last executing test programs: 3m23.474499425s ago: executing program 3 (id=194): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m22.637554198s ago: executing program 3 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20) 3m22.546178369s ago: executing program 3 (id=202): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5cmC1eCBklBMgupRmgFcWonOOQ6E3KHQERtXbkV/Bfi0p0g/gE3/gWX3bjsQrjivZNk0qStlTJj6fNs7ptz3jfnXA4MnMs99/ab332+s11k2+1BTDUaMbUbke6kSDEVh17ZrK9Xr22ut1obV1K6vP7B6hsppaVXf/noyx8v/jo49+FPSz/Pxm8rH9/+cy0ibv2T/1m3SN0i9fqD1E7X+/1B+3remY5usZOl9F7eaRed1O0Vnb3R/rSd93d3D1K7d2NxYXevUxSp3TtIO52DNOin5nBKvZRlWVpcCO5p5lTLJ3c3bv1wpyzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4x3AQAAAAAAAAAAAAAAAAAAAE+A+53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/em1zvdXauJLSXET+7f7W/lZ9rfvXt6MbeXTiUizHX1Gd/q/V8eV3WxuXUmUlvslvDutv7m9Nn6xfrT4nMKxvVn2H9at1fTpZPxsLo/VrsRznzx5/7Yz6me8jXn9tpD6L5fj90+hHHjeqsY/rv15N6Z1b9ZziaPwLVd6xRjRG/2yOZ30AAADgUcjSkaP9+9sj+/csO91f74/r+od4PnDX/r4ZF+yhJ644+GKnneedvZPB3KmWBwWNiPjXyfcKGsNHLGfmxFzEf/7PYw2mHrZqerga908+/O7m5G/wcQvm/x/TeKyCif0kMUbHi36y/Y+LR+H8+GcFAAAAAAAAAADAgzyydwajcdb7v82o3yybHR3zrfgqm9wdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpAAAAP//d+24Qg==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r1 = creat(0x0, 0xd931d3864d39ddd8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9102000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001d00)=@newtaction={0x270, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x25c, 0x1, [@m_connmark={0xa4, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xbf, 0x4, 0x8, 0x8}, 0x239}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1aa8, 0x10000000, 0x5, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7fff, 0x10000000, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "683de9123e6f15bbaa12a4be0647d1bf"}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x174, 0x1f, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x100, 0x8, 0xfffffffd, 0x8c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1598, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x40, 0x10000000, 0x6, 0x6}}]}, {0xcd, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb7760d000000000000a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60db22abf921cc47b833cd69db77b46a64070e56b0898e03db2f62205644d79e5c20dffffe4d7ff62d611514b1db7d6db252535783ba6a7d952e11214a2402ef5ffd7327d50d240c70b400e75d30ee343aff31d9e290e9d69ae58f51637100a216bebd84776e38a175aa5533bc8483d6e5553ced157fe6dcf0005e7a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x270}}, 0x0) r8 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) 3m22.253766574s ago: executing program 3 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 3m21.378379187s ago: executing program 3 (id=213): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x802, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x3, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000003400)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0], 0x48, 0x800}, {&(0x7f0000000740)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000b00)="91f1d23d34565e3c178287692af29e797c0d9fcd84e356e918f6829f1a21dca7ad5d1de49d105a472a6a5c3cee4755d8ff68888f9ea6cd9e2d1a516bef836694670d3c800e7bb223a3bc5cce257dada6d70b93f1c23babcba490f9b3ad20c2f022179470c90fa63db056985644297a59da0058ca1709ef668eabe277c2f9bd5f5d010242a99ab433522c669ec6556f054bbd45d92e4da701c741dd42c62ade1d4ce5febdd6af9c8cd9a4053bafbe", 0xae}, {&(0x7f0000000bc0)="5f5f21141efe656b487eba4a40762882191ec02abf80b6769e7716c53451aabe7f7476c85b60a4e1f737d1e05aa81cf1117a13826c2963ca4d670be4781a491c5d1ceb10a9cfe49293df2d3816ffe43a9be933406e0ca466fb0259ec07d01256837affd58c8e776497d7154fe81318c44efed258898e1345497060bd8bd02b22a022aa01c5b215996e3abdf677f8ee6a29a6cc703ab842e2da6fecfcd6082a75c37ed4a55550a45b2911b70821df5798fe30f0c00ff1d1a1e019d7672a107ab363854ece421e47b6b17aeb7318724eb9eaea7b44370afc077d947db72fdb1cd2413db9e0cdd463edefedf382cd6898ccdd4a", 0xf2}, {&(0x7f0000000cc0)="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", 0xfa}, {&(0x7f0000000dc0)="4c3493f1771f4abe1270307340a45fcf0dfc16c610745a4f7bec6bebeb2ae8da1a08ba784a91ee3fa5032f4d59698afae064ec800f54324e4b39c7eb93a5b68fbd62bd0713a838c72485bcff34d411628ef982561b31efdffbeb0cadb71d0b9d7968f78ee749161a6809d3783832f513f445f6ef2fc484649aaabc1fb5c68e1f37cf99b0aa2ffa4984cda726dc4448d9046c66b3aa9e9bccbdc98e2cd40e5275eeaf24f2c56dab79dd536ff4666ec9d002e33e16f4bd4b24ed4e2e23d0be4c6ad1c6", 0xc2}], 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3000000000000000840000000100000002005d07010000000800000079c20000000000000600000081000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000d836020000100100b908"], 0xb0, 0x40850}, {&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x56dc}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000001080)="2b0d8e297ff51489988f0350af5b3329ffae124cccf3e08671cdfea4f00035f4b957332a43e719bce4c32f11f6f22b6348ad6b8dbb1ab063f6517fdd9b435e49f608edc86b492f845c8317d316639107ee6ad60a2c6d420ee066e12572ad6ce3f720359657f35ec741ddffc0d61a9028535f956e582f3750b82e98056e96bcc34ea723af2d46c863a17da559db73db45cb3cd6b6a0c0c50a970fcf890ff0cec27f65", 0xa2}, {&(0x7f0000001140)="52b91c19be10d79804d3f2a9a33eac0fce92de0d84e13b9e0df23ffa8597828efcd0f9c9417866b1bedf929d2f03ca398a0975c20128ef9a9466bf68f256bb81bfc2dbccd5f8282cdbf4e75fd6030d0a40c54ba24ce5d37d402b2157425c9bc5972e7c701c56a227d2d1e2ff5f8de50d9202f40286978a32d35bae5aa2664cc1eea225156a6dd30c12356d920f3be12c5ae43d", 0x93}, {&(0x7f0000001200)="7d4e59b1ac1fea568c5883beae8e9292bb1ed448a1c73dbe52be0947bd0934605607485f7152bc09dbae81e496fc262adce29d85cbf62f14cd", 0x39}, {&(0x7f0000001240)="26294bcd0cb573e9c764759e4f6814eb8405043507e5abe404eb906e8a008de3158fc062e9e25b85558adac86128a663289184c4623cbe58653b137318a1bf530b463bcbf3ea569be06ffecc7dd186531dca3bb58bbfc3c1919d4c16ff935a42c8f35986d7979b4e84051cd42c66757208850981d723468d8eb62573ad6fd6d34375e57d2cbe9d99499ec4d092e8c5cf06d7602e7f62dc", 0x97}, {&(0x7f0000001300)="d0685572afcc1c65cce2f16809f16ccac44c2cc77535391e958b716f218a98e47b9751cbf766497f936ee5d7b65a7fd57f3da483a4a49e69710e62fd446d3a44aeeda73bb4b7e7ae3ca4df8812b4ce12953c6243be3f3c7761678b99ef621b5615eb1bd2a1ad47deaa91b897fc4ee9c247aef168cfd2e11d31399578ffa26d24e78c7165", 0x84}, {&(0x7f00000013c0)="726fda3f3352edf2e4517294fcadfac70daff5f941d5ba4c9667d9883843378b7bf01a32bb6cf5a91e69ac7887377b1759ee5e7b21301fff81eda42559456299e906126c2c8089cb28ad1ca00f83280548584896845d7f0d99253755c8b445ad921dadad2adf0c9cfc3816070028f2ed0186bd1631918f43eddc70e0607ba3dc8ab89ccc8c541b27431c53f75142a9955ddd3394af479b8e9cce8e86b7d0eaf73a47842606d5e1f28a3a3718108ed3331f78bc9ac1cc9eb955d98c48e548f047ea4f448ca32865c57da149b23f6931270405deccb259f4b32e9f7a49f445b341c20eeb9a5ef49dbcbdbc62ac0a74c6c2b24b7d", 0xf3}], 0x6, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000008419000007000000ac1414aa000000001800000000000000840000000600004aac1414bb00000000"], 0x30, 0xc895}], 0x3, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f0000000900)={&(0x7f0000000400), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)}}, &(0x7f0000000980)=0x18) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x3, 0x6) r5 = dup3(r1, r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000000001000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = socket$kcm(0x21, 0x4, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}, 0xfc00) listen(r9, 0x2) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6299, 0x80, 0x0, 0x334}, &(0x7f00000002c0), &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000001010400000000000000000a000040300002802c0032fe6bb77c9a5522e769018014000300fe80000000000000d54e0000000000bb14000400fe8000000009000000000000000000aa"], 0x44}}, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 3m20.143498786s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 3m20.052526988s ago: executing program 32 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 1m13.455556076s ago: executing program 4 (id=2128): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m13.394439047s ago: executing program 4 (id=2129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 1m13.380065107s ago: executing program 4 (id=2130): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 1m13.353647167s ago: executing program 4 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r5, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = msgget(0x1, 0x2b0) msgrcv(r6, 0x0, 0x0, 0x2, 0x2000) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000500)=0x404000) pwritev2(r7, 0x0, 0x0, 0xfffffffd, 0x1ff, 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000780)=""/118, 0x76}, {0x0}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000ac0)=""/219, 0xdb}], 0x8}, 0x102) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x2a100, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m13.130517941s ago: executing program 4 (id=2132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0xba01}, 0x810) 1m12.857592045s ago: executing program 4 (id=2135): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x20c4851) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) getpid() add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000", 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.828975645s ago: executing program 33 (id=2135): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x20c4851) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) getpid() add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000", 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.784562178s ago: executing program 0 (id=2236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104041000"/20, @ANYRES32=0x0, @ANYBLOB="2b030000008000001c0012800b00210067656e65766500000c00028008000200ac1e00011400350067656e65766531000000000000009fabc7cfe8306a31f1eec99c5d14fc016858ceb19914ce8f82966f11e4635c49f677d595a1adafb765809b3c9adcc278800612aa6e3db9c96052a010f9e7f6ebf7d9e09f98a6e83f87aa2832229efc58cab10a4de660181817de6478e60000"], 0x50}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000024c0)='S', 0x1}], 0x2}}], 0x1, 0x40800) socket(0x10, 0x80003, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1m6.718475539s ago: executing program 0 (id=2238): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000000000e007b8af80800000000000000000000000007020000f8ffffffb703000008000000b7040008000000208500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1ffffffffffffdcb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='rxrpc_recvmsg\x00', r5, 0x0, 0x9}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r6, 0x9, 0x0, [0x10000, 0x49df, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x8000000000a, 0x5, 0xc, 0xfffffffffffffff8, 0x4, 0x7f, 0x0, 0xd0, 0x917, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x100, 0x4, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x4, 0x2, 0x100000001, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x9, 0xa24, 0xb10, 0x3, 0x9, 0xe, 0x5, 0x7, 0x3ff, 0x7, 0x1, 0xffb, 0x6, 0x2000000, 0x800000000005, 0x18, 0x8, 0x7ff, 0x4000000200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0x76cd, 0x2, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x8000000000000007, 0x0, 0x2, 0x3, 0x80000001, 0x3, 0x7f, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0x100000000]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000017c0)={r6, "0e7b325e69132379da3a5fc95f955a35"}) socket$inet(0x2, 0x7, 0x20004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 1m6.717886429s ago: executing program 0 (id=2239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0xba01}, 0x810) 1m5.830950572s ago: executing program 0 (id=2256): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000e080)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00bb3403000000f8dbdf250a000000", @ANYRESDEC=r0, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032df00500"/23], 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x400040c0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000780), 0x0, 0x4008814) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000) sendmmsg$inet6(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x74, 0x0, 0x208, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x48011}, 0x810) 1m4.801955278s ago: executing program 0 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x218140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) close_range(r0, r1, 0x0) 1m4.736485279s ago: executing program 0 (id=2265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000840)=""/223, 0xffffffffffffffeb, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 49.690143519s ago: executing program 34 (id=2265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000840)=""/223, 0xffffffffffffffeb, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.177619002s ago: executing program 2 (id=3633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)=ANY=[], 0x8) 3.148301602s ago: executing program 2 (id=3634): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) 3.124169232s ago: executing program 2 (id=3636): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x9, 0x8, 0x9, 0x2}, {0x5, 0x81, 0x0, 0x9}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000480)=ANY=[], 0x1, 0x1221, &(0x7f0000002300)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) semop(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket(0x1d, 0x2, 0x6) 2.219359416s ago: executing program 2 (id=3653): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) syz_genetlink_get_family_id$ethtool(0x0, r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) utimes(&(0x7f0000001ac0)='./file0\x00', 0x0) shutdown(r6, 0x1) 1.574223666s ago: executing program 5 (id=3659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0xba01}, 0x810) 1.438080739s ago: executing program 6 (id=3660): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) syz_genetlink_get_family_id$ethtool(0x0, r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) shutdown(r6, 0x1) 958.622396ms ago: executing program 2 (id=3664): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r5, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58) fstat(r7, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r6, r7, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r9, r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r7, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r13) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r15 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r13}, {0x8, 0x5, r14}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r15}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r10, 0x0, r11, r12, r15]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, r12, r16]) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 889.300967ms ago: executing program 7 (id=3665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmsg$rds(r1, &(0x7f00000020c0)={&(0x7f0000000800)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008011}, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0x81, &(0x7f0000000140)="01d55cafc09d5af63b9d72b58889075c708c3f8892893e2c5ba9034c2c8a6886595d3e9cd4748c330ef94598a10c1349149d11ae2a62652381fc18b2808b267603a2f66bfd1c517915da239a9275ed5b3d34fdf777bda6a4dcb5d2b63e73d0565d5b0a3ccb218ae05a60b4af83da5c683ba3cd63d51bf3c45263aceb3c9807546a"}) 863.079117ms ago: executing program 2 (id=3666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x205041e, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f6e756c74616d6c2c6e5578e330751f5c749e66732c73686f72746e616d7765723c757466383d312c64656275672c296f636861727365743d757466382c73686f72746e61a62eb06d65576d000065642c757466383d312c5b65015b5726b378d13757d7ad1e31c98322262f69557afe9519585d6c3efb7715b048e34a5783dd3f60dec0eb94e73a6b8e07b0af504bdd7eaed12cceb6db83115e899b53309a99c27f"], 0xff, 0x2a1, &(0x7f0000000540)="$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") open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x104) 777.337398ms ago: executing program 1 (id=3667): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 718.512429ms ago: executing program 1 (id=3668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 695.91509ms ago: executing program 1 (id=3669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)=ANY=[], 0x8) 637.81628ms ago: executing program 5 (id=3670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000740)='mm_page_alloc\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x4070bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000200000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000004840)={0x2ff, 0xa}) unshare(0x2c020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8, 0x20}, 0x38) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b00"], 0x144}}, 0x20000000) r10 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) 617.726691ms ago: executing program 6 (id=3671): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58) fstat(r8, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r7, r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r8, r10, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r8, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r9, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r14) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r16 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r16}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r11, 0x0, r12, r13, r16]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, r2, r13, r17]) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 594.184491ms ago: executing program 1 (id=3672): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000000380), &(0x7f0000000240)=r1}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x3d18, 0x0, 0x0, 0x7, 0x14, "000100000000000064930000000000000100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xf) 576.822591ms ago: executing program 1 (id=3673): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) 551.892862ms ago: executing program 1 (id=3674): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 512.900202ms ago: executing program 5 (id=3675): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000000000e007b8af80800000000000000000000000007020000f8ffffffb703000008000000b704000800000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1ffffffffffffdcb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='rxrpc_recvmsg\x00', r5, 0x0, 0x9}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10000, 0x49df, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x8000000000a, 0x5, 0xc, 0xfffffffffffffff8, 0x4, 0x7f, 0x0, 0xd0, 0x917, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x100, 0x4, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x4, 0x2, 0x100000001, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x9, 0xa24, 0xb10, 0x3, 0x9, 0xe, 0x5, 0x7, 0x3ff, 0x7, 0x1, 0xffb, 0x6, 0x2000000, 0x800000000005, 0x18, 0x8, 0x7ff, 0x4000000200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0x76cd, 0x2, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x8000000000000007, 0x0, 0x2, 0x3, 0x80000001, 0x3, 0x7f, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0x100000000]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000017c0)={0x0, "0e7b325e69132379da3a5fc95f955a35"}) socket$inet(0x2, 0x7, 0x20004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 500.103533ms ago: executing program 6 (id=3676): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18) fallocate(r1, 0x10, 0x6, 0x10001) 455.881473ms ago: executing program 5 (id=3677): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r5, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r7}}, 0x58) fstat(r7, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="180200003b00000227bd7000fbdbdf25040087000c006b0000000000000000000800d10001000000371c1d55c75cc2c9d6b2ddaa859564d044d977a9af0241323ff790034e5521324a7f4cb7b51a21e22d9d6bf53fd493c9988fa3c4712535cec4a034d30b0aab462ef237648774163b1a3b700ff0476b2858fadfc0d9350fd53075b7d3fe152a63da2c28d221b45e46be0beb2e8b1aa214067a334f5be924b21a1445989eae4faee42c940476e9df973b5606cdc15e70f5a0ea5061c28e454b252ebcabc18c8d5e162d45fa170f45a8c0e3835ea6c407fe979cc3e019a5a27944227e6b3a3557108ace933b9528e6d17e70d34424940a2c159f1aad6949a3453da01464238fbc414bc69abbc1c23b76b56d7bbc4c3e06bf2bc851ab337644f3e5fa8e4b332a610034d4280981ea9ce23180564297cc05e87da3864fdf1f0b4ac4007e41cd3b033e4bc022eb7b8af7458756160a5274d46c67b47cbf896a4365cc95294b86b3f337d6485519a3cff1745c7fd28f3b93bad48bc72caea673d8e39ffeb6821833e5c514d0cda2c5ff3c3a9dd1222fff94a2e2e5dfedabd532716ca396e928d0cf27b23a82dd15fcd12d6b474751a46c723bc6882e193e98df0bcc8583493ac23e3b58ae7b65d80b79393fd3af999f78586dbb8742721a7efc1b84498883bcf7e3884a2358d4aa342d5c4bbebce3804c7ad30ee50f8151e981cd34b0670926eb7ec5f6c5037bde2d512deeb22de0fcf573b160"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r6, r7, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r9, r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r7, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r13) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r15 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r13}, {0x8, 0x5, r14}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r15}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r10, 0x0, r11, r12, r15]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, r12, r16]) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 346.605365ms ago: executing program 6 (id=3678): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) 321.577986ms ago: executing program 5 (id=3679): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 302.416106ms ago: executing program 6 (id=3680): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18) fallocate(r0, 0x10, 0x6, 0x10001) 301.606126ms ago: executing program 5 (id=3681): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) syz_genetlink_get_family_id$ethtool(0x0, r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) shutdown(r6, 0x1) 227.603567ms ago: executing program 7 (id=3682): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x4, &(0x7f0000000100)=[0xee01, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58) fstat(r8, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="180200003b00000227bd7000fbdbdf25040087000c006b0000000000000000000800d10001000000371c1d55c75cc2c9d6b2ddaa859564d044d977a9af0241323ff790034e5521324a7f4cb7b51a21e22d9d6bf53fd493c9988fa3c4712535cec4a034d30b0aab462ef237648774163b1a3b700ff0476b2858fadfc0d9350fd53075b7d3fe152a63da2c28d221b45e46be0beb2e8b1aa214067a334f5be924b21a1445989eae4faee42c940476e9df973b5606cdc15e70f5a0ea5061c28e454b252ebcabc18c8d5e162d45fa170f45a8c0e3835ea6c407fe979cc3e019a5a27944227e6b3a3557108ace933b9528e6d17e70d34424940a2c159f1aad6949a3453da01464238fbc414bc69abbc1c23b76b56d7bbc4c3e06bf2bc851ab337644f3e5fa8e4b332a610034d4280981ea9ce23180564297cc05e87da3864fdf1f0b4ac4007e41cd3b033e4bc022eb7b8af7458756160a5274d46c67b47cbf896a4365cc95294b86b3f337d6485519a3cff1745c7fd28f3b93bad48bc72caea673d8e39ffeb6821833e5c514d0cda2c5ff3c3a9dd1222fff94a2e2e5dfedabd532716ca396e928d0cf27b23a82dd15fcd12d6b474751a46c723bc6882e193e98df0bcc8583493ac23e3b58ae7b65d80b79393fd3af999f78586dbb8742721a7efc1b84498883bcf7e3884a2358d4aa342d5c4bbebce3804c7ad30ee50f8151e981cd34b0670926eb7ec5f6c5037bde2d512deeb22de0fcf573b160"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r7, r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r8, r10, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r8, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r9, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r14) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r16 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r16}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r11, 0x0, r12, r13, r16]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, r2, r13, r17]) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 198.012227ms ago: executing program 7 (id=3683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)=ANY=[], 0x8) 128.795968ms ago: executing program 7 (id=3684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff0585000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x40}}, 0x4008054) 127.689578ms ago: executing program 6 (id=3685): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a310000ffff0500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 58.705729ms ago: executing program 7 (id=3686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000740)='mm_page_alloc\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x4070bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000200000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000004840)={0x2ff, 0xa}) unshare(0x2c020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8, 0x20}, 0x38) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b00"], 0x144}}, 0x20000000) r10 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) 0s ago: executing program 7 (id=3687): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdir(0x0, 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 10.459164][T15323] should_failslab+0x8c/0xb0 [ 210.459183][T15323] __kmalloc_cache_noprof+0x4c/0x320 [ 210.459208][T15323] ? fput+0x8f/0xc0 [ 210.459230][T15323] __se_sys_memfd_create+0x1cc/0x590 [ 210.459259][T15323] __x64_sys_memfd_create+0x31/0x40 [ 210.459294][T15323] x64_sys_call+0x122f/0x2fb0 [ 210.459311][T15323] do_syscall_64+0xd2/0x200 [ 210.459328][T15323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.459354][T15323] ? clear_bhb_loop+0x40/0x90 [ 210.459376][T15323] ? clear_bhb_loop+0x40/0x90 [ 210.459425][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.459447][T15323] RIP: 0033:0x7f9bb11de929 [ 210.459463][T15323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.459486][T15323] RSP: 002b:00007f9baf846e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 210.459505][T15323] RAX: ffffffffffffffda RBX: 00000000000001e0 RCX: 00007f9bb11de929 [ 210.459519][T15323] RDX: 00007f9baf846ef0 RSI: 0000000000000000 RDI: 00007f9bb12614cc [ 210.459530][T15323] RBP: 0000200000000500 R08: 00007f9baf846bb7 R09: 00007f9baf846e40 [ 210.459540][T15323] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000004c0 [ 210.459580][T15323] R13: 00007f9baf846ef0 R14: 00007f9baf846eb0 R15: 0000200000000700 [ 210.459632][T15323] [ 210.462546][T15325] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2900'. [ 210.686824][T15351] loop6: detected capacity change from 0 to 256 [ 210.789247][T15373] loop5: detected capacity change from 0 to 164 [ 210.833610][T15373] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 210.886385][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 210.886398][ T29] audit: type=1326 audit(1751571156.400:13099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 210.933344][ T29] audit: type=1326 audit(1751571156.430:13100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 210.957042][ T29] audit: type=1326 audit(1751571156.430:13101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 210.980676][ T29] audit: type=1326 audit(1751571156.430:13102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.004531][ T29] audit: type=1326 audit(1751571156.440:13103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.028402][ T29] audit: type=1326 audit(1751571156.440:13104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.028513][ T29] audit: type=1326 audit(1751571156.440:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.028542][ T29] audit: type=1326 audit(1751571156.440:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.028563][ T29] audit: type=1326 audit(1751571156.440:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.028584][ T29] audit: type=1326 audit(1751571156.440:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.5.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7ebb2ae929 code=0x7ffc0000 [ 211.034011][T15398] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2914'. [ 211.224582][T15411] loop6: detected capacity change from 0 to 128 [ 211.258497][T15413] ipvlan2: entered promiscuous mode [ 211.259346][T15413] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 211.260601][T15413] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.537972][T15456] loop1: detected capacity change from 0 to 164 [ 211.564932][T15456] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 211.667362][T15474] loop2: detected capacity change from 0 to 128 [ 211.688593][T15476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.834222][T15481] loop2: detected capacity change from 0 to 1024 [ 211.849797][T15481] EXT4-fs: inline encryption not supported [ 211.855642][T15481] EXT4-fs: Ignoring removed i_version option [ 211.862396][T15481] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.875046][T15481] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.2935: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.891080][T15481] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2935: Failed to acquire dquot type 0 [ 211.902702][T15481] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.2935: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.917487][T15481] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2935: Invalid inode bitmap blk 0 in block_group 0 [ 211.930413][ T6883] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.931547][T15481] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 211.969642][T15481] EXT4-fs (loop2): 1 orphan inode deleted [ 211.975467][ T6883] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0 [ 212.014312][T15486] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm syz.2.2935: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.029564][T15486] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2935: Failed to acquire dquot type 0 [ 212.041430][T15481] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm syz.2.2935: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.060159][T15481] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2935: Failed to acquire dquot type 0 [ 212.090116][T15497] loop7: detected capacity change from 0 to 1024 [ 212.096887][T15497] EXT4-fs: Ignoring removed orlov option [ 212.116304][ T3364] kernel write not supported for file bpf-prog (pid: 3364 comm: kworker/1:2) [ 212.144413][T15504] loop5: detected capacity change from 0 to 1024 [ 212.151218][T15504] EXT4-fs: quotafile must be on filesystem root [ 212.337869][T15512] ipvlan2: entered promiscuous mode [ 212.344141][T15512] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.352018][T15512] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.400350][T15520] sd 0:0:1:0: device reset [ 212.501221][T15536] loop2: detected capacity change from 0 to 1024 [ 212.507837][T15536] EXT4-fs: quotafile must be on filesystem root [ 212.690992][T15563] siw: device registration error -23 [ 212.696830][T15566] loop7: detected capacity change from 0 to 164 [ 212.704533][T15566] ISOFS: unable to read i-node block [ 212.709948][T15566] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 212.778598][T15567] ipvlan2: entered promiscuous mode [ 212.784702][T15567] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.793051][T15567] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.150956][T15571] loop5: detected capacity change from 0 to 2048 [ 213.157546][T15571] ext4: Unknown parameter 'noacl' [ 213.512002][T15476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.603578][T15476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.702214][T15476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.945835][T15476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.393583][T15600] ipvlan2: entered promiscuous mode [ 214.399548][T15600] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 214.407471][T15600] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.558397][T15476] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.571807][T15476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.585895][T15476] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.019291][T15619] netlink: 'syz.6.2987': attribute type 12 has an invalid length. [ 215.056728][T15623] loop1: detected capacity change from 0 to 1024 [ 215.080411][T15623] EXT4-fs: quotafile must be on filesystem root [ 215.127877][T15623] __nla_validate_parse: 9 callbacks suppressed [ 215.127892][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 215.217605][T15627] loop7: detected capacity change from 0 to 1024 [ 215.273071][T15627] EXT4-fs: quotafile must be on filesystem root [ 215.323569][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2994'. [ 215.424884][T15653] FAULT_INJECTION: forcing a failure. [ 215.424884][T15653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.438057][T15653] CPU: 1 UID: 0 PID: 15653 Comm: syz.1.3003 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 215.438162][T15653] Tainted: [W]=WARN [ 215.438169][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.438181][T15653] Call Trace: [ 215.438189][T15653] [ 215.438197][T15653] __dump_stack+0x1d/0x30 [ 215.438218][T15653] dump_stack_lvl+0xe8/0x140 [ 215.438238][T15653] dump_stack+0x15/0x1b [ 215.438255][T15653] should_fail_ex+0x265/0x280 [ 215.438331][T15653] should_fail+0xb/0x20 [ 215.438354][T15653] should_fail_usercopy+0x1a/0x20 [ 215.438460][T15653] _copy_from_user+0x1c/0xb0 [ 215.438478][T15653] get_timespec64+0x4c/0x100 [ 215.438497][T15653] futex2_setup_timeout+0x6e/0x1f0 [ 215.438602][T15653] __se_sys_futex_waitv+0xc6/0x1c0 [ 215.438635][T15653] __x64_sys_futex_waitv+0x67/0x80 [ 215.438661][T15653] x64_sys_call+0x2b1a/0x2fb0 [ 215.438704][T15653] do_syscall_64+0xd2/0x200 [ 215.438722][T15653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.438745][T15653] ? clear_bhb_loop+0x40/0x90 [ 215.438799][T15653] ? clear_bhb_loop+0x40/0x90 [ 215.438817][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.438834][T15653] RIP: 0033:0x7f18d645e929 [ 215.438866][T15653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.438883][T15653] RSP: 002b:00007f18d4ac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 215.438901][T15653] RAX: ffffffffffffffda RBX: 00007f18d6685fa0 RCX: 00007f18d645e929 [ 215.438946][T15653] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 215.438959][T15653] RBP: 00007f18d4ac7090 R08: 0000000000000001 R09: 0000000000000000 [ 215.438972][T15653] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001 [ 215.438985][T15653] R13: 0000000000000000 R14: 00007f18d6685fa0 R15: 00007ffd94383de8 [ 215.439003][T15653] [ 215.487097][T15656] loop7: detected capacity change from 0 to 8192 [ 215.640085][T15656] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.697011][T15665] loop6: detected capacity change from 0 to 1024 [ 215.704133][T15665] EXT4-fs: quotafile must be on filesystem root [ 215.713116][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3008'. [ 215.775528][T15671] loop1: detected capacity change from 0 to 8192 [ 215.894996][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 215.895012][ T29] audit: type=1326 audit(1751571161.410:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18d64558e7 code=0x7ffc0000 [ 215.925732][ T29] audit: type=1326 audit(1751571161.410:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18d63fab19 code=0x7ffc0000 [ 215.948524][ T29] audit: type=1326 audit(1751571161.410:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f18d645e929 code=0x7ffc0000 [ 215.971136][ T29] audit: type=1326 audit(1751571161.420:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18d64558e7 code=0x7ffc0000 [ 215.993882][ T29] audit: type=1326 audit(1751571161.420:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18d63fab19 code=0x7ffc0000 [ 216.016565][ T29] audit: type=1326 audit(1751571161.420:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f18d645e929 code=0x7ffc0000 [ 216.039578][ T29] audit: type=1326 audit(1751571161.430:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18d64558e7 code=0x7ffc0000 [ 216.062191][ T29] audit: type=1326 audit(1751571161.430:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18d63fab19 code=0x7ffc0000 [ 216.084889][ T29] audit: type=1326 audit(1751571161.430:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f18d645e929 code=0x7ffc0000 [ 216.107390][ T29] audit: type=1326 audit(1751571161.440:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18d64558e7 code=0x7ffc0000 [ 216.593897][T15822] loop2: detected capacity change from 0 to 164 [ 216.623238][T15822] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 216.717054][T15844] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3031'. [ 216.727878][T15841] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3030'. [ 216.736952][T15846] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 216.738585][T15841] siw: device registration error -23 [ 216.752998][T15846] sctp: [Deprecated]: syz.5.3032 (pid 15846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.752998][T15846] Use struct sctp_sack_info instead [ 216.790642][T15846] loop5: detected capacity change from 0 to 512 [ 216.799704][T15846] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.806379][T15846] EXT4-fs: Ignoring removed oldalloc option [ 216.812375][T15846] ext4: Unknown parameter '.' [ 216.819594][T15850] loop1: detected capacity change from 0 to 1024 [ 216.835821][T15850] EXT4-fs: quotafile must be on filesystem root [ 216.986020][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3045'. [ 216.997168][T15878] siw: device registration error -23 [ 217.049302][T15881] loop7: detected capacity change from 0 to 1024 [ 217.057314][T15881] EXT4-fs: Ignoring removed orlov option [ 217.169109][T15896] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3051'. [ 217.192236][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3053'. [ 217.203482][T15900] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3053'. [ 217.273738][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3057'. [ 217.288843][T15908] siw: device registration error -23 [ 217.332138][T15912] loop1: detected capacity change from 0 to 256 [ 217.478783][T15939] siw: device registration error -23 [ 217.487030][T15941] FAULT_INJECTION: forcing a failure. [ 217.487030][T15941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.500096][T15941] CPU: 0 UID: 0 PID: 15941 Comm: syz.5.3071 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 217.500137][T15941] Tainted: [W]=WARN [ 217.500144][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.500155][T15941] Call Trace: [ 217.500162][T15941] [ 217.500169][T15941] __dump_stack+0x1d/0x30 [ 217.500191][T15941] dump_stack_lvl+0xe8/0x140 [ 217.500211][T15941] dump_stack+0x15/0x1b [ 217.500227][T15941] should_fail_ex+0x265/0x280 [ 217.500291][T15941] should_fail+0xb/0x20 [ 217.500316][T15941] should_fail_usercopy+0x1a/0x20 [ 217.500342][T15941] strncpy_from_user+0x25/0x230 [ 217.500434][T15941] ? __fget_files+0x184/0x1c0 [ 217.500452][T15941] __se_sys_add_key+0x86/0x350 [ 217.500475][T15941] __x64_sys_add_key+0x67/0x80 [ 217.500498][T15941] x64_sys_call+0x1d0d/0x2fb0 [ 217.500521][T15941] do_syscall_64+0xd2/0x200 [ 217.500641][T15941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.500747][T15941] ? clear_bhb_loop+0x40/0x90 [ 217.500767][T15941] ? clear_bhb_loop+0x40/0x90 [ 217.500784][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.501032][T15941] RIP: 0033:0x7f7ebb2ae929 [ 217.501045][T15941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.501060][T15941] RSP: 002b:00007f7eb9917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 217.501120][T15941] RAX: ffffffffffffffda RBX: 00007f7ebb4d5fa0 RCX: 00007f7ebb2ae929 [ 217.501132][T15941] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 217.501166][T15941] RBP: 00007f7eb9917090 R08: ffffffffffffffff R09: 0000000000000000 [ 217.501200][T15941] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 217.501213][T15941] R13: 0000000000000000 R14: 00007f7ebb4d5fa0 R15: 00007fffd1f2de78 [ 217.501231][T15941] [ 217.747896][T15954] FAULT_INJECTION: forcing a failure. [ 217.747896][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.761133][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.2.3076 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 217.761252][T15954] Tainted: [W]=WARN [ 217.761265][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.761277][T15954] Call Trace: [ 217.761284][T15954] [ 217.761292][T15954] __dump_stack+0x1d/0x30 [ 217.761313][T15954] dump_stack_lvl+0xe8/0x140 [ 217.761334][T15954] dump_stack+0x15/0x1b [ 217.761351][T15954] should_fail_ex+0x265/0x280 [ 217.761443][T15954] should_fail+0xb/0x20 [ 217.761468][T15954] should_fail_usercopy+0x1a/0x20 [ 217.761498][T15954] _copy_from_user+0x1c/0xb0 [ 217.761557][T15954] ___sys_sendmsg+0xc1/0x1d0 [ 217.761593][T15954] __x64_sys_sendmsg+0xd4/0x160 [ 217.761656][T15954] x64_sys_call+0x2999/0x2fb0 [ 217.761729][T15954] do_syscall_64+0xd2/0x200 [ 217.761748][T15954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.761771][T15954] ? clear_bhb_loop+0x40/0x90 [ 217.761818][T15954] ? clear_bhb_loop+0x40/0x90 [ 217.761840][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.761861][T15954] RIP: 0033:0x7f67858ce929 [ 217.761925][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.761943][T15954] RSP: 002b:00007f6783f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.761964][T15954] RAX: ffffffffffffffda RBX: 00007f6785af5fa0 RCX: 00007f67858ce929 [ 217.761977][T15954] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 217.761989][T15954] RBP: 00007f6783f37090 R08: 0000000000000000 R09: 0000000000000000 [ 217.762007][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.762021][T15954] R13: 0000000000000000 R14: 00007f6785af5fa0 R15: 00007ffe31d6edd8 [ 217.762040][T15954] [ 218.173387][T15992] loop2: detected capacity change from 0 to 164 [ 218.267486][T16005] loop1: detected capacity change from 0 to 512 [ 218.275943][T16005] EXT4-fs: Ignoring removed bh option [ 218.281422][T16005] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.297538][T16005] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 218.314646][T15984] loop5: detected capacity change from 0 to 8192 [ 218.322773][T16005] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 218.332141][T16013] FAULT_INJECTION: forcing a failure. [ 218.332141][T16013] name failslab, interval 1, probability 0, space 0, times 0 [ 218.344821][T16013] CPU: 0 UID: 0 PID: 16013 Comm: syz.7.3100 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 218.344855][T16013] Tainted: [W]=WARN [ 218.344862][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.344885][T16013] Call Trace: [ 218.344947][T16013] [ 218.344953][T16013] __dump_stack+0x1d/0x30 [ 218.344972][T16013] dump_stack_lvl+0xe8/0x140 [ 218.344991][T16013] dump_stack+0x15/0x1b [ 218.345013][T16013] should_fail_ex+0x265/0x280 [ 218.345037][T16013] ? __se_sys_memfd_create+0x1cc/0x590 [ 218.345086][T16013] should_failslab+0x8c/0xb0 [ 218.345159][T16013] __kmalloc_cache_noprof+0x4c/0x320 [ 218.345181][T16013] ? fput+0x8f/0xc0 [ 218.345288][T16013] __se_sys_memfd_create+0x1cc/0x590 [ 218.345318][T16013] __x64_sys_memfd_create+0x31/0x40 [ 218.345358][T16013] x64_sys_call+0x122f/0x2fb0 [ 218.345381][T16013] do_syscall_64+0xd2/0x200 [ 218.345399][T16013] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 218.345425][T16013] ? clear_bhb_loop+0x40/0x90 [ 218.345524][T16013] ? clear_bhb_loop+0x40/0x90 [ 218.345547][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.345569][T16013] RIP: 0033:0x7f9bb11de929 [ 218.345585][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.345604][T16013] RSP: 002b:00007f9baf846e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 218.345624][T16013] RAX: ffffffffffffffda RBX: 0000000000000522 RCX: 00007f9bb11de929 [ 218.345696][T16013] RDX: 00007f9baf846ef0 RSI: 0000000000000000 RDI: 00007f9bb12614cc [ 218.345710][T16013] RBP: 00002000000007c0 R08: 00007f9baf846bb7 R09: 00007f9baf846e40 [ 218.345724][T16013] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 218.345737][T16013] R13: 00007f9baf846ef0 R14: 00007f9baf846eb0 R15: 0000200000000580 [ 218.345756][T16013] [ 218.353799][T16005] EXT4-fs (loop1): orphan cleanup on readonly fs [ 218.544115][T16005] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3098: Failed to acquire dquot type 1 [ 218.563016][T16005] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3098: Invalid block bitmap block 0 in block_group 0 [ 218.578305][T16005] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3098: Invalid block bitmap block 0 in block_group 0 [ 218.579024][T16026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16026 comm=syz.6.3105 [ 218.607077][T16026] loop6: detected capacity change from 0 to 256 [ 218.615370][T16026] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 218.623219][T16026] FAT-fs (loop6): Filesystem has been set read-only [ 218.630298][T16005] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3098: Invalid block bitmap block 0 in block_group 0 [ 218.644012][T16005] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3098: Failed to acquire dquot type 1 [ 218.656028][T16005] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3098: Failed to acquire dquot type 1 [ 218.667809][T16005] EXT4-fs (loop1): 1 orphan inode deleted [ 218.687473][T16035] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 218.694062][T16035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.701574][T16035] vhci_hcd vhci_hcd.0: Device attached [ 218.748691][T16037] vhci_hcd: connection closed [ 218.749809][ T6883] vhci_hcd: stop threads [ 218.758906][ T6883] vhci_hcd: release socket [ 218.763348][ T6883] vhci_hcd: disconnect device [ 218.962863][T16073] loop7: detected capacity change from 0 to 164 [ 218.990187][T16067] ipvlan2: entered promiscuous mode [ 218.996265][T16067] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 219.004286][T16067] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.037119][T16080] FAULT_INJECTION: forcing a failure. [ 219.037119][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.050270][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.5.3127 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 219.050307][T16080] Tainted: [W]=WARN [ 219.050314][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.050326][T16080] Call Trace: [ 219.050333][T16080] [ 219.050340][T16080] __dump_stack+0x1d/0x30 [ 219.050362][T16080] dump_stack_lvl+0xe8/0x140 [ 219.050463][T16080] dump_stack+0x15/0x1b [ 219.050481][T16080] should_fail_ex+0x265/0x280 [ 219.050512][T16080] should_fail+0xb/0x20 [ 219.050538][T16080] should_fail_usercopy+0x1a/0x20 [ 219.050583][T16080] _copy_from_user+0x1c/0xb0 [ 219.050605][T16080] __sys_bpf+0x178/0x790 [ 219.050640][T16080] __x64_sys_bpf+0x41/0x50 [ 219.050680][T16080] x64_sys_call+0x2478/0x2fb0 [ 219.050702][T16080] do_syscall_64+0xd2/0x200 [ 219.050795][T16080] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.050894][T16080] ? clear_bhb_loop+0x40/0x90 [ 219.050916][T16080] ? clear_bhb_loop+0x40/0x90 [ 219.050938][T16080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.050960][T16080] RIP: 0033:0x7f7ebb2ae929 [ 219.050982][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.051070][T16080] RSP: 002b:00007f7eb9917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.051091][T16080] RAX: ffffffffffffffda RBX: 00007f7ebb4d5fa0 RCX: 00007f7ebb2ae929 [ 219.051104][T16080] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000007 [ 219.051138][T16080] RBP: 00007f7eb9917090 R08: 0000000000000000 R09: 0000000000000000 [ 219.051151][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.051164][T16080] R13: 0000000000000000 R14: 00007f7ebb4d5fa0 R15: 00007fffd1f2de78 [ 219.051184][T16080] [ 219.380407][T16152] loop5: detected capacity change from 0 to 164 [ 219.399252][T16152] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 219.597261][T16193] siw: device registration error -23 [ 219.677195][T16214] usb usb7: usbfs: process 16214 (syz.5.3148) did not claim interface 0 before use [ 219.802939][T16242] siw: device registration error -23 [ 219.924200][T16273] FAULT_INJECTION: forcing a failure. [ 219.924200][T16273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.937596][T16273] CPU: 0 UID: 0 PID: 16273 Comm: syz.6.3161 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 219.937692][T16273] Tainted: [W]=WARN [ 219.937699][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.937714][T16273] Call Trace: [ 219.937720][T16273] [ 219.937727][T16273] __dump_stack+0x1d/0x30 [ 219.937748][T16273] dump_stack_lvl+0xe8/0x140 [ 219.937767][T16273] dump_stack+0x15/0x1b [ 219.937784][T16273] should_fail_ex+0x265/0x280 [ 219.937839][T16273] should_fail+0xb/0x20 [ 219.937896][T16273] should_fail_usercopy+0x1a/0x20 [ 219.938010][T16273] _copy_from_user+0x1c/0xb0 [ 219.938032][T16273] ___sys_sendmsg+0xc1/0x1d0 [ 219.938083][T16273] __x64_sys_sendmsg+0xd4/0x160 [ 219.938177][T16273] x64_sys_call+0x2999/0x2fb0 [ 219.938197][T16273] do_syscall_64+0xd2/0x200 [ 219.938213][T16273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.938237][T16273] ? clear_bhb_loop+0x40/0x90 [ 219.938334][T16273] ? clear_bhb_loop+0x40/0x90 [ 219.938353][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.938370][T16273] RIP: 0033:0x7fcf3eeee929 [ 219.938386][T16273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.938530][T16273] RSP: 002b:00007fcf3d557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.938551][T16273] RAX: ffffffffffffffda RBX: 00007fcf3f115fa0 RCX: 00007fcf3eeee929 [ 219.938565][T16273] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 219.938578][T16273] RBP: 00007fcf3d557090 R08: 0000000000000000 R09: 0000000000000000 [ 219.938589][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.938601][T16273] R13: 0000000000000000 R14: 00007fcf3f115fa0 R15: 00007ffde690c198 [ 219.938620][T16273] [ 220.140340][T16276] loop5: detected capacity change from 0 to 1024 [ 220.147063][T16276] EXT4-fs: quotafile must be on filesystem root [ 220.154925][T16280] __nla_validate_parse: 12 callbacks suppressed [ 220.154936][T16280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3164'. [ 220.171661][T16276] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3163'. [ 220.304385][T16308] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3177'. [ 220.343843][T16318] loop1: detected capacity change from 0 to 1024 [ 220.355914][T16318] EXT4-fs: quotafile must be on filesystem root [ 220.365325][T16318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3178'. [ 220.400802][T16322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3179'. [ 220.555122][T16362] FAULT_INJECTION: forcing a failure. [ 220.555122][T16362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.568375][T16362] CPU: 1 UID: 0 PID: 16362 Comm: syz.5.3189 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 220.568409][T16362] Tainted: [W]=WARN [ 220.568434][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.568446][T16362] Call Trace: [ 220.568453][T16362] [ 220.568467][T16362] __dump_stack+0x1d/0x30 [ 220.568515][T16362] dump_stack_lvl+0xe8/0x140 [ 220.568534][T16362] dump_stack+0x15/0x1b [ 220.568649][T16362] should_fail_ex+0x265/0x280 [ 220.568679][T16362] should_fail+0xb/0x20 [ 220.568705][T16362] should_fail_usercopy+0x1a/0x20 [ 220.568752][T16362] _copy_from_user+0x1c/0xb0 [ 220.568773][T16362] __sys_bpf+0x178/0x790 [ 220.568804][T16362] __x64_sys_bpf+0x41/0x50 [ 220.568825][T16362] x64_sys_call+0x2478/0x2fb0 [ 220.568848][T16362] do_syscall_64+0xd2/0x200 [ 220.568866][T16362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.568893][T16362] ? clear_bhb_loop+0x40/0x90 [ 220.568914][T16362] ? clear_bhb_loop+0x40/0x90 [ 220.568948][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.568965][T16362] RIP: 0033:0x7f7ebb2ae929 [ 220.568978][T16362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.568992][T16362] RSP: 002b:00007f7eb9917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.569010][T16362] RAX: ffffffffffffffda RBX: 00007f7ebb4d5fa0 RCX: 00007f7ebb2ae929 [ 220.569024][T16362] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 220.569108][T16362] RBP: 00007f7eb9917090 R08: 0000000000000000 R09: 0000000000000000 [ 220.569119][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.569130][T16362] R13: 0000000000000000 R14: 00007f7ebb4d5fa0 R15: 00007fffd1f2de78 [ 220.569149][T16362] [ 220.788681][T16405] loop1: detected capacity change from 0 to 256 [ 220.798027][T16410] netlink: 'syz.5.3193': attribute type 7 has an invalid length. [ 220.805887][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3193'. [ 220.843670][T16417] loop7: detected capacity change from 0 to 1024 [ 220.855029][T16417] EXT4-fs: quotafile must be on filesystem root [ 220.871530][T16409] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3191'. [ 220.883636][T16423] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3196'. [ 220.924326][ T29] kauditd_printk_skb: 981 callbacks suppressed [ 220.924340][ T29] audit: type=1326 audit(1751571166.440:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 220.982872][ T29] audit: type=1326 audit(1751571166.440:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.006564][ T29] audit: type=1326 audit(1751571166.480:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.030208][ T29] audit: type=1326 audit(1751571166.480:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.053976][ T29] audit: type=1326 audit(1751571166.480:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.077758][ T29] audit: type=1326 audit(1751571166.480:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.101390][ T29] audit: type=1326 audit(1751571166.480:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.124956][ T29] audit: type=1326 audit(1751571166.480:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.148738][ T29] audit: type=1326 audit(1751571166.480:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.172536][ T29] audit: type=1326 audit(1751571166.480:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 221.196401][T16435] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3200'. [ 221.229522][T16435] siw: device registration error -23 [ 221.388543][T16462] ipvlan1: entered promiscuous mode [ 221.394494][T16462] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 221.402406][T16462] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.638599][T16478] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3207'. [ 221.755245][T16439] loop7: detected capacity change from 0 to 128 [ 221.764640][T16482] loop1: detected capacity change from 0 to 1024 [ 221.772629][T16482] EXT4-fs: quotafile must be on filesystem root [ 221.989404][T16484] loop1: detected capacity change from 0 to 8192 [ 221.996927][T16484] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.241800][T16512] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.280875][T16512] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.340588][T16512] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.382542][T16561] loop2: detected capacity change from 0 to 128 [ 222.400925][T16512] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.466471][T16512] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.486120][T16512] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.871080][T16552] syz.2.3221 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 222.885316][T16552] CPU: 0 UID: 0 PID: 16552 Comm: syz.2.3221 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 222.885351][T16552] Tainted: [W]=WARN [ 222.885359][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.885372][T16552] Call Trace: [ 222.885379][T16552] [ 222.885388][T16552] __dump_stack+0x1d/0x30 [ 222.885412][T16552] dump_stack_lvl+0xe8/0x140 [ 222.885492][T16552] dump_stack+0x15/0x1b [ 222.885510][T16552] dump_header+0x81/0x220 [ 222.885623][T16552] oom_kill_process+0x334/0x3f0 [ 222.885711][T16552] out_of_memory+0x979/0xb80 [ 222.885743][T16552] try_charge_memcg+0x5e6/0x9e0 [ 222.885771][T16552] obj_cgroup_charge_pages+0xa6/0x150 [ 222.885881][T16552] __memcg_kmem_charge_page+0x9f/0x170 [ 222.885913][T16552] __alloc_frozen_pages_noprof+0x188/0x360 [ 222.886017][T16552] alloc_pages_mpol+0xb3/0x250 [ 222.886071][T16552] alloc_pages_noprof+0x90/0x130 [ 222.886102][T16552] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 222.886140][T16552] __kvmalloc_node_noprof+0x30f/0x4e0 [ 222.886231][T16552] ? ip_set_alloc+0x1f/0x30 [ 222.886260][T16552] ? ip_set_alloc+0x1f/0x30 [ 222.886410][T16552] ? hash_netiface_create+0x21b/0x740 [ 222.886440][T16552] ? __kmalloc_cache_noprof+0x189/0x320 [ 222.886464][T16552] ip_set_alloc+0x1f/0x30 [ 222.886572][T16552] hash_netiface_create+0x282/0x740 [ 222.886611][T16552] ? __pfx_hash_netiface_create+0x10/0x10 [ 222.886636][T16552] ip_set_create+0x3c9/0x960 [ 222.886672][T16552] ? __nla_parse+0x40/0x60 [ 222.886689][T16552] nfnetlink_rcv_msg+0x4c6/0x590 [ 222.886774][T16552] ? selinux_capable+0x1f9/0x270 [ 222.886809][T16552] netlink_rcv_skb+0x120/0x220 [ 222.886914][T16552] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 222.886947][T16552] nfnetlink_rcv+0x16b/0x1690 [ 222.886975][T16552] ? __kfree_skb+0x109/0x150 [ 222.887005][T16552] ? nlmon_xmit+0x4f/0x60 [ 222.887092][T16552] ? consume_skb+0x49/0x150 [ 222.887120][T16552] ? nlmon_xmit+0x4f/0x60 [ 222.887142][T16552] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 222.887187][T16552] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 222.887284][T16552] ? __dev_queue_xmit+0x182/0x1fb0 [ 222.887316][T16552] ? __rcu_read_lock+0x37/0x50 [ 222.887360][T16552] ? kfree+0x27/0x320 [ 222.887384][T16552] ? ref_tracker_free+0x37d/0x3e0 [ 222.887421][T16552] ? __netlink_deliver_tap+0x4dc/0x500 [ 222.887484][T16552] netlink_unicast+0x5a1/0x670 [ 222.887512][T16552] netlink_sendmsg+0x58b/0x6b0 [ 222.887533][T16552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.887553][T16552] __sock_sendmsg+0x145/0x180 [ 222.887578][T16552] ____sys_sendmsg+0x31e/0x4e0 [ 222.887617][T16552] ___sys_sendmsg+0x17b/0x1d0 [ 222.887648][T16552] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 222.887694][T16552] __x64_sys_sendmsg+0xd4/0x160 [ 222.887726][T16552] x64_sys_call+0x2999/0x2fb0 [ 222.887745][T16552] do_syscall_64+0xd2/0x200 [ 222.887792][T16552] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.887871][T16552] ? clear_bhb_loop+0x40/0x90 [ 222.887893][T16552] ? clear_bhb_loop+0x40/0x90 [ 222.887912][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.887930][T16552] RIP: 0033:0x7f67858ce929 [ 222.888004][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.888056][T16552] RSP: 002b:00007f6783f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.888077][T16552] RAX: ffffffffffffffda RBX: 00007f6785af5fa0 RCX: 00007f67858ce929 [ 222.888097][T16552] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 222.888112][T16552] RBP: 00007f6785950b39 R08: 0000000000000000 R09: 0000000000000000 [ 222.888126][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.888167][T16552] R13: 0000000000000000 R14: 00007f6785af5fa0 R15: 00007ffe31d6edd8 [ 222.888187][T16552] [ 222.899994][T16512] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.902341][T16552] memory: usage 307200kB, limit 307200kB, failcnt 1452 [ 222.909411][T16512] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.916148][T16552] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 223.289955][T16552] kmem: usage 306964kB, limit 9007199254740988kB, failcnt 0 [ 223.289970][T16552] Memory cgroup stats for /syz2: [ 223.290581][T16552] cache 28672 [ 223.305481][T16552] rss 204800 [ 223.308692][T16552] shmem 0 [ 223.311698][T16552] mapped_file 28672 [ 223.315501][T16552] dirty 4096 [ 223.318776][T16552] writeback 0 [ 223.322124][T16552] workingset_refault_anon 295 [ 223.326792][T16552] workingset_refault_file 2770 [ 223.331567][T16552] swap 0 [ 223.334413][T16552] swapcached 20480 [ 223.338235][T16552] pgpgin 166956 [ 223.341764][T16552] pgpgout 166897 [ 223.345348][T16552] pgfault 261809 [ 223.348953][T16552] pgmajfault 181 [ 223.352488][T16552] inactive_anon 12288 [ 223.356538][T16552] active_anon 0 [ 223.360070][T16552] inactive_file 16384 [ 223.364026][T16552] active_file 0 [ 223.367487][T16552] unevictable 212992 [ 223.371410][T16552] hierarchical_memory_limit 314572800 [ 223.376795][T16552] hierarchical_memsw_limit 9223372036854771712 [ 223.382983][T16552] total_cache 28672 [ 223.386762][T16552] total_rss 204800 [ 223.390472][T16552] total_shmem 0 [ 223.393904][T16552] total_mapped_file 28672 [ 223.398259][T16552] total_dirty 4096 [ 223.401990][T16552] total_writeback 0 [ 223.405788][T16552] total_workingset_refault_anon 295 [ 223.411137][T16552] total_workingset_refault_file 2770 [ 223.416395][T16552] total_swap 0 [ 223.419757][T16552] total_swapcached 20480 [ 223.423970][T16552] total_pgpgin 166956 [ 223.427922][T16552] total_pgpgout 166897 [ 223.432055][T16552] total_pgfault 261809 [ 223.436095][T16552] total_pgmajfault 181 [ 223.440181][T16552] total_inactive_anon 12288 [ 223.444702][T16552] total_active_anon 0 [ 223.448734][T16552] total_inactive_file 16384 [ 223.453229][T16552] total_active_file 0 [ 223.457193][T16552] total_unevictable 212992 [ 223.461763][T16552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3221,pid=16550,uid=0 [ 223.476463][T16552] Memory cgroup out of memory: Killed process 16552 (syz.2.3221) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 223.605073][T16650] siw: device registration error -23 [ 223.730159][T16666] unsupported nla_type 65024 [ 223.778120][T16659] lo speed is unknown, defaulting to 1000 [ 223.826111][T16672] loop2: detected capacity change from 0 to 128 [ 223.871809][T16673] loop1: detected capacity change from 0 to 512 [ 223.937075][T16673] EXT4-fs mount: 34 callbacks suppressed [ 223.937090][T16673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.968267][T16673] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.005735][T16680] loop7: detected capacity change from 0 to 8192 [ 224.157033][T16673] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 224.210383][T16681] hub 6-0:1.0: USB hub found [ 224.220244][T16681] hub 6-0:1.0: 8 ports detected [ 224.247237][T14457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.295198][T16689] loop5: detected capacity change from 0 to 164 [ 224.305949][T16688] program syz.1.3240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.307243][T16689] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 224.329369][T16688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.347959][T16688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.436601][T16667] syz.2.3232 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 224.450851][T16667] CPU: 0 UID: 0 PID: 16667 Comm: syz.2.3232 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 224.450930][T16667] Tainted: [W]=WARN [ 224.450937][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.450950][T16667] Call Trace: [ 224.450958][T16667] [ 224.450965][T16667] __dump_stack+0x1d/0x30 [ 224.450988][T16667] dump_stack_lvl+0xe8/0x140 [ 224.451009][T16667] dump_stack+0x15/0x1b [ 224.451029][T16667] dump_header+0x81/0x220 [ 224.451059][T16667] oom_kill_process+0x334/0x3f0 [ 224.451085][T16667] out_of_memory+0x979/0xb80 [ 224.451200][T16667] try_charge_memcg+0x5e6/0x9e0 [ 224.451230][T16667] obj_cgroup_charge_pages+0xa6/0x150 [ 224.451263][T16667] __memcg_kmem_charge_page+0x9f/0x170 [ 224.451299][T16667] __alloc_frozen_pages_noprof+0x188/0x360 [ 224.451336][T16667] alloc_pages_mpol+0xb3/0x250 [ 224.451369][T16667] alloc_pages_noprof+0x90/0x130 [ 224.451399][T16667] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 224.451468][T16667] __kvmalloc_node_noprof+0x30f/0x4e0 [ 224.451494][T16667] ? ip_set_alloc+0x1f/0x30 [ 224.451517][T16667] ? ip_set_alloc+0x1f/0x30 [ 224.451539][T16667] ? hash_netiface_create+0x21b/0x740 [ 224.451609][T16667] ? __kmalloc_cache_noprof+0x189/0x320 [ 224.451636][T16667] ip_set_alloc+0x1f/0x30 [ 224.451713][T16667] hash_netiface_create+0x282/0x740 [ 224.451746][T16667] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.451779][T16667] ip_set_create+0x3c9/0x960 [ 224.451829][T16667] ? __nla_parse+0x40/0x60 [ 224.451847][T16667] nfnetlink_rcv_msg+0x4c6/0x590 [ 224.451884][T16667] ? selinux_capable+0x1f9/0x270 [ 224.452000][T16667] netlink_rcv_skb+0x120/0x220 [ 224.452111][T16667] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.452176][T16667] nfnetlink_rcv+0x16b/0x1690 [ 224.452275][T16667] ? __kfree_skb+0x109/0x150 [ 224.452304][T16667] ? nlmon_xmit+0x4f/0x60 [ 224.452326][T16667] ? consume_skb+0x49/0x150 [ 224.452387][T16667] ? nlmon_xmit+0x4f/0x60 [ 224.452407][T16667] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 224.452435][T16667] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 224.452466][T16667] ? __dev_queue_xmit+0x182/0x1fb0 [ 224.452599][T16667] ? ref_tracker_free+0x37d/0x3e0 [ 224.452637][T16667] ? __netlink_deliver_tap+0x4dc/0x500 [ 224.452712][T16667] netlink_unicast+0x5a1/0x670 [ 224.452805][T16667] netlink_sendmsg+0x58b/0x6b0 [ 224.452824][T16667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.452845][T16667] __sock_sendmsg+0x145/0x180 [ 224.452870][T16667] ____sys_sendmsg+0x31e/0x4e0 [ 224.452983][T16667] ___sys_sendmsg+0x17b/0x1d0 [ 224.453010][T16667] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 224.453046][T16667] __x64_sys_sendmsg+0xd4/0x160 [ 224.453087][T16667] x64_sys_call+0x2999/0x2fb0 [ 224.453109][T16667] do_syscall_64+0xd2/0x200 [ 224.453127][T16667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.453154][T16667] ? clear_bhb_loop+0x40/0x90 [ 224.453236][T16667] ? clear_bhb_loop+0x40/0x90 [ 224.453256][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.453274][T16667] RIP: 0033:0x7f67858ce929 [ 224.453287][T16667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.453305][T16667] RSP: 002b:00007f6783f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.453327][T16667] RAX: ffffffffffffffda RBX: 00007f6785af5fa0 RCX: 00007f67858ce929 [ 224.453490][T16667] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 224.453502][T16667] RBP: 00007f6785950b39 R08: 0000000000000000 R09: 0000000000000000 [ 224.453514][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.453527][T16667] R13: 0000000000000000 R14: 00007f6785af5fa0 R15: 00007ffe31d6edd8 [ 224.453547][T16667] [ 224.453554][T16667] memory: usage 307200kB, limit 307200kB, failcnt 1556 [ 224.497307][T16691] lo speed is unknown, defaulting to 1000 [ 224.500859][T16667] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0 [ 224.500874][T16667] kmem: usage 306924kB, limit 9007199254740988kB, failcnt 0 [ 224.500888][T16667] Memory cgroup stats for /syz2: [ 224.686858][T16691] chnl_net:caif_netlink_parms(): no params data found [ 224.703738][T16667] cache 81920 [ 224.844570][T16711] loop6: detected capacity change from 0 to 8192 [ 224.848709][T16667] rss 200704 [ 224.848718][T16667] shmem 0 [ 224.848724][T16667] mapped_file 77824 [ 224.848732][T16667] dirty 77824 [ 224.848739][T16667] writeback 0 [ 224.848747][T16667] workingset_refault_anon 297 [ 224.886309][T16667] workingset_refault_file 2817 [ 224.891140][T16667] swap 12288 [ 224.894313][T16667] swapcached 8192 [ 224.897918][T16667] pgpgin 167103 [ 224.901368][T16667] pgpgout 167034 [ 224.904888][T16667] pgfault 262041 [ 224.908444][T16667] pgmajfault 185 [ 224.911981][T16667] inactive_anon 0 [ 224.915647][T16667] active_anon 0 [ 224.919196][T16667] inactive_file 0 [ 224.922824][T16667] active_file 4096 [ 224.926542][T16667] unevictable 278528 [ 224.930485][T16667] hierarchical_memory_limit 314572800 [ 224.935910][T16667] hierarchical_memsw_limit 9223372036854771712 [ 224.942070][T16667] total_cache 81920 [ 224.945931][T16667] total_rss 200704 [ 224.949748][T16667] total_shmem 0 [ 224.953207][T16667] total_mapped_file 77824 [ 224.957597][T16667] total_dirty 77824 [ 224.961436][T16667] total_writeback 0 [ 224.965243][T16667] total_workingset_refault_anon 297 [ 224.970486][T16667] total_workingset_refault_file 2817 [ 224.975750][T16667] total_swap 12288 [ 224.979471][T16667] total_swapcached 8192 [ 224.983666][T16667] total_pgpgin 167103 [ 224.987700][T16667] total_pgpgout 167034 [ 224.991772][T16667] total_pgfault 262041 [ 224.995875][T16667] total_pgmajfault 185 [ 224.999970][T16667] total_inactive_anon 0 [ 225.004098][T16667] total_active_anon 0 [ 225.008191][T16667] total_inactive_file 0 [ 225.012413][T16667] total_active_file 4096 [ 225.016630][T16667] total_unevictable 278528 [ 225.021130][T16667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3232,pid=16663,uid=0 [ 225.035928][T16667] Memory cgroup out of memory: Killed process 16663 (syz.2.3232) total-vm:95800kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 225.176088][T16691] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.183283][T16691] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.281702][T16691] bridge_slave_0: entered allmulticast mode [ 225.288378][T16691] bridge_slave_0: entered promiscuous mode [ 225.295464][T16691] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.302603][T16691] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.309819][T16691] bridge_slave_1: entered allmulticast mode [ 225.316229][T16691] bridge_slave_1: entered promiscuous mode [ 225.350561][T16721] ipvlan2: entered promiscuous mode [ 225.356756][T16721] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.364642][T16721] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.384188][T16722] ipvlan2: entered promiscuous mode [ 225.390509][T16722] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.398487][T16722] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.428707][T16724] loop2: detected capacity change from 0 to 512 [ 225.445330][ T6897] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.473665][T16691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.491598][T16724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.507431][T16691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.520513][ T6897] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.532122][T16724] ext4 filesystem being mounted at /600/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.563316][T16691] team0: Port device team_slave_0 added [ 225.571592][T16691] team0: Port device team_slave_1 added [ 225.583219][ T6897] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.609734][T16691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.616689][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.642659][T16691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.672997][ T6897] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.685757][T16691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.692916][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.719040][T16691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.775745][T16691] hsr_slave_0: entered promiscuous mode [ 225.833860][T16691] hsr_slave_1: entered promiscuous mode [ 225.856682][T16724] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 225.864522][T16724] __nla_validate_parse: 4 callbacks suppressed [ 225.864571][T16724] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3249'. [ 225.880367][ T6897] bridge0: port 3(team0) entered disabled state [ 225.887276][ T6897] bridge_slave_1: left allmulticast mode [ 225.893118][ T6897] bridge_slave_1: left promiscuous mode [ 225.898755][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.907083][ T6897] bridge_slave_0: left allmulticast mode [ 225.912774][ T6897] bridge_slave_0: left promiscuous mode [ 225.918788][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.920317][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.944723][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 225.944736][ T29] audit: type=1400 audit(1751571171.460:15158): avc: denied { map } for pid=16748 comm="syz.2.3259" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.974947][ T29] audit: type=1400 audit(1751571171.460:15159): avc: denied { execute } for pid=16748 comm="syz.2.3259" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.983891][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.022895][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.042898][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.052126][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.092206][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.106323][ T6897] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.113530][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.124953][ T6897] bond_slave_0: left promiscuous mode [ 226.132265][ T29] audit: type=1400 audit(1751571171.650:15160): avc: denied { append } for pid=16748 comm="syz.2.3259" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.163987][ T6897] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.173387][ T29] audit: type=1326 audit(1751571171.650:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.196166][ T29] audit: type=1326 audit(1751571171.650:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.218969][ T29] audit: type=1326 audit(1751571171.650:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.219080][T16763] loop7: detected capacity change from 0 to 8192 [ 226.222959][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 226.241733][ T29] audit: type=1326 audit(1751571171.650:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.258398][ T6897] bond_slave_1: left promiscuous mode [ 226.279616][ T29] audit: type=1326 audit(1751571171.650:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.295800][ T6897] $Hÿ (unregistering): Released all slaves [ 226.307608][ T29] audit: type=1326 audit(1751571171.650:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.336454][ T29] audit: type=1326 audit(1751571171.650:15167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 226.360312][T16769] loop6: detected capacity change from 0 to 164 [ 226.370114][T16745] bridge0: entered promiscuous mode [ 226.376992][T16745] bridge0: port 3(macsec1) entered blocking state [ 226.383459][T16745] bridge0: port 3(macsec1) entered disabled state [ 226.390276][T16745] macsec1: entered allmulticast mode [ 226.395592][T16745] bridge0: entered allmulticast mode [ 226.398430][T16769] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 226.411541][T16745] macsec1: left allmulticast mode [ 226.416667][T16745] bridge0: left allmulticast mode [ 226.422718][T16745] bridge0: left promiscuous mode [ 226.441222][ T6897] hsr_slave_0: left promiscuous mode [ 226.447638][ T6897] hsr_slave_1: left promiscuous mode [ 226.454828][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.462258][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.471343][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.478904][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.481418][T16773] loop6: detected capacity change from 0 to 8192 [ 226.494272][T16773] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.506189][ T6897] veth1_macvtap: left promiscuous mode [ 226.512038][ T6897] veth0_macvtap: left promiscuous mode [ 226.517854][ T6897] veth1_vlan: left promiscuous mode [ 226.523211][ T6897] veth0_vlan: left promiscuous mode [ 226.578112][ T6897] team_slave_1 (unregistering): left promiscuous mode [ 226.585260][ T6897] team_slave_1 (unregistering): left allmulticast mode [ 226.592708][ T6897] team0 (unregistering): Port device team_slave_1 removed [ 226.601874][ T6897] team_slave_0 (unregistering): left promiscuous mode [ 226.608691][ T6897] team_slave_0 (unregistering): left allmulticast mode [ 226.615937][ T6897] team0 (unregistering): Port device team_slave_0 removed [ 226.652757][T16753] lo speed is unknown, defaulting to 1000 [ 226.751197][T16780] loop2: detected capacity change from 0 to 8192 [ 226.754675][T16782] loop1: detected capacity change from 0 to 8192 [ 226.759829][T16780] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.765014][T16782] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.974048][T16691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.983554][T16691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.000400][T16691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.009765][T16691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.046193][T16691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.058264][T16691] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.077412][T16691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.087900][T16691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.106295][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.113379][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.122492][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.129565][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.158651][T16799] ipvlan2: entered promiscuous mode [ 227.164843][T16799] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.172703][T16799] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.205497][T16691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.294369][T16691] veth0_vlan: entered promiscuous mode [ 227.302327][T16691] veth1_vlan: entered promiscuous mode [ 227.317515][T16691] veth0_macvtap: entered promiscuous mode [ 227.325268][T16691] veth1_macvtap: entered promiscuous mode [ 227.335518][T16691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.347913][T16691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.349017][T16817] program syz.6.3272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.357571][T16691] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.373254][T16691] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.373599][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.382018][T16691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.391532][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.399053][T16691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.446213][T16820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3241'. [ 227.456089][T16820] siw: device registration error -23 [ 227.477802][T16822] loop5: detected capacity change from 0 to 1024 [ 227.484540][T16822] EXT4-fs: quotafile must be on filesystem root [ 227.492746][T16822] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3273'. [ 227.627366][T16832] lo speed is unknown, defaulting to 1000 [ 227.673505][T16841] blktrace: Concurrent blktraces are not allowed on sg0 [ 227.754574][T16837] lo speed is unknown, defaulting to 1000 [ 227.781460][T16857] loop1: detected capacity change from 0 to 1024 [ 227.789553][T16857] EXT4-fs: quotafile must be on filesystem root [ 227.817528][T16860] siw: device registration error -23 [ 227.843094][T16837] chnl_net:caif_netlink_parms(): no params data found [ 227.906424][ T6882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.953681][T16876] loop1: detected capacity change from 0 to 128 [ 227.981372][ T6882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.035715][T16837] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.043045][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.092505][T16837] bridge_slave_0: entered allmulticast mode [ 228.118790][T16837] bridge_slave_0: entered promiscuous mode [ 228.130551][ T6882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.145257][T16882] loop5: detected capacity change from 0 to 8192 [ 228.162111][T16837] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.169249][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.186492][T16837] bridge_slave_1: entered allmulticast mode [ 228.193986][T16882] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.208782][T16837] bridge_slave_1: entered promiscuous mode [ 228.240076][ T6882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.267014][T16890] blktrace: Concurrent blktraces are not allowed on sg0 [ 228.276771][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.288496][T16885] lo speed is unknown, defaulting to 1000 [ 228.293641][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.330825][T16837] team0: Port device team_slave_0 added [ 228.352870][T16837] team0: Port device team_slave_1 added [ 228.401380][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.408445][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.434526][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.451103][ T6882] bridge_slave_1: left allmulticast mode [ 228.456845][ T6882] bridge_slave_1: left promiscuous mode [ 228.462596][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.472214][ T6882] bridge_slave_0: left allmulticast mode [ 228.477900][ T6882] bridge_slave_0: left promiscuous mode [ 228.483613][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.552073][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.561958][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.571767][ T6882] bond0 (unregistering): Released all slaves [ 228.580272][ T6882] bond1 (unregistering): Released all slaves [ 228.589160][ T6882] bond2 (unregistering): Released all slaves [ 228.593506][T16868] syz.1.3287 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 228.609307][T16868] CPU: 1 UID: 0 PID: 16868 Comm: syz.1.3287 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 228.609371][T16868] Tainted: [W]=WARN [ 228.609377][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.609387][T16868] Call Trace: [ 228.609392][T16868] [ 228.609399][T16868] __dump_stack+0x1d/0x30 [ 228.609418][T16868] dump_stack_lvl+0xe8/0x140 [ 228.609480][T16868] dump_stack+0x15/0x1b [ 228.609498][T16868] dump_header+0x81/0x220 [ 228.609529][T16868] oom_kill_process+0x334/0x3f0 [ 228.609556][T16868] out_of_memory+0x979/0xb80 [ 228.609661][T16868] try_charge_memcg+0x5e6/0x9e0 [ 228.609688][T16868] obj_cgroup_charge_pages+0xa6/0x150 [ 228.609715][T16868] __memcg_kmem_charge_page+0x9f/0x170 [ 228.609748][T16868] __alloc_frozen_pages_noprof+0x188/0x360 [ 228.609807][T16868] alloc_pages_mpol+0xb3/0x250 [ 228.609885][T16868] alloc_pages_noprof+0x90/0x130 [ 228.609937][T16868] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 228.609984][T16868] __kvmalloc_node_noprof+0x30f/0x4e0 [ 228.610042][T16868] ? ip_set_alloc+0x1f/0x30 [ 228.610066][T16868] ? ip_set_alloc+0x1f/0x30 [ 228.610128][T16868] ? __kmalloc_cache_noprof+0x189/0x320 [ 228.610151][T16868] ip_set_alloc+0x1f/0x30 [ 228.610174][T16868] hash_netiface_create+0x282/0x740 [ 228.610248][T16868] ? __pfx_hash_netiface_create+0x10/0x10 [ 228.610326][T16868] ip_set_create+0x3c9/0x960 [ 228.610368][T16868] ? __nla_parse+0x40/0x60 [ 228.610388][T16868] nfnetlink_rcv_msg+0x4c6/0x590 [ 228.610427][T16868] ? selinux_capable+0x1f9/0x270 [ 228.610466][T16868] netlink_rcv_skb+0x120/0x220 [ 228.610546][T16868] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 228.610611][T16868] nfnetlink_rcv+0x16b/0x1690 [ 228.610625][T16868] ? __kfree_skb+0x109/0x150 [ 228.610642][T16868] ? nlmon_xmit+0x4f/0x60 [ 228.610654][T16868] ? consume_skb+0x49/0x150 [ 228.610729][T16868] ? nlmon_xmit+0x4f/0x60 [ 228.610740][T16868] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 228.610759][T16868] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 228.610776][T16868] ? __dev_queue_xmit+0x182/0x1fb0 [ 228.610860][T16868] ? __rcu_read_lock+0x37/0x50 [ 228.610956][T16868] ? kfree+0x27/0x320 [ 228.610969][T16868] ? ref_tracker_free+0x37d/0x3e0 [ 228.611056][T16868] ? __netlink_deliver_tap+0x4dc/0x500 [ 228.611076][T16868] netlink_unicast+0x5a1/0x670 [ 228.611104][T16868] netlink_sendmsg+0x58b/0x6b0 [ 228.611116][T16868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.611127][T16868] __sock_sendmsg+0x145/0x180 [ 228.611141][T16868] ____sys_sendmsg+0x31e/0x4e0 [ 228.611208][T16868] ___sys_sendmsg+0x17b/0x1d0 [ 228.611253][T16868] __x64_sys_sendmsg+0xd4/0x160 [ 228.611273][T16868] x64_sys_call+0x2999/0x2fb0 [ 228.611344][T16868] do_syscall_64+0xd2/0x200 [ 228.611357][T16868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.611371][T16868] ? clear_bhb_loop+0x40/0x90 [ 228.611383][T16868] ? clear_bhb_loop+0x40/0x90 [ 228.611395][T16868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.611407][T16868] RIP: 0033:0x7f18d645e929 [ 228.611417][T16868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.611463][T16868] RSP: 002b:00007f18d4aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.611475][T16868] RAX: ffffffffffffffda RBX: 00007f18d6686080 RCX: 00007f18d645e929 [ 228.611482][T16868] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 228.611489][T16868] RBP: 00007f18d64e0b39 R08: 0000000000000000 R09: 0000000000000000 [ 228.611497][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.611508][T16868] R13: 0000000000000000 R14: 00007f18d6686080 R15: 00007ffd94383de8 [ 228.611527][T16868] [ 228.611534][T16868] memory: usage 307200kB, limit 307200kB, failcnt 665 [ 228.977819][T16868] memory+swap: usage 307280kB, limit 9007199254740988kB, failcnt 0 [ 228.977835][T16868] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 228.977847][T16868] Memory cgroup stats for /syz1: [ 228.993243][T16868] cache 8192 [ 229.001484][T16868] rss 204800 [ 229.004676][T16868] shmem 0 [ 229.007612][T16868] mapped_file 8192 [ 229.008568][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.011428][T16868] dirty 8192 [ 229.018367][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.021520][T16868] writeback 0 [ 229.021529][T16868] workingset_refault_anon 194 [ 229.047449][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.050655][T16868] workingset_refault_file 665 [ 229.070686][T16868] swap 81920 [ 229.073873][T16868] swapcached 118784 [ 229.077656][T16868] pgpgin 220132 [ 229.081180][T16868] pgpgout 220080 [ 229.084699][T16868] pgfault 337560 [ 229.088243][T16868] pgmajfault 163 [ 229.091772][T16868] inactive_anon 0 [ 229.095378][T16868] active_anon 0 [ 229.098913][T16868] inactive_file 0 [ 229.102534][T16868] active_file 0 [ 229.106039][T16868] unevictable 212992 [ 229.109974][T16868] hierarchical_memory_limit 314572800 [ 229.115391][T16868] hierarchical_memsw_limit 9223372036854771712 [ 229.121595][T16868] total_cache 8192 [ 229.125287][T16868] total_rss 204800 [ 229.129003][T16868] total_shmem 0 [ 229.132466][T16868] total_mapped_file 8192 [ 229.136679][T16868] total_dirty 8192 [ 229.140415][T16868] total_writeback 0 [ 229.144241][T16868] total_workingset_refault_anon 194 [ 229.149491][T16868] total_workingset_refault_file 665 [ 229.154831][T16868] total_swap 81920 [ 229.158546][T16868] total_swapcached 118784 [ 229.162962][T16868] total_pgpgin 220132 [ 229.166939][T16868] total_pgpgout 220080 [ 229.171047][T16868] total_pgfault 337560 [ 229.175089][T16868] total_pgmajfault 163 [ 229.179180][T16868] total_inactive_anon 0 [ 229.183306][T16868] total_active_anon 0 [ 229.187258][T16868] total_inactive_file 0 [ 229.191447][T16868] total_active_file 0 [ 229.195414][T16868] total_unevictable 212992 [ 229.199830][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3287,pid=16861,uid=0 [ 229.214477][T16868] Memory cgroup out of memory: Killed process 16868 (syz.1.3287) total-vm:98120kB, anon-rss:1192kB, file-rss:26592kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 229.261038][T16837] hsr_slave_0: entered promiscuous mode [ 229.267236][T16837] hsr_slave_1: entered promiscuous mode [ 229.276279][T16837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.284359][T16837] Cannot create hsr debugfs directory [ 229.295872][ T6882] hsr_slave_0: left promiscuous mode [ 229.301710][ T6882] hsr_slave_1: left promiscuous mode [ 229.307434][ T6882] batman_adv: batadv0: Interface deactivated: dummy0 [ 229.314328][ T6882] batman_adv: batadv0: Removing interface: dummy0 [ 229.349546][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.356957][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.373404][T16895] loop7: detected capacity change from 0 to 1024 [ 229.383465][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.384761][T16895] EXT4-fs: quotafile must be on filesystem root [ 229.391089][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.414666][ T6882] veth1_macvtap: left promiscuous mode [ 229.420225][ T6882] veth0_macvtap: left promiscuous mode [ 229.436898][ T6882] veth1_vlan: left promiscuous mode [ 229.444845][ T6882] veth0_vlan: left promiscuous mode [ 229.477468][T16909] siw: device registration error -23 [ 229.522208][T16918] loop5: detected capacity change from 0 to 1024 [ 229.529295][T16918] EXT4-fs: quotafile must be on filesystem root [ 229.545249][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 229.560931][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 229.621514][ T3387] lo speed is unknown, defaulting to 1000 [ 229.627290][ T3387] infiniband syz0: ib_query_port failed (-19) [ 229.782856][T16934] loop5: detected capacity change from 0 to 8192 [ 229.810467][T16934] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.862651][T16944] loop1: detected capacity change from 0 to 128 [ 230.105875][T16958] ipvlan1: entered promiscuous mode [ 230.111826][T16958] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 230.119881][T16958] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.192224][T16960] lo speed is unknown, defaulting to 1000 [ 230.213058][T16960] lo speed is unknown, defaulting to 1000 [ 230.263261][T16960] lo speed is unknown, defaulting to 1000 [ 230.271659][T16837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.292385][T16960] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.309314][T16837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.344524][T16837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.367272][T16960] lo speed is unknown, defaulting to 1000 [ 230.380619][T16960] lo speed is unknown, defaulting to 1000 [ 230.386797][T16837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.413219][T16960] lo speed is unknown, defaulting to 1000 [ 230.420976][T16960] lo speed is unknown, defaulting to 1000 [ 230.452629][T16960] lo speed is unknown, defaulting to 1000 [ 230.471964][T16960] lo speed is unknown, defaulting to 1000 [ 230.490617][T16837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.504055][T16837] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.516988][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.524190][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.550457][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.557621][ T6897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.676278][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.801863][T16837] veth0_vlan: entered promiscuous mode [ 230.831270][T16837] veth1_vlan: entered promiscuous mode [ 230.874154][T16837] veth0_macvtap: entered promiscuous mode [ 230.889333][T17023] rdma_op ffff8881046abd80 conn xmit_rdma 0000000000000000 [ 230.904788][T16837] veth1_macvtap: entered promiscuous mode [ 230.921740][T17023] loop6: detected capacity change from 0 to 1024 [ 230.931951][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.942246][T17023] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 230.953211][T17023] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 230.965695][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.975733][T16837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.984484][T16837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.993385][T16837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.002128][T16837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.002340][T17023] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 231.022483][T17023] EXT4-fs (loop6): invalid journal inode [ 231.029919][T17023] EXT4-fs (loop6): can't get journal size [ 231.036054][T17023] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3333: blocks 2-2 from inode overlap system zone [ 231.051192][T17023] EXT4-fs (loop6): failed to initialize system zone (-117) [ 231.060684][T17023] EXT4-fs (loop6): mount failed [ 231.304357][T17045] loop2: detected capacity change from 0 to 256 [ 231.316245][T17023] __nla_validate_parse: 22 callbacks suppressed [ 231.316316][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3333'. [ 231.331533][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3333'. [ 231.540591][T17048] loop5: detected capacity change from 0 to 8192 [ 231.569869][T17048] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.586675][T17082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3341'. [ 231.627265][T17082] siw: device registration error -23 [ 231.660116][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 231.660130][ T29] audit: type=1326 audit(1751571177.180:15410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.799777][ T29] audit: type=1326 audit(1751571177.210:15411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.823415][ T29] audit: type=1326 audit(1751571177.210:15412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847107][ T29] audit: type=1326 audit(1751571177.210:15413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847133][ T29] audit: type=1326 audit(1751571177.210:15414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847157][ T29] audit: type=1326 audit(1751571177.220:15415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847182][ T29] audit: type=1326 audit(1751571177.220:15416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847239][ T29] audit: type=1326 audit(1751571177.220:15417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847262][ T29] audit: type=1326 audit(1751571177.220:15418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.847287][ T29] audit: type=1326 audit(1751571177.220:15419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 231.898411][T17098] loop2: detected capacity change from 0 to 8192 [ 231.955536][T17111] loop7: detected capacity change from 0 to 128 [ 232.214250][T17125] loop1: detected capacity change from 0 to 1024 [ 232.223980][T17125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.244259][T17125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.332808][T14457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.929375][T17157] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3364'. [ 232.940922][T17157] siw: device registration error -23 [ 233.029875][T17161] loop1: detected capacity change from 0 to 8192 [ 233.031448][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3370'. [ 233.038689][T17161] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.097205][T17182] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3375'. [ 233.137598][T17188] bridge0: entered promiscuous mode [ 233.146259][T17188] bridge0: port 3(macsec1) entered blocking state [ 233.152893][T17188] bridge0: port 3(macsec1) entered disabled state [ 233.160139][T17188] macsec1: entered allmulticast mode [ 233.165429][T17188] bridge0: entered allmulticast mode [ 233.179569][T17188] macsec1: left allmulticast mode [ 233.184692][T17188] bridge0: left allmulticast mode [ 233.191049][T17188] bridge0: left promiscuous mode [ 233.205158][T17194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3379'. [ 233.221852][T17194] siw: device registration error -23 [ 233.266503][T17201] loop6: detected capacity change from 0 to 128 [ 233.314137][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 233.383400][T17214] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3388'. [ 233.393550][T17205] loop7: detected capacity change from 0 to 8192 [ 233.508057][T17223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3393'. [ 233.542579][T17223] siw: device registration error -23 [ 233.568339][T17226] program syz.5.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.860100][T17196] syz.6.3380 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 233.874283][T17196] CPU: 0 UID: 0 PID: 17196 Comm: syz.6.3380 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 233.874353][T17196] Tainted: [W]=WARN [ 233.874360][T17196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.874372][T17196] Call Trace: [ 233.874379][T17196] [ 233.874386][T17196] __dump_stack+0x1d/0x30 [ 233.874408][T17196] dump_stack_lvl+0xe8/0x140 [ 233.874476][T17196] dump_stack+0x15/0x1b [ 233.874493][T17196] dump_header+0x81/0x220 [ 233.874530][T17196] oom_kill_process+0x334/0x3f0 [ 233.874560][T17196] out_of_memory+0x979/0xb80 [ 233.874628][T17196] try_charge_memcg+0x5e6/0x9e0 [ 233.874656][T17196] obj_cgroup_charge_pages+0xa6/0x150 [ 233.874714][T17196] __memcg_kmem_charge_page+0x9f/0x170 [ 233.874741][T17196] __alloc_frozen_pages_noprof+0x188/0x360 [ 233.874772][T17196] alloc_pages_mpol+0xb3/0x250 [ 233.874804][T17196] alloc_pages_noprof+0x90/0x130 [ 233.874831][T17196] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 233.874868][T17196] __kvmalloc_node_noprof+0x30f/0x4e0 [ 233.874891][T17196] ? ip_set_alloc+0x1f/0x30 [ 233.874996][T17196] ? ip_set_alloc+0x1f/0x30 [ 233.875024][T17196] ? hash_netiface_create+0x21b/0x740 [ 233.875055][T17196] ? __kmalloc_cache_noprof+0x189/0x320 [ 233.875145][T17196] ip_set_alloc+0x1f/0x30 [ 233.875221][T17196] hash_netiface_create+0x282/0x740 [ 233.875251][T17196] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.875280][T17196] ip_set_create+0x3c9/0x960 [ 233.875353][T17196] ? __nla_parse+0x40/0x60 [ 233.875370][T17196] nfnetlink_rcv_msg+0x4c6/0x590 [ 233.875404][T17196] ? selinux_capable+0x1f9/0x270 [ 233.875443][T17196] netlink_rcv_skb+0x120/0x220 [ 233.875504][T17196] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.875541][T17196] nfnetlink_rcv+0x16b/0x1690 [ 233.875561][T17196] ? __kfree_skb+0x109/0x150 [ 233.875627][T17196] ? nlmon_xmit+0x4f/0x60 [ 233.875643][T17196] ? consume_skb+0x49/0x150 [ 233.875666][T17196] ? nlmon_xmit+0x4f/0x60 [ 233.875682][T17196] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 233.875742][T17196] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 233.875766][T17196] ? __dev_queue_xmit+0x182/0x1fb0 [ 233.875847][T17196] ? ref_tracker_free+0x37d/0x3e0 [ 233.875888][T17196] ? __netlink_deliver_tap+0x4dc/0x500 [ 233.875984][T17196] netlink_unicast+0x5a1/0x670 [ 233.876017][T17196] netlink_sendmsg+0x58b/0x6b0 [ 233.876065][T17196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.876081][T17196] __sock_sendmsg+0x145/0x180 [ 233.876101][T17196] ____sys_sendmsg+0x31e/0x4e0 [ 233.876181][T17196] ___sys_sendmsg+0x17b/0x1d0 [ 233.876204][T17196] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 233.876278][T17196] __x64_sys_sendmsg+0xd4/0x160 [ 233.876324][T17196] x64_sys_call+0x2999/0x2fb0 [ 233.876342][T17196] do_syscall_64+0xd2/0x200 [ 233.876356][T17196] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.876502][T17196] ? clear_bhb_loop+0x40/0x90 [ 233.876580][T17196] ? clear_bhb_loop+0x40/0x90 [ 233.876600][T17196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.876617][T17196] RIP: 0033:0x7fcf3eeee929 [ 233.876630][T17196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.876712][T17196] RSP: 002b:00007fcf3d536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.876728][T17196] RAX: ffffffffffffffda RBX: 00007fcf3f116080 RCX: 00007fcf3eeee929 [ 233.876796][T17196] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 233.876806][T17196] RBP: 00007fcf3ef70b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.876817][T17196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.876827][T17196] R13: 0000000000000000 R14: 00007fcf3f116080 R15: 00007ffde690c198 [ 233.876842][T17196] [ 233.876879][T17196] memory: usage 307200kB, limit 307200kB, failcnt 143 [ 233.887821][T17250] program syz.1.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.890980][T17196] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0 [ 234.262510][T17196] kmem: usage 306936kB, limit 9007199254740988kB, failcnt 0 [ 234.269903][T17196] Memory cgroup stats for /syz6: [ 234.270772][T17196] cache 0 [ 234.278672][T17196] rss 270336 [ 234.281861][T17196] shmem 0 [ 234.284796][T17196] mapped_file 0 [ 234.288273][T17196] dirty 0 [ 234.291212][T17196] writeback 0 [ 234.294508][T17196] workingset_refault_anon 61 [ 234.299177][T17196] workingset_refault_file 0 [ 234.303147][T17263] loop2: detected capacity change from 0 to 1024 [ 234.303663][T17196] swap 8192 [ 234.303672][T17196] swapcached 4096 [ 234.311576][T17263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.313098][T17196] pgpgin 55387 [ 234.313106][T17196] pgpgout 55321 [ 234.313114][T17196] pgfault 71644 [ 234.329630][T17263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.330102][T17196] pgmajfault 50 [ 234.348975][T17196] inactive_anon 4096 [ 234.352876][T17196] active_anon 0 [ 234.356308][T17196] inactive_file 0 [ 234.359954][T17196] active_file 0 [ 234.363398][T17196] unevictable 266240 [ 234.367300][T17196] hierarchical_memory_limit 314572800 [ 234.372674][T17196] hierarchical_memsw_limit 9223372036854771712 [ 234.378869][T17196] total_cache 0 [ 234.382313][T17196] total_rss 270336 [ 234.386005][T17196] total_shmem 0 [ 234.389487][T17196] total_mapped_file 0 [ 234.393457][T17196] total_dirty 0 [ 234.396906][T17196] total_writeback 0 [ 234.400704][T17196] total_workingset_refault_anon 61 [ 234.405786][T17196] total_workingset_refault_file 0 [ 234.410859][T17196] total_swap 8192 [ 234.414475][T17196] total_swapcached 4096 [ 234.418639][T17196] total_pgpgin 55387 [ 234.422563][T17196] total_pgpgout 55321 [ 234.426595][T17196] total_pgfault 71644 [ 234.430565][T17196] total_pgmajfault 50 [ 234.434525][T17196] total_inactive_anon 4096 [ 234.438960][T17196] total_active_anon 0 [ 234.442943][T17196] total_inactive_file 0 [ 234.447082][T17196] total_active_file 0 [ 234.451052][T17196] total_unevictable 266240 [ 234.455445][T17196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3380,pid=17191,uid=0 [ 234.470109][T17196] Memory cgroup out of memory: Killed process 17196 (syz.6.3380) total-vm:93884kB, anon-rss:1064kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 234.512978][T16837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.643217][T17284] program syz.1.3420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.767091][T17295] loop6: detected capacity change from 0 to 1024 [ 234.773850][T17295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.790906][T17295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.815692][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.859781][T17299] loop1: detected capacity change from 0 to 8192 [ 234.880067][T17300] ipvlan2: entered promiscuous mode [ 234.886164][T17300] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 234.894301][T17300] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.995391][T17303] siw: device registration error -23 [ 235.344144][T17323] loop2: detected capacity change from 0 to 128 [ 235.431803][T17328] ipvlan2: entered promiscuous mode [ 235.437989][T17328] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.616006][T17332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.684508][T17332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.826563][T17339] siw: device registration error -23 [ 236.193135][T17369] siw: device registration error -23 [ 236.258620][T17370] ipvlan2: entered promiscuous mode [ 236.264680][T17370] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 236.272762][T17370] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.397807][T17396] __nla_validate_parse: 14 callbacks suppressed [ 236.397851][T17396] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3469'. [ 236.460775][T17403] siw: device registration error -23 [ 236.467809][T17404] rdma_op ffff888134ac0d80 conn xmit_rdma 0000000000000000 [ 236.480507][T17405] loop6: detected capacity change from 0 to 128 [ 236.481924][T17404] loop2: detected capacity change from 0 to 1024 [ 236.495172][T17404] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 236.506130][T17404] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 236.527146][T17404] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 236.550728][T17404] EXT4-fs (loop2): invalid journal inode [ 236.556444][T17404] EXT4-fs (loop2): can't get journal size [ 236.570073][T17404] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.3473: blocks 2-2 from inode overlap system zone [ 236.632700][T17404] EXT4-fs (loop2): failed to initialize system zone (-117) [ 236.659666][T17404] EXT4-fs (loop2): mount failed [ 236.664725][T17416] loop5: detected capacity change from 0 to 1024 [ 236.683535][T17416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.720901][T17416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.762523][T16691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.797258][ T29] kauditd_printk_skb: 941 callbacks suppressed [ 236.797287][ T29] audit: type=1326 audit(1751571182.310:16361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17428 comm="syz.2.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 236.828630][ T29] audit: type=1326 audit(1751571182.340:16362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17428 comm="syz.2.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 236.852289][ T29] audit: type=1326 audit(1751571182.340:16363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 236.876390][ T29] audit: type=1326 audit(1751571182.340:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 236.900149][ T29] audit: type=1326 audit(1751571182.340:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 236.923831][ T29] audit: type=1326 audit(1751571182.350:16366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 236.947470][ T29] audit: type=1326 audit(1751571182.350:16367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 236.971115][ T29] audit: type=1326 audit(1751571182.350:16368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17430 comm="syz.5.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6971e929 code=0x7ffc0000 [ 237.035337][ T29] audit: type=1326 audit(1751571182.350:16369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17428 comm="syz.2.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 237.059109][ T29] audit: type=1326 audit(1751571182.350:16370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17428 comm="syz.2.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b950e929 code=0x7ffc0000 [ 237.095375][T17440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.114309][T17397] syz.6.3467 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 237.125805][T17440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.128436][T17397] CPU: 1 UID: 0 PID: 17397 Comm: syz.6.3467 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 237.128471][T17397] Tainted: [W]=WARN [ 237.128478][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.128491][T17397] Call Trace: [ 237.128498][T17397] [ 237.128505][T17397] __dump_stack+0x1d/0x30 [ 237.128539][T17397] dump_stack_lvl+0xe8/0x140 [ 237.128560][T17397] dump_stack+0x15/0x1b [ 237.128651][T17397] dump_header+0x81/0x220 [ 237.128682][T17397] oom_kill_process+0x334/0x3f0 [ 237.128713][T17397] out_of_memory+0x979/0xb80 [ 237.128815][T17397] try_charge_memcg+0x5e6/0x9e0 [ 237.128933][T17397] obj_cgroup_charge_pages+0xa6/0x150 [ 237.129013][T17397] __memcg_kmem_charge_page+0x9f/0x170 [ 237.129043][T17397] __alloc_frozen_pages_noprof+0x188/0x360 [ 237.129078][T17397] alloc_pages_mpol+0xb3/0x250 [ 237.129108][T17397] alloc_pages_noprof+0x90/0x130 [ 237.129170][T17397] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 237.129211][T17397] __kvmalloc_node_noprof+0x30f/0x4e0 [ 237.129236][T17397] ? ip_set_alloc+0x1f/0x30 [ 237.129293][T17397] ? ip_set_alloc+0x1f/0x30 [ 237.129332][T17397] ? __kmalloc_cache_noprof+0x189/0x320 [ 237.129360][T17397] ip_set_alloc+0x1f/0x30 [ 237.129387][T17397] hash_netiface_create+0x282/0x740 [ 237.129419][T17397] ? __pfx_hash_netiface_create+0x10/0x10 [ 237.129507][T17397] ip_set_create+0x3c9/0x960 [ 237.129546][T17397] ? __nla_parse+0x40/0x60 [ 237.129566][T17397] nfnetlink_rcv_msg+0x4c6/0x590 [ 237.129630][T17397] ? selinux_capable+0x1f9/0x270 [ 237.129661][T17397] netlink_rcv_skb+0x120/0x220 [ 237.129766][T17397] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 237.129797][T17397] nfnetlink_rcv+0x16b/0x1690 [ 237.129822][T17397] ? __kfree_skb+0x109/0x150 [ 237.129917][T17397] ? nlmon_xmit+0x4f/0x60 [ 237.129938][T17397] ? consume_skb+0x49/0x150 [ 237.130046][T17397] ? nlmon_xmit+0x4f/0x60 [ 237.130067][T17397] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 237.130100][T17397] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 237.130161][T17397] ? __dev_queue_xmit+0x182/0x1fb0 [ 237.130205][T17397] ? ref_tracker_free+0x37d/0x3e0 [ 237.130239][T17397] ? __netlink_deliver_tap+0x4dc/0x500 [ 237.130317][T17397] netlink_unicast+0x5a1/0x670 [ 237.130404][T17397] netlink_sendmsg+0x58b/0x6b0 [ 237.130425][T17397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.130445][T17397] __sock_sendmsg+0x145/0x180 [ 237.130469][T17397] ____sys_sendmsg+0x31e/0x4e0 [ 237.130557][T17397] ___sys_sendmsg+0x17b/0x1d0 [ 237.130588][T17397] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 237.130630][T17397] __x64_sys_sendmsg+0xd4/0x160 [ 237.130683][T17397] x64_sys_call+0x2999/0x2fb0 [ 237.130705][T17397] do_syscall_64+0xd2/0x200 [ 237.130722][T17397] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.130748][T17397] ? clear_bhb_loop+0x40/0x90 [ 237.130833][T17397] ? clear_bhb_loop+0x40/0x90 [ 237.130918][T17397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.130940][T17397] RIP: 0033:0x7fcf3eeee929 [ 237.130955][T17397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.130973][T17397] RSP: 002b:00007fcf3d536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.131061][T17397] RAX: ffffffffffffffda RBX: 00007fcf3f116080 RCX: 00007fcf3eeee929 [ 237.131074][T17397] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 237.131129][T17397] RBP: 00007fcf3ef70b39 R08: 0000000000000000 R09: 0000000000000000 [ 237.131221][T17397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.131234][T17397] R13: 0000000000000000 R14: 00007fcf3f116080 R15: 00007ffde690c198 [ 237.131321][T17397] [ 237.131328][T17397] memory: usage 307200kB, limit 307200kB, failcnt 269 [ 237.499960][T17397] memory+swap: usage 307212kB, limit 9007199254740988kB, failcnt 0 [ 237.507986][T17397] kmem: usage 306928kB, limit 9007199254740988kB, failcnt 0 [ 237.508000][T17397] Memory cgroup stats for /syz6: [ 237.508336][T17397] cache 0 [ 237.523273][T17397] rss 274432 [ 237.523282][T17397] shmem 0 [ 237.523289][T17397] mapped_file 0 [ 237.523295][T17397] dirty 0 [ 237.523301][T17397] writeback 0 [ 237.523307][T17397] workingset_refault_anon 67 [ 237.523316][T17397] workingset_refault_file 0 [ 237.548392][T17397] swap 12288 [ 237.551630][T17397] swapcached 0 [ 237.554981][T17397] pgpgin 56192 [ 237.558423][T17397] pgpgout 56125 [ 237.561934][T17397] pgfault 73467 [ 237.565369][T17397] pgmajfault 53 [ 237.568838][T17397] inactive_anon 0 [ 237.572451][T17397] active_anon 0 [ 237.575886][T17397] inactive_file 0 [ 237.579608][T17397] active_file 0 [ 237.583045][T17397] unevictable 274432 [ 237.587029][T17397] hierarchical_memory_limit 314572800 [ 237.592461][T17397] hierarchical_memsw_limit 9223372036854771712 [ 237.598792][T17397] total_cache 0 [ 237.602255][T17397] total_rss 274432 [ 237.605994][T17397] total_shmem 0 [ 237.609509][T17397] total_mapped_file 0 [ 237.613463][T17397] total_dirty 0 [ 237.616897][T17397] total_writeback 0 [ 237.620694][T17397] total_workingset_refault_anon 67 [ 237.625821][T17397] total_workingset_refault_file 0 [ 237.630869][T17397] total_swap 12288 [ 237.634562][T17397] total_swapcached 0 [ 237.638487][T17397] total_pgpgin 56192 [ 237.642365][T17397] total_pgpgout 56125 [ 237.646329][T17397] total_pgfault 73467 [ 237.650292][T17397] total_pgmajfault 53 [ 237.654245][T17397] total_inactive_anon 0 [ 237.658416][T17397] total_active_anon 0 [ 237.662430][T17397] total_inactive_file 0 [ 237.666557][T17397] total_active_file 0 [ 237.670592][T17397] total_unevictable 274432 [ 237.674996][T17397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3467,pid=17389,uid=0 [ 237.689786][T17397] Memory cgroup out of memory: Killed process 17397 (syz.6.3467) total-vm:98120kB, anon-rss:1064kB, file-rss:26540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 237.724688][T17449] bridge0: entered promiscuous mode [ 237.736544][T17449] bridge0: port 3(macsec1) entered blocking state [ 237.743071][T17449] bridge0: port 3(macsec1) entered disabled state [ 237.752121][T17449] macsec1: entered allmulticast mode [ 237.757453][T17449] bridge0: entered allmulticast mode [ 237.763680][T17449] macsec1: left allmulticast mode [ 237.768751][T17449] bridge0: left allmulticast mode [ 237.774255][T17449] bridge0: left promiscuous mode [ 237.799828][T17453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3493'. [ 237.914368][T17470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.941510][T17470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.982376][T17476] bridge0: entered promiscuous mode [ 237.989015][T17476] bridge0: port 3(macsec1) entered blocking state [ 237.995534][T17476] bridge0: port 3(macsec1) entered disabled state [ 238.002666][T17476] macsec1: entered allmulticast mode [ 238.007964][T17476] bridge0: entered allmulticast mode [ 238.013717][T17476] macsec1: left allmulticast mode [ 238.018768][T17476] bridge0: left allmulticast mode [ 238.024134][T17476] bridge0: left promiscuous mode [ 238.054743][T17480] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3505'. [ 238.064737][T17480] siw: device registration error -23 [ 238.145249][T17486] ipvlan2: entered promiscuous mode [ 238.151321][T17486] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 238.159204][T17486] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.272913][T17487] loop5: detected capacity change from 0 to 128 [ 238.634776][T17507] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3517'. [ 238.644868][T17507] siw: device registration error -23 [ 238.827523][T17517] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.843266][T17520] loop2: detected capacity change from 0 to 1024 [ 238.852877][T17518] loop6: detected capacity change from 0 to 128 [ 238.871774][T17520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.922664][T17520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.941252][T17517] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.963823][T16837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.983756][T17517] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.081834][T17517] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.158417][T17517] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.169319][T17517] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.180881][T17517] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.192282][T17517] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.279861][T17542] ipvlan2: entered promiscuous mode [ 239.286094][T17542] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 239.293918][T17542] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.401153][T17550] loop5: detected capacity change from 0 to 8192 [ 239.561394][T17564] loop7: detected capacity change from 0 to 1024 [ 239.569263][T17564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.580616][T17564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.610433][T13624] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.714127][T17578] loop1: detected capacity change from 0 to 1024 [ 239.722361][T17578] EXT4-fs: Ignoring removed orlov option [ 239.753610][T17578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.911665][T17596] bridge0: entered promiscuous mode [ 239.918546][T17596] bridge0: port 3(macsec1) entered blocking state [ 239.925048][T17596] bridge0: port 3(macsec1) entered disabled state [ 239.929516][T17592] loop6: detected capacity change from 0 to 8192 [ 239.932112][T17596] macsec1: entered allmulticast mode [ 239.943168][T17596] bridge0: entered allmulticast mode [ 239.950548][T17596] macsec1: left allmulticast mode [ 239.955675][T17596] bridge0: left allmulticast mode [ 239.986661][T17596] bridge0: left promiscuous mode [ 240.016298][T14457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.041796][T17600] rdma_op ffff888134ac0d80 conn xmit_rdma 0000000000000000 [ 240.055841][T17600] loop1: detected capacity change from 0 to 1024 [ 240.065530][T17600] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 240.076449][T17600] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 240.094697][T17600] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 240.109956][T17600] EXT4-fs (loop1): invalid journal inode [ 240.155386][T17600] EXT4-fs (loop1): can't get journal size [ 240.165858][T17600] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3555: blocks 2-2 from inode overlap system zone [ 240.180829][T17600] EXT4-fs (loop1): failed to initialize system zone (-117) [ 240.189797][T17600] EXT4-fs (loop1): mount failed [ 240.253717][T17620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3564'. [ 240.312729][T17626] bridge0: entered promiscuous mode [ 240.324199][T17628] loop5: detected capacity change from 0 to 1024 [ 240.336047][T17628] EXT4-fs: Ignoring removed orlov option [ 240.344141][T17626] bridge0: port 3(macsec1) entered blocking state [ 240.350716][T17626] bridge0: port 3(macsec1) entered disabled state [ 240.376248][T17626] macsec1: entered allmulticast mode [ 240.381623][T17626] bridge0: entered allmulticast mode [ 240.387462][T17626] macsec1: left allmulticast mode [ 240.392577][T17626] bridge0: left allmulticast mode [ 240.398062][T17626] bridge0: left promiscuous mode [ 240.410173][T17628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.429037][T17631] ipvlan2: entered promiscuous mode [ 240.435104][T17631] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 240.443073][T17631] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.555020][T17635] ipvlan2: entered promiscuous mode [ 240.561095][T17635] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 240.568896][T17635] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.943632][T16691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.986414][T17648] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3575'. [ 240.997879][T17648] siw: device registration error -23 [ 241.023494][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3578'. [ 241.104643][T17668] loop6: detected capacity change from 0 to 1024 [ 241.105427][T17665] bridge0: entered promiscuous mode [ 241.118659][T17665] bridge0: port 3(macsec1) entered blocking state [ 241.125174][T17665] bridge0: port 3(macsec1) entered disabled state [ 241.131829][T17665] macsec1: entered allmulticast mode [ 241.137123][T17665] bridge0: entered allmulticast mode [ 241.143060][T17668] EXT4-fs: Ignoring removed orlov option [ 241.159522][T17665] macsec1: left allmulticast mode [ 241.164611][T17665] bridge0: left allmulticast mode [ 241.172917][T17665] bridge0: left promiscuous mode [ 241.191302][T17668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.217461][T17676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.264433][T17680] program syz.7.3589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.289729][T17676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.307738][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.316712][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.369685][T17676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.470217][T17676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.497627][T17699] ipvlan3: entered promiscuous mode [ 241.503989][T17699] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 241.511934][T17699] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.549617][T17676] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.559576][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.563340][T17704] loop2: detected capacity change from 0 to 1024 [ 241.571905][T17676] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.575468][T17704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.587431][T17676] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.602948][T17676] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.618892][T17704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.737033][T16837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.441029][T17715] ipvlan1: entered promiscuous mode [ 242.447149][T17715] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 242.455105][T17715] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.530630][T17727] loop7: detected capacity change from 0 to 1024 [ 242.537484][T17727] EXT4-fs: Ignoring removed orlov option [ 242.544980][T17727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.563265][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3608'. [ 242.575950][T17733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3609'. [ 242.594869][ T29] kauditd_printk_skb: 1620 callbacks suppressed [ 242.594882][ T29] audit: type=1326 audit(1751571188.090:17991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.624838][ T29] audit: type=1326 audit(1751571188.090:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.626714][T17733] siw: device registration error -23 [ 242.648386][ T29] audit: type=1326 audit(1751571188.090:17993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.648414][ T29] audit: type=1326 audit(1751571188.090:17994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.700873][ T29] audit: type=1326 audit(1751571188.090:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.724559][ T29] audit: type=1326 audit(1751571188.090:17996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.748130][ T29] audit: type=1326 audit(1751571188.090:17997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.771917][ T29] audit: type=1326 audit(1751571188.090:17998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.795572][ T29] audit: type=1326 audit(1751571188.100:17999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.819144][ T29] audit: type=1326 audit(1751571188.110:18000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.7.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb11de929 code=0x7ffc0000 [ 242.928518][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3613'. [ 242.943191][T17749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.952441][T17749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.982385][T17752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.022655][T17758] loop1: detected capacity change from 0 to 1024 [ 243.030221][T17758] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 243.041318][T17758] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 243.053411][T17758] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 243.064381][T17758] EXT4-fs (loop1): invalid journal inode [ 243.065271][T17752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.070180][T17758] EXT4-fs (loop1): can't get journal size [ 243.088541][T17758] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3620: blocks 2-2 from inode overlap system zone [ 243.103854][T17758] EXT4-fs (loop1): failed to initialize system zone (-117) [ 243.111847][T17758] EXT4-fs (loop1): mount failed [ 243.117975][T17752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.154629][T17762] loop6: detected capacity change from 0 to 128 [ 243.166332][T17752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.184094][T17764] loop1: detected capacity change from 0 to 1024 [ 243.191274][T17764] EXT4-fs: Ignoring removed orlov option [ 243.236150][T17752] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.262207][T17752] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.262799][T17764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.284385][T17752] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.307691][T17752] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.456866][T13624] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.484993][T17771] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3623'. [ 243.614060][T14457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.638439][T17783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3627'. [ 243.704101][T17785] ipvlan3: entered promiscuous mode [ 243.710430][T17785] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 243.718403][T17785] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.321090][T17818] loop2: detected capacity change from 0 to 8192 [ 244.335182][T17831] loop6: detected capacity change from 0 to 1024 [ 244.378475][T17831] EXT4-fs: Ignoring removed orlov option [ 244.397495][T17831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.575201][T17844] ipvlan2: entered promiscuous mode [ 244.581198][T17844] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 244.589392][T17844] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.618700][T17873] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3641'. [ 244.690824][T17879] loop7: detected capacity change from 0 to 1024 [ 244.697747][T17879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.730582][T17879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.761061][T13624] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.849487][T17892] bridge0: entered promiscuous mode [ 244.864758][T17892] bridge0: port 3(macsec1) entered blocking state [ 244.871289][T17892] bridge0: port 3(macsec1) entered disabled state [ 244.876550][T17893] loop5: detected capacity change from 0 to 128 [ 244.887312][T17892] macsec1: entered allmulticast mode [ 244.892767][T17892] bridge0: entered allmulticast mode [ 244.905656][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.918210][T17892] macsec1: left allmulticast mode [ 244.923696][T17892] bridge0: left allmulticast mode [ 244.943505][T17892] bridge0: left promiscuous mode [ 244.956629][T17895] program syz.6.3650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.173869][T17908] loop2: detected capacity change from 0 to 1024 [ 245.192445][T17908] EXT4-fs: Ignoring removed orlov option [ 245.222481][T17908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.246595][T17915] ipvlan1: entered promiscuous mode [ 245.252653][T17915] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 246.023202][T17974] ipvlan3: entered promiscuous mode [ 246.029603][T17974] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 246.037798][T17974] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.074846][T17970] loop6: detected capacity change from 0 to 1024 [ 246.208598][T17970] EXT4-fs: Ignoring removed orlov option [ 246.229271][T17981] bridge0: entered promiscuous mode [ 246.269803][T17981] bridge0: port 3(macsec1) entered blocking state [ 246.276307][T17981] bridge0: port 3(macsec1) entered disabled state [ 246.341352][T17981] macsec1: entered allmulticast mode [ 246.346709][T17981] bridge0: entered allmulticast mode [ 246.374315][T17970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.397138][T16837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.408919][T17981] macsec1: left allmulticast mode [ 246.413982][T17981] bridge0: left allmulticast mode [ 246.437554][T17981] bridge0: left promiscuous mode [ 246.455796][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3664'. [ 246.466142][T17994] siw: device registration error -23 [ 246.509658][T17999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.568324][T17999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.606822][T18005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18005 comm=syz.1.3667 [ 246.735665][T18006] loop2: detected capacity change from 0 to 128 [ 246.760915][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.804305][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3670'. [ 246.819392][T18018] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3671'. [ 246.830320][T18020] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.849982][T18018] siw: device registration error -23 [ 246.889887][T18020] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.931342][T18025] loop6: detected capacity change from 0 to 1024 [ 246.938129][T18025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.947108][T18027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3677'. [ 246.961277][T18020] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.974116][T18025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.001224][T18027] siw: device registration error -23 [ 247.009954][T18020] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.023127][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.074417][T18036] loop6: detected capacity change from 0 to 1024 [ 247.075573][T18038] loop5: detected capacity change from 0 to 1024 [ 247.088637][T18038] EXT4-fs: Ignoring removed orlov option [ 247.095249][T18036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.103860][T18038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.118088][T18036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.241008][T11671] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.368244][T16837] ================================================================== [ 247.376350][T16837] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 247.386173][T16837] [ 247.388498][T16837] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 247.396557][T16837] tick_do_update_jiffies64+0x113/0x1c0 [ 247.402095][T16837] tick_nohz_handler+0x7f/0x2d0 [ 247.406932][T16837] __hrtimer_run_queues+0x20c/0x5a0 [ 247.412117][T16837] hrtimer_interrupt+0x21a/0x460 [ 247.417039][T16837] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 247.422925][T16837] sysvec_apic_timer_interrupt+0x32/0x80 [ 247.428548][T16837] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.434514][T16837] [ 247.436824][T16837] read to 0xffffffff868099c0 of 8 bytes by task 16837 on cpu 1: [ 247.444436][T16837] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 247.450667][T16837] count_shadow_nodes+0x6a/0x230 [ 247.455590][T16837] do_shrink_slab+0x60/0x680 [ 247.460170][T16837] shrink_slab+0x448/0x760 [ 247.464578][T16837] shrink_node+0x6c3/0x2120 [ 247.469070][T16837] do_try_to_free_pages+0x3f6/0xcd0 [ 247.474261][T16837] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 247.480139][T16837] try_charge_memcg+0x358/0x9e0 [ 247.484977][T16837] charge_memcg+0x51/0xc0 [ 247.489300][T16837] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 247.495273][T16837] __read_swap_cache_async+0x1df/0x350 [ 247.500725][T16837] swap_cluster_readahead+0x376/0x3e0 [ 247.506089][T16837] swapin_readahead+0xde/0x6f0 [ 247.510845][T16837] do_swap_page+0x301/0x2430 [ 247.515418][T16837] handle_mm_fault+0x9a5/0x2be0 [ 247.520254][T16837] do_user_addr_fault+0x636/0x1090 [ 247.525364][T16837] exc_page_fault+0x62/0xa0 [ 247.529859][T16837] asm_exc_page_fault+0x26/0x30 [ 247.534695][T16837] [ 247.537007][T16837] value changed: 0x00000000ffffeb41 -> 0x00000000ffffeb42 [ 247.544094][T16837] [ 247.546401][T16837] Reported by Kernel Concurrency Sanitizer on: [ 247.552543][T16837] CPU: 1 UID: 0 PID: 16837 Comm: syz-executor Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 247.566767][T16837] Tainted: [W]=WARN [ 247.570552][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.580592][T16837] ================================================================== [ 247.593821][T18003] syz.2.3666 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 247.607972][T18003] CPU: 0 UID: 0 PID: 18003 Comm: syz.2.3666 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 247.608054][T18003] Tainted: [W]=WARN [ 247.608060][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.608081][T18003] Call Trace: [ 247.608087][T18003] [ 247.608127][T18003] __dump_stack+0x1d/0x30 [ 247.608145][T18003] dump_stack_lvl+0xe8/0x140 [ 247.608167][T18003] dump_stack+0x15/0x1b [ 247.608253][T18003] dump_header+0x81/0x220 [ 247.608356][T18003] oom_kill_process+0x334/0x3f0 [ 247.608458][T18003] out_of_memory+0x979/0xb80 [ 247.608483][T18003] try_charge_memcg+0x5e6/0x9e0 [ 247.608505][T18003] obj_cgroup_charge_pages+0xa6/0x150 [ 247.608560][T18003] __memcg_kmem_charge_page+0x9f/0x170 [ 247.608583][T18003] __alloc_frozen_pages_noprof+0x188/0x360 [ 247.608665][T18003] alloc_pages_mpol+0xb3/0x250 [ 247.608692][T18003] alloc_pages_noprof+0x90/0x130 [ 247.608775][T18003] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 247.608808][T18003] __kvmalloc_node_noprof+0x30f/0x4e0 [ 247.608830][T18003] ? ip_set_alloc+0x1f/0x30 [ 247.608870][T18003] ? ip_set_alloc+0x1f/0x30 [ 247.608891][T18003] ? __kmalloc_cache_noprof+0x189/0x320 [ 247.608914][T18003] ip_set_alloc+0x1f/0x30 [ 247.608980][T18003] hash_netiface_create+0x282/0x740 [ 247.609005][T18003] ? __pfx_hash_netiface_create+0x10/0x10 [ 247.609029][T18003] ip_set_create+0x3c9/0x960 [ 247.609091][T18003] ? __nla_parse+0x40/0x60 [ 247.609108][T18003] nfnetlink_rcv_msg+0x4c6/0x590 [ 247.609141][T18003] ? selinux_capable+0x1f9/0x270 [ 247.609185][T18003] netlink_rcv_skb+0x120/0x220 [ 247.609209][T18003] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 247.609306][T18003] nfnetlink_rcv+0x16b/0x1690 [ 247.609395][T18003] ? __kfree_skb+0x109/0x150 [ 247.609430][T18003] ? nlmon_xmit+0x4f/0x60 [ 247.609496][T18003] ? consume_skb+0x49/0x150 [ 247.609518][T18003] ? nlmon_xmit+0x4f/0x60 [ 247.609535][T18003] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 247.609633][T18003] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 247.609687][T18003] ? __dev_queue_xmit+0x182/0x1fb0 [ 247.609712][T18003] ? xas_load+0x413/0x430 [ 247.609737][T18003] ? ref_tracker_free+0x37d/0x3e0 [ 247.609764][T18003] ? __netlink_deliver_tap+0x4dc/0x500 [ 247.609811][T18003] netlink_unicast+0x5a1/0x670 [ 247.609893][T18003] netlink_sendmsg+0x58b/0x6b0 [ 247.609910][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.609931][T18003] __sock_sendmsg+0x145/0x180 [ 247.610100][T18003] ____sys_sendmsg+0x31e/0x4e0 [ 247.610127][T18003] ___sys_sendmsg+0x17b/0x1d0 [ 247.610212][T18003] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 247.610242][T18003] __x64_sys_sendmsg+0xd4/0x160 [ 247.610342][T18003] x64_sys_call+0x2999/0x2fb0 [ 247.610360][T18003] do_syscall_64+0xd2/0x200 [ 247.610374][T18003] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.610472][T18003] ? clear_bhb_loop+0x40/0x90 [ 247.610489][T18003] ? clear_bhb_loop+0x40/0x90 [ 247.610507][T18003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.610524][T18003] RIP: 0033:0x7f17b950e929 [ 247.610538][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.610604][T18003] RSP: 002b:00007f17b7b56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.610620][T18003] RAX: ffffffffffffffda RBX: 00007f17b9736080 RCX: 00007f17b950e929 [ 247.610631][T18003] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 247.610683][T18003] RBP: 00007f17b9590b39 R08: 0000000000000000 R09: 0000000000000000 [ 247.610694][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.610704][T18003] R13: 0000000000000000 R14: 00007f17b9736080 R15: 00007ffec2dbad98 [ 247.610719][T18003] [ 247.969616][T18003] memory: usage 307200kB, limit 307200kB, failcnt 1837 [ 247.976583][T18003] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 247.984510][T18003] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 247.991878][T18003] Memory cgroup stats for /syz2: [ 247.992529][T18003] cache 12288 [ 248.001054][T18003] rss 0 [ 248.003810][T18003] shmem 0 [ 248.006740][T18003] mapped_file 12288 [ 248.010633][T18003] dirty 0 [ 248.013619][T18003] writeback 4096 [ 248.017182][T18003] workingset_refault_anon 435 [ 248.021891][T18003] workingset_refault_file 2997 [ 248.026695][T18003] swap 282624 [ 248.030009][T18003] swapcached 4096 [ 248.033619][T18003] pgpgin 184494 [ 248.037057][T18003] pgpgout 184490 [ 248.040664][T18003] pgfault 284366 [ 248.044256][T18003] pgmajfault 260 [ 248.047785][T18003] inactive_anon 4096 [ 248.051705][T18003] active_anon 0 [ 248.055139][T18003] inactive_file 0 [ 248.058761][T18003] active_file 0 [ 248.062263][T18003] unevictable 12288 [ 248.066041][T18003] hierarchical_memory_limit 314572800 [ 248.071445][T18003] hierarchical_memsw_limit 9223372036854771712 [ 248.077670][T18003] total_cache 12288 [ 248.081475][T18003] total_rss 0 [ 248.084755][T18003] total_shmem 0 [ 248.088219][T18003] total_mapped_file 12288 [ 248.092534][T18003] total_dirty 0 [ 248.096008][T18003] total_writeback 4096 [ 248.100080][T18003] total_workingset_refault_anon 435 [ 248.105251][T18003] total_workingset_refault_file 2997 [ 248.110518][T18003] total_swap 282624 [ 248.114299][T18003] total_swapcached 4096 [ 248.118501][T18003] total_pgpgin 184494 [ 248.122512][T18003] total_pgpgout 184490 [ 248.126551][T18003] total_pgfault 284366 [ 248.130618][T18003] total_pgmajfault 260 [ 248.134737][T18003] total_inactive_anon 4096 [ 248.139139][T18003] total_active_anon 0 [ 248.143100][T18003] total_inactive_file 0 [ 248.147293][T18003] total_active_file 0 [ 248.151287][T18003] total_unevictable 12288 [ 248.155606][T18003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3666,pid=18000,uid=0 [ 248.170305][T18003] Memory cgroup out of memory: Killed process 18000 (syz.2.3666) total-vm:93884kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 248.191120][T16691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.203243][T18020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.220909][T18020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.233302][T18020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.244330][T18020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0