: usage 311492kB, limit 9007199254740988kB, failcnt 0 [ 92.751822][ T5649] kmem: usage 306992kB, limit 9007199254740988kB, failcnt 0 [ 92.759347][ T5649] Memory cgroup stats for /syz0: [ 92.759659][ T5649] cache 176128 [ 92.768178][ T5649] rss 0 [ 92.770952][ T5649] shmem 0 [ 92.773909][ T5649] mapped_file 3457024 [ 92.777990][ T5649] dirty 176128 [ 92.781419][ T5649] writeback 16384 [ 92.785067][ T5649] workingset_refault_anon 425 [ 92.789875][ T5649] workingset_refault_file 350 [ 92.794699][ T5649] swap 4395008 [ 92.798074][ T5649] swapcached 36864 [ 92.801796][ T5649] pgpgin 66092 [ 92.805309][ T5649] pgpgout 66040 [ 92.808441][ T5680] loop1: detected capacity change from 0 to 2048 [ 92.808760][ T5649] pgfault 97446 [ 92.808770][ T5649] pgmajfault 238 [ 92.822121][ T5649] inactive_anon 36864 [ 92.826106][ T5649] active_anon 0 [ 92.829608][ T5649] inactive_file 176128 [ 92.833703][ T5649] active_file 0 [ 92.836163][ T5680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.837195][ T5649] unevictable 0 [ 92.852619][ T5649] hierarchical_memory_limit 314572800 [ 92.853257][ T5680] EXT4-fs (loop1): shut down requested (0) [ 92.858010][ T5649] hierarchical_memsw_limit 9223372036854771712 [ 92.869988][ T5649] total_cache 176128 [ 92.873867][ T5649] total_rss 0 [ 92.877155][ T5649] total_shmem 0 [ 92.880617][ T5649] total_mapped_file 3457024 [ 92.885186][ T5649] total_dirty 176128 [ 92.889072][ T5649] total_writeback 16384 [ 92.893209][ T5649] total_workingset_refault_anon 425 [ 92.898492][ T5649] total_workingset_refault_file 350 [ 92.903674][ T5649] total_swap 4395008 [ 92.907649][ T5649] total_swapcached 36864 [ 92.911914][ T5649] total_pgpgin 66092 [ 92.915836][ T5649] total_pgpgout 66040 [ 92.919822][ T5649] total_pgfault 97446 [ 92.923802][ T5649] total_pgmajfault 238 [ 92.927923][ T5649] total_inactive_anon 36864 [ 92.932423][ T5649] total_active_anon 0 [ 92.936420][ T5649] total_inactive_file 176128 [ 92.941014][ T5649] total_active_file 0 [ 92.945048][ T5649] total_unevictable 0 [ 92.949024][ T5649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.810,pid=5649,uid=0 [ 92.963653][ T5649] Memory cgroup out of memory: Killed process 5649 (syz.0.810) total-vm:94692kB, anon-rss:612kB, file-rss:21452kB, shmem-rss:128kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 93.029934][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.138530][ T5691] loop1: detected capacity change from 0 to 512 [ 93.189449][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.207382][ T5699] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.215339][ T5691] ext4 filesystem being mounted at /159/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.254517][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.273836][ T5703] loop1: detected capacity change from 0 to 128 [ 93.293501][ T5708] loop5: detected capacity change from 0 to 7 [ 93.299942][ T5708] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.307911][ T5708] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.315851][ T5708] loop5: unable to read partition table [ 93.321641][ T5708] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 93.321641][ T5708] ) failed (rc=-5) [ 93.525338][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 93.534379][ T5718] tipc: Cannot configure node identity twice [ 94.038995][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 94.047921][ T5719] tipc: Cannot configure node identity twice [ 94.317617][ T5731] hub 2-0:1.0: USB hub found [ 94.322423][ T5731] hub 2-0:1.0: 8 ports detected [ 94.388285][ T5733] loop0: detected capacity change from 0 to 764 [ 94.406506][ T5738] loop4: detected capacity change from 0 to 512 [ 94.416721][ T5738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.429245][ T5738] ext4 filesystem being mounted at /166/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.448446][ T5737] loop2: detected capacity change from 0 to 164 [ 94.465039][ T5737] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.478511][ T5737] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.493469][ T5737] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.497724][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.505258][ T5737] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 94.631899][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 94.631913][ T29] audit: type=1326 audit(1729941572.575:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.661549][ T29] audit: type=1326 audit(1729941572.575:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.726084][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 94.735032][ T5754] tipc: Cannot configure node identity twice [ 94.758504][ T5756] loop0: detected capacity change from 0 to 128 [ 94.765564][ T29] audit: type=1326 audit(1729941572.635:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.788960][ T29] audit: type=1326 audit(1729941572.635:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.812339][ T29] audit: type=1326 audit(1729941572.635:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.835687][ T29] audit: type=1326 audit(1729941572.635:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.859076][ T29] audit: type=1326 audit(1729941572.635:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.882556][ T29] audit: type=1326 audit(1729941572.635:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.905982][ T29] audit: type=1326 audit(1729941572.635:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 94.929380][ T29] audit: type=1326 audit(1729941572.635:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 95.235667][ T5759] loop4: detected capacity change from 0 to 512 [ 95.570130][ T5759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.587356][ T5774] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.597399][ T5759] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.694203][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 95.703147][ T5765] tipc: Cannot configure node identity twice [ 95.979356][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.128425][ T5779] loop2: detected capacity change from 0 to 2048 [ 96.146012][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.159901][ T5779] EXT4-fs (loop2): shut down requested (0) [ 96.174282][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.197686][ T5790] loop2: detected capacity change from 0 to 164 [ 96.205090][ T5790] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.215063][ T5790] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.230686][ T5790] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.239589][ T5790] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.286915][ T5797] loop5: detected capacity change from 0 to 7 [ 96.293330][ T5797] Buffer I/O error on dev loop5, logical block 0, async page read [ 96.308304][ T5797] Buffer I/O error on dev loop5, logical block 0, async page read [ 96.316241][ T5797] loop5: unable to read partition table [ 96.323966][ T5797] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 96.323966][ T5797] ) failed (rc=-5) [ 96.326190][ T5800] loop0: detected capacity change from 0 to 164 [ 96.345482][ T5800] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.346837][ T5801] loop4: detected capacity change from 0 to 128 [ 96.354995][ T5800] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.388281][ T5800] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.388470][ T5804] loop2: detected capacity change from 0 to 164 [ 96.404465][ T5800] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.412166][ T5804] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.431694][ T5804] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.450282][ T5807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.454156][ T5804] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.469899][ T5804] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.491679][ T5809] loop0: detected capacity change from 0 to 2048 [ 96.511088][ T5596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522583][ T5596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.533581][ T5596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.550952][ T5596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.596648][ T5809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.607913][ T5817] loop2: detected capacity change from 0 to 2048 [ 96.617495][ T5807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.624518][ T5809] EXT4-fs (loop0): shut down requested (0) [ 96.641695][ T5817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.658624][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.669904][ T5817] EXT4-fs (loop2): shut down requested (0) [ 96.955046][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.966722][ T5807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.003848][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 97.013069][ T5818] tipc: Cannot configure node identity twice [ 97.107177][ T5807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.171068][ T5807] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.183611][ T5807] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.196770][ T5807] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.208253][ T5807] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.365252][ T5825] syz.1.865 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 97.379291][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.1.865 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 97.389880][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.399998][ T5825] Call Trace: [ 97.403271][ T5825] [ 97.406199][ T5825] dump_stack_lvl+0xf2/0x150 [ 97.410846][ T5825] dump_stack+0x15/0x20 [ 97.415011][ T5825] dump_header+0x83/0x2d0 [ 97.419416][ T5825] oom_kill_process+0x341/0x4c0 [ 97.424275][ T5825] out_of_memory+0x9af/0xbe0 [ 97.428954][ T5825] ? css_next_descendant_pre+0x11c/0x140 [ 97.434600][ T5825] mem_cgroup_out_of_memory+0x13e/0x190 [ 97.440179][ T5825] try_charge_memcg+0x51b/0x810 [ 97.445041][ T5825] obj_cgroup_charge_pages+0xbd/0x1a0 [ 97.450563][ T5825] __memcg_kmem_charge_page+0x9d/0x170 [ 97.456034][ T5825] __alloc_pages_noprof+0x1bc/0x340 [ 97.461374][ T5825] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 97.466857][ T5825] alloc_pages_noprof+0xe1/0x100 [ 97.471802][ T5825] __vmalloc_node_range_noprof+0x72e/0xec0 [ 97.477627][ T5825] __kvmalloc_node_noprof+0x121/0x170 [ 97.483074][ T5825] ? ip_set_alloc+0x1f/0x30 [ 97.487604][ T5825] ip_set_alloc+0x1f/0x30 [ 97.491933][ T5825] hash_netiface_create+0x273/0x730 [ 97.497190][ T5825] ? __nla_parse+0x40/0x60 [ 97.501622][ T5825] ? __pfx_hash_netiface_create+0x10/0x10 [ 97.507357][ T5825] ip_set_create+0x359/0x8a0 [ 97.511967][ T5825] ? __pfx_memchr+0x1/0x10 [ 97.516398][ T5825] ? __nla_parse+0x40/0x60 [ 97.520841][ T5825] nfnetlink_rcv_msg+0x4a9/0x570 [ 97.525816][ T5825] netlink_rcv_skb+0x12c/0x230 [ 97.530590][ T5825] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.536084][ T5825] nfnetlink_rcv+0x16c/0x15c0 [ 97.540797][ T5825] ? kmem_cache_free+0xdc/0x2d0 [ 97.545755][ T5825] ? nlmon_xmit+0x51/0x60 [ 97.550152][ T5825] ? __kfree_skb+0x102/0x150 [ 97.554850][ T5825] ? consume_skb+0x49/0x160 [ 97.559461][ T5825] ? nlmon_xmit+0x51/0x60 [ 97.563817][ T5825] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 97.569115][ T5825] ? __dev_queue_xmit+0xb4c/0x2040 [ 97.574235][ T5825] ? ref_tracker_free+0x3a5/0x410 [ 97.579291][ T5825] ? __dev_queue_xmit+0x161/0x2040 [ 97.584409][ T5825] ? skb_clone+0x154/0x1f0 [ 97.588874][ T5825] ? __netlink_deliver_tap+0x495/0x4c0 [ 97.594361][ T5825] netlink_unicast+0x599/0x670 [ 97.599161][ T5825] netlink_sendmsg+0x5cc/0x6e0 [ 97.603959][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.609236][ T5825] __sock_sendmsg+0x140/0x180 [ 97.613994][ T5825] ____sys_sendmsg+0x312/0x410 [ 97.618769][ T5825] __sys_sendmsg+0x1d9/0x270 [ 97.623426][ T5825] ? futex_wait+0x18e/0x1c0 [ 97.627965][ T5825] __x64_sys_sendmsg+0x46/0x50 [ 97.632841][ T5825] x64_sys_call+0x2689/0x2d60 [ 97.637572][ T5825] do_syscall_64+0xc9/0x1c0 [ 97.642075][ T5825] ? clear_bhb_loop+0x55/0xb0 [ 97.646760][ T5825] ? clear_bhb_loop+0x55/0xb0 [ 97.651436][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.657424][ T5825] RIP: 0033:0x7f4ddf32e719 [ 97.661853][ T5825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.681454][ T5825] RSP: 002b:00007f4dddf65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.689885][ T5825] RAX: ffffffffffffffda RBX: 00007f4ddf4e6130 RCX: 00007f4ddf32e719 [ 97.697855][ T5825] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 97.705859][ T5825] RBP: 00007f4ddf3a132e R08: 0000000000000000 R09: 0000000000000000 [ 97.713828][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.721798][ T5825] R13: 0000000000000000 R14: 00007f4ddf4e6130 R15: 00007ffed89349f8 [ 97.729776][ T5825] [ 97.733094][ T5825] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 97.740119][ T5825] memory+swap: usage 311388kB, limit 9007199254740988kB, failcnt 0 [ 97.748057][ T5825] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 97.755363][ T5825] Memory cgroup stats for /syz1: [ 97.755520][ T5825] cache 16384 [ 97.763828][ T5825] rss 4096 [ 97.766901][ T5825] shmem 0 [ 97.769833][ T5825] mapped_file 3297280 [ 97.773846][ T5825] dirty 16384 [ 97.777207][ T5825] writeback 0 [ 97.780495][ T5825] workingset_refault_anon 386 [ 97.785189][ T5825] workingset_refault_file 395 [ 97.789969][ T5825] swap 4288512 [ 97.793324][ T5825] swapcached 126976 [ 97.797134][ T5825] pgpgin 75632 [ 97.800492][ T5825] pgpgout 75597 [ 97.803941][ T5825] pgfault 113543 [ 97.807497][ T5825] pgmajfault 240 [ 97.811094][ T5825] inactive_anon 126976 [ 97.815181][ T5825] active_anon 0 [ 97.818705][ T5825] inactive_file 16384 [ 97.822723][ T5825] active_file 0 [ 97.826192][ T5825] unevictable 0 [ 97.829790][ T5825] hierarchical_memory_limit 314572800 [ 97.835218][ T5825] hierarchical_memsw_limit 9223372036854771712 [ 97.841379][ T5825] total_cache 16384 [ 97.845269][ T5825] total_rss 4096 [ 97.848868][ T5825] total_shmem 0 [ 97.852317][ T5825] total_mapped_file 3297280 [ 97.856823][ T5825] total_dirty 16384 [ 97.860673][ T5825] total_writeback 0 [ 97.864508][ T5825] total_workingset_refault_anon 386 [ 97.869768][ T5825] total_workingset_refault_file 395 [ 97.875032][ T5825] total_swap 4288512 [ 97.878946][ T5825] total_swapcached 126976 [ 97.883323][ T5825] total_pgpgin 75632 [ 97.887262][ T5825] total_pgpgout 75597 [ 97.891263][ T5825] total_pgfault 113543 [ 97.895341][ T5825] total_pgmajfault 240 [ 97.899400][ T5825] total_inactive_anon 126976 [ 97.904049][ T5825] total_active_anon 0 [ 97.908029][ T5825] total_inactive_file 16384 [ 97.912549][ T5825] total_active_file 0 [ 97.916638][ T5825] total_unevictable 0 [ 97.920634][ T5825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.865,pid=5810,uid=0 [ 97.935176][ T5825] Memory cgroup out of memory: Killed process 5810 (syz.1.865) total-vm:90456kB, anon-rss:612kB, file-rss:19440kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 98.027936][ T5838] loop2: detected capacity change from 0 to 128 [ 98.189839][ T5848] loop0: detected capacity change from 0 to 128 [ 98.199517][ T5846] loop2: detected capacity change from 0 to 764 [ 98.217994][ T5840] wireguard0: entered promiscuous mode [ 98.223605][ T5840] wireguard0: entered allmulticast mode [ 98.225745][ T5853] loop3: detected capacity change from 0 to 164 [ 98.242548][ T5853] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 98.253712][ T5853] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 98.271987][ T5853] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 98.281332][ T5853] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 98.316742][ T5855] wireguard0: entered promiscuous mode [ 98.322407][ T5855] wireguard0: entered allmulticast mode [ 98.339181][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.349784][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.359871][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.370382][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.380313][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.390963][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.400895][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.411583][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.450950][ T5874] bond_slave_1: mtu less than device minimum [ 98.517025][ T5858] loop1: detected capacity change from 0 to 764 [ 98.624035][ T5882] No such timeout policy "syz0" [ 99.112042][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.122594][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.132457][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.142915][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.152839][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.163418][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.173361][ T5892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.183907][ T5892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.194799][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 99.203770][ T5887] tipc: Cannot configure node identity twice [ 99.271695][ T5897] loop1: detected capacity change from 0 to 764 [ 99.281307][ T5895] loop4: detected capacity change from 0 to 164 [ 99.329248][ T5895] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.360928][ T5895] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.407424][ T5903] loop1: detected capacity change from 0 to 128 [ 99.409813][ T5895] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.472656][ T5896] loop0: detected capacity change from 0 to 512 [ 99.500432][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.540801][ T5895] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.570449][ T5896] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.583692][ T5909] loop3: detected capacity change from 0 to 2048 [ 99.608506][ T5909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.637979][ T5916] hub 2-0:1.0: USB hub found [ 99.643139][ T5916] hub 2-0:1.0: 8 ports detected [ 99.648879][ T5909] EXT4-fs (loop3): shut down requested (0) [ 99.675623][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.782736][ T5925] wireguard0: entered promiscuous mode [ 99.788463][ T5925] wireguard0: entered allmulticast mode [ 99.917372][ T5936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.015927][ T5936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.096751][ T5936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.119187][ T5938] hub 2-0:1.0: USB hub found [ 100.140783][ T5938] hub 2-0:1.0: 8 ports detected [ 100.156255][ T5936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.220949][ T5936] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243582][ T5936] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.267987][ T5936] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.289689][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.301356][ T5936] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.324053][ T5942] loop5: detected capacity change from 0 to 7 [ 100.334761][ T5944] loop3: detected capacity change from 0 to 164 [ 100.354830][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.363337][ T5944] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.373286][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.381189][ T5942] loop5: unable to read partition table [ 100.387206][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 100.387222][ T29] audit: type=1326 audit(1729941578.345:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.387381][ T5944] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.393540][ T29] audit: type=1326 audit(1729941578.345:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.397683][ T5948] hub 2-0:1.0: USB hub found [ 100.419012][ T5942] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 100.419012][ T5942] ) failed (rc=-5) [ 100.428422][ T5948] hub 2-0:1.0: 8 ports detected [ 100.473321][ T29] audit: type=1326 audit(1729941578.415:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.484679][ T5944] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.496825][ T29] audit: type=1326 audit(1729941578.415:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.514859][ T5944] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 100.528989][ T29] audit: type=1326 audit(1729941578.425:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.559113][ T29] audit: type=1326 audit(1729941578.425:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.582537][ T29] audit: type=1326 audit(1729941578.425:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.605869][ T29] audit: type=1326 audit(1729941578.425:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.629185][ T29] audit: type=1326 audit(1729941578.425:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 100.629788][ T5956] loop0: detected capacity change from 0 to 512 [ 100.652459][ T29] audit: type=1107 audit(1729941578.425:5047): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 100.693491][ T5958] loop4: detected capacity change from 0 to 2048 [ 100.707878][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.720990][ T5956] ext4 filesystem being mounted at /224/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.741321][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 100.742175][ T5958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.775262][ T5964] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.785648][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 100.787000][ T5958] EXT4-fs (loop4): shut down requested (0) [ 100.807966][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 100.833757][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 100.854291][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 100.875560][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.884684][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 100.919752][ T5964] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.923981][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 100.950074][ T5956] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.914: lblock 23 mapped to illegal pblock 18 (length 1) [ 100.967235][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 100.993143][ T5956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.914: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 101.020730][ T5964] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.057535][ T5964] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.153024][ T5964] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.164290][ T5964] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.176839][ T5964] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.198520][ T5964] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.292571][ T5985] wireguard0: entered promiscuous mode [ 101.298196][ T5985] wireguard0: entered allmulticast mode [ 101.360687][ T5996] loop1: detected capacity change from 0 to 164 [ 101.388442][ T5996] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.412408][ T5995] wireguard3: entered promiscuous mode [ 101.417986][ T5995] wireguard3: entered allmulticast mode [ 101.453800][ T5996] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.519110][ T5996] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.543602][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.556169][ T5986] loop3: detected capacity change from 0 to 512 [ 101.578362][ T5996] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 101.638264][ T6009] loop1: detected capacity change from 0 to 764 [ 101.696883][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.717867][ T5986] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.772363][ T6015] loop4: detected capacity change from 0 to 764 [ 101.791443][ T6016] loop2: detected capacity change from 0 to 128 [ 101.809142][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.932'. [ 101.821184][ T6022] loop4: detected capacity change from 0 to 164 [ 101.821280][ T6016] netlink: 'syz.2.932': attribute type 21 has an invalid length. [ 101.835353][ T6016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.932'. [ 101.835480][ T6022] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.860223][ T6022] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.877560][ T6022] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.890033][ T6022] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 101.899953][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.910491][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.920347][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.930808][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.940699][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.951232][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.961094][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.971546][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.033219][ T6025] loop2: detected capacity change from 0 to 764 [ 102.086059][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.148227][ T6042] hub 2-0:1.0: USB hub found [ 102.153064][ T6042] hub 2-0:1.0: 8 ports detected [ 102.164249][ T6044] loop3: detected capacity change from 0 to 764 [ 102.191861][ T6048] loop3: detected capacity change from 0 to 128 [ 102.216278][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.945'. [ 102.225888][ T6048] netlink: 'syz.3.945': attribute type 21 has an invalid length. [ 102.233824][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.945'. [ 102.277663][ T6053] loop3: detected capacity change from 0 to 2048 [ 102.323335][ T6053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.346981][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.375223][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.385751][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.395661][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.406346][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.416419][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.426971][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.436992][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.447467][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.458788][ T6066] No such timeout policy "syz0" [ 102.528591][ T6062] loop3: detected capacity change from 0 to 764 [ 102.590610][ T6064] wireguard3: entered promiscuous mode [ 102.596220][ T6064] wireguard3: entered allmulticast mode [ 102.908248][ T6073] hub 2-0:1.0: USB hub found [ 102.955196][ T6073] hub 2-0:1.0: 8 ports detected [ 103.040621][ T6082] loop2: detected capacity change from 0 to 512 [ 103.057106][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.129643][ T6082] ext4 filesystem being mounted at /206/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.163849][ T6091] loop4: detected capacity change from 0 to 128 [ 103.183632][ T6091] netlink: 'syz.4.958': attribute type 21 has an invalid length. [ 103.191555][ T6091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.958'. [ 103.378335][ T6096] syz.0.957 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 103.391262][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.957 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 103.401949][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.412016][ T6096] Call Trace: [ 103.415298][ T6096] [ 103.418235][ T6096] dump_stack_lvl+0xf2/0x150 [ 103.422950][ T6096] dump_stack+0x15/0x20 [ 103.427183][ T6096] dump_header+0x83/0x2d0 [ 103.431541][ T6096] oom_kill_process+0x341/0x4c0 [ 103.436428][ T6096] out_of_memory+0x9af/0xbe0 [ 103.441048][ T6096] ? css_next_descendant_pre+0x11c/0x140 [ 103.446748][ T6096] mem_cgroup_out_of_memory+0x13e/0x190 [ 103.452315][ T6096] try_charge_memcg+0x51b/0x810 [ 103.457217][ T6096] obj_cgroup_charge_pages+0xbd/0x1a0 [ 103.462670][ T6096] __memcg_kmem_charge_page+0x9d/0x170 [ 103.468196][ T6096] __alloc_pages_noprof+0x1bc/0x340 [ 103.473458][ T6096] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 103.478851][ T6096] alloc_pages_noprof+0xe1/0x100 [ 103.483812][ T6096] io_pages_map+0x263/0x4e0 [ 103.488336][ T6096] io_allocate_scq_urings+0x283/0x300 [ 103.493742][ T6096] io_uring_create+0x53f/0x940 [ 103.498593][ T6096] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 103.504073][ T6096] __x64_sys_io_uring_setup+0x31/0x40 [ 103.509516][ T6096] x64_sys_call+0x1f7e/0x2d60 [ 103.514258][ T6096] do_syscall_64+0xc9/0x1c0 [ 103.518796][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 103.523580][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 103.528365][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.534354][ T6096] RIP: 0033:0x7faf3510e719 [ 103.538808][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.558500][ T6096] RSP: 002b:00007faf33d3efc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 103.566936][ T6096] RAX: ffffffffffffffda RBX: 00007faf352c6130 RCX: 00007faf3510e719 [ 103.574928][ T6096] RDX: 00000000200007c0 RSI: 0000000020000080 RDI: 00000000000070cc [ 103.582974][ T6096] RBP: 0000000020000080 R08: 0000000000000000 R09: 00000000200007c0 [ 103.591039][ T6096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.599014][ T6096] R13: 0000000020000100 R14: 00000000000070cc R15: 00000000200007c0 [ 103.607080][ T6096] [ 103.610293][ T6096] memory: usage 175928kB, limit 307200kB, failcnt 921 [ 103.617263][ T6096] memory+swap: usage 176136kB, limit 9007199254740988kB, failcnt 0 [ 103.625335][ T6096] kmem: usage 175768kB, limit 9007199254740988kB, failcnt 0 [ 103.632641][ T6096] Memory cgroup stats for /syz0: [ 103.633197][ T6096] cache 163840 [ 103.641833][ T6096] rss 0 [ 103.644630][ T6096] shmem 0 [ 103.647585][ T6096] mapped_file 163840 [ 103.651485][ T6096] dirty 163840 [ 103.654898][ T6096] writeback 0 [ 103.658191][ T6096] workingset_refault_anon 689 [ 103.662881][ T6096] workingset_refault_file 512 [ 103.667600][ T6096] swap 200704 [ 103.670883][ T6096] swapcached 12288 [ 103.674653][ T6096] pgpgin 84965 [ 103.678027][ T6096] pgpgout 84922 [ 103.681478][ T6096] pgfault 121736 [ 103.685081][ T6096] pgmajfault 378 [ 103.688629][ T6096] inactive_anon 0 [ 103.692321][ T6096] active_anon 12288 [ 103.696270][ T6096] inactive_file 163840 [ 103.700339][ T6096] active_file 0 [ 103.703792][ T6096] unevictable 0 [ 103.707272][ T6096] hierarchical_memory_limit 314572800 [ 103.712740][ T6096] hierarchical_memsw_limit 9223372036854771712 [ 103.718916][ T6096] total_cache 163840 [ 103.722863][ T6096] total_rss 0 [ 103.726182][ T6096] total_shmem 0 [ 103.729679][ T6096] total_mapped_file 163840 [ 103.734174][ T6096] total_dirty 163840 [ 103.738107][ T6096] total_writeback 0 [ 103.741957][ T6096] total_workingset_refault_anon 689 [ 103.747181][ T6096] total_workingset_refault_file 512 [ 103.752483][ T6096] total_swap 200704 [ 103.756383][ T6096] total_swapcached 12288 [ 103.760628][ T6096] total_pgpgin 84965 [ 103.764691][ T6096] total_pgpgout 84922 [ 103.768697][ T6096] total_pgfault 121736 [ 103.772782][ T6096] total_pgmajfault 378 [ 103.776877][ T6096] total_inactive_anon 0 [ 103.781042][ T6096] total_active_anon 12288 [ 103.785457][ T6096] total_inactive_file 163840 [ 103.790064][ T6096] total_active_file 0 [ 103.794071][ T6096] total_unevictable 0 [ 103.798117][ T6096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.957,pid=6083,uid=0 [ 103.812700][ T6096] Memory cgroup out of memory: Killed process 6083 (syz.0.957) total-vm:87252kB, anon-rss:740kB, file-rss:16188kB, shmem-rss:128kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 103.838380][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 103.847431][ T6099] tipc: Cannot configure node identity twice [ 103.926595][ T6101] loop4: detected capacity change from 0 to 128 [ 103.945511][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.970118][ T6101] netlink: 'syz.4.962': attribute type 21 has an invalid length. [ 104.048666][ T6101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.962'. [ 104.406520][ T6123] No such timeout policy "syz0" [ 104.642801][ T6121] loop3: detected capacity change from 0 to 764 [ 104.881281][ T6102] loop1: detected capacity change from 0 to 512 [ 105.026576][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.083912][ T6102] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.205234][ T6142] loop3: detected capacity change from 0 to 512 [ 105.327470][ T6131] wireguard3: entered promiscuous mode [ 105.333021][ T6131] wireguard3: entered allmulticast mode [ 105.344546][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.359572][ T6142] ext4 filesystem being mounted at /148/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.388471][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 105.397563][ T6144] tipc: Cannot configure node identity twice [ 105.779482][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.923938][ T6138] syz.0.972 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 105.938149][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.0.972 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 105.948829][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.958995][ T6138] Call Trace: [ 105.962282][ T6138] [ 105.965223][ T6138] dump_stack_lvl+0xf2/0x150 [ 105.969832][ T6138] dump_stack+0x15/0x20 [ 105.974071][ T6138] dump_header+0x83/0x2d0 [ 105.978432][ T6138] oom_kill_process+0x341/0x4c0 [ 105.983384][ T6138] out_of_memory+0x9af/0xbe0 [ 105.988057][ T6138] ? css_next_descendant_pre+0x11c/0x140 [ 105.993743][ T6138] mem_cgroup_out_of_memory+0x13e/0x190 [ 105.999302][ T6138] try_charge_memcg+0x51b/0x810 [ 106.004228][ T6138] obj_cgroup_charge_pages+0xbd/0x1a0 [ 106.009621][ T6138] __memcg_kmem_charge_page+0x9d/0x170 [ 106.015187][ T6138] __alloc_pages_noprof+0x1bc/0x340 [ 106.020430][ T6138] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 106.025917][ T6138] alloc_pages_noprof+0xe1/0x100 [ 106.030873][ T6138] __vmalloc_node_range_noprof+0x72e/0xec0 [ 106.036783][ T6138] __kvmalloc_node_noprof+0x121/0x170 [ 106.042176][ T6138] ? ip_set_alloc+0x1f/0x30 [ 106.046790][ T6138] ip_set_alloc+0x1f/0x30 [ 106.051136][ T6138] hash_netiface_create+0x273/0x730 [ 106.056345][ T6138] ? __nla_parse+0x40/0x60 [ 106.060825][ T6138] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.066619][ T6138] ip_set_create+0x359/0x8a0 [ 106.071242][ T6138] ? __pfx_memchr+0x1/0x10 [ 106.075706][ T6138] ? __nla_parse+0x40/0x60 [ 106.080200][ T6138] nfnetlink_rcv_msg+0x4a9/0x570 [ 106.085298][ T6138] netlink_rcv_skb+0x12c/0x230 [ 106.090089][ T6138] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.095706][ T6138] nfnetlink_rcv+0x16c/0x15c0 [ 106.100454][ T6138] ? kmem_cache_free+0xdc/0x2d0 [ 106.105316][ T6138] ? nlmon_xmit+0x51/0x60 [ 106.109698][ T6138] ? __kfree_skb+0x102/0x150 [ 106.114344][ T6138] ? consume_skb+0x49/0x160 [ 106.118869][ T6138] ? nlmon_xmit+0x51/0x60 [ 106.123261][ T6138] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 106.128598][ T6138] ? __dev_queue_xmit+0xb4c/0x2040 [ 106.133824][ T6138] ? ref_tracker_free+0x3a5/0x410 [ 106.138926][ T6138] ? __dev_queue_xmit+0x161/0x2040 [ 106.144124][ T6138] ? ref_tracker_alloc+0x1f5/0x2f0 [ 106.149264][ T6138] ? __netlink_deliver_tap+0x495/0x4c0 [ 106.154740][ T6138] netlink_unicast+0x599/0x670 [ 106.159529][ T6138] netlink_sendmsg+0x5cc/0x6e0 [ 106.164351][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.169642][ T6138] __sock_sendmsg+0x140/0x180 [ 106.174342][ T6138] ____sys_sendmsg+0x312/0x410 [ 106.179204][ T6138] __sys_sendmsg+0x1d9/0x270 [ 106.183890][ T6138] ? futex_wait+0x18e/0x1c0 [ 106.188417][ T6138] __x64_sys_sendmsg+0x46/0x50 [ 106.193217][ T6138] x64_sys_call+0x2689/0x2d60 [ 106.197931][ T6138] do_syscall_64+0xc9/0x1c0 [ 106.202521][ T6138] ? clear_bhb_loop+0x55/0xb0 [ 106.207203][ T6138] ? clear_bhb_loop+0x55/0xb0 [ 106.211916][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.217842][ T6138] RIP: 0033:0x7faf3510e719 [ 106.222285][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.241982][ T6138] RSP: 002b:00007faf33d60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.250397][ T6138] RAX: ffffffffffffffda RBX: 00007faf352c6058 RCX: 00007faf3510e719 [ 106.258504][ T6138] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 106.266529][ T6138] RBP: 00007faf3518132e R08: 0000000000000000 R09: 0000000000000000 [ 106.274507][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.282485][ T6138] R13: 0000000000000000 R14: 00007faf352c6058 R15: 00007ffd72def248 [ 106.290469][ T6138] [ 106.293615][ T6138] memory: usage 307200kB, limit 307200kB, failcnt 1042 [ 106.300564][ T6138] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 106.308599][ T6138] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 106.315920][ T6138] Memory cgroup stats for /syz0: [ 106.320158][ T6138] cache 163840 [ 106.328512][ T6138] rss 0 [ 106.331286][ T6138] shmem 0 [ 106.334239][ T6138] mapped_file 3444736 [ 106.338279][ T6138] dirty 163840 [ 106.341648][ T6138] writeback 0 [ 106.344995][ T6138] workingset_refault_anon 843 [ 106.350306][ T6138] workingset_refault_file 576 [ 106.352711][ T6150] loop4: detected capacity change from 0 to 128 [ 106.355121][ T6138] swap 221184 [ 106.355130][ T6138] swapcached 4096 [ 106.355138][ T6138] pgpgin 91008 [ 106.355144][ T6138] pgpgout 90967 [ 106.355161][ T6138] pgfault 127830 [ 106.355167][ T6138] pgmajfault 445 [ 106.355173][ T6138] inactive_anon 4096 [ 106.355179][ T6138] active_anon 0 [ 106.355184][ T6138] inactive_file 163840 [ 106.355191][ T6138] active_file 0 [ 106.397339][ T6138] unevictable 0 [ 106.400787][ T6138] hierarchical_memory_limit 314572800 [ 106.406160][ T6138] hierarchical_memsw_limit 9223372036854771712 [ 106.412302][ T6138] total_cache 163840 [ 106.416240][ T6138] total_rss 0 [ 106.419526][ T6138] total_shmem 0 [ 106.422985][ T6138] total_mapped_file 3444736 [ 106.427516][ T6138] total_dirty 163840 [ 106.431396][ T6138] total_writeback 0 [ 106.435379][ T6138] total_workingset_refault_anon 843 [ 106.440615][ T6138] total_workingset_refault_file 576 [ 106.445849][ T6138] total_swap 221184 [ 106.449650][ T6138] total_swapcached 4096 [ 106.453867][ T6138] total_pgpgin 91008 [ 106.457784][ T6138] total_pgpgout 90967 [ 106.461764][ T6138] total_pgfault 127830 [ 106.465884][ T6138] total_pgmajfault 445 [ 106.469945][ T6138] total_inactive_anon 4096 [ 106.474395][ T6138] total_active_anon 0 [ 106.478385][ T6138] total_inactive_file 163840 [ 106.483001][ T6138] total_active_file 0 [ 106.487039][ T6138] total_unevictable 0 [ 106.491022][ T6138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.972,pid=6132,uid=0 [ 106.505652][ T6138] Memory cgroup out of memory: Killed process 6132 (syz.0.972) total-vm:92644kB, anon-rss:608kB, file-rss:21432kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 106.531802][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.544557][ T6150] netlink: 'syz.4.976': attribute type 21 has an invalid length. [ 106.552486][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.976'. [ 106.572514][ T6152] hub 2-0:1.0: USB hub found [ 106.579504][ T6152] hub 2-0:1.0: 8 ports detected [ 106.873380][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 106.873397][ T29] audit: type=1326 audit(1729941584.815:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 106.902954][ T29] audit: type=1326 audit(1729941584.815:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 106.926306][ T29] audit: type=1326 audit(1729941584.815:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 106.949687][ T29] audit: type=1326 audit(1729941584.815:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 106.973091][ T29] audit: type=1326 audit(1729941584.815:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 107.425602][ T6173] No such timeout policy "syz0" [ 107.902613][ T6175] loop2: detected capacity change from 0 to 764 [ 108.154843][ T29] audit: type=1326 audit(1729941584.815:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d852e719 code=0x7ffc0000 [ 108.186398][ T6168] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.246145][ T6168] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.290243][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 108.299217][ T6170] tipc: Cannot configure node identity twice [ 108.396885][ T6168] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.445325][ T6172] syz.3.975 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 108.459432][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.3.975 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 108.470044][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.480113][ T6172] Call Trace: [ 108.483418][ T6172] [ 108.486375][ T6172] dump_stack_lvl+0xf2/0x150 [ 108.491092][ T6172] dump_stack+0x15/0x20 [ 108.495291][ T6172] dump_header+0x83/0x2d0 [ 108.499643][ T6172] oom_kill_process+0x341/0x4c0 [ 108.504551][ T6172] out_of_memory+0x9af/0xbe0 [ 108.509179][ T6172] ? css_next_descendant_pre+0x11c/0x140 [ 108.514857][ T6172] mem_cgroup_out_of_memory+0x13e/0x190 [ 108.520419][ T6172] try_charge_memcg+0x51b/0x810 [ 108.525429][ T6172] obj_cgroup_charge_pages+0xbd/0x1a0 [ 108.530853][ T6172] __memcg_kmem_charge_page+0x9d/0x170 [ 108.536353][ T6172] __alloc_pages_noprof+0x1bc/0x340 [ 108.541581][ T6172] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 108.547042][ T6172] alloc_pages_noprof+0xe1/0x100 [ 108.551998][ T6172] __vmalloc_node_range_noprof+0x72e/0xec0 [ 108.557830][ T6172] __kvmalloc_node_noprof+0x121/0x170 [ 108.563242][ T6172] ? ip_set_alloc+0x1f/0x30 [ 108.567770][ T6172] ip_set_alloc+0x1f/0x30 [ 108.572115][ T6172] hash_netiface_create+0x273/0x730 [ 108.577362][ T6172] ? __nla_parse+0x40/0x60 [ 108.581856][ T6172] ? __pfx_hash_netiface_create+0x10/0x10 [ 108.587610][ T6172] ip_set_create+0x359/0x8a0 [ 108.592228][ T6172] ? find_lock_lowest_rq+0x31/0x120 [ 108.597479][ T6172] nfnetlink_rcv_msg+0x4a9/0x570 [ 108.602503][ T6172] netlink_rcv_skb+0x12c/0x230 [ 108.607322][ T6172] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 108.612807][ T6172] nfnetlink_rcv+0x16c/0x15c0 [ 108.617496][ T6172] ? kmem_cache_free+0xdc/0x2d0 [ 108.622368][ T6172] ? nlmon_xmit+0x51/0x60 [ 108.626748][ T6172] ? __kfree_skb+0x102/0x150 [ 108.631476][ T6172] ? consume_skb+0x49/0x160 [ 108.636047][ T6172] ? nlmon_xmit+0x51/0x60 [ 108.640629][ T6172] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 108.645960][ T6172] ? __dev_queue_xmit+0xb4c/0x2040 [ 108.651156][ T6172] ? ref_tracker_free+0x3a5/0x410 [ 108.656329][ T6172] ? __dev_queue_xmit+0x161/0x2040 [ 108.661497][ T6172] ? ref_tracker_alloc+0x1f5/0x2f0 [ 108.666745][ T6172] ? __netlink_deliver_tap+0x495/0x4c0 [ 108.672281][ T6172] netlink_unicast+0x599/0x670 [ 108.677085][ T6172] netlink_sendmsg+0x5cc/0x6e0 [ 108.681929][ T6172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.687225][ T6172] __sock_sendmsg+0x140/0x180 [ 108.691976][ T6172] ____sys_sendmsg+0x312/0x410 [ 108.696929][ T6172] __sys_sendmsg+0x1d9/0x270 [ 108.701658][ T6172] ? bpf_bprintf_cleanup+0x82/0xb0 [ 108.707027][ T6172] __x64_sys_sendmsg+0x46/0x50 [ 108.711873][ T6172] x64_sys_call+0x2689/0x2d60 [ 108.716568][ T6172] do_syscall_64+0xc9/0x1c0 [ 108.721178][ T6172] ? clear_bhb_loop+0x55/0xb0 [ 108.725965][ T6172] ? clear_bhb_loop+0x55/0xb0 [ 108.730682][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.736706][ T6172] RIP: 0033:0x7f1e8202e719 [ 108.741125][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.760888][ T6172] RSP: 002b:00007f1e80c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.769312][ T6172] RAX: ffffffffffffffda RBX: 00007f1e821e6130 RCX: 00007f1e8202e719 [ 108.777305][ T6172] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 108.785300][ T6172] RBP: 00007f1e820a132e R08: 0000000000000000 R09: 0000000000000000 [ 108.793299][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.801277][ T6172] R13: 0000000000000000 R14: 00007f1e821e6130 R15: 00007fffff9ec198 [ 108.809259][ T6172] [ 108.812362][ T6172] memory: usage 307200kB, limit 307200kB, failcnt 860 [ 108.819182][ T6172] memory+swap: usage 311692kB, limit 9007199254740988kB, failcnt 0 [ 108.827090][ T6172] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 108.834447][ T6172] Memory cgroup stats for /syz3: [ 108.834681][ T6172] cache 172032 [ 108.843064][ T6172] rss 0 [ 108.845841][ T6172] shmem 0 [ 108.848792][ T6172] mapped_file 3452928 [ 108.852807][ T6172] dirty 172032 [ 108.856184][ T6172] writeback 0 [ 108.859465][ T6172] workingset_refault_anon 303 [ 108.864141][ T6172] workingset_refault_file 238 [ 108.868827][ T6172] swap 4599808 [ 108.872200][ T6172] swapcached 4096 [ 108.875841][ T6172] pgpgin 67584 [ 108.879219][ T6172] pgpgout 67541 [ 108.882684][ T6172] pgfault 93709 [ 108.886238][ T6172] pgmajfault 191 [ 108.889781][ T6172] inactive_anon 4096 [ 108.893668][ T6172] active_anon 0 [ 108.897176][ T6172] inactive_file 172032 [ 108.901319][ T6172] active_file 0 [ 108.904789][ T6172] unevictable 0 [ 108.908243][ T6172] hierarchical_memory_limit 314572800 [ 108.913621][ T6172] hierarchical_memsw_limit 9223372036854771712 [ 108.919831][ T6172] total_cache 172032 [ 108.923727][ T6172] total_rss 0 [ 108.927022][ T6172] total_shmem 0 [ 108.930476][ T6172] total_mapped_file 3452928 [ 108.934997][ T6172] total_dirty 172032 [ 108.938942][ T6172] total_writeback 0 [ 108.942759][ T6172] total_workingset_refault_anon 303 [ 108.947967][ T6172] total_workingset_refault_file 238 [ 108.953157][ T6172] total_swap 4599808 [ 108.957057][ T6172] total_swapcached 4096 [ 108.961242][ T6172] total_pgpgin 67584 [ 108.965153][ T6172] total_pgpgout 67541 [ 108.969135][ T6172] total_pgfault 93709 [ 108.973137][ T6172] total_pgmajfault 191 [ 108.977220][ T6172] total_inactive_anon 4096 [ 108.981637][ T6172] total_active_anon 0 [ 108.985631][ T6172] total_inactive_file 172032 [ 108.990226][ T6172] total_active_file 0 [ 108.994222][ T6172] total_unevictable 0 [ 108.998209][ T6172] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.975,pid=6159,uid=0 [ 109.012736][ T6172] Memory cgroup out of memory: Killed process 6159 (syz.3.975) total-vm:90456kB, anon-rss:612kB, file-rss:19384kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 109.137297][ T6168] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.201279][ T6168] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.215063][ T6168] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.227633][ T6168] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.263426][ T6168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.287767][ T6183] loop1: detected capacity change from 0 to 512 [ 109.349869][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.362734][ T6183] ext4 filesystem being mounted at /187/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.381138][ T6189] wireguard0: entered promiscuous mode [ 109.386715][ T6189] wireguard0: entered allmulticast mode [ 109.410648][ T6187] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.421193][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 109.442551][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 109.463762][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 109.507743][ T6187] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.538920][ T6200] No such timeout policy "syz0" [ 109.570877][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 109.616187][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 109.797673][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 109.831404][ T6187] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.852345][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 109.875348][ T6183] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.986: lblock 23 mapped to illegal pblock 18 (length 1) [ 109.892396][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 19: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 109.915581][ T6183] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 20: comm syz.1.986: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 109.939106][ T6187] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.047266][ T6187] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.060173][ T6207] hub 2-0:1.0: USB hub found [ 110.066041][ T6207] hub 2-0:1.0: 8 ports detected [ 110.073299][ T6187] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.089589][ T6187] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.298869][ T6209] No such timeout policy "syz0" [ 110.533722][ T6187] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.692738][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.721774][ T6222] loop3: detected capacity change from 0 to 128 [ 110.733934][ T6219] hub 2-0:1.0: USB hub found [ 110.738927][ T6219] hub 2-0:1.0: 8 ports detected [ 110.771237][ T6224] bond_slave_1: mtu less than device minimum [ 110.818955][ T6222] netlink: 'syz.3.995': attribute type 21 has an invalid length. [ 110.828991][ T6222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'. [ 111.069978][ T6217] loop0: detected capacity change from 0 to 512 [ 111.077901][ T6250] loop3: detected capacity change from 0 to 512 [ 111.099325][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.165079][ T6254] No such timeout policy "syz0" [ 111.329172][ T6217] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.378996][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.428678][ T6250] ext4 filesystem being mounted at /153/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.681325][ T6257] bond_slave_1: mtu less than device minimum [ 111.897537][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.053937][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.112488][ T6283] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.146429][ T6287] bond_slave_1: mtu less than device minimum [ 112.179822][ T6294] loop2: detected capacity change from 0 to 512 [ 112.196080][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.208879][ T6294] ext4 filesystem being mounted at /222/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.230974][ T6300] loop0: detected capacity change from 0 to 128 [ 112.238185][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.247325][ T29] audit: type=1326 audit(1729941590.195:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.270780][ T29] audit: type=1326 audit(1729941590.195:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.294241][ T29] audit: type=1326 audit(1729941590.195:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.317896][ T29] audit: type=1326 audit(1729941590.195:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.341352][ T29] audit: type=1326 audit(1729941590.195:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.365865][ T29] audit: type=1326 audit(1729941590.205:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3510e719 code=0x7ffc0000 [ 112.413042][ T6308] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.718014][ T6305] loop3: detected capacity change from 0 to 512 [ 112.737768][ T6305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.750450][ T6305] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.890478][ T6321] loop2: detected capacity change from 0 to 512 [ 112.936629][ T6321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.957484][ T6321] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.048474][ T6328] hub 2-0:1.0: USB hub found [ 113.056630][ T6328] hub 2-0:1.0: 8 ports detected [ 113.069781][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.089848][ T6330] loop3: detected capacity change from 0 to 128 [ 113.170253][ T29] audit: type=1400 audit(1729941591.115:5451): avc: denied { write } for pid=6331 comm="syz.3.1029" path="socket:[19267]" dev="sockfs" ino=19267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.170253][ T3394] IPVS: starting estimator thread 0... [ 113.261645][ T29] audit: type=1400 audit(1729941591.205:5452): avc: denied { name_bind } for pid=6331 comm="syz.3.1029" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.304386][ T6342] IPVS: using max 2400 ests per chain, 120000 per kthread [ 113.338721][ T6353] bond_slave_1: mtu less than device minimum [ 113.433000][ T6366] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.487820][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.570658][ T6376] hub 2-0:1.0: USB hub found [ 113.580319][ T6376] hub 2-0:1.0: 8 ports detected [ 114.119956][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 114.129014][ T6380] tipc: Cannot configure node identity twice [ 114.160129][ T6388] bond_slave_1: mtu less than device minimum [ 114.242374][ T6394] loop4: detected capacity change from 0 to 512 [ 114.271886][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.288965][ T6394] ext4 filesystem being mounted at /212/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.380848][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 114.402951][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 114.424960][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 114.448266][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.472710][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 114.495454][ T6404] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.507821][ T6402] loop3: detected capacity change from 0 to 128 [ 114.514273][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 114.536612][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.557905][ T6394] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 18: comm syz.4.1046: lblock 23 mapped to illegal pblock 18 (length 1) [ 114.572209][ T29] audit: type=1326 audit(1729941592.515:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 114.595763][ T29] audit: type=1326 audit(1729941592.515:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 114.616201][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 19: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 114.643412][ T6394] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 20: comm syz.4.1046: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 114.667103][ T6404] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.706317][ T6414] loop1: detected capacity change from 0 to 164 [ 114.710961][ T6412] loop2: detected capacity change from 0 to 512 [ 114.719989][ T6414] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 114.729998][ T6416] bond_slave_1: mtu less than device minimum [ 114.734283][ T6414] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 114.745516][ T6404] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.758930][ T6412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.772780][ T6412] ext4 filesystem being mounted at /228/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.792682][ T6404] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.814236][ T6414] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 114.830817][ T6414] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.845715][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 114.873566][ T6420] hub 2-0:1.0: USB hub found [ 114.884376][ T6404] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.886112][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 12: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 114.900889][ T6404] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.915949][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 13: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 114.943243][ T6420] hub 2-0:1.0: 8 ports detected [ 114.944399][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 14: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.951575][ T6404] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.980441][ T6404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.036992][ T6428] hub 2-0:1.0: USB hub found [ 115.041726][ T6428] hub 2-0:1.0: 8 ports detected [ 115.093095][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 15: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 115.128897][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 115.151021][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.151345][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 115.186292][ T6412] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.1052: lblock 23 mapped to illegal pblock 18 (length 1) [ 115.207661][ T6435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.224897][ T6438] loop4: detected capacity change from 0 to 128 [ 115.252586][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 115.302360][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1059'. [ 115.314754][ T6412] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.1052: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 115.355412][ T6438] netlink: 'syz.4.1059': attribute type 21 has an invalid length. [ 115.368833][ T6438] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1059'. [ 115.424274][ T6433] loop1: detected capacity change from 0 to 512 [ 116.708130][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 116.925214][ T6457] No such timeout policy "syz0" [ 117.420822][ T6433] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.830540][ T6453] syz.4.1064 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 117.840415][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.4.1064 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 117.851101][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.861167][ T6453] Call Trace: [ 117.864451][ T6453] [ 117.867403][ T6453] dump_stack_lvl+0xf2/0x150 [ 117.872104][ T6453] dump_stack+0x15/0x20 [ 117.876282][ T6453] dump_header+0x83/0x2d0 [ 117.880695][ T6453] oom_kill_process+0x341/0x4c0 [ 117.885710][ T6453] out_of_memory+0x9af/0xbe0 [ 117.890324][ T6453] ? css_next_descendant_pre+0x11c/0x140 [ 117.896048][ T6453] mem_cgroup_out_of_memory+0x13e/0x190 [ 117.901658][ T6453] try_charge_memcg+0x51b/0x810 [ 117.906588][ T6453] charge_memcg+0x50/0xc0 [ 117.910953][ T6453] __mem_cgroup_charge+0x29/0xb0 [ 117.915923][ T6453] shmem_get_folio_gfp+0x47e/0xd90 [ 117.921105][ T6453] shmem_fault+0xfa/0x250 [ 117.925487][ T6453] __do_fault+0xb6/0x200 [ 117.929746][ T6453] handle_mm_fault+0xe7f/0x2a80 [ 117.934675][ T6453] exc_page_fault+0x296/0x650 [ 117.939387][ T6453] asm_exc_page_fault+0x26/0x30 [ 117.944337][ T6453] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 117.950192][ T6453] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 117.969888][ T6453] RSP: 0018:ffffc90001aefc68 EFLAGS: 00050206 [ 117.976110][ T6453] RAX: ffff888104270a78 RBX: 00000000202cd038 RCX: 0000000000000038 [ 117.984095][ T6453] RDX: 0000000000000001 RSI: 00000000202cd000 RDI: ffffc90001aefca8 [ 117.992084][ T6453] RBP: ffffc90001aefca8 R08: 0000000080000000 R09: 0000000000000000 [ 118.000152][ T6453] R10: 0001c90001aefca8 R11: 0001c90001aefcdf R12: 00000000202cd000 [ 118.008214][ T6453] R13: 00007fffffffefff R14: ffffc90001aefca8 R15: 0000000000000038 [ 118.016215][ T6453] _copy_from_user+0x85/0xe0 [ 118.020826][ T6453] copy_msghdr_from_user+0x54/0x2a0 [ 118.026128][ T6453] do_recvmmsg+0x282/0x740 [ 118.030675][ T6453] __x64_sys_recvmmsg+0xe2/0x170 [ 118.035631][ T6453] x64_sys_call+0x26e3/0x2d60 [ 118.040331][ T6453] do_syscall_64+0xc9/0x1c0 [ 118.044876][ T6453] ? clear_bhb_loop+0x55/0xb0 [ 118.049565][ T6453] ? clear_bhb_loop+0x55/0xb0 [ 118.054255][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.060172][ T6453] RIP: 0033:0x7f3392cee719 [ 118.064594][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.084330][ T6453] RSP: 002b:00007f3391946038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 118.092759][ T6453] RAX: ffffffffffffffda RBX: 00007f3392ea6058 RCX: 00007f3392cee719 [ 118.100735][ T6453] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 118.108712][ T6453] RBP: 00007f3392d6132e R08: 0000000000000000 R09: 0000000000000000 [ 118.116707][ T6453] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 118.124783][ T6453] R13: 0000000000000000 R14: 00007f3392ea6058 R15: 00007ffd9741df08 [ 118.132766][ T6453] [ 118.135882][ T6453] memory: usage 307200kB, limit 307200kB, failcnt 1772 [ 118.142743][ T6453] memory+swap: usage 310268kB, limit 9007199254740988kB, failcnt 0 [ 118.150674][ T6453] kmem: usage 306936kB, limit 9007199254740988kB, failcnt 0 [ 118.158000][ T6453] Memory cgroup stats for /syz4: [ 118.158255][ T6453] cache 266240 [ 118.166669][ T6453] rss 0 [ 118.169453][ T6453] shmem 0 [ 118.172387][ T6453] mapped_file 266240 [ 118.176308][ T6453] dirty 266240 [ 118.179738][ T6453] writeback 0 [ 118.183027][ T6453] workingset_refault_anon 233 [ 118.187716][ T6453] workingset_refault_file 332 [ 118.192395][ T6453] swap 3141632 [ 118.195792][ T6453] swapcached 4096 [ 118.199431][ T6453] pgpgin 64389 [ 118.202854][ T6453] pgpgout 64323 [ 118.206334][ T6453] pgfault 103924 [ 118.209953][ T6453] pgmajfault 140 [ 118.213505][ T6453] inactive_anon 0 [ 118.217159][ T6453] active_anon 0 [ 118.220622][ T6453] inactive_file 0 [ 118.224257][ T6453] active_file 266240 [ 118.228188][ T6453] unevictable 0 [ 118.231655][ T6453] hierarchical_memory_limit 314572800 [ 118.237071][ T6453] hierarchical_memsw_limit 9223372036854771712 [ 118.243227][ T6453] total_cache 266240 [ 118.247160][ T6453] total_rss 0 [ 118.250447][ T6453] total_shmem 0 [ 118.253962][ T6453] total_mapped_file 266240 [ 118.258406][ T6453] total_dirty 266240 [ 118.262329][ T6453] total_writeback 0 [ 118.266198][ T6453] total_workingset_refault_anon 233 [ 118.271466][ T6453] total_workingset_refault_file 332 [ 118.276675][ T6453] total_swap 3141632 [ 118.280568][ T6453] total_swapcached 4096 [ 118.284734][ T6453] total_pgpgin 64389 [ 118.288723][ T6453] total_pgpgout 64323 [ 118.292810][ T6453] total_pgfault 103924 [ 118.296913][ T6453] total_pgmajfault 140 [ 118.300989][ T6453] total_inactive_anon 0 [ 118.305176][ T6453] total_active_anon 0 [ 118.309181][ T6453] total_inactive_file 0 [ 118.313423][ T6453] total_active_file 266240 [ 118.317901][ T6453] total_unevictable 0 [ 118.321908][ T6453] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1064,pid=6449,uid=0 [ 118.336529][ T6453] Memory cgroup out of memory: Killed process 6449 (syz.4.1064) total-vm:87252kB, anon-rss:612kB, file-rss:16060kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 118.609969][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.720606][ T6467] loop3: detected capacity change from 0 to 512 [ 118.733660][ T6468] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.761153][ T6467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.777469][ T6472] hub 2-0:1.0: USB hub found [ 118.783074][ T6467] ext4 filesystem being mounted at /166/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.788912][ T6472] hub 2-0:1.0: 8 ports detected [ 118.803187][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 118.817574][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 118.838790][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 118.861374][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 118.889449][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 118.910076][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 118.912313][ T6483] loop4: detected capacity change from 0 to 128 [ 118.932955][ T6468] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.952143][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 118.952159][ T29] audit: type=1326 audit(1729941596.905:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 118.981855][ T29] audit: type=1326 audit(1729941596.905:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 119.005308][ T29] audit: type=1326 audit(1729941596.905:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 119.014490][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 119.028798][ T29] audit: type=1326 audit(1729941596.905:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 119.062037][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 119.073093][ T29] audit: type=1326 audit(1729941596.905:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 119.117215][ T29] audit: type=1326 audit(1729941596.915:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3392cee719 code=0x7ffc0000 [ 119.147384][ T6467] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 18: comm syz.3.1069: lblock 23 mapped to illegal pblock 18 (length 1) [ 119.163005][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 19: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 119.249821][ T6468] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.336029][ T6468] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.421795][ T6468] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.436902][ T6467] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 20: comm syz.3.1069: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.440088][ T6499] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.463792][ T6468] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.476309][ T6468] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.487710][ T6468] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.527469][ T6489] loop1: detected capacity change from 0 to 512 [ 119.574602][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.585075][ T6489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.599062][ T6489] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.633883][ T6506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.653643][ T6514] loop0: detected capacity change from 0 to 512 [ 119.661875][ T29] audit: type=1400 audit(1729941597.605:5504): avc: denied { watch watch_reads } for pid=6512 comm="syz.3.1085" path="/167" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.708551][ T6514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.723106][ T6514] ext4 filesystem being mounted at /253/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.743127][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 119.745125][ T6519] loop3: detected capacity change from 0 to 128 [ 119.765889][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 119.775410][ T29] audit: type=1326 audit(1729941597.725:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 119.813959][ T29] audit: type=1326 audit(1729941597.725:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 119.816156][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 119.837384][ T29] audit: type=1326 audit(1729941597.725:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8202e719 code=0x7ffc0000 [ 119.886172][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 119.914658][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 119.936807][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 119.937929][ T6522] hub 2-0:1.0: USB hub found [ 119.959292][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 119.981070][ T6522] hub 2-0:1.0: 8 ports detected [ 119.985489][ T6514] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.1086: lblock 23 mapped to illegal pblock 18 (length 1) [ 120.001988][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 120.022738][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.032366][ T6514] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.1086: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 120.107324][ T6525] wireguard0: entered promiscuous mode [ 120.112845][ T6525] wireguard0: entered allmulticast mode [ 120.125784][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.136311][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.146189][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.156629][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.166556][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.177151][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.187070][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.197538][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.242644][ T6536] bond_slave_1: mtu less than device minimum [ 120.270851][ T6538] loop2: detected capacity change from 0 to 164 [ 120.283380][ T6538] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.298330][ T6538] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.309040][ T6540] loop1: detected capacity change from 0 to 764 [ 120.320740][ T6542] loop4: detected capacity change from 0 to 164 [ 120.333373][ T6538] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.343832][ T6538] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 120.344362][ T6542] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.388071][ T6542] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.459967][ T6555] loop1: detected capacity change from 0 to 164 [ 120.469534][ T6555] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.491219][ T6557] loop4: detected capacity change from 0 to 128 [ 120.491715][ T6555] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.527739][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.548725][ T6554] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 120.605500][ T6570] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.617595][ T6574] loop3: detected capacity change from 0 to 764 [ 120.623946][ T6568] hub 2-0:1.0: USB hub found [ 120.626402][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.636523][ T6568] hub 2-0:1.0: 8 ports detected [ 120.639055][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.639071][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.664279][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.674164][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.684662][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.694511][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.705027][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.741302][ T6584] loop0: detected capacity change from 0 to 128 [ 120.753283][ T6580] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.755190][ T6583] loop3: detected capacity change from 0 to 164 [ 120.770045][ T6584] netlink: 'syz.0.1112': attribute type 21 has an invalid length. [ 120.778284][ T6583] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.787175][ T6584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1112'. [ 120.795474][ T6583] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 120.814099][ T3321] ================================================================== [ 120.822232][ T3321] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 120.829554][ T3321] [ 120.831877][ T3321] read-write to 0xffff8881069c1b40 of 8 bytes by task 3993 on cpu 1: [ 120.839941][ T3321] xas_clear_mark+0x90/0x180 [ 120.844544][ T3321] __folio_start_writeback+0x2e2/0x440 [ 120.850011][ T3321] __block_write_full_folio+0x506/0x8c0 [ 120.855569][ T3321] block_write_full_folio+0x293/0x2b0 [ 120.860955][ T3321] write_cache_pages+0x62/0x100 [ 120.865816][ T3321] blkdev_writepages+0x59/0x90 [ 120.870585][ T3321] do_writepages+0x1d8/0x480 [ 120.875182][ T3321] __writeback_single_inode+0x89/0x850 [ 120.880650][ T3321] writeback_sb_inodes+0x461/0xa30 [ 120.885769][ T3321] __writeback_inodes_wb+0x9a/0x1a0 [ 120.890970][ T3321] wb_writeback+0x274/0x640 [ 120.895473][ T3321] wb_workfn+0x67f/0x940 [ 120.899726][ T3321] process_scheduled_works+0x483/0x9a0 [ 120.905207][ T3321] worker_thread+0x51d/0x6f0 [ 120.909813][ T3321] kthread+0x1d1/0x210 [ 120.913903][ T3321] ret_from_fork+0x4b/0x60 [ 120.918332][ T3321] ret_from_fork_asm+0x1a/0x30 [ 120.923131][ T3321] [ 120.925452][ T3321] read to 0xffff8881069c1b40 of 8 bytes by task 3321 on cpu 0: [ 120.932997][ T3321] xas_find_marked+0x216/0x660 [ 120.937778][ T3321] find_get_entry+0x54/0x390 [ 120.942383][ T3321] filemap_get_folios_tag+0x136/0x210 [ 120.947767][ T3321] writeback_iter+0x4b0/0x830 [ 120.952455][ T3321] write_cache_pages+0x4b/0x100 [ 120.957313][ T3321] blkdev_writepages+0x59/0x90 [ 120.962080][ T3321] do_writepages+0x1d8/0x480 [ 120.966700][ T3321] filemap_fdatawrite_wbc+0xdb/0x100 [ 120.971996][ T3321] filemap_flush+0x61/0x90 [ 120.976436][ T3321] sync_blockdev_nowait+0x29/0x40 [ 120.981475][ T3321] sync_filesystem+0xe3/0x190 [ 120.986160][ T3321] generic_shutdown_super+0x46/0x220 [ 120.991450][ T3321] kill_block_super+0x2a/0x70 [ 120.996138][ T3321] deactivate_locked_super+0x7d/0x1c0 [ 121.001519][ T3321] deactivate_super+0x9f/0xb0 [ 121.006205][ T3321] cleanup_mnt+0x268/0x2e0 [ 121.010632][ T3321] __cleanup_mnt+0x19/0x20 [ 121.015049][ T3321] task_work_run+0x13a/0x1a0 [ 121.019648][ T3321] syscall_exit_to_user_mode+0xbe/0x130 [ 121.025233][ T3321] do_syscall_64+0xd6/0x1c0 [ 121.029760][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.035664][ T3321] [ 121.037984][ T3321] value changed: 0x0000000000003011 -> 0x0000000000003000 [ 121.045086][ T3321] [ 121.047414][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 121.053560][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 121.064411][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.074467][ T3321] ================================================================== [ 121.093942][ T6580] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.098943][ T6583] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.131898][ T6583] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 121.165888][ T6580] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.226058][ T6580] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.281117][ T6580] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.292066][ T6580] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.302939][ T6580] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.314340][ T6580] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0