last executing test programs: 12m35.713765764s ago: executing program 4 (id=4536): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000000020101020000000000000000010000080c00058008000100524153004000068014000500fe80000000000000000000000000003e0c000380060002004e24000014000400fc02000000000000000000000000000008000100000000000c0019"], 0x98}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) 12m35.635919181s ago: executing program 4 (id=4539): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 12m35.55078578s ago: executing program 4 (id=4542): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r2, 0x0, 0xfffffffffffffff2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d00010075"], 0x54}}, 0x40001) 12m35.271434707s ago: executing program 4 (id=4545): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) fstat(r4, &(0x7f00000002c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ustat(0x3, &(0x7f0000000180)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) r8 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c239000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12m34.715396452s ago: executing program 4 (id=4550): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee1"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/230, 0xe6}], 0x1, 0x5, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r4 = timerfd_create(0x8, 0x0) read(r4, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 12m33.797312242s ago: executing program 4 (id=4563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 12m33.793771112s ago: executing program 32 (id=4563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 12m25.273592799s ago: executing program 0 (id=4724): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x4e, 0x2e0000) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f00000000c0)={0x2, 0x1, 0xffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x801, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="360000000420000000000000", @ANYRES32=r4, @ANYBLOB="e4d0fe3f3ba5bbc3babd4b7945706ff1766c888000"/42, @ANYRES64=0x0], 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 12m25.216033225s ago: executing program 0 (id=4725): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0), 0x189182, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='.\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r7, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) futex(&(0x7f0000000000)=0x2, 0x10a, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x1, 0x2) 12m24.811169194s ago: executing program 0 (id=4740): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r2, 0x0, 0xfffffffffffffff2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty}], 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x40001) 12m24.75670042s ago: executing program 0 (id=4745): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x500, 0x40) r6 = open_tree(r5, &(0x7f0000000300)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172) 12m24.33943424s ago: executing program 0 (id=4763): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12m24.021288752s ago: executing program 0 (id=4781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=o']) 12m24.013723523s ago: executing program 33 (id=4781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=o']) 11m40.428526264s ago: executing program 3 (id=5843): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 11m40.373086369s ago: executing program 3 (id=5845): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x1008489, &(0x7f0000000100), 0x41, 0x11ed, &(0x7f0000002440)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="45c77229d22b2b0041e5edafe3728b9b0269efbe92e79a00000000d1fe2749d7b3179c345b4400200000000004eca3daefac3bf5dd0701b90000c1236aaa825300f50f7c5da17b685145441ac2d45a214c58dfcc472880049f7ee9cbb8baf9aa1b69c21e94bbafcd081aa2985f31737e3cbb0ae1a4a497d4f4600811312757c154d0e5093bcb3fcb8b3c675987412c5c97d58b452d3d988fb5262d5a8bd5db3cf09683d06b4ff89b34326dd0c5233c353afbf6999633fb45e3956f2f8b02ea89806e90", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x9, 0x7fff}, 0x8) 11m40.188976128s ago: executing program 2 (id=5853): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/38, 0x26) getdents(r0, 0xffffffffffffffff, 0x7a) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x81101003}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xfffffffa}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x4004050) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 11m40.16178852s ago: executing program 2 (id=5856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 11m40.140564252s ago: executing program 2 (id=5858): syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='net_dev_xmit_timeout\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) 11m39.924430693s ago: executing program 2 (id=5865): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="4cab6cd646b56aa72b047197c02a79"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x40008c1, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) statfs(&(0x7f00000009c0)='./file1\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat2(r1, &(0x7f0000000000)='./file1\x00', 0x8c, 0x1500) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 11m39.514518044s ago: executing program 3 (id=5868): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/38, 0x26) getdents(r0, 0xffffffffffffffff, 0x7a) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x81101003}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xfffffffa}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x4004050) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 11m39.384276006s ago: executing program 3 (id=5871): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='ext4_ext_show_extent\x00', r0, 0x0, 0x100}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000000400)="44a36fde", 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='ext4_ext_show_extent\x00', r0, 0x0, 0x100}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) (async) write(r3, &(0x7f0000000400)="44a36fde", 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) (async) 11m38.905211704s ago: executing program 2 (id=5876): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x228b, 0x101000) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@hci, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/192, 0xc0}], 0x6}, 0x1f40) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x5, 0x0}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x10, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="624bb239f9dd062dff12fe9f29778a33161f020f08f3c792c28d40df202d18831aa01d8ee3512f5dc700d9371ad651a5371d65f889fe6a9845a2e166947df6081430d4ff8995faf8715e81fdd5d0bcf0ea3956999a0761ab53828b85df0e3d9447c913c6537c1cfa344c1d5110b29fc8110bf119a9d834cde606f275a87257e149f86af42cae71cf1cc5e1d42be69710bf2427572decbc8e7f7d695ff0f87a0fcdf475454851e89c4077c26751b24afc93", @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0305fcffffff00"/20, @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRESHEX, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) 11m38.904807074s ago: executing program 3 (id=5877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 11m38.655862868s ago: executing program 2 (id=5884): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0), 0x189182, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='.\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) futex(&(0x7f0000000000)=0x2, 0x10a, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x1, 0x2) 11m38.655548328s ago: executing program 3 (id=5885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 11m38.654989468s ago: executing program 34 (id=5884): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0), 0x189182, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='.\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) futex(&(0x7f0000000000)=0x2, 0x10a, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x1, 0x2) 11m38.618244132s ago: executing program 35 (id=5885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 4.306317866s ago: executing program 5 (id=16534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b000000050000000200000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) 4.056041621s ago: executing program 5 (id=16540): bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 3.904773386s ago: executing program 5 (id=16544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.768432979s ago: executing program 5 (id=16547): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000800)='coda\x00', 0x1) fchmod(r2, 0x82) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5a5f}}, {@dioread_nolock}]}, 0x0, 0x64a, &(0x7f0000000180)="$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") r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x309440, 0x1b8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r4, 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="c76f39ff5123e3ac6b65f127f2645dda88eeeb4b94106c00"/33, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa20000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r6, 0x3) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 3.406559505s ago: executing program 5 (id=16550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = memfd_secret(0x80000) setreuid(0x0, 0xee01) fcntl$setlease(r1, 0x400, 0x0) 3.370575148s ago: executing program 5 (id=16551): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="17f8cc841c144e6e4d6313440612ec7e571568e866f616b35e6bf96947019954911bab49a5a15cd88d8beabd8645d763da"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x40008c1, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setfsgid(0xee00) r4 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000140)='ns/cgroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) statfs(&(0x7f00000009c0)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.800905394s ago: executing program 7 (id=16556): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x4000) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @rumble={0xa8, 0x5}}) 2.756889129s ago: executing program 8 (id=16557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.756608819s ago: executing program 8 (id=16558): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.562317438s ago: executing program 1 (id=16562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = memfd_secret(0x80000) setreuid(0x0, 0xee01) fcntl$setlease(r1, 0x400, 0x0) 2.504666883s ago: executing program 1 (id=16563): bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 2.425807571s ago: executing program 1 (id=16565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) 2.352303018s ago: executing program 1 (id=16567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) 2.225641421s ago: executing program 1 (id=16568): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x284800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf25150000000a000600f0ffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r5 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r4, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write(r5, &(0x7f0000000f80)="c1dec3d034bc978208020a674898b6eec7bf0fe45da732aa7ca0c4006b3f7ab7432d08ae2abb2c93899c9e609a804ae78ff5656f116ffc6c6d8cf4ff497133a5cbc625228b91fbef9edcde028bdc1d5814c4662163d52695b78a4c6f9700fb780e4eb0374d6d732d2a7f10708b6f9fef560feca866150740a8d728c635925f3d5beff88aa90cde8cde239d12eb7608b26ce7ba20b84d0f112521a86bfd87c5a966cb33f4a3987c9ef1e0de8d2fe0886b47fe4232cb6e694e3007828bcd7c169e75c16d37bb8495787dd0955aa93fee3e66d9a0b3c08ea262ca87964b21911ab78fbf11222da7f03bfa31f0b50620039740159fb3a332d5daba859c0dd22efb2c95e39b2f99666de3f03128979a60fb79c6672202c245b53cff0d094cbc69088587dae610343abd4c67cd84827c0753eb32643ae766b3b029a212dac0d384f2203d583041dda5172b662154c7e942c795f76155eb33a0a3f701af5abf4747ef43a753ac71b167ea1f60a274e4c056913a2bc123d06ddb5e6bd2a7e0b8344bbb901b632c1f1dcaa0b1bec8dd06adbbe770e597912cf98180e31e5c1a3d558cd6bcdbccc7985d3c3f9469e1af9a8c44e0874995ced23146a57bf5ebe5c097b22d62ae0505971f7fcc1eea1c3e01340737435c8182202eca9a32128872a2572b79365361081f77aeb6927d6b1b70b1ea3b07f6060c4ef9ac2ca03a979b542de6261c53a691b759f3dfb3b7ee92d762c87de6d86c65b266fe31fa45b30d55ee0d3ef7ce2772ae023da18f1cdcacf274416433ce353e772b4edf996ba79afd91513a359500520ebc7a3fc8473fc5ba0e6f630b8aa6e96375b1e4e7568cb5165d70548874bb328aa8cb22acfa0b17a257fe35b702b6370918e31167c024a2df243a0ed56734704e8c9a6fe80771087a387f334b8680d23d8e19370e3db2c82777e160b2360bba1dbdf4711ebffc5ea61a72e4ea8042ed2b6d84d2f71fb651469b88bceed6facc1b3fa473d0fb065b703037a284719bae6cad27bf74f512e2749494449233540b2c2c0d577956af9b5d1860dee51d0d81c16c87bfdbb426d719f87794a1d329fbafe7764b1e801825ca35b5526e1a96d95d26c24210ba3a7a5f547866f2a746a32137fc76afcbdb0db695dc4ba5d06fdb323ca49f6b17b327cd838ef9f4f3e0576c1f1b89d9ca5c5ca01d95e87a4b35b3f5409155f94de44d98e90a9cf8ef25d582c9e395d4197e24507658e91bf096bdf4cf5e0721b90358d30c5f84bc91e8c66c44d62f793544a71fe777254139a21cd6023dc312fbe132dbfe2ba070a4b6c1afe2a6449e2f9179b1693e7657138cf6eebd61ec72ce19bba5ed09b68b3e2db39e9258a33299939b119d2dc2e8aff9cb3af79e0f4678dbbe90bcebc8bde79dbbcb374ed87e3dd318902f7b042a2ac48105aeadf075d570edf0eaef1cb9b2e5a5dffdac1b29bd63c1635dd8ffdd37a2fb2cf58cf2410a65d9bc7d63170174202df9dcf2e12c2df93baf678bbcc2732a66d2ebd12e89373d7d65e20e129e06d88e52e1f2361dd63323d8b7be96effaff2f51184cbbc47066b0898743b13c21dced0ce920440de8dfbbaf6066f1756455d83c81fadedb8826d4125eb550b8426244bf3171ed24fd65f6cc14719352f2cf60f2ba246f9b21cf41387021adba418cb0d85141050b51c09c414b62362a168d193761c68e9b2ae5a8d721bdc6ea1345169ebae00de77ee5bc12a323c0b9427637cc82a4bf64563b73bf4bab032a1c204857d4668717b88056f710ef374e3dbadb4ae46e5c163005fa90718f2d3b35e5e23efa1fccb07133170763cfda9dfb9f101363cfa33adf0eaa5cec1ac6d5d704be3bd0695ded4766d609f31fe8899c228cdb209c67d63e106dcf44ac1eef177f5693df424a8439d29b96c6c0f42fac8899fbdaa1ceea43ad4c1c504b606a18f6ae16c7646a3cdd9530e53fd9b2ccd2fa3a13cf2b30ff47633f1027c65999bb08760f38f8a9aab696dd69eea95a20271d958163d0dc04d72432795b0d658632493b7f0d44fd3af77d705fcd599cf8f0f481f169a73a53ef9f58854be75a264fec10e21af69ba8194f361e300bd9b681d03ae6fdc101c7ead6b9c97227df51a208e37ca2b21ef5a9fd5b5a3770ed3dcc38f64a95987982f9ea5c5522b060db04ff6abdf0290d8ca7aab763cfe8e741c72cd39fa0e6919ac92cd805111a5a18cbaf3ea36b07013cce7a20478aae0276cea23eb5dae0b0d6c806f693f5bcddd02758edc32af81aa4a957a09c4b49d748b499850541d0b71ff526c38585e27aa614526897a7f5cb8b4e0511a9f44f28970c1422a4a3b9a574a2b652ad4957da26ec00f31706b0575df88312a79be389cdc322db62e06682e1e733fbbf78014860f9b57076749aedb337fbfdea38f2fc6085629b54cbc9086ea0a807f7a37f95bdd5dd016a11aeb42333ab4eb9eb3d5cbf7b272992ddf9d124cfee6194d380c31c19c5906b57eae6ff2ce0a3ce3a057ad12102fa9ea0124d3fc4eb36cb7be42b2ec97d10478b9ba3cb43952ca7b759db77691e36cc847fc438714f82d92195d3fa87decb8d7faecd1080863e7c28d1d39c8e027bc1482a6b587841396bf38dd91e9616fa131c61f768571ffd06832c0a1b8a02a2d232870e4baaa4e7112c78850c2d96d77f240d8028530d2e27545f8076462565cb664b30aa9af861fdc4bb25009bcb50f30d00a7edda79bf46cd31e0774979dc14b36e86966d65535753bad3a14d1ab6baa42bebbbb483cac1806c30f5e993b14a184285316183174e35995d1556337862b93606e504d08e47d1554c67b810f1d09542adfc8673bb767f45d618c8f137618b87a388baac57503d2da1ea39ae47f43c34efbe245f5affdca08bad1b5d8208e29e4c45bd354a042517dd1c224a6e7aeec6ee936a9b1a788e117f2b647a0051c22028de87a76eb2e4fa4c54cbc1c4c84f8175b8e73a4fb0a4082375a5717e1e73661f1456d39b70dce1caa6578c6190ab95e3f053b37420b7e3080f1af5bf92fc3f13b6f66207b6f914b94d3901357866b6a84a542c123f41af784b2585c9d0d26887fe24ba40ecacc631f4a3da812ad3bed770f3d10cb502aa0107cf363d060dce1330ee0e029ea12a02873ad21ff78b5c4be0e1780950a4fa134548512a5840e3ced336732d0c9e5e316a2a79d71b1c5faaa89b567ed79eac7c3868ac27f880eda0a680991a575a09129a3aa35317c70d698bbbb66cd051868e9aa0aa25bb8e2ae826ba224993f2d801100fb6b14dd2ea0cededc42ced84bbd5b2f924b58028a3e9223eb95506b5ebd1fb538d0dde4a9444f7cde93c4133a816661a5b2d1cb33681a2998b088ab61eda4577a00f1f30c1a6e4ff8d9f1755080f932367d4ec2b4f6026867f5a2b7a935b722d50c14312c1778506783c294ccc0f412b048fb52634c629d093a83a11144c064ea04611fb3ec100405e26347986e5c80b9eed9d8cca272e8ff1d88fe20dc58c097109708e1b19bed4d51f2f172637301d125243050b849eed10a05eaf25705a6bad1d91a3708e68cb9871f1c7c35fcd357b6ce51cc34c85215b9d4b087e24c5b244c0da6607830e0cd3f16e112daa60b4f15ef843b3c81d0e8678ec3d827b782d52f53dfe135c4aaad1717f2c4fee584487196b84d8cf11be7c0cfe43d0238ec2ebf44ac2d69f7095fa2fd44b8b0399ec8aef9865ee1cfea42539796fd493501461506950a2f4a601f48ae42a41cbf6a2faa8f2bd7d06631a4a91c52f322432de92e1c3b31ae3cac2a0f7e93df9bebfed2ea284633aa0ff2d742b21239921da02f0cdde379becad6320444c43358af278cdbeba781b5217d3dccf0315442c3c556c2e993370bb7ae103119073eb1ce081c90405afa1d20f20dc8c1943d1737131538ab8faae55d9ca004fe10e277095df347eeffa2b6fb3230b851db8f9b702a7b6a53fa3f33340572e109ff50a86f3fbef4acda87937711c0e72929914b4e532d4e9e9548e93aa9618d61ce750c8c3c958ab3621cce793bdd8de0fde5db919d11ba335ca2e806b683c53aaaabf088b3ae9e37438627d200aaf5289de5e253e3d40a2b7a6cf79d8b411f58b00fe6f33fb391dde9339c9aec84b877cbd2c52dbac54477adcca6af4284738158005e41e5693120a669d3c228417a7add40ef4114dfa0cec18a8326de869b65ec93aff3b362f0c8014b93e86386baafa6b1d7a029288ecef7b1e0052a573f3240b24d850a4295859e9939741fa3c2e8b23ce5d4931430d17c62727d9885c05d9e652129e76c009b1edc0d7266d733b60f65b2ebf3626457a2ebb2bb0114a40ffa39dc2c2a19553320aca21c2312fbdf2acbb969065055fd8e9c2370c473b3d8ab8d045d2f78518eef4d92d81ba3676864157ab3371e6e94ea6af35b32c2ecaa6d33d2bee943e01bff816b4a2c705875c28ce84bbcffac4497bbc7089f3fb1e64b789beda2f9b39e56a6fec885e2dfe320d7c769c85f1771bf2f08374803acab4ccab849662c6bfcb53acdb297034457be5a393a70a4aded5e1060dd11cb3ecf338d8a8e19b3c9372da34a6d79221e326335c8b149c86995d23095f3f7ac34fd53c36131cfc3b7aa96c82811a9c363823563056b6e286ed0c74cc5e5ae2f2256b85e18e4b77d3c771526626554eb47d2973072d158f439f414dda6e3a46b1c07e95804da68cf5e1bd9580d3ff8ce14d5543d0da172fcf2e86a2c54503c542bf31dec99c18596a0a0f7abcd258e9d455815b2b427625823d129c4ab2f8810a1885adb2ed8b67f0d6e37a166259bfb14c829f8b40d2a43a7ea5b22c560bd0d8a57d67afc280ab1ac86dc3b32e8c98668db7786c6ef1ae18848d74fd1a83a03549e583d5403ff5312798e8da83404d5e49a91185c556b205fb89fad4184365c4deef3bee2ece91edbe16385e2618816f3dcb515e16e5223df33a41540d5be887ade324a290864dba652d96ecb8288a01400c018e12c07044b65774d777a961d44cb9283b4fad49f59153a9b0eee272899ffa7a7af2db4684c0df1985d40ebe05134764724263459cc4b4fa8b60a7a5f1ab2b9c1083e02f79e45ddb96d37873800559791c207e418729181a3a07403ff4cee2ff3b13cd5b6782d137a2955bb5eead3bd36ecab8372f332ad273711f6bbc6b0ee0dc7223b1ad6b049fa6c774a3ffb0f020614ee168f86c8870d4ee883b8ecb5239fd3f28850bf3b12ffabf75c8d6f04688bd3e6576c6077966a17fd4b917bb8b3d2e09b126de7fce481e8daf6f17041de63d745995b3c5f4a0af76df49ed2007bebfaafdc955373ad2a8e81a139fd3f554103845815b235da92edc6c88e6b9ba5f9a3f1677c4d5571d1961386255b50cb8862474862f0f09045000e7dda650315cbce35af728ca725ab7820b965e7cd8d2235c8e17daf79b14bf5c6630a22b46a3ef86dfeadef9e7bd5acadb6bf5c6e862b02c7f1ca92351df5db070afaca45c8ad0d202052e949de57894e933656054c38d878aa022d8d4385df7e30f33182142008359fcd770800441aeb7d12b3b018f2e83fe18936b008572a65355f054f4c0fb797db1977f0f4eb5d8b4cbfabfa91bd5159993901b6d6d0153a84a1e574b72ca3464e7b4d9a3c4199901dfd19c693e2ab970a2fdc2fae4aa774c60bb9aa4a92710199313597820f6bb47b8ef6b87b68040551891c2faed00358181a1564b61c202e75e06e9975bc3b17da1d2cc3d909fda34479e5dbd31a15aae97acfec7927dddd67a82b90add1c9366abbc968b208a8a74", 0x1000) ioctl$VT_WAITACTIVE(r4, 0x5607) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r7, 0x80044942, &(0x7f0000000100)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x143c41, 0x8c) fallocate(r8, 0x10, 0x6, 0x10001) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$ARCH_SHSTK_LOCK(0x1e, r9, 0x1, 0x5003) r10 = syz_clone(0x120000, &(0x7f0000000140)="024304b895ec522bbad9bee7b0498205e9a0f56da5f44b3dcc0f9c49684ccd95f0b6192642155cc21e2c793f54c15f486357ce3edc9dce4a89dce53e27bceef6e1340f65985a06e24f359212f1602f445c35e552af45f711eec341fca3d065aa2075504279ca8dba7aa8665b", 0x6c, &(0x7f0000000240), &(0x7f0000000300), &(0x7f00000004c0)="d8d21f67e2432e7f2b574a2b40a0097275023633caa6b5d17dbe1728cbec13489e28671185a29502f4d504bcddfbc9bf19967eeabfe56ba395f19a756f07c0c2d1d8db5d729d988d88d9f420ad8b6ea612e52d427d1ddb35522c177993957d609065ef8230950f41599e3e9c461908d0f19415745d27bcb37067a0c82664958e6b79d819bb0953d83346b4caf0c520c262952e0848b48fb1dcd5bb6d165b8eb95d2cb754d51c2eed4cd51f8e74d82984addaded767") r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r11, &(0x7f0000000340)={r8, r6, 0x8}) epoll_wait(r8, 0x0, 0x0, 0x8) 1.693016753s ago: executing program 7 (id=16571): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) flock(r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r5 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00'}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000840)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) write(r5, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc2000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000140)="2fb15e2340769a68fecb4aaa43b9779ac20d7632299a8e785678089adb4fc56012889d5d27994db58b4f4db8a65b3f4056d203480c04ece61039861b450cabb26fc30b79d495cc59c1450b54499dc21e922d44a6c36041209eecf5", &(0x7f00000001c0)=""/174, &(0x7f0000000580)="97f628b618fc81e4d23a3faf88a00ddd16308a32632366834c68223904facbec4d8d2e964e6019caad43238abf7d16cf2ecd3ffaccd031abad5ba1c1cad798205a6ab6084a04a87a9249dcd7b87913d9dffbe1191cfe37fe649f079be760bba1c58d11dd27a744382fb1ca60376cc605994dc0209bd7b8c33660c84c4a4c32f2342ee5db0c01812c1e3c22a494692ad1c868c8028d7abb46ed590005ff091a0dd6b813ea7ebc60ebeff7013420201f288eb5ffe8c32409d960907400d0c9373284286c3bd68fce07dea11d35a1d3afebd13df91e0f76ae3ae8", &(0x7f00000007c0)="934e836365ff94ec19b844b2f970c087e56e1d1860cf2ef1520ae71945826fd9ea29ace9d207a2d18e182c25cfd88b9ae542be9d66ebd1716b0a4fef600428d1daee3d75dc6ea823eb5a38588cb320bdafa9a0c8e57fad66edd599f5bf96fc0afd4ea0bf9aca407108988290aadb754dc420100499", 0x1ff, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) flock(r0, 0x1) 1.62020581s ago: executing program 1 (id=16572): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="1000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000032d565062b7476503697d9bf9f85000000b70000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioprio_get$pid(0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) io_uring_setup(0x1ce5, &(0x7f00000002c0)={0x0, 0xaa42, 0x8003, 0x2, 0x385}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x7, 0x4, 0x9, 0x0, 0x1000, 0x40814, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1}, 0x1008, 0xfffffffffffff334, 0x2, 0x2, 0x9, 0x9b, 0x5, 0x0, 0x52fa, 0x0, 0x5}, r4, 0x6, r2, 0x1) 1.187727453s ago: executing program 7 (id=16574): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_io_uring_setup(0x5c6, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0xe, "149674ca44bd880314dea5a1"}]}}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.073605964s ago: executing program 6 (id=16575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = memfd_secret(0x80000) setreuid(0x0, 0xee01) fcntl$setlease(r1, 0x400, 0x0) 1.028438608s ago: executing program 6 (id=16576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) 1.027485358s ago: executing program 8 (id=16577): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) flock(r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r5 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00'}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000840)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc2000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000140)="2fb15e2340769a68fecb4aaa43b9779ac20d7632299a8e785678089adb4fc56012889d5d27994db58b4f4db8a65b3f4056d203480c04ece61039861b450cabb26fc30b79d495cc59c1450b54499dc21e922d44a6c36041209eecf5", &(0x7f00000001c0)=""/174, &(0x7f0000000580)="97f628b618fc81e4d23a3faf88a00ddd16308a32632366834c68223904facbec4d8d2e964e6019caad43238abf7d16cf2ecd3ffaccd031abad5ba1c1cad798205a6ab6084a04a87a9249dcd7b87913d9dffbe1191cfe37fe649f079be760bba1c58d11dd27a744382fb1ca60376cc605994dc0209bd7b8c33660c84c4a4c32f2342ee5db0c01812c1e3c22a494692ad1c868c8028d7abb46ed590005ff091a0dd6b813ea7ebc60ebeff7013420201f288eb5ffe8c32409d960907400d0c9373284286c3bd68fce07dea11d35a1d3afebd13df91e0f76ae3ae8", &(0x7f00000007c0)="934e836365ff94ec19b844b2f970c087e56e1d1860cf2ef1520ae71945826fd9ea29ace9d207a2d18e182c25cfd88b9ae542be9d66ebd1716b0a4fef600428d1daee3d75dc6ea823eb5a38588cb320bdafa9a0c8e57fad66edd599f5bf96fc0afd4ea0bf9aca407108988290aadb754dc420100499", 0x1ff, 0xffffffffffffffff, 0x4}, 0x38) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) flock(r0, 0x1) 941.546627ms ago: executing program 6 (id=16578): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x284800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf25150000000a000600f0ffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r5 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r4, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write(r5, &(0x7f0000000f80)="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", 0x1000) ioctl$VT_WAITACTIVE(r4, 0x5607) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x143c41, 0x8c) fallocate(r6, 0x10, 0x6, 0x10001) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_wait(r6, 0x0, 0x0, 0x8) 941.163727ms ago: executing program 8 (id=16579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 919.556099ms ago: executing program 6 (id=16580): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x12, "149674ca44bd880314dea5a114111c32"}]}}}}}}}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 919.238039ms ago: executing program 8 (id=16581): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x4000) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @rumble={0xa8, 0x5}}) 333.668177ms ago: executing program 7 (id=16582): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='cachefiles_rename\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000000180)) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtfilter={0x15c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r11, {0xa, 0xffe0}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_ACT={0x12c, 0x1, [@m_vlan={0x128, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0xf9, 0x6, "9bfeffb461eb4b3c7eb7b3d1256d5856c02ff6fc5ceb8dc13f25ee0f732194c0b20e5278777010fb975c17ae32d3ae872bc72cab2e0a34da522fc4ae2eb7c735d67c15c8400b7656596fa349eaac3a14cbc0c85e78269dcea6fdb9ee8b44c189b2a9d025e27c03838ecf37272c91966c7bcf5d8e63fd04ef96e41d5d7800af3fdb81b1d2b940ba4be999f6ed95d7f0500dd2bbae2081892699a5b550727e502422bd767d5d008e7673ece64f500c9edfd52f188c6a9b96e251f43bf123cf1c6aade2fa4fe7356dfc95c9e6fe887232ba7692ed00f0cde60a7d9e9f32cc6a5291ddf94bdb1866318cae44203cf1d505761db1416376"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}]}}]}, 0x15c}}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r6) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 69.165992ms ago: executing program 6 (id=16583): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) flock(r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r5 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00'}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000840)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) write(r5, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc2000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000140)="2fb15e2340769a68fecb4aaa43b9779ac20d7632299a8e785678089adb4fc56012889d5d27994db58b4f4db8a65b3f4056d203480c04ece61039861b450cabb26fc30b79d495cc59c1450b54499dc21e922d44a6c36041209eecf5", &(0x7f00000001c0)=""/174, &(0x7f0000000580)="97f628b618fc81e4d23a3faf88a00ddd16308a32632366834c68223904facbec4d8d2e964e6019caad43238abf7d16cf2ecd3ffaccd031abad5ba1c1cad798205a6ab6084a04a87a9249dcd7b87913d9dffbe1191cfe37fe649f079be760bba1c58d11dd27a744382fb1ca60376cc605994dc0209bd7b8c33660c84c4a4c32f2342ee5db0c01812c1e3c22a494692ad1c868c8028d7abb46ed590005ff091a0dd6b813ea7ebc60ebeff7013420201f288eb5ffe8c32409d960907400d0c9373284286c3bd68fce07dea11d35a1d3afebd13df91e0f76ae3ae8", &(0x7f00000007c0)="934e836365ff94ec19b844b2f970c087e56e1d1860cf2ef1520ae71945826fd9ea29ace9d207a2d18e182c25cfd88b9ae542be9d66ebd1716b0a4fef600428d1daee3d75dc6ea823eb5a38588cb320bdafa9a0c8e57fad66edd599f5bf96fc0afd4ea0bf9aca407108988290aadb754dc420100499", 0x1ff, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) flock(r0, 0x1) 52.696454ms ago: executing program 7 (id=16584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 48.937595ms ago: executing program 8 (id=16585): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 29.392506ms ago: executing program 6 (id=16586): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=16587): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000800)='coda\x00', 0x1) fchmod(r2, 0x82) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5a5f}}, {@dioread_nolock}]}, 0x0, 0x64a, &(0x7f0000000180)="$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") r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x309440, 0x1b8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r4, 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="c76f39ff5123e3ac6b65f127f2645dda88eeeb4b94106c00"/33, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r6, 0x3) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) kernel console output (not intermixed with test programs): 090] __x64_sys_sendmsg+0xd4/0x160 [ 957.981904][T17090] x64_sys_call+0x191e/0x3000 [ 957.982017][T17090] do_syscall_64+0xd2/0x200 [ 957.982032][T17090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 957.982094][T17090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 957.982159][T17090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.982179][T17090] RIP: 0033:0x7fa33840efc9 [ 957.982271][T17090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.982290][T17090] RSP: 002b:00007fa336e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.982312][T17090] RAX: ffffffffffffffda RBX: 00007fa338666090 RCX: 00007fa33840efc9 [ 957.982326][T17090] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 957.982336][T17090] RBP: 00007fa338491f91 R08: 0000000000000000 R09: 0000000000000000 [ 957.982346][T17090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.982356][T17090] R13: 00007fa338666128 R14: 00007fa338666090 R15: 00007fff14d5cd28 [ 957.982374][T17090] [ 957.982616][T17090] memory: usage 307200kB, limit 307200kB, failcnt 1010 [ 958.146880][T17127] loop1: detected capacity change from 0 to 128 [ 958.147655][T17090] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 958.349091][T17090] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 958.356406][T17090] Memory cgroup stats for /syz5: [ 958.356648][T17090] cache 0 [ 958.364533][T17090] rss 4096 [ 958.364583][T17090] shmem 0 [ 958.364592][T17090] mapped_file 0 [ 958.364604][T17090] dirty 0 [ 958.364612][T17090] writeback 0 [ 958.364619][T17090] workingset_refault_anon 1498 [ 958.364629][T17090] workingset_refault_file 5312 [ 958.364637][T17090] swap 196608 [ 958.364643][T17090] swapcached 16384 [ 958.364649][T17090] pgpgin 1135272 [ 958.364657][T17090] pgpgout 1135260 [ 958.364665][T17090] pgfault 1207353 [ 958.364673][T17090] pgmajfault 416 [ 958.364681][T17090] inactive_anon 16384 [ 958.364691][T17090] active_anon 0 [ 958.364706][T17090] inactive_file 32768 [ 958.364762][T17090] active_file 0 [ 958.364844][T17090] unevictable 0 [ 958.364852][T17090] hierarchical_memory_limit 314572800 [ 958.364862][T17090] hierarchical_memsw_limit 9223372036854771712 [ 958.364873][T17090] total_cache 0 [ 958.364881][T17090] total_rss 4096 [ 958.364888][T17090] total_shmem 0 [ 958.364894][T17090] total_mapped_file 0 [ 958.364975][T17090] total_dirty 0 [ 958.364984][T17090] total_writeback 0 [ 958.364992][T17090] total_workingset_refault_anon 1498 [ 958.365011][T17090] total_workingset_refault_file 5312 [ 958.365018][T17090] total_swap 196608 [ 958.365024][T17090] total_swapcached 16384 [ 958.365030][T17090] total_pgpgin 1135272 [ 958.365036][T17090] total_pgpgout 1135260 [ 958.365115][T17090] total_pgfault 1207353 [ 958.365122][T17090] total_pgmajfault 416 [ 958.365129][T17090] total_inactive_anon 16384 [ 958.365136][T17090] total_active_anon 0 [ 958.365164][T17090] total_inactive_file 32768 [ 958.365171][T17090] total_active_file 0 [ 958.365177][T17090] total_unevictable 0 [ 958.365184][T17090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.16166,pid=17085,uid=0 [ 958.365263][T17090] Memory cgroup out of memory: Killed process 17085 (syz.5.16166) total-vm:93960kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 958.369757][T14095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.500340][T17137] __nla_validate_parse: 7 callbacks suppressed [ 958.500352][T17137] netlink: 64 bytes leftover after parsing attributes in process `syz.8.16181'. [ 958.500369][T17137] team0: No ports can be present during mode change [ 958.516161][T17139] loop8: detected capacity change from 0 to 128 [ 958.639336][T17088] Can't find ip_set type hash:ne†ž•t [ 958.741786][T17148] loop6: detected capacity change from 0 to 1024 [ 958.755384][T17152] loop5: detected capacity change from 0 to 512 [ 958.762147][T17152] EXT4-fs: Ignoring removed i_version option [ 958.763955][T17148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.768253][T17152] EXT4-fs: Ignoring removed bh option [ 958.803839][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.821090][T17155] loop7: detected capacity change from 0 to 512 [ 958.827691][T17155] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.836174][T17152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.848988][T17155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 958.857720][T17155] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 958.902593][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.927316][T17155] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16185: Allocating blocks 41-42 which overlap fs metadata [ 958.951572][T17162] loop6: detected capacity change from 0 to 512 [ 958.993423][T17162] EXT4-fs: Ignoring removed mblk_io_submit option [ 959.003954][T17155] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16185: Allocating blocks 41-42 which overlap fs metadata [ 959.019755][T17164] loop5: detected capacity change from 0 to 128 [ 959.029868][T17162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 959.038595][T17162] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 959.058648][T17155] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16185: Failed to acquire dquot type 1 [ 959.081686][T17155] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 959.101873][T17155] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16185: corrupted inode contents [ 959.116745][T17155] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.16185: mark_inode_dirty error [ 959.128497][T17155] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16185: corrupted inode contents [ 959.141299][T17155] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.16185: mark_inode_dirty error [ 959.152876][T17155] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16185: corrupted inode contents [ 959.174994][T17162] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.16187: Allocating blocks 41-42 which overlap fs metadata [ 959.178005][T17155] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 959.198500][T17155] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16185: corrupted inode contents [ 959.212094][T17162] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.16187: Allocating blocks 41-42 which overlap fs metadata [ 959.284373][T17170] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 959.435790][T17162] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.16187: Failed to acquire dquot type 1 [ 959.452131][T17155] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.16185: mark_inode_dirty error [ 959.500761][T17162] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 959.519098][T17172] loop1: detected capacity change from 0 to 1024 [ 959.527094][T17155] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 959.578000][T17155] EXT4-fs (loop7): 1 truncate cleaned up [ 959.589616][T17162] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16187: corrupted inode contents [ 959.607694][T17172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.624758][T17155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.657137][T17162] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #12: comm syz.6.16187: mark_inode_dirty error [ 959.657651][T17178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=17178 comm=syz.8.16191 [ 959.681549][T17162] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16187: corrupted inode contents [ 959.707778][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.716831][T17162] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.16187: mark_inode_dirty error [ 959.729152][T17162] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16187: corrupted inode contents [ 959.744211][T17162] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 959.757286][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16192'. [ 959.766816][T17162] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16187: corrupted inode contents [ 959.794219][T17162] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.16187: mark_inode_dirty error [ 959.814383][T17162] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 959.833355][T17162] EXT4-fs (loop6): 1 truncate cleaned up [ 959.845332][T17162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.936908][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.981209][T17188] loop5: detected capacity change from 0 to 512 [ 960.015435][T17188] EXT4-fs: Ignoring removed i_version option [ 960.021529][T17188] EXT4-fs: Ignoring removed bh option [ 960.077162][T17188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.104274][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x7 [ 960.111729][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.119162][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.126591][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.134068][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.141457][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.148904][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.156358][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.163753][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.171236][T26628] hid-generic 0006:0003:0000.0004: unknown main item tag 0x0 [ 960.264488][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.293186][T17201] loop6: detected capacity change from 0 to 1024 [ 960.300862][T26628] hid-generic 0006:0003:0000.0004: hidraw0: VIRTUAL HID v8b.5f Device [syz1] on syz0 [ 960.301442][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.327287][T17201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.510087][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.566524][T17210] loop7: detected capacity change from 0 to 1024 [ 960.595708][T17210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.608396][T17214] loop5: detected capacity change from 0 to 128 [ 960.671507][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.722621][T17219] loop6: detected capacity change from 0 to 512 [ 960.742272][T13434] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 960.753185][T13434] CPU: 1 UID: 0 PID: 13434 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 960.753295][T13434] Tainted: [W]=WARN [ 960.753301][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 960.753312][T13434] Call Trace: [ 960.753318][T13434] [ 960.753324][T13434] __dump_stack+0x1d/0x30 [ 960.753376][T13434] dump_stack_lvl+0xe8/0x140 [ 960.753417][T13434] dump_stack+0x15/0x1b [ 960.753431][T13434] dump_header+0x81/0x220 [ 960.753446][T13434] oom_kill_process+0x342/0x400 [ 960.753483][T13434] out_of_memory+0x979/0xb80 [ 960.753575][T13434] try_charge_memcg+0x610/0xa10 [ 960.753660][T13434] charge_memcg+0x51/0xc0 [ 960.753679][T13434] __mem_cgroup_charge+0x28/0xb0 [ 960.753772][T13434] filemap_add_folio+0x111/0x360 [ 960.753805][T13434] __filemap_get_folio+0x31e/0x650 [ 960.753934][T13434] filemap_fault+0x447/0xb60 [ 960.753963][T13434] __do_fault+0xbc/0x200 [ 960.753991][T13434] handle_mm_fault+0xf78/0x2be0 [ 960.754133][T17219] EXT4-fs: Ignoring removed i_version option [ 960.754019][T13434] ? vma_start_read+0x141/0x1f0 [ 960.754198][T13434] do_user_addr_fault+0x630/0x1080 [ 960.754229][T13434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 960.754315][T13434] exc_page_fault+0x62/0xa0 [ 960.754407][T13434] asm_exc_page_fault+0x26/0x30 [ 960.754495][T13434] RIP: 0033:0x7f25b1c75ed4 [ 960.754516][T13434] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f7 ea 00 48 01 d1 [ 960.754538][T13434] RSP: 002b:00007ffcadb2fc00 EFLAGS: 00010206 [ 960.754558][T13434] RAX: 0000001b34324000 RBX: 000000000000022e RCX: 00000000000ea600 [ 960.754573][T13434] RDX: 000000000a6f137c RSI: 00007ffcadb2fc90 RDI: 0000000000000001 [ 960.754656][T13434] RBP: 00007ffcadb2fc3c R08: 0000000027cd58c5 R09: 7fffffffffffffff [ 960.754672][T13434] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 960.754688][T13434] R13: 00000000000927c0 R14: 00000000000ea879 R15: 00007ffcadb2fc90 [ 960.754712][T13434] [ 960.754780][T13434] memory: usage 307200kB, limit 307200kB, failcnt 2748 [ 960.765760][T17219] EXT4-fs: Ignoring removed bh option [ 960.769504][T13434] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 960.861934][T17222] loop7: detected capacity change from 0 to 512 [ 960.866619][T13434] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 960.866678][T13434] Memory cgroup stats for /syz1: [ 960.867371][T13434] cache 0 [ 960.874516][T17219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.877302][T13434] rss 0 [ 960.883363][T17222] EXT4-fs: Ignoring removed mblk_io_submit option [ 960.886518][T13434] shmem 0 [ 960.886527][T13434] mapped_file 0 [ 960.886535][T13434] dirty 0 [ 960.886542][T13434] writeback 0 [ 960.886549][T13434] workingset_refault_anon 723 [ 960.907415][T17222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 960.912327][T13434] workingset_refault_file 14637 [ 960.920257][T17222] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 960.928261][T13434] swap 200704 [ 960.928271][T13434] swapcached 4096 [ 960.928280][T13434] pgpgin 1511514 [ 960.928288][T13434] pgpgout 1511501 [ 961.037122][T17222] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16205: Allocating blocks 41-42 which overlap fs metadata [ 961.044626][T13434] pgfault 1563710 [ 961.044636][T13434] pgmajfault 573 [ 961.044644][T13434] inactive_anon 0 [ 961.044650][T13434] active_anon 4096 [ 961.044667][T13434] inactive_file 0 [ 961.049852][T17222] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16205: Allocating blocks 41-42 which overlap fs metadata [ 961.058556][T13434] active_file 49152 [ 961.062262][T17222] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16205: Failed to acquire dquot type 1 [ 961.065522][T13434] unevictable 0 [ 961.094371][T17222] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, [ 961.097308][T13434] hierarchical_memory_limit 314572800 [ 961.101016][T17222] inode 12: [ 961.104784][T13434] hierarchical_memsw_limit 9223372036854771712 [ 961.118513][T17222] block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 961.119172][T17222] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16205: corrupted inode contents [ 961.122383][T13434] total_cache 0 [ 961.122394][T13434] total_rss 0 [ 961.122403][T13434] total_shmem 0 [ 961.133991][T17222] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.16205: mark_inode_dirty error [ 961.137254][T13434] total_mapped_file 0 [ 961.144984][T17222] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16205: corrupted inode contents [ 961.150167][T13434] total_dirty 0 [ 961.150178][T13434] total_writeback 0 [ 961.150185][T13434] total_workingset_refault_anon 723 [ 961.150193][T13434] total_workingset_refault_file 14637 [ 961.150200][T13434] total_swap 200704 [ 961.150206][T13434] total_swapcached 4096 [ 961.150212][T13434] total_pgpgin 1511514 [ 961.150219][T13434] total_pgpgout 1511501 [ 961.153518][T17222] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.16205: mark_inode_dirty error [ 961.159571][T13434] total_pgfault 1563710 [ 961.159582][T13434] total_pgmajfault 573 [ 961.159591][T13434] total_inactive_anon 0 [ 961.159600][T13434] total_active_anon 4096 [ 961.168291][T17222] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16205: corrupted inode contents [ 961.179807][T13434] total_inactive_file 0 [ 961.179820][T13434] total_active_file 49152 [ 961.179830][T13434] total_unevictable 0 [ 961.183416][T17222] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 961.186574][T13434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1 [ 961.190226][T17222] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16205: corrupted inode contents [ 961.201414][T13434] ,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1 [ 961.205845][T17222] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.16205: mark_inode_dirty error [ 961.217348][T13434] ,task=syz.1.16193,pid=17181,uid=0 [ 961.217377][T13434] Memory cgroup out of memory: Killed process 17181 (syz.1.16193) total-vm:93960kB, anon-rss:1264kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 961.233992][T17222] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 961.381810][T17222] EXT4-fs (loop7): 1 truncate cleaned up [ 961.387987][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.402798][T17222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.489809][T17234] loop1: detected capacity change from 0 to 512 [ 961.498206][T17234] EXT4-fs: Ignoring removed mblk_io_submit option [ 961.505542][T17234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 961.514303][T17234] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 961.557446][T17238] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.567286][T17238] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.583196][T17234] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.16207: Allocating blocks 41-42 which overlap fs metadata [ 961.622359][T17234] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.16207: Allocating blocks 41-42 which overlap fs metadata [ 961.640943][T17247] loop8: detected capacity change from 0 to 1024 [ 961.660203][T17238] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.669991][T17238] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.694393][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.703405][T17247] EXT4-fs (loop8): unsupported inode size: 143 [ 961.709621][T17247] EXT4-fs (loop8): blocksize: 1024 [ 961.717233][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16213'. [ 961.726677][T17234] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16207: Failed to acquire dquot type 1 [ 961.748522][T17234] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 961.765537][T17238] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.775402][T17238] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.817599][T17234] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16207: corrupted inode contents [ 961.854285][T17234] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.16207: mark_inode_dirty error [ 961.880373][T17234] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16207: corrupted inode contents [ 961.898200][T17238] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.908013][T17238] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.920099][T17256] loop7: detected capacity change from 0 to 512 [ 961.934763][T17234] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.16207: mark_inode_dirty error [ 961.964102][T17234] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16207: corrupted inode contents [ 961.984142][T17234] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 962.003052][T17234] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16207: corrupted inode contents [ 962.034040][T17234] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.16207: mark_inode_dirty error [ 962.077514][T17234] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 962.108286][ T4771] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.116598][ T4771] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.124826][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 962.124886][ T29] audit: type=1326 audit(962.064:205691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17255 comm="syz.5.16215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa33840efc9 code=0x0 [ 962.155490][T17256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.168510][ T4771] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.169095][T17234] EXT4-fs (loop1): 1 truncate cleaned up [ 962.176831][ T4771] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.177545][ T4771] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.184130][T17256] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.16214: corrupted inode contents [ 962.190701][ T4771] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.218949][ T4771] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.227178][ T4771] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.229740][T17234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.237378][T17256] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.16214: mark_inode_dirty error [ 962.259452][T17256] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.16214: corrupted inode contents [ 962.271606][T17256] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.16214: mark_inode_dirty error [ 962.276501][T17262] netlink: 'syz.8.16216': attribute type 12 has an invalid length. [ 962.320627][ T29] audit: type=1400 audit(962.274:205692): avc: denied { create } for pid=17255 comm="syz.5.16215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 962.340246][ T29] audit: type=1400 audit(962.274:205693): avc: denied { ioctl } for pid=17255 comm="syz.5.16215" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 962.365515][ T29] audit: type=1326 audit(962.284:205694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.388664][ T29] audit: type=1326 audit(962.284:205695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.411860][ T29] audit: type=1326 audit(962.284:205696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.435141][ T29] audit: type=1326 audit(962.284:205697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.458318][ T29] audit: type=1326 audit(962.284:205698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.481498][ T29] audit: type=1326 audit(962.284:205699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.504706][ T29] audit: type=1326 audit(962.284:205700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17261 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdad9efc9 code=0x7ffc0000 [ 962.562228][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.611846][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.665535][T17276] loop1: detected capacity change from 0 to 128 [ 962.840198][T17285] loop7: detected capacity change from 0 to 512 [ 962.847073][T17285] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.854135][T17285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 962.862826][T17285] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 962.898793][T17285] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16222: Allocating blocks 41-42 which overlap fs metadata [ 963.004275][T17285] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16222: Failed to acquire dquot type 1 [ 963.024184][T17285] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 963.043998][T17285] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16222: corrupted inode contents [ 963.094186][T17285] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.16222: mark_inode_dirty error [ 963.114181][T17285] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16222: corrupted inode contents [ 963.164114][T17285] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.16222: mark_inode_dirty error [ 963.179422][T17285] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16222: corrupted inode contents [ 963.238987][T17285] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 963.239115][T17285] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16222: corrupted inode contents [ 963.239227][T17285] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.16222: mark_inode_dirty error [ 963.239400][T17285] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 963.239574][T17285] EXT4-fs (loop7): 1 truncate cleaned up [ 963.240279][T17285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.267307][T17300] loop5: detected capacity change from 0 to 128 [ 963.729770][T17310] loop1: detected capacity change from 0 to 2048 [ 963.787000][T17310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 963.830379][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 964.080237][T17314] loop1: detected capacity change from 0 to 1024 [ 964.160838][T17314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.181518][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.195184][T17319] loop1: detected capacity change from 0 to 128 [ 964.197682][T17320] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16231'. [ 964.244370][T17320] FAULT_INJECTION: forcing a failure. [ 964.244370][T17320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.244397][T17320] CPU: 0 UID: 0 PID: 17320 Comm: syz.5.16231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 964.244423][T17320] Tainted: [W]=WARN [ 964.244429][T17320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 964.244441][T17320] Call Trace: [ 964.244448][T17320] [ 964.244456][T17320] __dump_stack+0x1d/0x30 [ 964.244486][T17320] dump_stack_lvl+0xe8/0x140 [ 964.244509][T17320] dump_stack+0x15/0x1b [ 964.244527][T17320] should_fail_ex+0x265/0x280 [ 964.244641][T17320] should_fail+0xb/0x20 [ 964.244663][T17320] should_fail_usercopy+0x1a/0x20 [ 964.244685][T17320] _copy_from_iter+0xd2/0xe80 [ 964.244709][T17320] ? __build_skb_around+0x1ab/0x200 [ 964.244740][T17320] ? __alloc_skb+0x223/0x320 [ 964.244846][T17320] netlink_sendmsg+0x471/0x6b0 [ 964.244874][T17320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.244895][T17320] __sock_sendmsg+0x145/0x180 [ 964.244916][T17320] ____sys_sendmsg+0x31e/0x4e0 [ 964.245044][T17320] ___sys_sendmsg+0x17b/0x1d0 [ 964.245094][T17320] __x64_sys_sendmsg+0xd4/0x160 [ 964.245216][T17320] x64_sys_call+0x191e/0x3000 [ 964.245243][T17320] do_syscall_64+0xd2/0x200 [ 964.245264][T17320] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 964.245324][T17320] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 964.245425][T17320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.245443][T17320] RIP: 0033:0x7fa33840efc9 [ 964.245459][T17320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.245480][T17320] RSP: 002b:00007fa336e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.245501][T17320] RAX: ffffffffffffffda RBX: 00007fa338665fa0 RCX: 00007fa33840efc9 [ 964.245516][T17320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 964.245598][T17320] RBP: 00007fa336e77090 R08: 0000000000000000 R09: 0000000000000000 [ 964.245612][T17320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.245625][T17320] R13: 00007fa338666038 R14: 00007fa338665fa0 R15: 00007fff14d5cd28 [ 964.245647][T17320] [ 964.354553][T17323] Cannot find add_set index 0 as target [ 964.548507][T17334] Cannot find add_set index 0 as target [ 965.028860][T17344] loop8: detected capacity change from 0 to 1024 [ 965.154615][T17344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.182300][T17349] loop1: detected capacity change from 0 to 512 [ 965.212354][T17343] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 965.221752][T17349] EXT4-fs: Ignoring removed mblk_io_submit option [ 965.250339][T17353] loop7: detected capacity change from 0 to 1024 [ 965.260117][T17349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 965.268874][T17349] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 965.305125][T17353] EXT4-fs (loop7): unsupported inode size: 143 [ 965.311382][T17353] EXT4-fs (loop7): blocksize: 1024 [ 965.324861][T17344] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 42: comm syz.8.16240: bad entry in directory: rec_len % 4 != 0 - offset=10240, inode=0, rec_len=151, size=1024 fake=0 [ 965.365735][T17349] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.16241: Allocating blocks 41-42 which overlap fs metadata [ 965.474665][T17349] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.16241: Allocating blocks 41-42 which overlap fs metadata [ 965.513071][T17356] Cannot find add_set index 0 as target [ 965.550783][T17349] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16241: Failed to acquire dquot type 1 [ 965.582695][T17366] Cannot find add_set index 0 as target [ 965.588913][T17349] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 965.631847][T17349] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16241: corrupted inode contents [ 965.657106][T17349] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.16241: mark_inode_dirty error [ 965.688337][T17349] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16241: corrupted inode contents [ 965.713694][T17349] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.16241: mark_inode_dirty error [ 965.735262][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16245'. [ 965.754593][T17380] netlink: 'syz.7.16250': attribute type 21 has an invalid length. [ 965.762558][T17380] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16250'. [ 965.771734][T17380] netlink: 'syz.7.16250': attribute type 1 has an invalid length. [ 965.790149][T17349] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16241: corrupted inode contents [ 965.823863][T17370] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16245'. [ 965.824972][T17349] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 965.850217][T17349] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.16241: corrupted inode contents [ 965.862558][T17349] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.16241: mark_inode_dirty error [ 965.898023][T17349] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 965.907542][T17349] EXT4-fs (loop1): 1 truncate cleaned up [ 966.006606][T17389] loop6: detected capacity change from 0 to 1024 [ 966.029819][T17394] netlink: 64 bytes leftover after parsing attributes in process `syz.8.16258'. [ 966.045622][T17389] EXT4-fs (loop6): unsupported inode size: 143 [ 966.051881][T17389] EXT4-fs (loop6): blocksize: 1024 [ 966.067420][T17394] team0: No ports can be present during mode change [ 966.221353][T17392] loop1: detected capacity change from 0 to 4096 [ 966.232618][T17392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.379775][T17404] netlink: 64 bytes leftover after parsing attributes in process `syz.8.16261'. [ 966.548206][T17407] loop7: detected capacity change from 0 to 1024 [ 966.551246][T17404] ipvlan2: entered promiscuous mode [ 966.581624][T17407] EXT4-fs (loop7): unsupported inode size: 143 [ 966.587846][T17407] EXT4-fs (loop7): blocksize: 1024 [ 966.704031][T17415] loop8: detected capacity change from 0 to 1024 [ 966.712257][T17412] loop6: detected capacity change from 0 to 1024 [ 966.719562][T17415] EXT4-fs (loop8): unsupported inode size: 143 [ 966.725825][T17415] EXT4-fs (loop8): blocksize: 1024 [ 966.811766][T17412] EXT4-fs (loop6): unsupported inode size: 143 [ 966.818051][T17412] EXT4-fs (loop6): blocksize: 1024 [ 966.897887][T17423] loop7: detected capacity change from 0 to 1024 [ 967.134437][ T29] kauditd_printk_skb: 1456 callbacks suppressed [ 967.134468][ T29] audit: type=1326 audit(967.114:207150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.136448][T17438] loop6: detected capacity change from 0 to 128 [ 967.141148][ T29] audit: type=1326 audit(967.114:207151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.194168][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16269'. [ 967.219448][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16269'. [ 967.234648][ T29] audit: type=1326 audit(967.214:207152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.263879][ T29] audit: type=1326 audit(967.234:207153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.287093][ T29] audit: type=1326 audit(967.234:207154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.310275][ T29] audit: type=1326 audit(967.234:207155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.333511][ T29] audit: type=1326 audit(967.234:207156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.356689][ T29] audit: type=1326 audit(967.234:207157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.379858][ T29] audit: type=1326 audit(967.234:207158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.406527][ T29] audit: type=1326 audit(967.284:207159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.5.16265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa338441885 code=0x7ffc0000 [ 967.456814][T17444] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.478133][ T4723] Bluetooth: hci0: Frame reassembly failed (-84) [ 967.547132][T17444] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.563381][T17448] FAULT_INJECTION: forcing a failure. [ 967.563381][T17448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.576511][T17448] CPU: 0 UID: 0 PID: 17448 Comm: syz.8.16273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 967.576554][T17448] Tainted: [W]=WARN [ 967.576560][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 967.576570][T17448] Call Trace: [ 967.576576][T17448] [ 967.576582][T17448] __dump_stack+0x1d/0x30 [ 967.576600][T17448] dump_stack_lvl+0xe8/0x140 [ 967.576617][T17448] dump_stack+0x15/0x1b [ 967.576706][T17448] should_fail_ex+0x265/0x280 [ 967.576777][T17448] should_fail+0xb/0x20 [ 967.576789][T17448] should_fail_usercopy+0x1a/0x20 [ 967.576806][T17448] _copy_from_user+0x1c/0xb0 [ 967.576831][T17448] ___sys_sendmsg+0xc1/0x1d0 [ 967.576909][T17448] __x64_sys_sendmsg+0xd4/0x160 [ 967.577019][T17448] x64_sys_call+0x191e/0x3000 [ 967.577046][T17448] do_syscall_64+0xd2/0x200 [ 967.577133][T17448] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 967.577223][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.577238][T17448] RIP: 0033:0x7f1fdad9efc9 [ 967.577249][T17448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.577308][T17448] RSP: 002b:00007f1fd97ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.577322][T17448] RAX: ffffffffffffffda RBX: 00007f1fdaff5fa0 RCX: 00007f1fdad9efc9 [ 967.577365][T17448] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 967.577374][T17448] RBP: 00007f1fd97ff090 R08: 0000000000000000 R09: 0000000000000000 [ 967.577434][T17448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.577444][T17448] R13: 00007f1fdaff6038 R14: 00007f1fdaff5fa0 R15: 00007ffe3f280998 [ 967.577460][T17448] [ 967.756000][T17444] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.805720][T17444] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.870735][T17689] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.882082][T17689] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.893098][T17689] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.903796][T17689] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.941125][ T4731] Bluetooth: hci1: Frame reassembly failed (-84) [ 968.022793][T17464] loop6: detected capacity change from 0 to 1024 [ 968.030020][T17464] EXT4-fs (loop6): unsupported inode size: 143 [ 968.036253][T17464] EXT4-fs (loop6): blocksize: 1024 [ 968.175828][T17470] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.185742][T17470] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.235507][T17470] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.245359][T17470] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.305387][T17470] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.315157][T17470] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.345486][T17470] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.355288][T17470] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.420701][ T4723] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.428948][ T4723] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.440833][ T4723] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.449132][ T4723] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.460392][ T4723] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.468646][ T4723] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.479903][ T4723] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.488144][ T4723] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.528051][T17473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16282'. [ 968.537278][T17473] team0: Unable to change to the same mode the team is in [ 968.648769][T17478] loop8: detected capacity change from 0 to 2048 [ 968.682869][T17478] loop8: p1 < > p4 [ 968.692166][T17478] loop8: p4 size 8388608 extends beyond EOD, truncated [ 968.723266][T17488] loop8: detected capacity change from 0 to 128 [ 968.919513][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.928006][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.503574][T17493] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.533999][ T4119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 969.534216][T14190] Bluetooth: hci0: command 0x1003 tx timeout [ 969.548949][T17493] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.627899][T17507] loop8: detected capacity change from 0 to 128 [ 969.634747][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16293'. [ 969.644949][T17493] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.696824][T17493] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.791207][T17689] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.804129][T17689] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.831370][T17689] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.843547][T17518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16299'. [ 969.853476][T17689] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.906715][T17527] xt_hashlimit: size too large, truncated to 1048576 [ 969.996768][T17534] loop8: detected capacity change from 0 to 128 [ 970.014035][ T4119] Bluetooth: hci1: command 0x1003 tx timeout [ 970.029171][T13535] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 970.087261][T17539] loop7: detected capacity change from 0 to 2048 [ 970.161387][T17539] loop7: p1 < > p4 [ 970.168814][T17539] loop7: p4 size 8388608 extends beyond EOD, truncated [ 970.750931][T17558] loop1: detected capacity change from 0 to 4096 [ 970.767508][T17558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 970.981977][T17572] loop8: detected capacity change from 0 to 1024 [ 971.192725][T17561] syz.6.16316 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 971.203876][T17561] CPU: 1 UID: 0 PID: 17561 Comm: syz.6.16316 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 971.203909][T17561] Tainted: [W]=WARN [ 971.203916][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 971.203946][T17561] Call Trace: [ 971.203954][T17561] [ 971.203961][T17561] __dump_stack+0x1d/0x30 [ 971.203980][T17561] dump_stack_lvl+0xe8/0x140 [ 971.203997][T17561] dump_stack+0x15/0x1b [ 971.204012][T17561] dump_header+0x81/0x220 [ 971.204109][T17561] oom_kill_process+0x342/0x400 [ 971.204186][T17561] out_of_memory+0x979/0xb80 [ 971.204219][T17561] try_charge_memcg+0x610/0xa10 [ 971.204256][T17561] charge_memcg+0x51/0xc0 [ 971.204354][T17561] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 971.204379][T17561] __read_swap_cache_async+0x17b/0x2d0 [ 971.204405][T17561] swap_cluster_readahead+0x262/0x3c0 [ 971.204431][T17561] swapin_readahead+0xde/0x6f0 [ 971.204493][T17561] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 971.204526][T17561] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 971.204624][T17561] ? __rcu_read_unlock+0x4f/0x70 [ 971.204646][T17561] ? swap_cache_get_folio+0x277/0x280 [ 971.204664][T17561] do_swap_page+0x2ae/0x2370 [ 971.204737][T17561] ? css_rstat_updated+0xb7/0x240 [ 971.204754][T17561] ? __pfx_default_wake_function+0x10/0x10 [ 971.204787][T17561] handle_mm_fault+0x9a5/0x2be0 [ 971.204882][T17561] ? vma_start_read+0x141/0x1f0 [ 971.204918][T17561] do_user_addr_fault+0x630/0x1080 [ 971.204987][T17561] ? fpregs_restore_userregs+0xe2/0x1d0 [ 971.205077][T17561] ? switch_fpu_return+0xe/0x20 [ 971.205104][T17561] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 971.205179][T17561] exc_page_fault+0x62/0xa0 [ 971.205232][T17561] asm_exc_page_fault+0x26/0x30 [ 971.205323][T17561] RIP: 0033:0x7f7db54258c8 [ 971.205337][T17561] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 24 38 00 00 0f 8e 09 fe ff ff e8 f3 9b fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 [ 971.205354][T17561] RSP: 002b:00007fff158a0690 EFLAGS: 00010206 [ 971.205423][T17561] RAX: 00000000000ed190 RBX: 00007f7db57a7da0 RCX: 00000000000ed0f8 [ 971.205435][T17561] RDX: 0000000000000098 RSI: 00007fff158a0670 RDI: 0000000000000001 [ 971.205446][T17561] RBP: 00007f7db57a7da0 R08: 000000000911cee4 R09: 7fffffffffffffff [ 971.205458][T17561] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000ed23f [ 971.205469][T17561] R13: 00007fff158a0780 R14: ffffffffffffffff R15: 00007fff158a07a0 [ 971.205487][T17561] [ 971.444955][T17561] memory: usage 307200kB, limit 307200kB, failcnt 4272 [ 971.451834][T17561] memory+swap: usage 307940kB, limit 9007199254740988kB, failcnt 0 [ 971.459973][T17561] kmem: usage 239656kB, limit 9007199254740988kB, failcnt 0 [ 971.467338][T17561] Memory cgroup stats for /syz6: [ 971.474164][T17561] cache 69120000 [ 971.482722][T17561] rss 0 [ 971.485505][T17561] shmem 0 [ 971.488445][T17561] mapped_file 0 [ 971.491915][T17561] dirty 0 [ 971.494891][T17561] writeback 0 [ 971.498172][T17561] workingset_refault_anon 1357 [ 971.502955][T17561] workingset_refault_file 160 [ 971.507658][T17561] swap 757760 [ 971.511008][T17561] swapcached 4096 [ 971.514644][T17561] pgpgin 1274885 [ 971.518255][T17561] pgpgout 1257999 [ 971.521912][T17561] pgfault 1125402 [ 971.525571][T17561] pgmajfault 770 [ 971.529147][T17561] inactive_anon 0 [ 971.532794][T17561] active_anon 4096 [ 971.536615][T17561] inactive_file 0 [ 971.540248][T17561] active_file 40960 [ 971.544136][T17561] unevictable 69120000 [ 971.548214][T17561] hierarchical_memory_limit 314572800 [ 971.553617][T17561] hierarchical_memsw_limit 9223372036854771712 [ 971.559891][T17561] total_cache 69120000 [ 971.564322][T17561] total_rss 0 [ 971.567728][T17561] total_shmem 0 [ 971.571190][T17561] total_mapped_file 0 [ 971.575270][T17561] total_dirty 0 [ 971.578733][T17561] total_writeback 0 [ 971.582551][T17561] total_workingset_refault_anon 1357 [ 971.587998][T17561] total_workingset_refault_file 160 [ 971.592694][T17582] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16320'. [ 971.593194][T17561] total_swap 757760 [ 971.593204][T17561] total_swapcached 4096 [ 971.610236][T17561] total_pgpgin 1274885 [ 971.614401][T17561] total_pgpgout 1257999 [ 971.618579][T17561] total_pgfault 1125402 [ 971.622772][T17561] total_pgmajfault 770 [ 971.624084][T17582] IPVS: Error connecting to the multicast addr [ 971.626866][T17561] total_inactive_anon 0 [ 971.637164][T17561] total_active_anon 4096 [ 971.637585][T17582] loop8: detected capacity change from 0 to 128 [ 971.641395][T17561] total_inactive_file 0 [ 971.651810][T17561] total_active_file 40960 [ 971.656186][T17561] total_unevictable 69120000 [ 971.660768][T17561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.16316,pid=17561,uid=0 [ 971.675860][T17561] Memory cgroup out of memory: Killed process 17561 (syz.6.16316) total-vm:96008kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 971.748299][T17582] syz.8.16320: attempt to access beyond end of device [ 971.748299][T17582] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 971.765196][T17590] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 971.781699][T17595] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.811190][T17582] syz.8.16320: attempt to access beyond end of device [ 971.811190][T17582] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 971.834190][T17582] syz.8.16320: attempt to access beyond end of device [ 971.834190][T17582] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 971.848992][T17598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16327'. [ 971.858229][T17598] team0: No ports can be present during mode change [ 971.882730][T17582] syz.8.16320: attempt to access beyond end of device [ 971.882730][T17582] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 971.896565][T17582] syz.8.16320: attempt to access beyond end of device [ 971.896565][T17582] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 971.910223][T17582] syz.8.16320: attempt to access beyond end of device [ 971.910223][T17582] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 971.911061][T17595] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.924354][T17582] syz.8.16320: attempt to access beyond end of device [ 971.924354][T17582] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 971.950651][T17582] syz.8.16320: attempt to access beyond end of device [ 971.950651][T17582] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 971.964386][T17582] syz.8.16320: attempt to access beyond end of device [ 971.964386][T17582] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 971.983250][T17601] loop1: detected capacity change from 0 to 1024 [ 971.990728][T17582] syz.8.16320: attempt to access beyond end of device [ 971.990728][T17582] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 972.015480][T17595] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.095939][T17595] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.148667][ T29] kauditd_printk_skb: 4553 callbacks suppressed [ 972.148684][ T29] audit: type=1326 audit(972.124:211713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b1d9efc9 code=0x7ffc0000 [ 972.178499][T17609] loop1: detected capacity change from 0 to 1024 [ 972.187945][ T29] audit: type=1326 audit(972.124:211714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25b1d9efc9 code=0x7ffc0000 [ 972.211128][ T29] audit: type=1326 audit(972.124:211715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25b1d9f003 code=0x7ffc0000 [ 972.234274][ T29] audit: type=1326 audit(972.134:211716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25b1d9da7f code=0x7ffc0000 [ 972.257283][ T29] audit: type=1326 audit(972.134:211717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25b1d9f057 code=0x7ffc0000 [ 972.280422][ T29] audit: type=1326 audit(972.134:211718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b1d9d810 code=0x7ffc0000 [ 972.303588][ T29] audit: type=1326 audit(972.134:211719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25b1d9ebcb code=0x7ffc0000 [ 972.326631][ T29] audit: type=1326 audit(972.164:211720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25b1d9dc2a code=0x7ffc0000 [ 972.349666][ T29] audit: type=1326 audit(972.164:211721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25b1d9dc2a code=0x7ffc0000 [ 972.372640][ T29] audit: type=1326 audit(972.164:211722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.1.16331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f25b1d9d717 code=0x7ffc0000 [ 972.875241][T17613] syz.6.16332 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 972.889477][T17613] CPU: 1 UID: 0 PID: 17613 Comm: syz.6.16332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 972.889528][T17613] Tainted: [W]=WARN [ 972.889534][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 972.889606][T17613] Call Trace: [ 972.889614][T17613] [ 972.889623][T17613] __dump_stack+0x1d/0x30 [ 972.889645][T17613] dump_stack_lvl+0xe8/0x140 [ 972.889666][T17613] dump_stack+0x15/0x1b [ 972.889686][T17613] dump_header+0x81/0x220 [ 972.889706][T17613] oom_kill_process+0x342/0x400 [ 972.889813][T17613] out_of_memory+0x979/0xb80 [ 972.889881][T17613] try_charge_memcg+0x610/0xa10 [ 972.889912][T17613] obj_cgroup_charge_pages+0xa6/0x150 [ 972.889931][T17613] __memcg_kmem_charge_page+0x9f/0x170 [ 972.889949][T17613] __alloc_frozen_pages_noprof+0x188/0x360 [ 972.890137][T17613] alloc_pages_mpol+0xb3/0x260 [ 972.890155][T17613] ? alloc_pages_noprof+0x61/0x130 [ 972.890174][T17613] alloc_pages_noprof+0x90/0x130 [ 972.890248][T17613] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 972.890288][T17613] __kvmalloc_node_noprof+0x483/0x670 [ 972.890388][T17613] ? ip_set_alloc+0x24/0x30 [ 972.890430][T17613] ? ip_set_alloc+0x24/0x30 [ 972.890461][T17613] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 972.890496][T17613] ip_set_alloc+0x24/0x30 [ 972.890519][T17613] hash_netiface_create+0x282/0x740 [ 972.890607][T17613] ? __pfx_hash_netiface_create+0x10/0x10 [ 972.890641][T17613] ip_set_create+0x3cc/0x970 [ 972.890777][T17613] ? __nla_parse+0x40/0x60 [ 972.890799][T17613] nfnetlink_rcv_msg+0x4c6/0x590 [ 972.890850][T17613] netlink_rcv_skb+0x123/0x220 [ 972.890886][T17613] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 972.891044][T17613] nfnetlink_rcv+0x167/0x16c0 [ 972.891106][T17613] ? kmem_cache_free+0xe4/0x3d0 [ 972.891200][T17613] ? __kfree_skb+0x109/0x150 [ 972.891226][T17613] ? nlmon_xmit+0x4f/0x60 [ 972.891315][T17613] ? consume_skb+0x49/0x150 [ 972.891347][T17613] ? nlmon_xmit+0x4f/0x60 [ 972.891447][T17613] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 972.891480][T17613] ? __dev_queue_xmit+0x1200/0x2000 [ 972.891579][T17613] ? __dev_queue_xmit+0x182/0x2000 [ 972.891641][T17613] ? merge_sched_in+0x605/0xa30 [ 972.891679][T17613] ? ref_tracker_free+0x37d/0x3e0 [ 972.891723][T17613] ? __netlink_deliver_tap+0x4dc/0x500 [ 972.891760][T17613] netlink_unicast+0x5c0/0x690 [ 972.891858][T17613] netlink_sendmsg+0x58b/0x6b0 [ 972.891914][T17613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.892012][T17613] __sock_sendmsg+0x145/0x180 [ 972.892043][T17613] ____sys_sendmsg+0x31e/0x4e0 [ 972.892081][T17613] ___sys_sendmsg+0x17b/0x1d0 [ 972.892193][T17613] __x64_sys_sendmsg+0xd4/0x160 [ 972.892253][T17613] x64_sys_call+0x191e/0x3000 [ 972.892338][T17613] do_syscall_64+0xd2/0x200 [ 972.892355][T17613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 972.892383][T17613] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 972.892413][T17613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.892457][T17613] RIP: 0033:0x7f7db554efc9 [ 972.892474][T17613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.892521][T17613] RSP: 002b:00007f7db3fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.892540][T17613] RAX: ffffffffffffffda RBX: 00007f7db57a5fa0 RCX: 00007f7db554efc9 [ 972.892551][T17613] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 972.892630][T17613] RBP: 00007f7db55d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 972.892641][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.892652][T17613] R13: 00007f7db57a6038 R14: 00007f7db57a5fa0 R15: 00007fff158a0528 [ 972.892668][T17613] [ 972.892674][T17613] memory: usage 307200kB, limit 307200kB, failcnt 4550 [ 973.239702][T17630] loop8: detected capacity change from 0 to 1024 [ 973.245361][T17613] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 973.245377][T17613] kmem: usage 239632kB, limit 9007199254740988kB, failcnt 0 [ 973.249398][T17630] EXT4-fs (loop8): unsupported inode size: 143 [ 973.255282][T17613] Memory cgroup stats for /syz6: [ 973.261655][T17630] EXT4-fs (loop8): blocksize: 1024 [ 973.272969][T17613] cache 69120000 [ 973.296676][T17613] rss 20480 [ 973.299787][T17613] shmem 0 [ 973.302729][T17613] mapped_file 0 [ 973.306203][T17613] dirty 0 [ 973.309180][T17613] writeback 0 [ 973.312464][T17613] workingset_refault_anon 1413 [ 973.317240][T17613] workingset_refault_file 160 [ 973.321950][T17613] swap 733184 [ 973.325253][T17613] swapcached 28672 [ 973.329204][T17613] pgpgin 1275007 [ 973.332865][T17613] pgpgout 1258115 [ 973.336546][T17613] pgfault 1125593 [ 973.340173][T17613] pgmajfault 811 [ 973.343714][T17613] inactive_anon 24576 [ 973.347793][T17613] active_anon 4096 [ 973.351513][T17613] inactive_file 0 [ 973.355175][T17613] active_file 40960 [ 973.358971][T17613] unevictable 69120000 [ 973.363156][T17613] hierarchical_memory_limit 314572800 [ 973.368625][T17613] hierarchical_memsw_limit 9223372036854771712 [ 973.374858][T17613] total_cache 69120000 [ 973.378943][T17613] total_rss 20480 [ 973.382633][T17613] total_shmem 0 [ 973.385949][T17635] loop1: detected capacity change from 0 to 512 [ 973.386112][T17613] total_mapped_file 0 [ 973.392752][T17635] EXT4-fs: Ignoring removed nobh option [ 973.396305][T17613] total_dirty 0 [ 973.396315][T17613] total_writeback 0 [ 973.396323][T17613] total_workingset_refault_anon 1413 [ 973.414445][T17613] total_workingset_refault_file 160 [ 973.419684][T17613] total_swap 733184 [ 973.423503][T17613] total_swapcached 28672 [ 973.425481][T17635] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.16340: corrupted inode contents [ 973.427785][T17613] total_pgpgin 1275007 [ 973.440035][T17635] EXT4-fs (loop1): Remounting filesystem read-only [ 973.443644][T17613] total_pgpgout 1258115 [ 973.443655][T17613] total_pgfault 1125593 [ 973.450909][T17635] EXT4-fs (loop1): 1 truncate cleaned up [ 973.454467][T17613] total_pgmajfault 811 [ 973.454478][T17613] total_inactive_anon 24576 [ 973.454488][T17613] total_active_anon 4096 [ 973.454497][T17613] total_inactive_file 0 [ 973.481617][T17613] total_active_file 40960 [ 973.485947][T17613] total_unevictable 69120000 [ 973.490535][T17613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.16332,pid=17611,uid=0 [ 973.505638][T17613] Memory cgroup out of memory: Killed process 17611 (syz.6.16332) total-vm:93960kB, anon-rss:1132kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 973.595252][T17639] xt_hashlimit: size too large, truncated to 1048576 [ 973.613977][ T4119] Bluetooth: hci0: command 0x1003 tx timeout [ 973.615222][T13535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 973.800504][T17653] netlink: 'syz.7.16345': attribute type 12 has an invalid length. [ 973.824644][T17656] loop8: detected capacity change from 0 to 1024 [ 973.876661][T17664] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16348'. [ 973.886114][T17664] team0: No ports can be present during mode change [ 973.907810][ T4769] Bluetooth: hci0: Frame reassembly failed (-84) [ 973.959853][T17681] netlink: 'syz.8.16356': attribute type 4 has an invalid length. [ 973.969324][T17681] netlink: 'syz.8.16356': attribute type 4 has an invalid length. [ 973.980222][T17681] netlink: 64 bytes leftover after parsing attributes in process `syz.8.16356'. [ 974.018274][T17683] loop6: detected capacity change from 0 to 512 [ 974.026054][T17683] EXT4-fs: Ignoring removed mblk_io_submit option [ 974.033004][T17683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 974.041853][T17683] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 974.055213][T17683] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.16353: Allocating blocks 41-42 which overlap fs metadata [ 974.069443][T17683] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.16353: Failed to acquire dquot type 1 [ 974.081070][T17683] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 974.095823][T17683] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16353: corrupted inode contents [ 974.108912][T17683] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #12: comm syz.6.16353: mark_inode_dirty error [ 974.120860][T17683] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16353: corrupted inode contents [ 974.133294][T17683] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.16353: mark_inode_dirty error [ 974.145015][T17683] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16353: corrupted inode contents [ 974.157200][T17683] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 974.166036][T17683] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #12: comm syz.6.16353: corrupted inode contents [ 974.178423][T17683] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.16353: mark_inode_dirty error [ 974.189760][T17683] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 974.194674][T17692] loop8: detected capacity change from 0 to 128 [ 974.198885][T17683] EXT4-fs (loop6): 1 truncate cleaned up [ 974.249724][T17694] loop8: detected capacity change from 0 to 1024 [ 974.256715][T17694] EXT4-fs (loop8): unsupported inode size: 143 [ 974.262867][T17694] EXT4-fs (loop8): blocksize: 1024 [ 974.818195][T17706] loop6: detected capacity change from 0 to 1024 [ 974.867235][T17714] loop6: detected capacity change from 0 to 256 [ 974.919970][T17724] loop6: detected capacity change from 0 to 1024 [ 974.933801][ T4723] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.946048][ T4723] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.972387][ T4723] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.980700][T17726] loop7: detected capacity change from 0 to 1024 [ 974.984786][ T4723] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.995827][T17726] EXT4-fs (loop7): unsupported inode size: 143 [ 975.002015][T17726] EXT4-fs (loop7): blocksize: 1024 [ 975.225294][T17743] loop8: detected capacity change from 0 to 1024 [ 975.291403][T17751] loop8: detected capacity change from 0 to 4096 [ 975.318519][T17761] loop7: detected capacity change from 0 to 128 [ 975.430396][T17765] loop8: detected capacity change from 0 to 1024 [ 975.494355][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16387'. [ 975.504475][T17771] warn_alloc: 1 callbacks suppressed [ 975.504490][T17771] syz.8.16387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 975.524686][T17771] CPU: 1 UID: 0 PID: 17771 Comm: syz.8.16387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 975.524717][T17771] Tainted: [W]=WARN [ 975.524724][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 975.524735][T17771] Call Trace: [ 975.524741][T17771] [ 975.524748][T17771] __dump_stack+0x1d/0x30 [ 975.524768][T17771] dump_stack_lvl+0xe8/0x140 [ 975.524788][T17771] dump_stack+0x15/0x1b [ 975.524820][T17771] warn_alloc+0x12b/0x1a0 [ 975.524854][T17771] ? __rcu_read_unlock+0x4f/0x70 [ 975.524879][T17771] __vmalloc_node_range_noprof+0x9d/0xed0 [ 975.525015][T17771] ? __futex_wait+0x1fa/0x260 [ 975.525046][T17771] ? __pfx_futex_wake_mark+0x10/0x10 [ 975.525065][T17771] ? __rcu_read_unlock+0x4f/0x70 [ 975.525088][T17771] ? avc_has_perm_noaudit+0x1b1/0x200 [ 975.525134][T17771] ? should_fail_ex+0x30/0x280 [ 975.525166][T17771] ? xskq_create+0x36/0xe0 [ 975.525193][T17771] vmalloc_user_noprof+0x7d/0xb0 [ 975.525235][T17771] ? xskq_create+0x80/0xe0 [ 975.525283][T17771] xskq_create+0x80/0xe0 [ 975.525302][T17771] xsk_init_queue+0x95/0xf0 [ 975.525320][T17771] xsk_setsockopt+0x3f5/0x640 [ 975.525338][T17771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 975.525365][T17771] __sys_setsockopt+0x184/0x200 [ 975.525444][T17771] __x64_sys_setsockopt+0x64/0x80 [ 975.525474][T17771] x64_sys_call+0x20ec/0x3000 [ 975.525496][T17771] do_syscall_64+0xd2/0x200 [ 975.525511][T17771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 975.525606][T17771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 975.525635][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.525654][T17771] RIP: 0033:0x7f1fdad9efc9 [ 975.525734][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.525750][T17771] RSP: 002b:00007f1fd97ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 975.525767][T17771] RAX: ffffffffffffffda RBX: 00007f1fdaff5fa0 RCX: 00007f1fdad9efc9 [ 975.525780][T17771] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 975.525792][T17771] RBP: 00007f1fdae21f91 R08: 0000000000000004 R09: 0000000000000000 [ 975.525803][T17771] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.525903][T17771] R13: 00007f1fdaff6038 R14: 00007f1fdaff5fa0 R15: 00007ffe3f280998 [ 975.525920][T17771] [ 975.525940][T17771] Mem-Info: [ 975.758565][T17771] active_anon:28332 inactive_anon:42 isolated_anon:0 [ 975.758565][T17771] active_file:15222 inactive_file:11074 isolated_file:0 [ 975.758565][T17771] unevictable:16875 dirty:329 writeback:0 [ 975.758565][T17771] slab_reclaimable:4074 slab_unreclaimable:52634 [ 975.758565][T17771] mapped:32910 shmem:3178 pagetables:1772 [ 975.758565][T17771] sec_pagetables:0 bounce:0 [ 975.758565][T17771] kernel_misc_reclaimable:0 [ 975.758565][T17771] free:1785095 free_pcp:20774 free_cma:0 [ 975.804182][T17771] Node 0 active_anon:113328kB inactive_anon:168kB active_file:60888kB inactive_file:44296kB unevictable:67500kB isolated(anon):0kB isolated(file):0kB mapped:131640kB dirty:1316kB writeback:0kB shmem:12712kB kernel_stack:4528kB pagetables:7088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 975.832193][T17771] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 975.861808][T17771] lowmem_reserve[]: 0 2881 7859 7859 [ 975.867134][T17771] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 975.898266][T17771] lowmem_reserve[]: 0 0 4978 4978 [ 975.903522][T17771] Node 0 Normal free:4178740kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113096kB inactive_anon:168kB active_file:60888kB inactive_file:44296kB unevictable:67500kB writepending:1296kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:79204kB local_pcp:8052kB free_cma:0kB [ 975.934506][T13535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 975.937319][T17771] lowmem_reserve[]: 0 0 0 0 [ 975.948020][T17771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 975.961019][T17771] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 975.977210][T17771] Node 0 Normal: 977*4kB (UME) 2932*8kB (UME) 4626*16kB (UME) 3097*32kB (UME) 1399*64kB (UME) 1075*128kB (UME) 1073*256kB (UME) 730*512kB (UME) 574*1024kB (UME) 120*2048kB (UME) 554*4096kB (UM) = 4178788kB [ 975.997965][T17771] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 975.999841][T17781] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 976.007380][T17771] 46604 total pagecache pages [ 976.018995][T17771] 58 pages in swap cache [ 976.023241][T17771] Free swap = 124044kB [ 976.027449][T17771] Total swap = 124996kB [ 976.031607][T17771] 2097051 pages RAM [ 976.035463][T17771] 0 pages HighMem/MovableOnly [ 976.040188][T17771] 81083 pages reserved [ 976.073653][T17787] loop6: detected capacity change from 0 to 1024 [ 976.095568][T17788] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16392'. [ 976.151769][T17798] loop6: detected capacity change from 0 to 512 [ 976.182377][T17788] team0: Unable to change to the same mode the team is in [ 976.204513][T17798] EXT4-fs: Ignoring removed i_version option [ 976.210575][T17798] EXT4-fs: Ignoring removed bh option [ 976.339202][ T4723] Bluetooth: hci0: Frame reassembly failed (-84) [ 976.384566][T17820] loop5: detected capacity change from 0 to 128 [ 976.391235][T17820] msdos: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 976.792835][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16406'. [ 976.971282][T17795] syz.8.16395 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 976.985580][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.8.16395 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 976.985660][T17795] Tainted: [W]=WARN [ 976.985668][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 976.985684][T17795] Call Trace: [ 976.985691][T17795] [ 976.985701][T17795] __dump_stack+0x1d/0x30 [ 976.985808][T17795] dump_stack_lvl+0xe8/0x140 [ 976.985869][T17795] dump_stack+0x15/0x1b [ 976.985892][T17795] dump_header+0x81/0x220 [ 976.985910][T17795] oom_kill_process+0x342/0x400 [ 976.985944][T17795] out_of_memory+0x979/0xb80 [ 976.986047][T17795] try_charge_memcg+0x610/0xa10 [ 976.986086][T17795] obj_cgroup_charge_pages+0xa6/0x150 [ 976.986112][T17795] __memcg_kmem_charge_page+0x9f/0x170 [ 976.986138][T17795] __alloc_frozen_pages_noprof+0x188/0x360 [ 976.986282][T17795] alloc_pages_mpol+0xb3/0x260 [ 976.986300][T17795] ? alloc_pages_noprof+0xf4/0x130 [ 976.986321][T17795] alloc_pages_noprof+0x90/0x130 [ 976.986425][T17795] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 976.986543][T17795] __kvmalloc_node_noprof+0x483/0x670 [ 976.986583][T17795] ? ip_set_alloc+0x24/0x30 [ 976.986655][T17795] ? ip_set_alloc+0x24/0x30 [ 976.986689][T17795] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 976.986728][T17795] ip_set_alloc+0x24/0x30 [ 976.986774][T17795] hash_netiface_create+0x282/0x740 [ 976.986809][T17795] ? __pfx_hash_netiface_create+0x10/0x10 [ 976.986843][T17795] ip_set_create+0x3cc/0x970 [ 976.986875][T17795] ? __nla_parse+0x40/0x60 [ 976.986969][T17795] nfnetlink_rcv_msg+0x4c6/0x590 [ 976.987022][T17795] netlink_rcv_skb+0x123/0x220 [ 976.987049][T17795] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 976.987084][T17795] nfnetlink_rcv+0x167/0x16c0 [ 976.987178][T17795] ? perf_swevent_event+0x22f/0x450 [ 976.987280][T17795] ? perf_swevent_set_period+0x36/0x160 [ 976.987303][T17795] ? trace_event_reg+0xdc/0x170 [ 976.987326][T17795] ? perf_trace_add+0x176/0x1a0 [ 976.987345][T17795] ? event_sched_in+0x675/0x750 [ 976.987452][T17795] ? should_fail_ex+0x30/0x280 [ 976.987490][T17795] ? selinux_nlmsg_lookup+0x99/0x890 [ 976.987518][T17795] ? __rcu_read_unlock+0x34/0x70 [ 976.987618][T17795] ? __netlink_lookup+0x266/0x2a0 [ 976.987680][T17795] netlink_unicast+0x5c0/0x690 [ 976.987710][T17795] netlink_sendmsg+0x58b/0x6b0 [ 976.987728][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.987743][T17795] __sock_sendmsg+0x145/0x180 [ 976.987834][T17795] ____sys_sendmsg+0x31e/0x4e0 [ 976.987907][T17795] ___sys_sendmsg+0x17b/0x1d0 [ 976.987976][T17795] __x64_sys_sendmsg+0xd4/0x160 [ 976.988067][T17795] x64_sys_call+0x191e/0x3000 [ 976.988095][T17795] do_syscall_64+0xd2/0x200 [ 976.988144][T17795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 976.988198][T17795] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 976.988228][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.988254][T17795] RIP: 0033:0x7f1fdad9efc9 [ 976.988271][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.988304][T17795] RSP: 002b:00007f1fd97ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.988326][T17795] RAX: ffffffffffffffda RBX: 00007f1fdaff5fa0 RCX: 00007f1fdad9efc9 [ 976.988338][T17795] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 976.988349][T17795] RBP: 00007f1fdae21f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.988404][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.988419][T17795] R13: 00007f1fdaff6038 R14: 00007f1fdaff5fa0 R15: 00007ffe3f280998 [ 976.988441][T17795] [ 976.988447][T17795] memory: usage 307200kB, limit 307200kB, failcnt 1575 [ 977.159924][ T29] kauditd_printk_skb: 1596 callbacks suppressed [ 977.159941][ T29] audit: type=1326 audit(977.134:213314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7db5581885 code=0x7ffc0000 [ 977.164055][T17795] memory+swap: usage 307928kB, limit 9007199254740988kB, failcnt 0 [ 977.169412][ T29] audit: type=1326 audit(977.144:213315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7db5581885 code=0x7ffc0000 [ 977.173820][T17795] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 977.173836][T17795] Memory cgroup stats for [ 977.180562][ T29] audit: type=1326 audit(977.154:213316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.183455][T17795] /syz8: [ 977.184299][T17795] cache 0 [ 977.188769][ T29] audit: type=1326 audit(977.154:213317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7db5581885 code=0x7ffc0000 [ 977.193676][T17795] rss 0 [ 977.193685][T17795] shmem 0 [ 977.193694][T17795] mapped_file 0 [ 977.193702][T17795] dirty 0 [ 977.198806][ T29] audit: type=1326 audit(977.154:213318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7db5581885 code=0x7ffc0000 [ 977.203764][ T29] audit: type=1326 audit(977.174:213319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.208390][T17795] writeback 0 [ 977.208402][T17795] workingset_refault_anon 772 [ 977.213713][ T29] audit: type=1326 audit(977.174:213320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.218381][T17795] workingset_refault_file 10180 [ 977.218392][T17795] swap 745472 [ 977.218398][T17795] swapcached 0 [ 977.218405][T17795] pgpgin 1183561 [ 977.218412][T17795] pgpgout 1183554 [ 977.218418][T17795] pgfault 1113002 [ 977.218443][T17795] pgmajfault 524 [ 977.218515][T17795] inactive_anon 0 [ 977.223678][ T29] audit: type=1326 audit(977.194:213321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.227964][T17795] active_anon 0 [ 977.227977][T17795] inactive_file 0 [ 977.227986][T17795] active_file 28672 [ 977.227995][T17795] unevictable 0 [ 977.228003][T17795] hierarchical_memory_limit 314572800 [ 977.228013][T17795] hierarchical_memsw_limit 9223372036854771712 [ 977.228112][T17795] total_cache 0 [ 977.233613][ T29] audit: type=1326 audit(977.204:213322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.237680][T17795] total_rss 0 [ 977.243520][ T29] audit: type=1326 audit(977.214:213323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17814 comm="syz.6.16403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7db554efc9 code=0x7ffc0000 [ 977.248269][T17795] total_shmem 0 [ 977.691241][T17795] total_mapped_file 0 [ 977.695300][T17795] total_dirty 0 [ 977.698759][T17795] total_writeback 0 [ 977.702554][T17795] total_workingset_refault_anon 772 [ 977.707822][T17795] total_workingset_refault_file 10180 [ 977.713202][T17795] total_swap 745472 [ 977.717019][T17795] total_swapcached 0 [ 977.720975][T17795] total_pgpgin 1183561 [ 977.725119][T17795] total_pgpgout 1183554 [ 977.729260][T17795] total_pgfault 1113002 [ 977.733477][T17795] total_pgmajfault 524 [ 977.737571][T17795] total_inactive_anon 0 [ 977.741716][T17795] total_active_anon 0 [ 977.745722][T17795] total_inactive_file 0 [ 977.749862][T17795] total_active_file 28672 [ 977.754217][T17795] total_unevictable 0 [ 977.758186][T17795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.16395,pid=17794,uid=0 [ 977.773197][T17795] Memory cgroup out of memory: Killed process 17794 (syz.8.16395) total-vm:93960kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 977.819574][T17837] xt_hashlimit: size too large, truncated to 1048576 [ 978.003708][T17848] loop5: detected capacity change from 0 to 512 [ 978.011144][T17848] EXT4-fs: Ignoring removed i_version option [ 978.017264][T17848] EXT4-fs: Ignoring removed bh option [ 978.112812][T17864] loop8: detected capacity change from 0 to 1024 [ 978.253878][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16423'. [ 978.414041][ T4119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 978.743260][ T9821] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 978.754184][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 978.754219][ T9821] Tainted: [W]=WARN [ 978.754227][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 978.754241][ T9821] Call Trace: [ 978.754249][ T9821] [ 978.754258][ T9821] __dump_stack+0x1d/0x30 [ 978.754350][ T9821] dump_stack_lvl+0xe8/0x140 [ 978.754373][ T9821] dump_stack+0x15/0x1b [ 978.754388][ T9821] dump_header+0x81/0x220 [ 978.754463][ T9821] oom_kill_process+0x342/0x400 [ 978.754523][ T9821] out_of_memory+0x979/0xb80 [ 978.754600][ T9821] try_charge_memcg+0x610/0xa10 [ 978.754632][ T9821] charge_memcg+0x51/0xc0 [ 978.754653][ T9821] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 978.754695][ T9821] __read_swap_cache_async+0x17b/0x2d0 [ 978.754724][ T9821] swap_cluster_readahead+0x362/0x3c0 [ 978.754797][ T9821] swapin_readahead+0xde/0x6f0 [ 978.754817][ T9821] ? css_rstat_updated+0xb7/0x240 [ 978.754842][ T9821] ? __rcu_read_unlock+0x34/0x70 [ 978.754900][ T9821] ? __rcu_read_unlock+0x4f/0x70 [ 978.754928][ T9821] ? __rcu_read_unlock+0x4f/0x70 [ 978.754955][ T9821] ? swap_cache_get_folio+0x277/0x280 [ 978.754974][ T9821] do_swap_page+0x2ae/0x2370 [ 978.754994][ T9821] ? _raw_spin_unlock+0x26/0x50 [ 978.755100][ T9821] ? finish_task_switch+0xad/0x2b0 [ 978.755125][ T9821] ? __pfx_default_wake_function+0x10/0x10 [ 978.755150][ T9821] handle_mm_fault+0x9a5/0x2be0 [ 978.755179][ T9821] ? vma_start_read+0x141/0x1f0 [ 978.755221][ T9821] do_user_addr_fault+0x630/0x1080 [ 978.755280][ T9821] ? fpregs_restore_userregs+0xe2/0x1d0 [ 978.755314][ T9821] ? switch_fpu_return+0xe/0x20 [ 978.755348][ T9821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 978.755392][ T9821] exc_page_fault+0x62/0xa0 [ 978.755422][ T9821] asm_exc_page_fault+0x26/0x30 [ 978.755445][ T9821] RIP: 0033:0x7fa338441845 [ 978.755462][ T9821] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 978.755484][ T9821] RSP: 002b:00007fff14d5d068 EFLAGS: 00010246 [ 978.755503][ T9821] RAX: 0000000000000000 RBX: 000000000000057b RCX: 00007fa338441843 [ 978.755517][ T9821] RDX: 00007fff14d5d080 RSI: 0000000000000000 RDI: 0000000000000000 [ 978.755542][ T9821] RBP: 00007fff14d5d0ec R08: 0000000027c72a86 R09: 0000000000000000 [ 978.755551][ T9821] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 978.755561][ T9821] R13: 00000000000927c0 R14: 00000000000eed15 R15: 00007fff14d5d140 [ 978.755612][ T9821] [ 978.755619][ T9821] memory: usage 307200kB, limit 307200kB, failcnt 1175 [ 979.011410][ T9821] memory+swap: usage 307944kB, limit 9007199254740988kB, failcnt 0 [ 979.019322][ T9821] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 979.026671][ T9821] Memory cgroup stats for /syz5: [ 979.027217][ T9821] cache 0 [ 979.035125][ T9821] rss 0 [ 979.037902][ T9821] shmem 0 [ 979.040836][ T9821] mapped_file 0 [ 979.044318][ T9821] dirty 0 [ 979.047263][ T9821] writeback 0 [ 979.050541][ T9821] workingset_refault_anon 1535 [ 979.055345][ T9821] workingset_refault_file 7040 [ 979.060113][ T9821] swap 761856 [ 979.063398][ T9821] swapcached 16384 [ 979.067131][ T9821] pgpgin 1200014 [ 979.070679][ T9821] pgpgout 1200002 [ 979.074336][ T9821] pgfault 1226473 [ 979.077969][ T9821] pgmajfault 436 [ 979.081527][ T9821] inactive_anon 4096 [ 979.085429][ T9821] active_anon 12288 [ 979.089255][ T9821] inactive_file 0 [ 979.092897][ T9821] active_file 32768 [ 979.096728][ T9821] unevictable 0 [ 979.100175][ T9821] hierarchical_memory_limit 314572800 [ 979.105628][ T9821] hierarchical_memsw_limit 9223372036854771712 [ 979.111777][ T9821] total_cache 0 [ 979.115306][ T9821] total_rss 0 [ 979.118587][ T9821] total_shmem 0 [ 979.122042][ T9821] total_mapped_file 0 [ 979.126037][ T9821] total_dirty 0 [ 979.129533][ T9821] total_writeback 0 [ 979.133339][ T9821] total_workingset_refault_anon 1535 [ 979.138688][ T9821] total_workingset_refault_file 7040 [ 979.143989][ T9821] total_swap 761856 [ 979.147994][ T9821] total_swapcached 16384 [ 979.152402][ T9821] total_pgpgin 1200014 [ 979.156574][ T9821] total_pgpgout 1200002 [ 979.160806][ T9821] total_pgfault 1226473 [ 979.164973][ T9821] total_pgmajfault 436 [ 979.169038][ T9821] total_inactive_anon 4096 [ 979.173455][ T9821] total_active_anon 12288 [ 979.177871][ T9821] total_inactive_file 0 [ 979.182027][ T9821] total_active_file 32768 [ 979.186364][ T9821] total_unevictable 0 [ 979.190340][ T9821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.16421,pid=17865,uid=0 [ 979.205417][ T9821] Memory cgroup out of memory: Killed process 17865 (syz.5.16421) total-vm:96008kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 979.242923][T17898] loop6: detected capacity change from 0 to 512 [ 979.294273][T17898] EXT4-fs: Ignoring removed i_version option [ 979.300302][T17898] EXT4-fs: Ignoring removed bh option [ 979.365436][T17902] loop8: detected capacity change from 0 to 128 [ 979.385829][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16433'. [ 979.497807][T17898] EXT4-fs mount: 40 callbacks suppressed [ 979.497825][T17898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.602079][T17926] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.613109][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.645059][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16444'. [ 979.666904][T17926] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.715715][T17926] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.778802][T17926] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.840582][ T4723] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.854119][ T4723] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.868096][ T4723] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.891410][ T4723] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.941689][T17936] loop7: detected capacity change from 0 to 1024 [ 980.056042][T17936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.311207][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.485922][T17947] loop8: detected capacity change from 0 to 128 [ 980.581241][T17958] loop8: detected capacity change from 0 to 1024 [ 980.588437][T17958] EXT4-fs (loop8): unsupported inode size: 143 [ 980.594684][T17958] EXT4-fs (loop8): blocksize: 1024 [ 980.633213][T17963] loop5: detected capacity change from 0 to 1024 [ 980.654488][T17963] EXT4-fs (loop5): unsupported inode size: 143 [ 980.660675][T17963] EXT4-fs (loop5): blocksize: 1024 [ 980.694337][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16455'. [ 980.809944][T17980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16460'. [ 980.821098][T17980] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16460'. [ 980.830441][T17980] team0: Unable to change to the same mode the team is in [ 980.842662][T17982] loop8: detected capacity change from 0 to 1024 [ 980.862550][T17982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.888979][T17987] loop6: detected capacity change from 0 to 512 [ 980.898718][T14095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.915762][T17987] EXT4-fs: Ignoring removed i_version option [ 980.921783][T17987] EXT4-fs: Ignoring removed bh option [ 980.947205][T17987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.023669][T18003] loop8: detected capacity change from 0 to 1024 [ 981.038100][T18003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.075294][T10045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.099347][T14095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.216277][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16472'. [ 981.630056][T18030] netlink: 8 bytes leftover after parsing attributes in process `'(/^'. [ 981.676483][T18008] syz.5.16471 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 981.690763][T18008] CPU: 0 UID: 0 PID: 18008 Comm: syz.5.16471 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 981.690862][T18008] Tainted: [W]=WARN [ 981.690867][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 981.690877][T18008] Call Trace: [ 981.690882][T18008] [ 981.690888][T18008] __dump_stack+0x1d/0x30 [ 981.690906][T18008] dump_stack_lvl+0xe8/0x140 [ 981.690922][T18008] dump_stack+0x15/0x1b [ 981.690988][T18008] dump_header+0x81/0x220 [ 981.691003][T18008] oom_kill_process+0x342/0x400 [ 981.691080][T18008] out_of_memory+0x979/0xb80 [ 981.691188][T18008] try_charge_memcg+0x610/0xa10 [ 981.691296][T18008] obj_cgroup_charge_pages+0xa6/0x150 [ 981.691314][T18008] __memcg_kmem_charge_page+0x9f/0x170 [ 981.691376][T18008] __alloc_frozen_pages_noprof+0x188/0x360 [ 981.691428][T18008] alloc_pages_mpol+0xb3/0x260 [ 981.691473][T18008] alloc_pages_noprof+0x90/0x130 [ 981.691491][T18008] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 981.691555][T18008] __kvmalloc_node_noprof+0x483/0x670 [ 981.691589][T18008] ? ip_set_alloc+0x24/0x30 [ 981.691615][T18008] ? ip_set_alloc+0x24/0x30 [ 981.691721][T18008] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 981.691746][T18008] ip_set_alloc+0x24/0x30 [ 981.691795][T18008] hash_netiface_create+0x282/0x740 [ 981.691831][T18008] ? __pfx_hash_netiface_create+0x10/0x10 [ 981.691865][T18008] ip_set_create+0x3cc/0x970 [ 981.691950][T18008] ? __nla_parse+0x40/0x60 [ 981.691977][T18008] nfnetlink_rcv_msg+0x4c6/0x590 [ 981.692057][T18008] netlink_rcv_skb+0x123/0x220 [ 981.692234][T18008] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.692273][T18008] nfnetlink_rcv+0x167/0x16c0 [ 981.692302][T18008] ? kmem_cache_free+0xe4/0x3d0 [ 981.692390][T18008] ? __kfree_skb+0x109/0x150 [ 981.692473][T18008] ? nlmon_xmit+0x4f/0x60 [ 981.692547][T18008] ? consume_skb+0x49/0x150 [ 981.692578][T18008] ? nlmon_xmit+0x4f/0x60 [ 981.692649][T18008] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 981.692687][T18008] ? __dev_queue_xmit+0x1200/0x2000 [ 981.692721][T18008] ? __dev_queue_xmit+0x182/0x2000 [ 981.692755][T18008] ? ref_tracker_free+0x37d/0x3e0 [ 981.692846][T18008] ? __netlink_deliver_tap+0x4dc/0x500 [ 981.692887][T18008] netlink_unicast+0x5c0/0x690 [ 981.692923][T18008] netlink_sendmsg+0x58b/0x6b0 [ 981.692975][T18008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.692997][T18008] __sock_sendmsg+0x145/0x180 [ 981.693026][T18008] ____sys_sendmsg+0x31e/0x4e0 [ 981.693066][T18008] ___sys_sendmsg+0x17b/0x1d0 [ 981.693188][T18008] __x64_sys_sendmsg+0xd4/0x160 [ 981.693231][T18008] x64_sys_call+0x191e/0x3000 [ 981.693327][T18008] do_syscall_64+0xd2/0x200 [ 981.693349][T18008] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 981.693384][T18008] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 981.693418][T18008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.693478][T18008] RIP: 0033:0x7fa33840efc9 [ 981.693497][T18008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.693566][T18008] RSP: 002b:00007fa336e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.693589][T18008] RAX: ffffffffffffffda RBX: 00007fa338665fa0 RCX: 00007fa33840efc9 [ 981.693603][T18008] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 981.693618][T18008] RBP: 00007fa338491f91 R08: 0000000000000000 R09: 0000000000000000 [ 981.693632][T18008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.693645][T18008] R13: 00007fa338666038 R14: 00007fa338665fa0 R15: 00007fff14d5cd28 [ 981.693745][T18008] [ 981.693754][T18008] memory: usage 307200kB, limit 307200kB, failcnt 1349 [ 982.045280][T18008] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0 [ 982.053168][T18008] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 982.060477][T18008] Memory cgroup stats for /syz5: [ 982.061131][T18008] cache 0 [ 982.069099][T18008] rss 36864 [ 982.072202][T18008] shmem 0 [ 982.075171][T18008] mapped_file 0 [ 982.078631][T18008] dirty 0 [ 982.081595][T18008] writeback 40960 [ 982.085254][T18008] workingset_refault_anon 1589 [ 982.090020][T18008] workingset_refault_file 8768 [ 982.094883][T18008] swap 708608 [ 982.098245][T18008] swapcached 65536 [ 982.101964][T18008] pgpgin 1221828 [ 982.105545][T18008] pgpgout 1221801 [ 982.109182][T18008] pgfault 1231360 [ 982.112859][T18008] pgmajfault 478 [ 982.116507][T18008] inactive_anon 16384 [ 982.120489][T18008] active_anon 61440 [ 982.124315][T18008] inactive_file 0 [ 982.128076][T18008] active_file 32768 [ 982.131891][T18008] unevictable 0 [ 982.135389][T18008] hierarchical_memory_limit 314572800 [ 982.140782][T18008] hierarchical_memsw_limit 9223372036854771712 [ 982.146957][T18008] total_cache 0 [ 982.150421][T18008] total_rss 36864 [ 982.154080][T18008] total_shmem 0 [ 982.157531][T18008] total_mapped_file 0 [ 982.161506][T18008] total_dirty 0 [ 982.164999][T18008] total_writeback 40960 [ 982.165022][ T29] kauditd_printk_skb: 2315 callbacks suppressed [ 982.165041][ T29] audit: type=1326 audit(982.144:215639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.169164][T18008] total_workingset_refault_anon 1589 [ 982.175799][ T29] audit: type=1326 audit(982.154:215640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.198610][T18008] total_workingset_refault_file 8768 [ 982.198624][T18008] total_swap 708608 [ 982.204658][ T29] audit: type=1326 audit(982.184:215641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25b1d9efc9 code=0x7ffc0000 [ 982.227046][T18008] total_swapcached 65536 [ 982.227055][T18008] total_pgpgin 1221828 [ 982.227062][T18008] total_pgpgout 1221801 [ 982.227070][T18008] total_pgfault 1231360 [ 982.227079][T18008] total_pgmajfault 478 [ 982.227087][T18008] total_inactive_anon 16384 [ 982.227096][T18008] total_active_anon 61440 [ 982.227105][T18008] total_inactive_file 0 [ 982.227113][T18008] total_active_file 32768 [ 982.232394][ T29] audit: type=1326 audit(982.184:215642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.236204][T18008] total_unevictable 0 [ 982.236214][T18008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0 [ 982.260085][ T29] audit: type=1326 audit(982.234:215643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.263485][T18008] ,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.16471,pid=18007,uid=0 [ 982.263536][T18008] Memory cgroup out of memory: Killed process 18007 (syz.5.16471) total-vm:93960kB, anon-rss:1136kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 982.267602][ T29] audit: type=1326 audit(982.234:215644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25b1d9efc9 code=0x7ffc0000 [ 982.406579][ T29] audit: type=1326 audit(982.384:215645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f25b1d9efc9 code=0x7ffc0000 [ 982.429804][ T29] audit: type=1326 audit(982.384:215646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.453202][ T29] audit: type=1326 audit(982.384:215647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.485331][ T29] audit: type=1326 audit(982.384:215648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.1.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25b1dd1885 code=0x7ffc0000 [ 982.529734][T18043] loop7: detected capacity change from 0 to 1024 [ 982.548685][T18045] loop1: detected capacity change from 0 to 512 [ 982.555681][T18045] EXT4-fs: Ignoring removed i_version option [ 982.561751][T18045] EXT4-fs: Ignoring removed bh option [ 982.569541][T18043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.594946][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.605676][T18045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.686811][T18053] loop5: detected capacity change from 0 to 1024 [ 982.693755][T18053] EXT4-fs (loop5): unsupported inode size: 143 [ 982.700003][T18053] EXT4-fs (loop5): blocksize: 1024 [ 982.728605][T18060] loop7: detected capacity change from 0 to 512 [ 982.749225][T18060] EXT4-fs: Ignoring removed mblk_io_submit option [ 982.759344][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16489'. [ 982.768438][T18060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 982.777197][T18060] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 982.778348][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16489'. [ 982.796350][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.806934][T18060] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16487: Allocating blocks 41-42 which overlap fs metadata [ 982.821261][T18060] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16487: Failed to acquire dquot type 1 [ 982.832944][T18060] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 982.847803][T18060] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16487: corrupted inode contents [ 982.860264][T18060] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.16487: mark_inode_dirty error [ 982.872034][T18060] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16487: corrupted inode contents [ 982.885857][T18060] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.16487: mark_inode_dirty error [ 982.897674][T18060] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16487: corrupted inode contents [ 982.935298][T18060] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 982.956714][T18060] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16487: corrupted inode contents [ 982.993468][T18080] loop5: detected capacity change from 0 to 1024 [ 982.993963][T18060] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.16487: mark_inode_dirty error [ 983.013738][T18060] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 983.019141][T18077] loop6: detected capacity change from 0 to 1024 [ 983.023057][T18060] EXT4-fs (loop7): 1 truncate cleaned up [ 983.035522][T18060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.035698][T18077] EXT4-fs (loop6): unsupported inode size: 143 [ 983.050345][T18080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.054238][T18077] EXT4-fs (loop6): blocksize: 1024 [ 983.088660][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.120754][T18088] loop5: detected capacity change from 0 to 1024 [ 983.150030][T18088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.185230][T18099] loop1: detected capacity change from 0 to 512 [ 983.191936][T18099] EXT4-fs: Ignoring removed i_version option [ 983.192634][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.198022][T18099] EXT4-fs: Ignoring removed bh option [ 983.215694][T18099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.258402][T18104] loop5: detected capacity change from 0 to 1024 [ 983.265407][T18107] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16502'. [ 983.275352][T18104] EXT4-fs (loop5): unsupported inode size: 143 [ 983.281573][T18104] EXT4-fs (loop5): blocksize: 1024 [ 983.287406][T18107] team0: Unable to change to the same mode the team is in [ 983.330743][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.387582][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16503'. [ 983.400965][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16503'. [ 983.475332][T18122] loop5: detected capacity change from 0 to 1024 [ 983.485269][T18122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.507770][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.567443][T18132] loop5: detected capacity change from 0 to 1024 [ 983.575234][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.589799][T18134] netlink: 'syz.8.16513': attribute type 12 has an invalid length. [ 983.609672][T18132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.624662][T18134] Cannot find add_set index 0 as target [ 983.648835][T18139] loop7: detected capacity change from 0 to 1024 [ 983.655834][T18139] EXT4-fs (loop7): unsupported inode size: 143 [ 983.661994][T18139] EXT4-fs (loop7): blocksize: 1024 [ 983.685606][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.705907][T18144] loop8: detected capacity change from 0 to 128 [ 983.757243][T18146] loop5: detected capacity change from 0 to 1024 [ 983.784857][T18146] EXT4-fs (loop5): unsupported inode size: 143 [ 983.791086][T18146] EXT4-fs (loop5): blocksize: 1024 [ 983.825629][T18136] loop1: detected capacity change from 0 to 4096 [ 983.845985][T18136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 983.866353][T18136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.155742][T18170] loop7: detected capacity change from 0 to 512 [ 984.251361][T18173] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 984.476181][T18170] EXT4-fs: Ignoring removed mblk_io_submit option [ 984.554683][T18170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 984.563390][T18170] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 984.589711][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.633086][T18181] netlink: 'syz.1.16525': attribute type 12 has an invalid length. [ 984.641818][T18181] Cannot find add_set index 0 as target [ 984.668176][T18170] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16522: Allocating blocks 41-42 which overlap fs metadata [ 984.682528][T18188] loop1: detected capacity change from 0 to 1024 [ 984.718338][T18183] loop5: detected capacity change from 0 to 1024 [ 984.734752][T18183] EXT4-fs (loop5): unsupported inode size: 143 [ 984.735345][T18188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.740945][T18183] EXT4-fs (loop5): blocksize: 1024 [ 984.753277][T18170] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.16522: Allocating blocks 41-42 which overlap fs metadata [ 984.792934][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.804178][T18170] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16522: Failed to acquire dquot type 1 [ 984.840118][T18170] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 984.856970][T18170] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16522: corrupted inode contents [ 984.897786][T18170] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.16522: mark_inode_dirty error [ 984.951150][T18195] loop8: detected capacity change from 0 to 1024 [ 984.974907][T18195] EXT4-fs (loop8): unsupported inode size: 143 [ 984.981127][T18195] EXT4-fs (loop8): blocksize: 1024 [ 985.004626][T18170] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16522: corrupted inode contents [ 985.045227][T18170] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.16522: mark_inode_dirty error [ 985.074250][T18170] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16522: corrupted inode contents [ 985.102027][T18170] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 985.122506][T18170] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.16522: corrupted inode contents [ 985.151934][T18204] loop5: detected capacity change from 0 to 1024 [ 985.160091][T18170] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.16522: mark_inode_dirty error [ 985.160533][T18211] netlink: 'syz.1.16537': attribute type 12 has an invalid length. [ 985.197311][T18170] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 985.206424][T18204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.242726][T18170] EXT4-fs (loop7): 1 truncate cleaned up [ 985.243760][T18217] loop1: detected capacity change from 0 to 1024 [ 985.249065][T18170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.287134][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.317887][T18217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.340701][T18219] loop5: detected capacity change from 0 to 1024 [ 985.381422][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.395488][T18219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.438785][ T9821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.480498][T18232] loop6: detected capacity change from 0 to 1024 [ 985.487446][T18232] EXT4-fs (loop6): unsupported inode size: 143 [ 985.493622][T18232] EXT4-fs (loop6): blocksize: 1024 [ 985.502816][T18235] loop1: detected capacity change from 0 to 128 [ 985.585128][T18209] loop8: detected capacity change from 0 to 4096 [ 985.591718][T18209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 985.594901][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.638618][T18209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.643094][T18240] loop5: detected capacity change from 0 to 1024 [ 985.674179][T18240] EXT4-fs (loop5): unsupported inode size: 143 [ 985.680373][T18240] EXT4-fs (loop5): blocksize: 1024 [ 985.884858][T18248] netlink: 'syz.7.16548': attribute type 12 has an invalid length. [ 986.037333][T18259] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 986.066390][T18262] loop7: detected capacity change from 0 to 512 [ 986.077160][T18263] loop5: detected capacity change from 0 to 128 [ 986.091280][T18262] EXT4-fs: Ignoring removed i_version option [ 986.097419][T18262] EXT4-fs: Ignoring removed bh option [ 986.175859][T18262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.489032][T14095] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.512925][T12706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.665244][T18285] netlink: 'syz.1.16560': attribute type 12 has an invalid length. [ 986.710078][T18287] loop1: detected capacity change from 0 to 2048 [ 986.754402][T18287] loop1: p1 < > p4 [ 986.758966][T18287] loop1: p4 size 8388608 extends beyond EOD, truncated [ 986.812825][T18292] loop1: detected capacity change from 0 to 1024 [ 986.856331][T18292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.891962][T18294] loop6: detected capacity change from 0 to 1024 [ 986.901051][T18294] EXT4-fs (loop6): unsupported inode size: 143 [ 986.907304][T18294] EXT4-fs (loop6): blocksize: 1024 [ 986.918563][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.029646][T18302] loop1: detected capacity change from 0 to 1024 [ 987.058103][T18302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.117544][T13434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.249898][ T29] kauditd_printk_skb: 2218 callbacks suppressed [ 987.249913][ T29] audit: type=1326 audit(987.224:217860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.285303][ T29] audit: type=1326 audit(987.264:217861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa28fabefc9 code=0x7ffc0000 [ 987.309304][ T29] audit: type=1326 audit(987.284:217862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa28fabefc9 code=0x7ffc0000 [ 987.332732][ T29] audit: type=1326 audit(987.304:217863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa28fabefc9 code=0x7ffc0000 [ 987.355768][T18279] syz.8.16558 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 987.370022][T18279] CPU: 0 UID: 0 PID: 18279 Comm: syz.8.16558 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 987.370054][T18279] Tainted: [W]=WARN [ 987.370062][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 987.370075][T18279] Call Trace: [ 987.370082][T18279] [ 987.370104][T18279] __dump_stack+0x1d/0x30 [ 987.370130][T18279] dump_stack_lvl+0xe8/0x140 [ 987.370153][T18279] dump_stack+0x15/0x1b [ 987.370202][T18279] dump_header+0x81/0x220 [ 987.370222][T18279] oom_kill_process+0x342/0x400 [ 987.370258][T18279] out_of_memory+0x979/0xb80 [ 987.370368][T18279] try_charge_memcg+0x610/0xa10 [ 987.370398][T18279] obj_cgroup_charge_pages+0xa6/0x150 [ 987.370416][T18279] __memcg_kmem_charge_page+0x9f/0x170 [ 987.370434][T18279] __alloc_frozen_pages_noprof+0x188/0x360 [ 987.370496][T18279] alloc_pages_mpol+0xb3/0x260 [ 987.370519][T18279] ? alloc_pages_noprof+0xf4/0x130 [ 987.370615][T18279] alloc_pages_noprof+0x90/0x130 [ 987.370640][T18279] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 987.370723][T18279] __kvmalloc_node_noprof+0x483/0x670 [ 987.370750][T18279] ? ip_set_alloc+0x24/0x30 [ 987.370777][T18279] ? ip_set_alloc+0x24/0x30 [ 987.370858][T18279] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 987.370892][T18279] ip_set_alloc+0x24/0x30 [ 987.370917][T18279] hash_netiface_create+0x282/0x740 [ 987.371015][T18279] ? __pfx_hash_netiface_create+0x10/0x10 [ 987.371051][T18279] ip_set_create+0x3cc/0x970 [ 987.371081][T18279] ? __nla_parse+0x40/0x60 [ 987.371120][T18279] nfnetlink_rcv_msg+0x4c6/0x590 [ 987.371170][T18279] netlink_rcv_skb+0x123/0x220 [ 987.371201][T18279] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 987.371312][T18279] nfnetlink_rcv+0x167/0x16c0 [ 987.371354][T18279] ? trace_event_reg+0xdc/0x170 [ 987.371414][T18279] ? perf_trace_add+0x176/0x1a0 [ 987.371440][T18279] ? event_sched_in+0x675/0x750 [ 987.371473][T18279] ? __list_add_valid_or_report+0x38/0xe0 [ 987.371496][T18279] ? should_fail_ex+0x30/0x280 [ 987.371597][T18279] ? selinux_nlmsg_lookup+0x99/0x890 [ 987.371627][T18279] ? __rcu_read_unlock+0x34/0x70 [ 987.371756][T18279] ? __netlink_lookup+0x266/0x2a0 [ 987.371777][T18279] netlink_unicast+0x5c0/0x690 [ 987.371805][T18279] netlink_sendmsg+0x58b/0x6b0 [ 987.371907][T18279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.371927][T18279] __sock_sendmsg+0x145/0x180 [ 987.372027][T18279] ____sys_sendmsg+0x31e/0x4e0 [ 987.372105][T18279] ___sys_sendmsg+0x17b/0x1d0 [ 987.372157][T18279] __x64_sys_sendmsg+0xd4/0x160 [ 987.372238][T18279] x64_sys_call+0x191e/0x3000 [ 987.372263][T18279] do_syscall_64+0xd2/0x200 [ 987.372283][T18279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 987.372372][T18279] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 987.372407][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.372430][T18279] RIP: 0033:0x7f1fdad9efc9 [ 987.372447][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.372484][T18279] RSP: 002b:00007f1fd97ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.372506][T18279] RAX: ffffffffffffffda RBX: 00007f1fdaff5fa0 RCX: 00007f1fdad9efc9 [ 987.372520][T18279] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 987.372533][T18279] RBP: 00007f1fdae21f91 R08: 0000000000000000 R09: 0000000000000000 [ 987.372546][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.372608][T18279] R13: 00007f1fdaff6038 R14: 00007f1fdaff5fa0 R15: 00007ffe3f280998 [ 987.372628][T18279] [ 987.372636][T18279] memory: usage 307200kB, limit 307200kB, failcnt 1765 [ 987.373987][ T29] audit: type=1326 audit(987.334:217864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.384152][T18279] memory+swap: usage 307812kB, limit 9007199254740988kB, failcnt 0 [ 987.384184][T18279] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 987.384198][T18279] Memory cgroup stats for /syz8: [ 987.384460][T18279] cache 0 [ 987.388025][ T29] audit: type=1326 audit(987.334:217865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa28fabefc9 code=0x7ffc0000 [ 987.388051][ T29] audit: type=1326 audit(987.334:217866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.398107][T18279] rss 32768 [ 987.398127][T18279] shmem 0 [ 987.401503][ T29] audit: type=1326 audit(987.334:217867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.404488][T18279] mapped_file 0 [ 987.408801][ T29] audit: type=1326 audit(987.334:217868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.413372][T18279] dirty 0 [ 987.417550][ T29] audit: type=1326 audit(987.334:217869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.7.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28faf1885 code=0x7ffc0000 [ 987.421861][T18279] writeback 0 [ 987.431299][T18279] workingset_refault_anon 797 [ 987.431311][T18279] workingset_refault_file 10180 [ 987.431322][T18279] swap 626688 [ 987.431331][T18279] swapcached 106496 [ 987.431417][T18279] pgpgin 1199565 [ 987.431424][T18279] pgpgout 1199529 [ 987.431431][T18279] pgfault 1130506 [ 987.431438][T18279] pgmajfault 542 [ 987.431444][T18279] inactive_anon 102400 [ 987.934243][T18279] active_anon 16384 [ 987.938044][T18279] inactive_file 28672 [ 987.942017][T18279] active_file 0 [ 987.945497][T18279] unevictable 0 [ 987.948954][T18279] hierarchical_memory_limit 314572800 [ 987.954342][T18279] hierarchical_memsw_limit 9223372036854771712 [ 987.960497][T18279] total_cache 0 [ 987.963966][T18279] total_rss 32768 [ 987.967597][T18279] total_shmem 0 [ 987.971055][T18279] total_mapped_file 0 [ 987.975149][T18279] total_dirty 0 [ 987.978705][T18279] total_writeback 0 [ 987.982511][T18279] total_workingset_refault_anon 797 [ 987.987732][T18279] total_workingset_refault_file 10180 [ 987.993095][T18279] total_swap 626688 [ 987.996917][T18279] total_swapcached 106496 [ 988.001313][T18279] total_pgpgin 1199565 [ 988.005392][T18279] total_pgpgout 1199529 [ 988.009544][T18279] total_pgfault 1130506 [ 988.013703][T18279] total_pgmajfault 542 [ 988.017824][T18279] total_inactive_anon 102400 [ 988.022478][T18279] total_active_anon 16384 [ 988.026826][T18279] total_inactive_file 28672 [ 988.031327][T18279] total_active_file 0 [ 988.035350][T18279] total_unevictable 0 [ 988.039327][T18279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.16558,pid=18278,uid=0 [ 988.054395][T18279] Memory cgroup out of memory: Killed process 18278 (syz.8.16558) total-vm:93960kB, anon-rss:1264kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 988.077856][T17689] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.092688][T18327] netlink: 'syz.7.16571': attribute type 12 has an invalid length. [ 988.122572][T18304] chnl_net:caif_netlink_parms(): no params data found [ 988.143742][T18335] loop6: detected capacity change from 0 to 2048 [ 988.184775][T17689] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.194880][T18335] loop6: p1 < > p4 [ 988.204132][T18335] loop6: p4 size 8388608 extends beyond EOD, truncated [ 988.249016][T18304] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.256128][T18304] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.270587][T18304] bridge_slave_0: entered allmulticast mode [ 988.283499][T18304] bridge_slave_0: entered promiscuous mode [ 988.301355][T17689] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.317885][T18304] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.325129][T18304] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.332445][T18304] bridge_slave_1: entered allmulticast mode [ 988.339033][T18304] bridge_slave_1: entered promiscuous mode [ 988.358324][T18304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.369033][T17689] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.388941][T18304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.428673][T18304] team0: Port device team_slave_0 added [ 988.439714][T18304] team0: Port device team_slave_1 added [ 988.478866][T18304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.485881][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.511869][T18304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.587528][T17689] dvmrp1 (unregistering): left allmulticast mode [ 988.885711][T17689] bond0 (unregistering): Released all slaves [ 988.894036][T18304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.901016][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.926925][T18304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.954255][T18304] hsr_slave_0: entered promiscuous mode [ 988.960716][T18304] hsr_slave_1: entered promiscuous mode [ 988.966504][T18304] debugfs: 'hsr0' already exists in 'hsr' [ 988.972232][T18304] Cannot create hsr debugfs directory [ 988.980393][T17689] hsr_slave_0: left promiscuous mode [ 988.986438][T17689] hsr_slave_1: left promiscuous mode [ 988.999805][T17689] veth1_macvtap: left promiscuous mode [ 989.005535][T17689] veth0_macvtap: left promiscuous mode [ 989.011436][T17689] veth1_vlan: left promiscuous mode [ 989.017039][T17689] veth0_vlan: left promiscuous mode [ 989.040590][T18359] __nla_validate_parse: 2 callbacks suppressed [ 989.040602][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16582'. [ 989.131222][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16582'. [ 989.279804][T18365] netlink: 'syz.6.16583': attribute type 12 has an invalid length. [ 989.323403][T18369] loop8: detected capacity change from 0 to 2048 [ 989.355137][T18369] loop8: p1 < > p4 [ 989.363341][T18373] loop7: detected capacity change from 0 to 1024 [ 989.372805][T18369] loop8: p4 size 8388608 extends beyond EOD, truncated [ 989.380204][T18373] EXT4-fs (loop7): unsupported inode size: 143 [ 989.386600][T18373] EXT4-fs (loop7): blocksize: 1024 [ 989.392080][T18373] ================================================================== [ 989.400172][T18373] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 989.407911][T18373] [ 989.410241][T18373] read-write to 0xffff888237c26fd0 of 8 bytes by task 18367 on cpu 0: [ 989.418411][T18373] find_get_block_common+0x4f0/0x960 [ 989.423705][T18373] bdev_getblk+0x83/0x3b0 [ 989.428036][T18373] __ext4_get_inode_loc+0x303/0x930 [ 989.433232][T18373] ext4_reserve_inode_write+0xd7/0x250 [ 989.438698][T18373] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 989.444082][T18373] ext4_dirty_inode+0x92/0xc0 [ 989.448763][T18373] __mark_inode_dirty+0x162/0x750 [ 989.453800][T18373] file_update_time+0x288/0x2b0 [ 989.458743][T18373] ext4_page_mkwrite+0x18c/0xb90 [ 989.463684][T18373] handle_mm_fault+0x15ce/0x2be0 [ 989.468616][T18373] do_user_addr_fault+0x630/0x1080 [ 989.473737][T18373] exc_page_fault+0x62/0xa0 [ 989.478251][T18373] asm_exc_page_fault+0x26/0x30 [ 989.483103][T18373] [ 989.485421][T18373] read to 0xffff888237c26fd0 of 8 bytes by task 18373 on cpu 1: [ 989.493041][T18373] has_bh_in_lru+0x35/0x1f0 [ 989.497548][T18373] __lru_add_drain_all+0x287/0x450 [ 989.502744][T18373] lru_add_drain_all+0x10/0x20 [ 989.507505][T18373] invalidate_bdev+0x47/0x70 [ 989.512108][T18373] ext4_fill_super+0x2d2c/0x3810 [ 989.517070][T18373] get_tree_bdev_flags+0x291/0x300 [ 989.522188][T18373] get_tree_bdev+0x1f/0x30 [ 989.526604][T18373] ext4_get_tree+0x1c/0x30 [ 989.531012][T18373] vfs_get_tree+0x57/0x1d0 [ 989.535426][T18373] do_new_mount+0x24d/0x660 [ 989.539928][T18373] path_mount+0x4a5/0xb70 [ 989.544251][T18373] __se_sys_mount+0x28c/0x2e0 [ 989.548930][T18373] __x64_sys_mount+0x67/0x80 [ 989.553518][T18373] x64_sys_call+0x2b51/0x3000 [ 989.558202][T18373] do_syscall_64+0xd2/0x200 [ 989.562700][T18373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.568590][T18373] [ 989.570907][T18373] value changed: 0x0000000000000000 -> 0xffff8881071f3068 [ 989.578001][T18373] [ 989.580322][T18373] Reported by Kernel Concurrency Sanitizer on: [ 989.586478][T18373] CPU: 1 UID: 0 PID: 18373 Comm: syz.7.16587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 989.597943][T18373] Tainted: [W]=WARN [ 989.601743][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 989.611789][T18373] ================================================================== [ 989.750408][T18304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 989.761243][T18304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 989.771846][T18304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 989.781747][T18304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 989.784291][T13535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 989.870649][T18304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.883112][T18304] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.896129][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.903217][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.923277][T18304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 989.933699][T18304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.948171][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.955317][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.016955][T18304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.092003][T18371] syz.6.16586 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 990.106380][T18371] CPU: 0 UID: 0 PID: 18371 Comm: syz.6.16586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 990.106430][T18371] Tainted: [W]=WARN [ 990.106436][T18371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 990.106448][T18371] Call Trace: [ 990.106453][T18371] [ 990.106461][T18371] __dump_stack+0x1d/0x30 [ 990.106490][T18371] dump_stack_lvl+0xe8/0x140 [ 990.106509][T18371] dump_stack+0x15/0x1b [ 990.106525][T18371] dump_header+0x81/0x220 [ 990.106543][T18371] oom_kill_process+0x342/0x400 [ 990.106580][T18371] out_of_memory+0x979/0xb80 [ 990.106691][T18371] try_charge_memcg+0x610/0xa10 [ 990.106730][T18371] obj_cgroup_charge_pages+0xa6/0x150 [ 990.106755][T18371] __memcg_kmem_charge_page+0x9f/0x170 [ 990.106781][T18371] __alloc_frozen_pages_noprof+0x188/0x360 [ 990.106847][T18371] alloc_pages_mpol+0xb3/0x260 [ 990.106872][T18371] ? alloc_pages_noprof+0x61/0x130 [ 990.106898][T18371] alloc_pages_noprof+0x90/0x130 [ 990.106917][T18371] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 990.106987][T18371] __kvmalloc_node_noprof+0x483/0x670 [ 990.107034][T18371] ? ip_set_alloc+0x24/0x30 [ 990.107068][T18371] ? ip_set_alloc+0x24/0x30 [ 990.107102][T18371] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 990.107206][T18371] ip_set_alloc+0x24/0x30 [ 990.107239][T18371] hash_netiface_create+0x282/0x740 [ 990.107343][T18371] ? __pfx_hash_netiface_create+0x10/0x10 [ 990.107383][T18371] ip_set_create+0x3cc/0x970 [ 990.107415][T18371] ? __nla_parse+0x40/0x60 [ 990.107512][T18371] nfnetlink_rcv_msg+0x4c6/0x590 [ 990.107565][T18371] netlink_rcv_skb+0x123/0x220 [ 990.107608][T18371] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 990.107658][T18371] nfnetlink_rcv+0x167/0x16c0 [ 990.107753][T18371] ? kmem_cache_free+0xe4/0x3d0 [ 990.107889][T18371] ? __kfree_skb+0x109/0x150 [ 990.107991][T18371] ? nlmon_xmit+0x4f/0x60 [ 990.108018][T18371] ? consume_skb+0x49/0x150 [ 990.108050][T18371] ? nlmon_xmit+0x4f/0x60 [ 990.108095][T18371] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 990.108161][T18371] ? __dev_queue_xmit+0x1200/0x2000 [ 990.108193][T18371] ? __dev_queue_xmit+0x182/0x2000 [ 990.108339][T18371] ? merge_sched_in+0x605/0xa30 [ 990.108451][T18371] ? ref_tracker_free+0x37d/0x3e0 [ 990.108560][T18371] ? __netlink_deliver_tap+0x4dc/0x500 [ 990.108684][T18371] netlink_unicast+0x5c0/0x690 [ 990.108750][T18371] netlink_sendmsg+0x58b/0x6b0 [ 990.108771][T18371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.108816][T18371] __sock_sendmsg+0x145/0x180 [ 990.108843][T18371] ____sys_sendmsg+0x31e/0x4e0 [ 990.108874][T18371] ___sys_sendmsg+0x17b/0x1d0 [ 990.108949][T18371] __x64_sys_sendmsg+0xd4/0x160 [ 990.108996][T18371] x64_sys_call+0x191e/0x3000 [ 990.109036][T18371] do_syscall_64+0xd2/0x200 [ 990.109057][T18371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 990.109089][T18371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 990.109151][T18371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.109232][T18371] RIP: 0033:0x7f7db554efc9 [ 990.109270][T18371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.109292][T18371] RSP: 002b:00007f7db3fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.109328][T18371] RAX: ffffffffffffffda RBX: 00007f7db57a5fa0 RCX: 00007f7db554efc9 [ 990.109342][T18371] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 990.109356][T18371] RBP: 00007f7db55d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 990.109406][T18371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.109494][T18371] R13: 00007f7db57a6038 R14: 00007f7db57a5fa0 R15: 00007fff158a0528 [ 990.109510][T18371] [ 990.109516][T18371] memory: usage 307200kB, limit 307200kB, failcnt 4767 [ 990.471082][T18371] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 990.478985][T18371] kmem: usage 239628kB, limit 9007199254740988kB, failcnt 0 [ 990.486313][T18371] Memory cgroup stats for /syz6: [ 990.487045][T18371] cache 69120000 [ 990.495631][T18371] rss 4096 [ 990.498653][T18371] shmem 0 [ 990.501605][T18371] mapped_file 0 [ 990.505081][T18371] dirty 0 [ 990.508023][T18371] writeback 0 [ 990.511289][T18371] workingset_refault_anon 1514 [ 990.516139][T18371] workingset_refault_file 160 [ 990.520871][T18371] swap 729088 [ 990.524188][T18371] swapcached 32768 [ 990.527896][T18371] pgpgin 1289205 [ 990.531492][T18371] pgpgout 1272312 [ 990.535178][T18371] pgfault 1146708 [ 990.538816][T18371] pgmajfault 859 [ 990.542344][T18371] inactive_anon 32768 [ 990.546334][T18371] active_anon 0 [ 990.549862][T18371] inactive_file 40960 [ 990.553819][T18371] active_file 0 [ 990.557271][T18371] unevictable 69120000 [ 990.561326][T18371] hierarchical_memory_limit 314572800 [ 990.566688][T18371] hierarchical_memsw_limit 9223372036854771712 [ 990.572846][T18371] total_cache 69120000 [ 990.576984][T18371] total_rss 4096 [ 990.580594][T18371] total_shmem 0 [ 990.584102][T18371] total_mapped_file 0 [ 990.588114][T18371] total_dirty 0 [ 990.591570][T18371] total_writeback 0 [ 990.595379][T18371] total_workingset_refault_anon 1514 [ 990.600691][T18371] total_workingset_refault_file 160 [ 990.605893][T18371] total_swap 729088 [ 990.609698][T18371] total_swapcached 32768 [ 990.613940][T18371] total_pgpgin 1289205 [ 990.618071][T18371] total_pgpgout 1272312 [ 990.622213][T18371] total_pgfault 1146708 [ 990.626368][T18371] total_pgmajfault 859 [ 990.630419][T18371] total_inactive_anon 32768 [ 990.634912][T18371] total_active_anon 0 [ 990.638879][T18371] total_inactive_file 40960 [ 990.643443][T18371] total_active_file 0 [ 990.647427][T18371] total_unevictable 69120000 [ 990.652029][T18371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.16586,pid=18370,uid=0 [ 990.667128][T18371] Memory cgroup out of memory: Killed process 18370 (syz.6.16586) total-vm:93960kB, anon-rss:1264kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 990.687266][T18304] veth0_vlan: entered promiscuous mode [ 990.698563][T18304] veth1_vlan: entered promiscuous mode [ 990.713827][T18304] veth0_macvtap: entered promiscuous mode [ 990.721286][T18304] veth1_macvtap: entered promiscuous mode [ 990.732270][T18304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.745289][T18304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.755610][ T4771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.764973][ T4771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.778116][ T4771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.789001][T17689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0