last executing test programs: 10m48.677070353s ago: executing program 32 (id=40): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') listxattr(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000001c0)="d6e489f8d657340d6b9d114ccebc6082", &(0x7f0000000380)="77dad9560c24b4b872ec341e3010fe8d08cf2b6d972a5eab74c5268fbd54c50a43a161c9a7b4a1fc154ac56344be0a51b51317693d8b9dd04b87fcf736232921f39d"}}, &(0x7f00000002c0)=0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r9, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYBLOB="953a21ea405a387dcc82e4f003e90f3bccd2235b4c0b2ba936861b776650c350238dfed797fdecc1894ded4db1df0f70dbf8d6cd96683323b113c02065c3d35a49c2ff899c760972e1218978694e403f8eb62699fe0722e814651b25b2a29286f66b5d354efffedee13892f65f8521e151a4c8fbf22e63c95c988a8390d16c49cd9ac4f71fa63b80807d367a0ade1af292b843b73638ab309da66d920b971f0fb818e898e2afc829d2f75c19eccefb4f125809082d8102d4449887b06882d21e24", @ANYRESHEX=r6, @ANYRES8=r6, @ANYRES64=r9, @ANYRES32=r9, @ANYRESOCT=r5, @ANYRES8=r7, @ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r10}, 0xfecd) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) r12 = openat$cgroup_subtree(r11, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000140)=ANY=[], 0x32600) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r14}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) 10m48.281700889s ago: executing program 33 (id=43): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8=r2, @ANYBLOB="12ff3e01e421521f497512e1a466245651805664fc828f199adb1a058f8939796926c2009ccb51e117ba265107eeb2d58ce0b2e3cdcaa34a67428ba6c9f1d011abd0a5a050b5c61c85dde01c687cda5489581cbb7191fcb4939b2113b9ecf2cde03fbc86b4", @ANYBLOB="44f233829f1b32780df7438c1db4edf2a0e736ac2a16f0b490ceec80cf8059d54ae7806848751de7b39f0b79ad301f8dc6fb759825ac9ed0762005ae4712c6a06918cb93fc8c70aa16fdf81ffa5d46235665d1d1ede8dd29fbfb4e1c657be01b745105ad73ee177f6c885eae30c00c3041a98d24b4c894118594a9cab57c8bb82d31e88a3515e7edcf2e1a762bb028f6390549b4b920fe2da83472da37dc343b7fee973e6bdd8d18113685a00f8376ec757ab707b7883e43f9e5f516b6c70ab3a9f24b15ba91337e7b4b916b0c74001488135036081136e12c3c84968d26f4f335f8df2253d6a5627ef0c87723cdfa050e9f1235d7c821f2f3", @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES64=r2], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x13, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chroot(0x0) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000020100)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$eJzs281OE18Yx/Efhf+fN6FVFAVjfKIb3UygXkFDIDE20SA1viQmg0y16dCSToOpMcLOrXdhQly6MzHeABuvwIU7Ni5ZGMcwU6FAjWACI/D9bOYhZ370nD6nzVl01u6/mS8XA6fo1pXqMHVJPVqXMkqpU7GO5jUV1f+r1bKuD+W/XLr74OGtXD4/OW02lZu5kTWzwcsfn798d+VTvf/e+8EP3VrNPF77lv26Orw6svZj5lkpsFJglWrdXJutVuvurO/ZXCkoO2Z3fM8NPCtVAq+2bbzoVxcWGuZW5gb6FmpeEJhbaVjZa1i9avVaw9ynbqlijuPYQJ/wJ4WV6Wk3l/QscLBqtZw7IWl010hhJZEJAQCARLU5/y9z/j8p9nD+Tx3aZHBANs7/j9q2kvM/AAAAAAAAAAAAAAAAAAAAAABHwXoYpsMwTP+6/idFT/iEzb97JfVJ6pd0StKApEFJaUkZSaclnZE0JOmspHOShiWdl3RB0kjL/0p6rdjt8Prf3fKqvQmuGK34/J9s9P9ka3lwt0eaf71YWCzE13g8V1RJvjyNKa3vUS+b4nrqZn5yzCIZXZxfauaXFgud2/PjSm9smHb58Thv2/Pd0b7bzGeV3thg7fLZtvkeXbvakneU1ucnqsrXXLQnt/Kvxs0mbud35Eej+447xza17Z/j/G48zu9jf+x4f7s02pXs2iEFjRdl1/e9GgXFcSje6p+YxtEvkv5mwmHYanrSMwEAAAAAAAAAAAAAAAAA7Mff/kIwXIrze7k56TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDTzwAAAP//zORcow==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c737f8ff04000000c424f4fefcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000400000022a1fb42ec2867ff736300000d0000000000000001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5882, 0x1000, 0x3, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10m46.152111813s ago: executing program 34 (id=53): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_io_uring_setup(0x2e3b, &(0x7f0000000080)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000140), &(0x7f0000000300)) 10m12.266185361s ago: executing program 35 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 10m8.485565299s ago: executing program 36 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 10m7.506979944s ago: executing program 37 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10m7.056718991s ago: executing program 38 (id=973): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000880)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 9m58.851312918s ago: executing program 1 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 9m58.803096088s ago: executing program 1 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x94, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x300000c0}, 0x4080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) eventfd2(0x928, 0x1) r3 = socket(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m58.183244998s ago: executing program 1 (id=1130): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x1, 0x8080c64) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 9m57.227938932s ago: executing program 39 (id=1141): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0100001000130429bd70000000040000f3e9d6a2ecd4f913000000bf01067913d379c3d458aaf700000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000fcffffffffffffff00000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff0000080000000000000000000200018168000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x5b, &(0x7f0000000100)=""/91, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xf, 0x7fff, 0x80}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x4, 0xc, 0xc}, {0x5, 0x4, 0x1, 0x5}, {0x1, 0x4, 0xf, 0x4}, {0x5, 0x3, 0xb, 0x2}], 0x10, 0xffff203b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='rxrpc_receive\x00', r6, 0x0, 0x800}, 0xfffffffffffffc8c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a060003"], 0x18}}, 0x40) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 9m57.159747854s ago: executing program 1 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 9m56.833393858s ago: executing program 1 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 9m56.787498809s ago: executing program 3 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000a00000005000400000000000900020073"], 0x5c}}, 0x20000000) 9m56.74183917s ago: executing program 3 (id=1150): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000"], 0x78}, 0x1, 0x7}, 0x0) 9m56.716101111s ago: executing program 3 (id=1152): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 9m56.575497182s ago: executing program 1 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x50) 9m56.575291102s ago: executing program 40 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 9m56.548534273s ago: executing program 3 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 9m56.504499094s ago: executing program 3 (id=1158): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1}}) syz_open_dev$sg(0x0, 0x2, 0x4ce681) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 9m56.289988477s ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 9m56.289574907s ago: executing program 41 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 8m8.680254086s ago: executing program 9 (id=3105): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) 8m8.626550487s ago: executing program 9 (id=3108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000240)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 8m8.620927727s ago: executing program 9 (id=3111): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000bfa100000000000007010000f8ffffffb702000008000000b70300ec6bb59aaeda35f86eb3000000000085000000710000009500", @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x0, 0x1, {{0x25, 0x4, 0x0, 0x24, 0x94, 0x67, 0x0, 0x7f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x2b, 0xf0, [@broadcast, @private=0xa010102, @empty, @loopback, @multicast1, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback]}, @rr={0x7, 0xb, 0xd3, [@private=0xa010101, @loopback]}, @timestamp={0x44, 0x28, 0x5c, 0x0, 0x0, [0x5, 0x7fff, 0x484d, 0x7, 0x4, 0x80000000, 0xe4, 0x8, 0x400]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x0, [{@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x0, 0x1, {{0x25, 0x4, 0x0, 0x24, 0x94, 0x67, 0x0, 0x7f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x2b, 0xf0, [@broadcast, @private=0xa010102, @empty, @loopback, @multicast1, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback]}, @rr={0x7, 0xb, 0xd3, [@private=0xa010101, @loopback]}, @timestamp={0x44, 0x28, 0x5c, 0x0, 0x0, [0x5, 0x7fff, 0x484d, 0x7, 0x4, 0x80000000, 0xe4, 0x8, 0x400]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x0, [{@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)="f5", 0x1}], 0x1}}], 0x1, 0x44810) (async) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)="f5", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe2$9p(0x0, 0x80) getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) mmap(&(0x7f0000a24000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x20010, r6, 0xfcf79000) (async) mmap(&(0x7f0000a24000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x20010, r6, 0xfcf79000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) 8m8.126629504s ago: executing program 9 (id=3114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) unshare(0x2c020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = open(0x0, 0x0, 0x0) getdents(r9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@grpid}, {@nouser_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x562, &(0x7f0000000fc0)="$eJzs3c9rHFUcAPDvbJL+rk2hFBWRQA9WajdN4o8KHupRtFjQe12SaSjZdEt2U5pYsD3YixcpgogF8a53j8V/wLN/QEELRUrQg5fIbGbTtPsj22abTd3PBya8NzO7b7478315s2+XDWBgjWV/ChEvRcTXScShiEjybcORbxxb22/lwbXpbElidfWTv5L6flm98VyNx+3PKy9GxK9fRpwoNLdbXVqeK5XL6UJeH6/NXx6vLi2fvDhfmk1n00uTU1On35qafPedt3sW6+vn/vnu4zsfnP7q2Mq3P987fCuJM3Eg37Yxji24vrEyFmP5azISZx7bcaIHje0kSb8PgKcylOf5SGR9wKEYyrMe+P/7IiJWgQGVdMz/3/N+YvuOB9gujXFA496+R/fBz43776/dADXHP7z23kjsqd8b7VtJHrkzyu53R3vQftbGL3/evpUt0bv3IQA2df1GRJwaHm7u/5K8/3t6p7rY5/E29H+wfe5k4583Wo1/Cuvjn2gx/tnfInefxub5X7jXg2baysZ/77Uc/65PWo0O5bWD9THfSHLhYjnN+rYXIuJ4jOzO6p3mc06v3F1tt23j+C9bsvYbY8H8OO4N7370MTOlWmkrMW90/0bEyy3Hv8n6+U9anP/s9TjXZRtH09uvttu2efzP1uqPEa+1PP8PZ7SSzvOT4/XrYbxxVTT7++bR39q13+/4s/O/r3P8o8nG+drqk7fxw55/03bbHok/ur/+dyWf1su78nVXS7XawkTEruSj5vWTDx/bqDf2z+I/fqxz/9fq+t8bEZ91Gf/NIz+90lX8fTr/M090/p+8cPfDz79v1353/d+b9dLxfE03/V+3B7iV1w4AAAAAAAB2mkJEHIikUFwvFwrF4trnO47EvkK5Uq2duFBZvDQT9e/KjsZIoTHTfWjD5yEm8s/DNuqTj9WnIuJwRHwztLdeL05XyjP9Dh4AAAAAAAAAAAAAAAAAAAB2iP1tvv+f+WOo30cHPHN+8hsG16b534tfegJ2JP//YXDJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2rK48uDad1WeuLC3OVa6cnEmrc8X5xenidGXhcnG2Upktp8Xpyvxmz1euVC5PTMbi1fFaWq2NV5eWz89XFi/Vzl+cL82m59ORbYkKAAAAAAAAAAAAAAAAAAAAni/VpeW5UrmcLjQKB5vWKCh0KAzvjMNQ6HGh3z0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz0XwAAAP//ppEwLQ==") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8m7.224136739s ago: executing program 9 (id=3129): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 8m6.973845522s ago: executing program 9 (id=3133): socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8m6.950023063s ago: executing program 42 (id=3133): socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m59.00346095s ago: executing program 4 (id=5814): r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x0, 0x2}}, 0x14}}, 0x0) dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x28}}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000080)={0x1ff, 0x3, 0x56, 0x4, 0x7, 0x7, 0x8}, 0xc) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 4m56.900353853s ago: executing program 4 (id=5831): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x0, 0x0}) io_destroy(0x0) 4m56.810852464s ago: executing program 4 (id=5833): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noacl}, {@oldalloc}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@debug}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x800, 0x7ff, 0x3, 0x800, 0x1, 0x800, '\x00', 0x0, r1, 0x5, 0x3, 0x1, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x5) connect$unix(r6, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x415}, 0x18) unshare(0x64000600) 4m54.839440304s ago: executing program 4 (id=5846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m54.606223758s ago: executing program 4 (id=5848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)=""/4085, 0xff5}], 0x3c}}], 0x1, 0x40002061, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001300)=""/4118, 0x1016, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r8, @ANYBLOB="f09cd5a17177dc3a824cb541bbdc8d00"/27], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) close(r1) r11 = getpid() r12 = gettid() kcmp(r11, r12, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 4m54.229472504s ago: executing program 4 (id=5853): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(0x0, 0x8000, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noacl}, {@oldalloc}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@debug}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x800, 0x7ff, 0x3, 0x800, 0x1, 0x800, '\x00', 0x0, r1, 0x5, 0x3, 0x1, 0xe}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) 4m53.974117428s ago: executing program 43 (id=5853): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(0x0, 0x8000, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noacl}, {@oldalloc}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@debug}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x800, 0x7ff, 0x3, 0x800, 0x1, 0x800, '\x00', 0x0, r1, 0x5, 0x3, 0x1, 0xe}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) 4m35.441364454s ago: executing program 8 (id=5963): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f00000001c0), &(0x7f00000016c0)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xed0, 0x30, 0xb, 0x0, 0x0, {}, [{0xebc, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe70, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x3}, {}, {0x40}, {}, {0x9}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0xa}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x11, 0x6, "cd503859fc3647653097afd533"}, {0xc}, {0xc}}}]}]}, 0xed0}}, 0x4000) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB="7f10a06879833a784eb143effb115d773230c19c5b4f4bdf4934f7dfe839888d2ca8e1acb0a09e25f1ecbc087359fbb14b6611482b56295a4411a38d6bf06891159c10180c49606c0d7dc2ddac9b19ac02e103a12700292aec7023dcc3e401807e112fcd975bb8b90e539d7bb86e7f581979fa0717d077ded8e165bab8958c"], 0x1c}}, 0x0) 4m35.232802626s ago: executing program 8 (id=5964): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94", 0xd4}, {&(0x7f0000000740)="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", 0x1a4}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c", 0x68}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 4m35.02446188s ago: executing program 8 (id=5968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="00bb17bbbe76dc0000ffe7ffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8927, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_raw(r2, &(0x7f00000008c0)={&(0x7f0000000600)={0x1d, r4}, 0x10, &(0x7f0000000640)={&(0x7f0000000840)=@canfd={{0x0, 0x1, 0x1}, 0x1b, 0x1, 0x0, 0x0, "6935928199121005ff2ed36f1ad1c7bbaab353acd1d4a2c722ec24ce2f4a619bb9041d63c9f0c67c9e6b9c65d7b416a4279fa33167a6efddccc190c32c16b9c3"}, 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff0720670600001f000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000280)=0xc) sched_rr_get_interval(r12, &(0x7f00000002c0)) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) 4m34.857158082s ago: executing program 8 (id=5970): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x204d01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$AUDIT_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfb, {0x28, 0x1, 0x0, r1, 0x6, 0x81, 0xffffffff, 0x1, 0x0, 0xd3c, 0x7}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 4m34.299235381s ago: executing program 8 (id=5972): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m33.548833453s ago: executing program 8 (id=5977): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000731000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0xdc050000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="141200001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 4m33.515170753s ago: executing program 44 (id=5977): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000731000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0xdc050000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="141200001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 7.779549331s ago: executing program 5 (id=9426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000000000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$netlink(r6, 0x0, 0x4040800) syz_open_procfs(r5, &(0x7f00000001c0)='fdinfo/4\x00') syz_open_procfs(r5, &(0x7f0000000180)='net/netstat\x00') wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 7.212699269s ago: executing program 5 (id=9435): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 7.16724935s ago: executing program 5 (id=9438): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = memfd_secret(0x0) ftruncate(r3, 0x51a9497) finit_module(r3, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000085000000dd42b3d6ea1fe37600000095000000000000009500a50500"/55], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18) 3.91542099s ago: executing program 2 (id=9493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x2000000008]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)) eventfd2(0x52, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x240, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000), &(0x7f00000001c0), 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000005c0)={{0x5}, 'port0\x00', 0x28, 0x1718f8, 0x4, 0x4, 0x3e4, 0x1, 0x4, 0x0, 0x7, 0x3}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="0000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.866260401s ago: executing program 7 (id=9495): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.493648346s ago: executing program 7 (id=9496): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffefffb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xd}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="000202"], 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) setfsgid(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000180)=""/6) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x3, 0x0, 0xfffffffd) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) write$selinux_context(r0, &(0x7f0000000080)='system_u:object_r:framebuf_device_t:s0\x00', 0x27) 3.348322469s ago: executing program 2 (id=9497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x34}}, 0x0) 3.24726054s ago: executing program 2 (id=9499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x27, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x387}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x25a9, 0xea, &(0x7f0000000d00)=""/234, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x4, 0x4, 0x7fffffff, 0xb2e4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[r0, r0, r0, r0], &(0x7f0000000e80)=[{0x1, 0x2, 0xc, 0x7}, {0x2, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000f80)='mm_page_alloc\x00', r1, 0x0, 0x1080000000}, 0x18) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860400001801000080a14c7606a18c52924f849a2d5142094ff8893d6c61c8fd952e0705e9fa211e2614a8441f52caf120451dc30a81ce9aa7c49c8135e4b7c6fed59cc83fd521e6826e07f8ec", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1b020ba487bfd163, 0x0, 0xfffffffc, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x13}}, {@in6=@private1, 0x4d5, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff7}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xa, 0x5, 0x4}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000300), &(0x7f0000000480)=r3}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f00000002c0)=@ethtool_eee={0x45, 0x5858, 0x7, 0x10001, 0x7, 0x8, 0x100, 0x0, [0x3, 0x4]}}) 2.767562908s ago: executing program 6 (id=9504): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.336086734s ago: executing program 6 (id=9508): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x80000000}]) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r12}, 0x18) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.492581127s ago: executing program 7 (id=9509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 1.476340488s ago: executing program 7 (id=9510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d", 0x1f}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94", 0xd4}, {&(0x7f0000000740)="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", 0x1a4}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c", 0x68}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 1.423475558s ago: executing program 6 (id=9511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$netlink(r5, 0x0, 0x4040800) syz_open_procfs(r4, &(0x7f00000001c0)='fdinfo/4\x00') syz_open_procfs(r4, &(0x7f0000000180)='net/netstat\x00') wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 1.112015643s ago: executing program 2 (id=9512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x4d) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r14}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 978.513995ms ago: executing program 2 (id=9514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYRES64=0x0, @ANYBLOB="8d95f1031dccaa2df87d132b749eb198d489e226b1c19d312b4ff85eed4d63ad71c6350eb440f025e024a8c8b9e6d7fa5473650e6db510ca4f89a04b566811d15208a60abb8d988867596ae0e7e20bce530ad85891180debde4cc5096d6930c66b462c57a6acc22f6e637ea62249c5022a32f365b17cdb5fe70663b1aaa0af78968f9e73715692b8084dc1b23784aca4de7a13b709ad5c9cb9f82e810e2429db7623f0bf2da13afcd27d58c648bdf64f3e4ad96fdcd7464098ddf745da1660d18f80320b49eae50d2ac5c0f3a6f5365f21c2e91a95a7096122d75f977d012f970f2c70b3534f2e774c769472db689c06d284681ec9bd42a3ba49e20cc97abd89c37b9bf16a7ff29f550cec667f1facec6f29b6a58a15b433dafe766cfc0b163b5aa5463a509e918b754ef6aee74e711ffb9807f132145e06673e454ecffe9eb56003be94597606cdf8da0529061cf58610a2120da0357404793877b64ffe023a03688f8f1b01bb2a31b2e201716fccddf43cbadee70c94216fcc0f0f171423a077ddc816f0fcc9402e5fac419b02e8bfdcfa556ddde3b62cf100d6dc529cc71e3659829a82e3a5182cc29cebfa895e2659f36770bc7ddba4fbf9f4964b3f951bf872b69a19d6eb871234c7cb30f26faa6e5a0347e34a180f29b55149ed82a95d3c677d0e2f4a758ef8bfaebd5f296cf03bb675cd8980211e3ec0fcbf80fdeed222a69261cddbcf4a38161cf118943e208b271d317dffdc080878b940853b323bc76fd37ad1845826706291f437f1d591c810fe5ec1ef0d2794f5b16ce3121fc21e8c26aa8d45958da54362a2d0839bc41a6d7107331b781c5cb1eea8fecd62831c01a530da4a626d828c64ec540196d6c4e68e4051b932e7792a10d04fd51c3ea32a4b6f1fd73274461895c8f5ef0e7713ddec36cb00c719caceab03aaacd43ac7830511fb756c1e855ce0bebf5e6b1a280eb114b290ce8465f2cc09542a4fc96c864a0d1c7fac4a087a9f16df1141bf4eebd86717f436d28e76e6716cdf6b05390dcd749e7503215deb6788cd992788d8501f87bc8ce72e862741bde18804e2132c75a36ec47df49c9787457d774c2c1dfc156f38141b67282f5bf7087965cea1be32661c630d07cdc96b6035bc9b54feb08a6822dae57afecffa0ef66689e4be38c452adf0665a9e28688dd47f19f24687abf068d0e94fd788502c1c8e0d5f3fb65edb8726bbce2948186ec8abbad2acd2a72f458e7e3c6bf8f860f76b3cf17c0b20dfdee344a8356fd9f81fc0f417d6ab1c7e847ede9ab28b6664c693a46e7ad27146acd2cdc0f3d0f7b21f9f33e4dcd991a546707ae656fd1230bcc1996e83b79ecd156ebaff3647f43e79210844062764321ab0a01c161789b72a03b1b89d1602c864e03564323ab78174549e48008f7baa5854a2f42233c8ba2594b85de25beaa26a61a413f123123b4640af5dd57a9d3220496879ed902dd3841293449fd4962e45249b2e9ceffb8be97724d428a50516b1357337bc1e1258e3df1ad7bc7cbeb9b39769de3aad8d59376256c49a33064ed3ce0ea41b9be8e98ac3513b98d9e879cb381a2166f47968c05aaf99865de8dcdb632ec346e3889eaafbe68141804d78b39eb4ee9efced3051ccfd05027b69e2ceec0ad89ee7dcbc0a3e8313a4fd56aac3190c84de152e36e86258bfdbebdaa56124ee2a72e179f67f82234fe6820a6befa9ddfc72bae9673152985d5511f7f0864856332a47184313955fac6f5196840a4d25e634ace07fa6387ac595894dcdc82cf9ff33de3e612e498e66cb05a07620c472275003f1871890afe06c936f9d3238e50905bd2c6766960a1be32088b9b1cc9371f38da60ce4c6d2e130773cad227cf72aa48260686b557d5de2f51aa48cb457d02323a7dff20a68f328db037a459ac6ef057b6b6ee23b446af110d6741251c3aa3ba2e06560d7f06f37ad49218de79f4251c2eb81e226295157b9c4043fe96bfc8cb143bd5b454fe431cce96f539919b3bd990be397dab1bc3ec6cd16d23447a8010674b03b2331ca9b4fedbe7aac69e30c2e414ac5f5c198763ac761cb1cf218728a5041a13a54cf218db24ff96de649f56b1ae1d36e44146875f0d6d3cbf08ba3033f370408ad36588bd01a03e9e7d8729a11a7124ba7f59807cff99f96edecd02b905d00612d6b405caae7e69baac8246334ad49b2ff32980a61850bec381c51f9fca5886edb10434852a36a52e9aa887d45d10f967e6ff8323fa08e57e02a645b03d5bc0a9d7eed5da072f82ea87903ebddcc74aa684a4e137d6ddceaaeb81218b6b1af919919e48e43f6be7bcab13b69766478f31c8f43cddb8f4628153b314d4dd5f906fa51f65dd07539b221271a9f0a279d751d0b61f0859c07bc7754604af24246ee9f4cef4414a1e5e1d96244e9f0fe738d5ec9a484c9b9f695ced0d7859701a5748f48f55e16a3c5fadf39fbfb29fa3c88bc96506f0666eead5b8546e29c6cadd074468fd158bec3dda38e727fc04a75881b5233ae3593340f6dc5eda0d1f9096b0b83e172ac301d8ec05fce492110df23b014ee4ac79a91c4981d820eca6600e10f54448ffae8cd61206364693d0f3be71b4a62dacd5df08f391d5769fceb0a8a5c14f8450008cd87571408a3bc311e4b7169838dd4c1366b55f97df572f65d248ad4debeb0afa5c2f4b3763f7f1d48b9ad7d3a6d47f5c352ecbe3ee1765a2b4ad54c06807bfe0b3e52babe92b5b92a7764dd4710015c2a9082444ac27efc31056945e7646bcb37cdac7dcfcbb9d47e8a58915dc6b827f2a98c1505244f51d664fc9676eda656a096d72092c2077a27cec5e602ba62558d30f66cea3eb9843f8b6ded6239de5aff0860191e51c633475f8cb20d5de82bf30a86a495e730fb6da653b7a2216daf409ef279f42eeb96efcb0381bda9d4784d10a633ea1e8ac24a34f3d2a1a09ac008770d8d899def9ed444f678ca3566ceb3bdedc466a3a04217e91e73d532f4d046d767abb868100f37b17ff41cc83ea09eba73283f9800bd934cb7b1c62e75bb5ce1347a5cb1a2bca85c5722df3f44bc9bdede46ad72e5088b23caf0c58c10b247adfd753b84b386f1a9bacd7f46200956ec68b715c16772c4c8f5513ae883fa8ad30a862f288ff3a69a4fb75864d147b6e585bf96867d696617a43d1fa0bd77a3bd5ac77e7b89c745f2f34064527cec7fb6d2096de0970080221fbc44d3309c08ae57110bf56656f95c97cedee8d5e517775cc16411930c21e7ab7cf622ffce0ccd6dca8e85e6a488cc70f73b6bda64440e6ecafe8b30900b7e14f9dfd34c99732d4aa12e1319c74a06ca4341a806896e63fd5370250a9d6f498b854a22f329ab574b604326ee16cb333c52210bc629dfb39d554c89611a7a42346067c8f85c2f5f19427260a8e0e14460a5fb8ec9077ff4feb7892717a39db8b09bb2d928111ebc4142afeb8120f0a76e2cca92ea004280ca54df386fbd104dbeb213804eee90ae00705ad1f386bd353279df0fa9b966e0cc877ba21fec17306e2d7609147709aa99fbfe16a4c5221494deaa679581c98f7b98a9f4d6b4121a3ffac0df51872ad270909c2399c278e5ff67cc452f5a2c8bf2a2d38af1985b62a27e3249b30db3c3f52c8c1ee5119779780943af4af17799e272eeddd6bc088563e7e4e1c17afa1c2f008c0606585fd06516b34229daca6a9935e0e7975853b7f42d7c20020691cf7d1ba4365851fcfbfb99e3334ee73432fbe04774225cbd1eeade738ebb06c7d22c9183382051e67ec4f2093b41466dd5920461fd23f315d4160245964fd17f8c82875578c5ece793317bd019a7dbcf0b80a8e6502e980a0e1a445fbf6230d8aa2c83bcef47a76e9042da7a5120eca804d63f095b8e86d275e6f8a855cb069b9a5b28381e5ec8486f534d6dbbc5af55e8f1466de31e2fe9ed045a6bbb19dc2ec605b71c5c7ac75ecce8bf40e1e9a773938a855204965d8b6d363a4f4f40b92d371122cb637e9732ab1afbe3049169f238838bb30a874c293cb697a90026edaed16061ed78a41baefbc5c73960cd4131cd269ce02407867a7f8ca9e9e3de3288217ba52a463e91b5eb86d2155206197eee90e22c37437938a878f2bbe2015bb4a1fc89652e18aa282d1525494df30015369c2b1db3c92bd0fa77a4c556d5b573b777c0177ac46efae01858aa4c1fbd357ce0f2ac5f15343573197b9ec44253331a6cc4cfd467f9cc46613c4f25e942e376ff790c1e0ac2eaa3f0a9a373ae504cc247489fb23c6fca321ae286715c4afb9952e44f4fc2fc81f90a062795cce46c962ba032ef040ed75819cfed56bc5b5df91ae4ef8c198b151c7ffb3f8ed07a557304e557458a5493bde6154af909a69af9be8dc5eb4f95c8a0d99104f77b9b148b3481a257cfaa60be1b61ff3f81f07d2a6a0955c32cb735eef686a78be7f813a15ec2c07ae77f6b7ae659ef193e0bbd7bc44f2f1bde99f45869b81cc85fb9dd741a1d001249dbf3b1b1bba205d479f49713eb673cea212f8c14f9060bc8ed1c44362932230b28fc35112be7ef309f1f0ced58a8aed31726ee0d9579ad53b08db298842905b11230300cfdaeecac77852efbb438f1302417b624d4cb0b2cb114100782b12d6ff040ae95fae5e5b91c26dec6a845c3a65244e1356078d542dbd77d21a75c143baa90b274db1fcf719bf0ec3e11f160880f1df19c798f50869405897cd7d43734881b57f7f94d607b787e2cb20d41e6cb5cc979b68e6a15ffa541f522f6ac24b398041bee464ccaa7d18305d2a265c087b9976519871c191cafb782e18765d08b8b831ead366890325b8c9e27b0c656d872eda2b536a92fd36b42cf9e8fb2adb210450e544dbcad3252f16100ce27885f7217a9495bbbc8f3834a54f800630b57991cf5534e59d44cfabb43e1174d39aa86a789dffb0fc521b9c09ab1179fe63f8802acc122e87fc7d19f1e94c5bc6d7eeabba823c8dfb047601982b861e2519b59522cdc6e22be0b42e7b13c25367a5840eab8535b51ba9a2cd39d9fdd220a32a0325d3ae0ad97937757b770ce067248701da92d129f6223a4b65cb00de6585954557e2dec9f78936a0a050388f5def91e2b0c009a6dfbb0c73bc57552c07d56968fe35c3c00c75ffa3f93da71466e2134920f2115dc19ae1368aea605916acf5e11b13506ddd87579a8d267d1147e5ba0a70219ecc5380a88ce90837ff551aa6b2fd3b8ff2fb3d66d65005c647a02437ab11ea05844384846de26e2a225f732c031320b489a3db970adb55d4dc490c38d87137cfada41cd609c1906a29134b816008ee2ce144dd1df3485eae1327e8033e16c65ddea4738a545b93c95d70548729b6d64c5cdb4293cf72c6e1f9dcc72cbe56725e37aebac28871dda6e4942a35575fbe33a4b8159b939c0f6488cf521588f3ff3b38e0048212af03b99d3b78479a12aa6dcff4cd9a9d3b210e9fe177d710a7a53f9f7cc29a87a1287b4b665cf39cdc107e67f2717d6a6016ebb1666cf9b77c544d41242a23778603b36868118b1e707ea40e54eb59e00a6c097661979ec50ae2ac557636d7a0324a93c08480777f89ffc664c41b189b5819ec466c1ad74e5e66222142e58176387f708892e9a48969f64ed23ec0acb4cb1c84862acb1ca254ab92861b6ed70f38f3cc31e4f1b46ab3549e48b0c9d5afec4cacdf969a7a5b9b5c48cfee7b914aed3149c8fe58fc54235b9228a1c9a2a064587641d37785f1ce4c8208ec1377490f02dd22bf5668fc039b67f"], 0x2, 0x2ba, &(0x7f0000000240)="$eJzs3T+LI2UYAPBnsrlJVpGksJIDB7SwOm6vtckie3CYSkmhFrp4OZBNEHKw4B+MV9naWPoJBMHOL2HjNxBsBTuvOBiZyYz541z2IptVl9+v2WffeZ73febNsMsW8+4HN6dn97N48OjzX6LbTaI1iMN4nEQ/WlH7MtYMvg4A4P/scZ7H7/nCLnVJRHT31xYAsEc7//7/Ye8tAQB79vY77755PByevJVl3bg7/ep8VPxlX3xdXD9+EB/FJMZxO3rxJCL/yyK+m+f5vJ0V+vHqdH4+Kiqn7/9UzX/8W0RZfxS96JdD6/X3hidH2cJK/bzo47lq/UFRfyd68WLD+veGJ3ca6mOUxmuvrPR/K3rx84fxcUziftnEsv6Loyx7I//mj8/eK9or6pP5+ahT5i3lB1f80QAAAAAAAAAAAAAAAAAAAAAAcI3dqs7O6UR5fk8xVJ2/c/Ck+OZGZLX++vk8i/qknmjjfKB5Ht/W5+vczrIsrxKX9e14qR3tf+euAQAAAAAAAAAAAAAAAAAA4L/l4Sefnp1OJuPZpQT1aQD1a/2n7X82z2Bl5OXYntyp15pMWlXYkHxYBXFQ5yQRW9sobuKStuWi4LC55/Hsu+93nbB7Qc4Le/ncN4P66To7TZr3sBP1SDeq4MfVnDSeca10cyQt9nIynt0sG6gfjovmSRsv9Xa+9/T5MphvyYkk4unzvP7rouFqJImN5LTc1cbyG1WwUr7xbDztea53ae3S339WJE7rAAAAAAAAAAAAAAAAAACAvVq+Btxw8dHW0lbe2VtbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCllv//f4dgXhU/Q3Ias4fNK7ev8jYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC45v4MAAD//2UZVDs=") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 978.005575ms ago: executing program 0 (id=9515): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 930.232356ms ago: executing program 6 (id=9516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x6a040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) read$ptp(r1, &(0x7f00000004c0)=""/120, 0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x9eb, 0x24, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x10, 0x80, 0x5, 0x6f9}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='ts=fd,rfd', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k']) fsopen(&(0x7f0000000000)='befs\x00', 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 917.284276ms ago: executing program 0 (id=9517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100}, 0x18) 912.248456ms ago: executing program 2 (id=9518): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffefffb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xd}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="000202"], 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) setfsgid(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000180)=""/6) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x3, 0x0, 0xfffffffd) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) write$selinux_context(r0, &(0x7f0000000080)='system_u:object_r:framebuf_device_t:s0\x00', 0x27) 789.869798ms ago: executing program 0 (id=9519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 741.795049ms ago: executing program 6 (id=9520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) unshare(0x2c040000) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x10, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x2010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x8, [{@remote, 0x4}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4a61c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 651.3413ms ago: executing program 6 (id=9521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x27, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x387}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x25a9, 0xea, &(0x7f0000000d00)=""/234, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x4, 0x4, 0x7fffffff, 0xb2e4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[r0, r0, r0, r0], &(0x7f0000000e80)=[{0x1, 0x2, 0xc, 0x7}, {0x2, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000f80)='mm_page_alloc\x00', r1, 0x0, 0x1080000000}, 0x18) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860400001801000080a14c7606a18c52924f849a2d5142094ff8893d6c61c8fd952e0705e9fa211e2614a8441f52caf120451dc30a81ce9aa7c49c8135e4b7c6fed59cc83fd521e6826e07f8ec", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1b020ba487bfd163, 0x0, 0xfffffffc, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x13}}, {@in6=@private1, 0x4d5, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff7}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xa, 0x5, 0x4}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000300), &(0x7f0000000480)=r3}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f00000002c0)=@ethtool_eee={0x45, 0x5858, 0x7, 0x10001, 0x7, 0x8, 0x100, 0x0, [0x3, 0x4]}}) 650.81105ms ago: executing program 0 (id=9522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x34}}, 0x0) 650.420811ms ago: executing program 5 (id=9444): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x220000a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000120001"], 0x54}, 0x1, 0x0, 0x0, 0x8000815}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 605.776701ms ago: executing program 7 (id=9523): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000011", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 605.292971ms ago: executing program 0 (id=9524): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) link(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00') 540.196612ms ago: executing program 0 (id=9525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$netlink(r5, 0x0, 0x4040800) syz_open_procfs(r4, &(0x7f00000001c0)='fdinfo/4\x00') syz_open_procfs(r4, &(0x7f0000000180)='net/netstat\x00') wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 171.104278ms ago: executing program 7 (id=9526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x23}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 170.597738ms ago: executing program 5 (id=9527): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=9528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): 650.680834][T29130] ? __fget_files+0x184/0x1c0 [ 650.680856][T29130] __x64_sys_mq_open+0xcb/0x100 [ 650.680925][T29130] x64_sys_call+0x27d6/0x2fb0 [ 650.680953][T29130] do_syscall_64+0xd2/0x200 [ 650.680975][T29130] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 650.681071][T29130] ? clear_bhb_loop+0x40/0x90 [ 650.681113][T29130] ? clear_bhb_loop+0x40/0x90 [ 650.681142][T29130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.681168][T29130] RIP: 0033:0x7f790433e929 [ 650.681183][T29130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.681201][T29130] RSP: 002b:00007f79029a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 650.681267][T29130] RAX: ffffffffffffffda RBX: 00007f7904565fa0 RCX: 00007f790433e929 [ 650.681280][T29130] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 650.681293][T29130] RBP: 00007f79029a7090 R08: 0000000000000000 R09: 0000000000000000 [ 650.681308][T29130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.681323][T29130] R13: 0000000000000000 R14: 00007f7904565fa0 R15: 00007ffe95702e18 [ 650.681347][T29130] [ 651.075612][T29135] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 651.082182][T29135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.089810][T29135] vhci_hcd vhci_hcd.0: Device attached [ 651.347245][T29146] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 651.353978][T29146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 651.361697][T29146] vhci_hcd vhci_hcd.0: Device attached [ 651.392737][T29135] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 651.392788][ T6290] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 651.399305][T29135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 651.399408][T29135] vhci_hcd vhci_hcd.0: Device attached [ 651.473619][T29159] 9pnet_fd: p9_fd_create_tcp (29159): problem connecting socket to 127.0.0.1 [ 651.482842][T29146] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 651.483441][T29155] netlink: 'syz.7.9053': attribute type 10 has an invalid length. [ 651.489482][T29146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 651.505057][T29146] vhci_hcd vhci_hcd.0: Device attached [ 651.521673][T29159] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9054'. [ 651.542217][T29135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 651.545823][T29155] veth0_vlan: left promiscuous mode [ 651.579477][T29155] veth0_vlan: entered promiscuous mode [ 651.586240][T29135] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(15) [ 651.592905][T29135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 651.600700][T29135] vhci_hcd vhci_hcd.0: Device attached [ 651.611191][T29155] team0: Device veth0_vlan failed to register rx_handler [ 651.624008][ T29] audit: type=1400 audit(1751093090.738:20375): avc: denied { create } for pid=29134 comm="syz.5.9050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 651.755898][T29175] loop7: detected capacity change from 0 to 512 [ 651.779701][T29175] EXT4-fs (loop7): 1 orphan inode deleted [ 651.794355][ T4234] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 651.803614][T29175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.804221][ T4234] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 651.830183][T29175] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.856937][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.879829][T29147] vhci_hcd: connection closed [ 651.880026][ T4234] vhci_hcd: stop threads [ 651.880132][T29151] vhci_hcd: connection closed [ 651.884790][ T4234] vhci_hcd: release socket [ 651.884809][ T4234] vhci_hcd: disconnect device [ 651.889374][T29136] vhci_hcd: connection reset by peer [ 651.911258][T29160] vhci_hcd: connection closed [ 651.913113][T29164] vhci_hcd: connection closed [ 651.936491][ T4234] vhci_hcd: stop threads [ 651.945565][ T4234] vhci_hcd: release socket [ 651.950006][ T4234] vhci_hcd: disconnect device [ 651.991944][T29185] loop7: detected capacity change from 0 to 1024 [ 652.013293][ T4234] vhci_hcd: stop threads [ 652.017577][ T4234] vhci_hcd: release socket [ 652.022121][ T4234] vhci_hcd: disconnect device [ 652.045899][ T4234] vhci_hcd: stop threads [ 652.050358][ T4234] vhci_hcd: release socket [ 652.054942][ T4234] vhci_hcd: disconnect device [ 652.064970][T29185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.099461][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.129108][ T4234] vhci_hcd: stop threads [ 652.133494][ T4234] vhci_hcd: release socket [ 652.134535][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9064'. [ 652.137970][ T4234] vhci_hcd: disconnect device [ 652.146943][T29190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9064'. [ 652.165075][T29192] syz.6.9063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 652.179787][T29192] CPU: 0 UID: 0 PID: 29192 Comm: syz.6.9063 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 652.179832][T29192] Tainted: [W]=WARN [ 652.179839][T29192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.179856][T29192] Call Trace: [ 652.179865][T29192] [ 652.179920][T29192] __dump_stack+0x1d/0x30 [ 652.179950][T29192] dump_stack_lvl+0xe8/0x140 [ 652.179978][T29192] dump_stack+0x15/0x1b [ 652.180053][T29192] warn_alloc+0x12b/0x1a0 [ 652.180097][T29192] ? css_rstat_updated+0xcd/0x5b0 [ 652.180154][T29192] __vmalloc_node_range_noprof+0x9c/0xe00 [ 652.180195][T29192] ? update_curr_dl_se+0x60/0x250 [ 652.180271][T29192] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 652.180317][T29192] ? probe_sched_wakeup+0x85/0xa0 [ 652.180354][T29192] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 652.180443][T29192] ? __rcu_read_unlock+0x4f/0x70 [ 652.180468][T29192] ? avc_has_perm_noaudit+0x1b1/0x200 [ 652.180508][T29192] ? should_fail_ex+0x30/0x280 [ 652.180549][T29192] ? xskq_create+0x36/0xe0 [ 652.180582][T29192] vmalloc_user_noprof+0x7d/0xb0 [ 652.180625][T29192] ? xskq_create+0x80/0xe0 [ 652.180665][T29192] xskq_create+0x80/0xe0 [ 652.180686][T29192] xsk_init_queue+0x95/0xf0 [ 652.180719][T29192] xsk_setsockopt+0x35c/0x510 [ 652.180747][T29192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 652.180928][T29192] __sys_setsockopt+0x181/0x200 [ 652.180985][T29192] __x64_sys_setsockopt+0x64/0x80 [ 652.181076][T29192] x64_sys_call+0x2bd5/0x2fb0 [ 652.181103][T29192] do_syscall_64+0xd2/0x200 [ 652.181131][T29192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 652.181175][T29192] ? clear_bhb_loop+0x40/0x90 [ 652.181310][T29192] ? clear_bhb_loop+0x40/0x90 [ 652.181347][T29192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.181369][T29192] RIP: 0033:0x7fe5c64de929 [ 652.181438][T29192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.181458][T29192] RSP: 002b:00007fe5c4b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 652.181482][T29192] RAX: ffffffffffffffda RBX: 00007fe5c6705fa0 RCX: 00007fe5c64de929 [ 652.181496][T29192] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 652.181536][T29192] RBP: 00007fe5c6560b39 R08: 0000000000000004 R09: 0000000000000000 [ 652.181551][T29192] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.181566][T29192] R13: 0000000000000000 R14: 00007fe5c6705fa0 R15: 00007ffc7f87c0c8 [ 652.181590][T29192] [ 652.181646][T29192] Mem-Info: [ 652.435366][T29192] active_anon:7294 inactive_anon:4 isolated_anon:0 [ 652.435366][T29192] active_file:10214 inactive_file:9919 isolated_file:0 [ 652.435366][T29192] unevictable:7 dirty:311 writeback:0 [ 652.435366][T29192] slab_reclaimable:3897 slab_unreclaimable:17264 [ 652.435366][T29192] mapped:29428 shmem:387 pagetables:1098 [ 652.435366][T29192] sec_pagetables:0 bounce:0 [ 652.435366][T29192] kernel_misc_reclaimable:0 [ 652.435366][T29192] free:1802089 free_pcp:33751 free_cma:0 [ 652.480537][T29192] Node 0 active_anon:29060kB inactive_anon:16kB active_file:40856kB inactive_file:39676kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:117712kB dirty:1244kB writeback:0kB shmem:1548kB writeback_tmp:0kB kernel_stack:3280kB pagetables:4392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 652.511504][T29192] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.540327][T29192] lowmem_reserve[]: 0 2882 7860 7860 [ 652.545851][T29192] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 652.576209][T29192] lowmem_reserve[]: 0 0 4978 4978 [ 652.581438][T29192] Node 0 Normal free:4237496kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29060kB inactive_anon:16kB active_file:40856kB inactive_file:39676kB unevictable:28kB writepending:1212kB present:5242880kB managed:5098240kB mlocked:28kB bounce:0kB free_pcp:130488kB local_pcp:36108kB free_cma:0kB [ 652.613981][T29192] lowmem_reserve[]: 0 0 0 0 [ 652.618554][T29192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 652.631300][T29192] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 652.647530][T29192] Node 0 Normal: 2*4kB (UM) 3*8kB (UE) 5*16kB (ME) 7*32kB (UE) 1098*64kB (UME) 1335*128kB (UME) 681*256kB (UME) 378*512kB (UME) 197*1024kB (UME) 75*2048kB (UME) 799*4096kB (UM) = 4237392kB [ 652.666623][T29192] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 652.675976][T29192] 20524 total pagecache pages [ 652.679681][ T29] audit: type=1400 audit(1751093091.808:20376): avc: denied { read } for pid=29191 comm="syz.6.9063" dev="sockfs" ino=110548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 652.680658][T29192] 8 pages in swap cache [ 652.680670][T29192] Free swap = 124964kB [ 652.710730][T29192] Total swap = 124996kB [ 652.714934][T29192] 2097051 pages RAM [ 652.718782][T29192] 0 pages HighMem/MovableOnly [ 652.723508][T29192] 80812 pages reserved [ 652.775528][T29201] 9pnet_fd: p9_fd_create_tcp (29201): problem connecting socket to 127.0.0.1 [ 652.784964][T29201] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9066'. [ 652.856743][T29207] netlink: 'syz.2.9067': attribute type 10 has an invalid length. [ 652.883232][T29204] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9068'. [ 652.915248][T29207] veth0_vlan: left promiscuous mode [ 652.962120][T29207] veth0_vlan: entered promiscuous mode [ 652.988587][T29219] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9075'. [ 652.998397][T29220] netlink: 'syz.7.9072': attribute type 10 has an invalid length. [ 652.999482][T29207] team0: Device veth0_vlan failed to register rx_handler [ 653.046182][T29220] veth0_vlan: left promiscuous mode [ 653.053606][T29220] veth0_vlan: entered promiscuous mode [ 653.064842][T29220] team0: Device veth0_vlan failed to register rx_handler [ 653.076462][T29222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.084144][T29222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.092742][T29222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.100331][T29222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.132318][T29233] 9pnet_fd: p9_fd_create_tcp (29233): problem connecting socket to 127.0.0.1 [ 653.215111][T29241] netlink: 'syz.6.9084': attribute type 10 has an invalid length. [ 653.237633][T29239] loop2: detected capacity change from 0 to 1024 [ 653.278219][T29239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.429237][T29263] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.9083: Allocating blocks 385-513 which overlap fs metadata [ 653.442163][T29258] veth0_vlan: left promiscuous mode [ 653.448999][T29258] veth0_vlan: entered promiscuous mode [ 653.470180][T29258] team0: Device veth0_vlan failed to register rx_handler [ 653.537393][T29266] 9pnet_fd: p9_fd_create_tcp (29266): problem connecting socket to 127.0.0.1 [ 653.627259][T29275] validate_nla: 1 callbacks suppressed [ 653.627279][T29275] netlink: 'syz.0.9096': attribute type 10 has an invalid length. [ 653.648403][T29275] dummy0: entered promiscuous mode [ 653.655563][T29275] bridge0: port 3(dummy0) entered blocking state [ 653.662143][T29275] bridge0: port 3(dummy0) entered disabled state [ 653.671110][T29275] dummy0: entered allmulticast mode [ 653.677675][T29275] bridge0: port 3(dummy0) entered blocking state [ 653.684106][T29275] bridge0: port 3(dummy0) entered forwarding state [ 653.692256][T29283] loop7: detected capacity change from 0 to 128 [ 653.740335][ T29] audit: type=1400 audit(1751093092.868:20377): avc: denied { connect } for pid=29288 comm="syz.0.9103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 653.767441][T29290] loop5: detected capacity change from 0 to 128 [ 653.777630][T29289] vlan2: entered promiscuous mode [ 653.783203][T29289] vlan2: entered allmulticast mode [ 653.788431][T29289] hsr_slave_1: entered allmulticast mode [ 653.795623][T29290] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 653.816802][T29290] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 653.835640][T29292] bio_check_eod: 11037 callbacks suppressed [ 653.835730][T29292] syz.7.9099: attempt to access beyond end of device [ 653.835730][T29292] loop7: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 653.856102][T29292] syz.7.9099: attempt to access beyond end of device [ 653.856102][T29292] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 653.870966][T29292] syz.7.9099: attempt to access beyond end of device [ 653.870966][T29292] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 653.887924][T29292] syz.7.9099: attempt to access beyond end of device [ 653.887924][T29292] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 653.912991][T29292] syz.7.9099: attempt to access beyond end of device [ 653.912991][T29292] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 653.943575][T29292] syz.7.9099: attempt to access beyond end of device [ 653.943575][T29292] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 653.960780][T29292] syz.7.9099: attempt to access beyond end of device [ 653.960780][T29292] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 653.978378][T29292] syz.7.9099: attempt to access beyond end of device [ 653.978378][T29292] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 653.996112][T29292] syz.7.9099: attempt to access beyond end of device [ 653.996112][T29292] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 654.012029][ T37] kworker/u8:2: attempt to access beyond end of device [ 654.012029][ T37] loop7: rw=1, sector=321, nr_sectors = 8 limit=128 [ 654.037707][T29238] EXT4-fs (loop2): pa ffff888106e85380: logic 16, phys. 129, len 24 [ 654.045898][T29238] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 654.130651][T28450] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.202794][T29302] netlink: 'syz.0.9107': attribute type 10 has an invalid length. [ 654.218706][T29302] veth0_vlan: left promiscuous mode [ 654.228618][T29306] 9pnet_fd: p9_fd_create_tcp (29306): problem connecting socket to 127.0.0.1 [ 654.239745][T29302] veth0_vlan: entered promiscuous mode [ 654.246802][T29302] team0: Device veth0_vlan failed to register rx_handler [ 654.393043][ T29] audit: type=1400 audit(1751093093.518:20378): avc: denied { bind } for pid=29317 comm="syz.2.9114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 654.430960][ T29] audit: type=1400 audit(1751093093.548:20379): avc: denied { execute } for pid=29317 comm="syz.2.9114" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=110931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 654.463738][T29320] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 654.532694][T29324] loop7: detected capacity change from 0 to 1024 [ 654.560088][T29324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.658067][T29333] 9pnet_fd: p9_fd_create_tcp (29333): problem connecting socket to 127.0.0.1 [ 654.720714][T29345] netlink: 'syz.6.9121': attribute type 10 has an invalid length. [ 654.735523][T29344] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.9117: Allocating blocks 385-513 which overlap fs metadata [ 654.737202][T29345] veth0_vlan: left promiscuous mode [ 654.771516][T29345] veth0_vlan: entered promiscuous mode [ 654.778246][T29345] team0: Device veth0_vlan failed to register rx_handler [ 654.821108][T29348] loop0: detected capacity change from 0 to 1024 [ 654.830798][T29348] EXT4-fs: Ignoring removed orlov option [ 654.836619][T29348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.845664][T29343] syzkaller0: entered promiscuous mode [ 654.851233][T29343] syzkaller0: entered allmulticast mode [ 654.919217][T29348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.223032][T28661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.356451][T29323] EXT4-fs (loop7): pa ffff888106e85380: logic 16, phys. 129, len 24 [ 655.364555][T29323] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 655.398070][T29364] netlink: 'syz.2.9130': attribute type 10 has an invalid length. [ 655.464518][T29366] loop5: detected capacity change from 0 to 128 [ 655.509356][T29364] veth0_vlan: left promiscuous mode [ 655.524846][T29364] veth0_vlan: entered promiscuous mode [ 655.546043][T29364] team0: Device veth0_vlan failed to register rx_handler [ 655.609125][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.812184][T29373] loop7: detected capacity change from 0 to 128 [ 655.861322][T29374] netlink: 'syz.2.9133': attribute type 10 has an invalid length. [ 655.873037][T29373] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 655.918385][T29374] veth0_vlan: left promiscuous mode [ 655.924632][T29374] veth0_vlan: entered promiscuous mode [ 655.931689][T29374] team0: Device veth0_vlan failed to register rx_handler [ 656.018650][T29373] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 656.125721][T29382] 9pnet_fd: p9_fd_create_tcp (29382): problem connecting socket to 127.0.0.1 [ 656.135624][T29382] __nla_validate_parse: 23 callbacks suppressed [ 656.135644][T29382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9135'. [ 656.580963][T29387] netlink: 'syz.2.9136': attribute type 10 has an invalid length. [ 656.968780][T29387] veth0_vlan: left promiscuous mode [ 657.030848][T29389] loop0: detected capacity change from 0 to 2048 [ 657.041605][T29387] veth0_vlan: entered promiscuous mode [ 657.105423][ T6290] usb 11-1: enqueue for inactive port 0 [ 657.111051][ T6290] usb 11-1: enqueue for inactive port 0 [ 657.113547][T29387] team0: Device veth0_vlan failed to register rx_handler [ 657.124385][T29392] FAULT_INJECTION: forcing a failure. [ 657.124385][T29392] name failslab, interval 1, probability 0, space 0, times 0 [ 657.137193][T29392] CPU: 1 UID: 0 PID: 29392 Comm: syz.5.9138 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 657.137232][T29392] Tainted: [W]=WARN [ 657.137240][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 657.137277][T29392] Call Trace: [ 657.137284][T29392] [ 657.137292][T29392] __dump_stack+0x1d/0x30 [ 657.137313][T29392] dump_stack_lvl+0xe8/0x140 [ 657.137333][T29392] dump_stack+0x15/0x1b [ 657.137354][T29392] should_fail_ex+0x265/0x280 [ 657.137454][T29392] should_failslab+0x8c/0xb0 [ 657.137478][T29392] kmem_cache_alloc_noprof+0x50/0x310 [ 657.137526][T29392] ? security_inode_alloc+0x37/0x100 [ 657.137561][T29392] security_inode_alloc+0x37/0x100 [ 657.137638][T29392] inode_init_always_gfp+0x4b7/0x500 [ 657.137683][T29392] alloc_inode+0x58/0x170 [ 657.137742][T29392] alloc_anon_inode+0x1e/0x170 [ 657.137790][T29392] aio_setup_ring+0x91/0x760 [ 657.137818][T29392] ioctx_alloc+0x2c4/0x4e0 [ 657.137843][T29392] __se_sys_io_setup+0x6b/0x1b0 [ 657.137883][T29392] __x64_sys_io_setup+0x31/0x40 [ 657.137979][T29392] x64_sys_call+0x2f0e/0x2fb0 [ 657.138002][T29392] do_syscall_64+0xd2/0x200 [ 657.138027][T29392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 657.138052][T29392] ? clear_bhb_loop+0x40/0x90 [ 657.138075][T29392] ? clear_bhb_loop+0x40/0x90 [ 657.138104][T29392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.138131][T29392] RIP: 0033:0x7f51ab99e929 [ 657.138148][T29392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.138165][T29392] RSP: 002b:00007f51aa007038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 657.138186][T29392] RAX: ffffffffffffffda RBX: 00007f51abbc5fa0 RCX: 00007f51ab99e929 [ 657.138231][T29392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000bf3 [ 657.138242][T29392] RBP: 00007f51aa007090 R08: 0000000000000000 R09: 0000000000000000 [ 657.138254][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.138269][T29392] R13: 0000000000000000 R14: 00007f51abbc5fa0 R15: 00007ffc66840888 [ 657.138293][T29392] [ 657.184308][ T6290] vhci_hcd: vhci_device speed not set [ 657.408527][T29394] syzkaller0: entered promiscuous mode [ 657.414173][T29394] syzkaller0: entered allmulticast mode [ 657.424588][T29389] Alternate GPT is invalid, using primary GPT. [ 657.431007][T29389] loop0: p2 p3 p7 [ 657.437821][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9140'. [ 657.446845][T29396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9140'. [ 657.521701][T29401] loop0: detected capacity change from 0 to 1024 [ 657.544564][T29404] loop5: detected capacity change from 0 to 128 [ 657.551583][T29404] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 657.565359][T29404] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 657.586069][T29401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.656418][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 657.656433][ T29] audit: type=1400 audit(1751093096.788:20383): avc: denied { ioctl } for pid=29415 comm="syz.6.9147" path="socket:[111068]" dev="sockfs" ino=111068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.709255][T29419] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9142: Allocating blocks 385-513 which overlap fs metadata [ 657.895935][T29427] netlink: 'syz.6.9150': attribute type 10 has an invalid length. [ 657.903951][T29427] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9150'. [ 658.332262][T29400] EXT4-fs (loop0): pa ffff888106dd3850: logic 16, phys. 129, len 24 [ 658.340465][T29400] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 658.621360][T28661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.687655][T29434] veth0: entered promiscuous mode [ 658.703284][ T29] audit: type=1400 audit(1751093097.838:20384): avc: denied { connect } for pid=29433 comm="syz.0.9152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 658.730961][T29434] FAULT_INJECTION: forcing a failure. [ 658.730961][T29434] name failslab, interval 1, probability 0, space 0, times 0 [ 658.743704][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.0.9152 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 658.743782][T29434] Tainted: [W]=WARN [ 658.743789][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.743801][T29434] Call Trace: [ 658.743808][T29434] [ 658.743816][T29434] __dump_stack+0x1d/0x30 [ 658.743841][T29434] dump_stack_lvl+0xe8/0x140 [ 658.743892][T29434] dump_stack+0x15/0x1b [ 658.743911][T29434] should_fail_ex+0x265/0x280 [ 658.743977][T29434] should_failslab+0x8c/0xb0 [ 658.744007][T29434] kmem_cache_alloc_noprof+0x50/0x310 [ 658.744036][T29434] ? skb_clone+0x151/0x1f0 [ 658.744056][T29434] skb_clone+0x151/0x1f0 [ 658.744129][T29434] __netlink_deliver_tap+0x2c9/0x500 [ 658.744167][T29434] netlink_unicast+0x64c/0x670 [ 658.744206][T29434] netlink_sendmsg+0x58b/0x6b0 [ 658.744229][T29434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.744328][T29434] __sock_sendmsg+0x142/0x180 [ 658.744354][T29434] ____sys_sendmsg+0x31e/0x4e0 [ 658.744463][T29434] ___sys_sendmsg+0x17b/0x1d0 [ 658.744545][T29434] __x64_sys_sendmsg+0xd4/0x160 [ 658.744665][T29434] x64_sys_call+0x2999/0x2fb0 [ 658.744689][T29434] do_syscall_64+0xd2/0x200 [ 658.744741][T29434] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 658.744830][T29434] ? clear_bhb_loop+0x40/0x90 [ 658.744868][T29434] ? clear_bhb_loop+0x40/0x90 [ 658.744896][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.744951][T29434] RIP: 0033:0x7f5a7a6ae929 [ 658.744969][T29434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.744992][T29434] RSP: 002b:00007f5a78d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.745015][T29434] RAX: ffffffffffffffda RBX: 00007f5a7a8d5fa0 RCX: 00007f5a7a6ae929 [ 658.745030][T29434] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000004 [ 658.745088][T29434] RBP: 00007f5a78d17090 R08: 0000000000000000 R09: 0000000000000000 [ 658.745174][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.745189][T29434] R13: 0000000000000000 R14: 00007f5a7a8d5fa0 R15: 00007ffcca4451f8 [ 658.745212][T29434] [ 658.745267][T29434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9152'. [ 658.819966][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9154'. [ 658.980510][T29436] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9154'. [ 659.042082][T29447] FAULT_INJECTION: forcing a failure. [ 659.042082][T29447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.055466][T29447] CPU: 1 UID: 0 PID: 29447 Comm: syz.5.9153 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 659.055511][T29447] Tainted: [W]=WARN [ 659.055520][T29447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.055536][T29447] Call Trace: [ 659.055581][T29447] [ 659.055591][T29447] __dump_stack+0x1d/0x30 [ 659.055619][T29447] dump_stack_lvl+0xe8/0x140 [ 659.055644][T29447] dump_stack+0x15/0x1b [ 659.055665][T29447] should_fail_ex+0x265/0x280 [ 659.055783][T29447] should_fail+0xb/0x20 [ 659.055816][T29447] should_fail_usercopy+0x1a/0x20 [ 659.055864][T29447] _copy_to_user+0x20/0xa0 [ 659.055965][T29447] simple_read_from_buffer+0xb5/0x130 [ 659.056002][T29447] proc_fail_nth_read+0x100/0x140 [ 659.056037][T29447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.056223][T29447] vfs_read+0x1a0/0x6f0 [ 659.056308][T29447] ? percpu_counter_add_batch+0xb6/0x130 [ 659.056397][T29447] ? __rcu_read_unlock+0x4f/0x70 [ 659.056425][T29447] ? __fget_files+0x184/0x1c0 [ 659.056450][T29447] ksys_read+0xda/0x1a0 [ 659.056504][T29447] __x64_sys_read+0x40/0x50 [ 659.056536][T29447] x64_sys_call+0x2d77/0x2fb0 [ 659.056563][T29447] do_syscall_64+0xd2/0x200 [ 659.056584][T29447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 659.056691][T29447] ? clear_bhb_loop+0x40/0x90 [ 659.056792][T29447] ? clear_bhb_loop+0x40/0x90 [ 659.056818][T29447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.056839][T29447] RIP: 0033:0x7f51ab99d33c [ 659.056869][T29447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 659.056910][T29447] RSP: 002b:00007f51aa007030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.056931][T29447] RAX: ffffffffffffffda RBX: 00007f51abbc5fa0 RCX: 00007f51ab99d33c [ 659.056944][T29447] RDX: 000000000000000f RSI: 00007f51aa0070a0 RDI: 0000000000000006 [ 659.056960][T29447] RBP: 00007f51aa007090 R08: 0000000000000000 R09: 0000000000000000 [ 659.057032][T29447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.057073][T29447] R13: 0000000000000000 R14: 00007f51abbc5fa0 R15: 00007ffc66840888 [ 659.057097][T29447] [ 659.072439][T29443] syzkaller0: entered promiscuous mode [ 659.286163][T29443] syzkaller0: entered allmulticast mode [ 659.397709][T29467] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9161'. [ 660.162897][T29484] loop2: detected capacity change from 0 to 128 [ 660.173964][T29487] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9168'. [ 660.308097][T29484] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 660.321073][T29484] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 660.408369][T29457] syz.0.9160 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 660.419526][T29457] CPU: 1 UID: 0 PID: 29457 Comm: syz.0.9160 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 660.419571][T29457] Tainted: [W]=WARN [ 660.419578][T29457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.419591][T29457] Call Trace: [ 660.419597][T29457] [ 660.419603][T29457] __dump_stack+0x1d/0x30 [ 660.419625][T29457] dump_stack_lvl+0xe8/0x140 [ 660.419716][T29457] dump_stack+0x15/0x1b [ 660.419737][T29457] dump_header+0x81/0x220 [ 660.419770][T29457] oom_kill_process+0x334/0x3f0 [ 660.419849][T29457] out_of_memory+0x979/0xb80 [ 660.419887][T29457] try_charge_memcg+0x5e6/0x9e0 [ 660.419920][T29457] charge_memcg+0x51/0xc0 [ 660.419974][T29457] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 660.420049][T29457] __read_swap_cache_async+0x1df/0x350 [ 660.420095][T29457] swap_cluster_readahead+0x277/0x3e0 [ 660.420137][T29457] swapin_readahead+0xde/0x6f0 [ 660.420177][T29457] ? __filemap_get_folio+0x4f7/0x6b0 [ 660.420302][T29457] ? swap_cache_get_folio+0x77/0x200 [ 660.420334][T29457] do_swap_page+0x301/0x2430 [ 660.420359][T29457] ? css_rstat_updated+0xcd/0x5b0 [ 660.420449][T29457] ? __pfx_default_wake_function+0x10/0x10 [ 660.420477][T29457] handle_mm_fault+0x9a5/0x2be0 [ 660.420542][T29457] ? mas_walk+0xf2/0x120 [ 660.420643][T29457] do_user_addr_fault+0x636/0x1090 [ 660.420678][T29457] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 660.420711][T29457] exc_page_fault+0x62/0xa0 [ 660.420747][T29457] asm_exc_page_fault+0x26/0x30 [ 660.420806][T29457] RIP: 0033:0x7f5a7a56d9bf [ 660.420823][T29457] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 660.420873][T29457] RSP: 002b:00007ffcca445278 EFLAGS: 00010202 [ 660.420893][T29457] RAX: 000000008161e82a RBX: 00007f5a7b405720 RCX: 0000000000000000 [ 660.420909][T29457] RDX: 000000000000082a RSI: ffffffff8161e82a RDI: 0000000000000003 [ 660.420924][T29457] RBP: ffffffff8161e82a R08: 00007f5a7a8c0000 R09: 00007f5a7a8c2000 [ 660.420939][T29457] R10: 000000008161e82e R11: 0000000000000003 R12: 0000000000000003 [ 660.420953][T29457] R13: 0000000000000000 R14: ffffffff8161e140 R15: 0000000000000000 [ 660.420966][T29457] ? __x64_sys_bpf+0x10/0x50 [ 660.421000][T29457] ? bpf_sys_close+0xa/0x20 [ 660.421111][T29457] ? bpf_sys_close+0xa/0x20 [ 660.421171][T29457] [ 660.421215][T29457] memory: usage 307200kB, limit 307200kB, failcnt 7290 [ 660.665642][T29457] memory+swap: usage 244204kB, limit 9007199254740988kB, failcnt 0 [ 660.673721][T29457] kmem: usage 229052kB, limit 9007199254740988kB, failcnt 0 [ 660.681103][T29457] Memory cgroup stats for /syz0: [ 660.771113][T29494] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9172'. [ 660.794515][T29457] cache 0 [ 660.797584][T29457] rss 4096 [ 660.800626][T29457] shmem 0 [ 660.803729][T29457] mapped_file 0 [ 660.807252][T29457] dirty 0 [ 660.810290][T29457] writeback 8192 [ 660.813970][T29457] workingset_refault_anon 1931 [ 660.818888][T29457] workingset_refault_file 31 [ 660.823549][T29457] swap 167936 [ 660.826851][T29457] swapcached 49152 [ 660.830733][T29457] pgpgin 337079 [ 660.834363][T29457] pgpgout 337066 [ 660.837984][T29457] pgfault 326235 [ 660.841553][T29457] pgmajfault 468 [ 660.845440][T29457] inactive_anon 28672 [ 660.849572][T29457] active_anon 20480 [ 660.853473][T29457] inactive_file 4096 [ 660.857442][T29457] active_file 0 [ 660.860934][T29457] unevictable 0 [ 660.864490][T29457] hierarchical_memory_limit 314572800 [ 660.869880][T29457] hierarchical_memsw_limit 9223372036854771712 [ 660.876161][T29457] total_cache 0 [ 660.876190][T29496] loop5: detected capacity change from 0 to 1024 [ 660.879630][T29457] total_rss 4096 [ 660.879644][T29457] total_shmem 0 [ 660.879654][T29457] total_mapped_file 0 [ 660.897202][T29457] total_dirty 0 [ 660.900746][T29457] total_writeback 8192 [ 660.904969][T29457] total_workingset_refault_anon 1931 [ 660.910296][T29457] total_workingset_refault_file 31 [ 660.915512][T29457] total_swap 167936 [ 660.919401][T29457] total_swapcached 49152 [ 660.923736][T29457] total_pgpgin 337079 [ 660.927757][T29457] total_pgpgout 337066 [ 660.931852][T29457] total_pgfault 326235 [ 660.936118][T29457] total_pgmajfault 468 [ 660.940212][T29457] total_inactive_anon 28672 [ 660.944796][T29457] total_active_anon 20480 [ 660.949150][T29457] total_inactive_file 4096 [ 660.953648][T29457] total_active_file 0 [ 660.957652][T29457] total_unevictable 0 [ 660.961703][T29457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9160,pid=29457,uid=0 [ 660.976606][T29457] Memory cgroup out of memory: Killed process 29457 (syz.0.9160) total-vm:93884kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 660.999413][T29496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.087936][T29509] loop7: detected capacity change from 0 to 512 [ 661.109408][T21305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.151264][T29512] netlink: 'syz.0.9179': attribute type 10 has an invalid length. [ 661.161354][T29512] veth0_vlan: left promiscuous mode [ 661.165523][T29509] EXT4-fs (loop7): 1 orphan inode deleted [ 661.167139][T29512] veth0_vlan: entered promiscuous mode [ 661.179353][T29512] team0: Device veth0_vlan failed to register rx_handler [ 661.183093][ T4234] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 661.196272][ T4234] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 661.220828][T29509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.245909][T29509] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.321367][ T29] audit: type=1400 audit(1751093100.448:20385): avc: denied { read write open } for pid=29506 comm="syz.7.9176" path="/416/file1/bus" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.384189][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.390051][ T29] audit: type=1400 audit(1751093100.478:20386): avc: denied { map } for pid=29506 comm="syz.7.9176" path="/416/file1/bus" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.403221][T29525] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9181'. [ 661.415980][ T29] audit: type=1400 audit(1751093100.478:20387): avc: denied { execute } for pid=29506 comm="syz.7.9176" path="/416/file1/bus" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.486134][T29527] loop0: detected capacity change from 0 to 128 [ 661.493055][T29527] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 661.520711][T29531] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9184'. [ 661.530566][T29527] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 661.609002][T29536] loop5: detected capacity change from 0 to 512 [ 661.694303][T29536] EXT4-fs (loop5): 1 orphan inode deleted [ 661.700586][T29536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.714260][T17935] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 661.724146][T17935] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 661.729127][T29538] netlink: 'syz.7.9188': attribute type 1 has an invalid length. [ 661.743681][T29538] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9188'. [ 662.094088][T29536] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.169566][T21305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.476712][T29561] netlink: 'syz.2.9191': attribute type 10 has an invalid length. [ 662.506288][T29561] veth0_vlan: left promiscuous mode [ 662.526639][T29561] veth0_vlan: entered promiscuous mode [ 662.550562][T29561] team0: Device veth0_vlan failed to register rx_handler [ 662.583587][T29568] loop0: detected capacity change from 0 to 512 [ 662.634651][T29568] EXT4-fs (loop0): 1 orphan inode deleted [ 662.653922][ T37] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 662.663828][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 662.683503][T29568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.802833][T29568] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.835621][T29578] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9196'. [ 662.860524][T21305] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 662.871653][T21305] CPU: 1 UID: 0 PID: 21305 Comm: syz-executor Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 662.871726][T21305] Tainted: [W]=WARN [ 662.871733][T21305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.871745][T21305] Call Trace: [ 662.871753][T21305] [ 662.871763][T21305] __dump_stack+0x1d/0x30 [ 662.871811][T21305] dump_stack_lvl+0xe8/0x140 [ 662.871850][T21305] dump_stack+0x15/0x1b [ 662.871866][T21305] dump_header+0x81/0x220 [ 662.871903][T21305] oom_kill_process+0x334/0x3f0 [ 662.872026][T21305] out_of_memory+0x979/0xb80 [ 662.872061][T21305] try_charge_memcg+0x5e6/0x9e0 [ 662.872174][T21305] charge_memcg+0x51/0xc0 [ 662.872208][T21305] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 662.872324][T21305] __read_swap_cache_async+0x1df/0x350 [ 662.872376][T21305] swap_cluster_readahead+0x277/0x3e0 [ 662.872418][T21305] swapin_readahead+0xde/0x6f0 [ 662.872449][T21305] ? __filemap_get_folio+0x4f7/0x6b0 [ 662.872559][T21305] ? next_uptodate_folio+0x815/0x890 [ 662.872579][T21305] ? kvm_sched_clock_read+0x11/0x20 [ 662.872713][T21305] ? swap_cache_get_folio+0x77/0x200 [ 662.872752][T21305] do_swap_page+0x301/0x2430 [ 662.872825][T21305] ? finish_task_switch+0xad/0x2b0 [ 662.872855][T21305] ? __pfx_default_wake_function+0x10/0x10 [ 662.872939][T21305] handle_mm_fault+0x9a5/0x2be0 [ 662.872969][T21305] ? mas_walk+0xf2/0x120 [ 662.873028][T21305] do_user_addr_fault+0x636/0x1090 [ 662.873138][T21305] ? fpregs_restore_userregs+0xe2/0x1d0 [ 662.873193][T21305] ? switch_fpu_return+0xe/0x20 [ 662.873333][T21305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 662.873361][T21305] exc_page_fault+0x62/0xa0 [ 662.873395][T21305] asm_exc_page_fault+0x26/0x30 [ 662.873416][T21305] RIP: 0033:0x7f51ab9d11a5 [ 662.873469][T21305] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 662.873486][T21305] RSP: 002b:00007ffc66840bc8 EFLAGS: 00010246 [ 662.873520][T21305] RAX: 0000000000000000 RBX: 00000000000005a5 RCX: 00007f51ab9d11a3 [ 662.873536][T21305] RDX: 00007ffc66840be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.873551][T21305] RBP: 00007ffc66840c4c R08: 0000000010e91751 R09: 0000000000000000 [ 662.873565][T21305] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 662.873580][T21305] R13: 00000000000927c0 R14: 00000000000a1ddb R15: 00007ffc66840ca0 [ 662.873604][T21305] [ 663.115406][T21305] memory: usage 291600kB, limit 307200kB, failcnt 1476 [ 663.122304][T21305] memory+swap: usage 276484kB, limit 9007199254740988kB, failcnt 0 [ 663.130268][T21305] kmem: usage 257036kB, limit 9007199254740988kB, failcnt 0 [ 663.137603][T21305] Memory cgroup stats for /syz5: [ 663.194288][T21305] cache 0 [ 663.202328][T21305] rss 0 [ 663.205161][T21305] shmem 0 [ 663.208125][T21305] mapped_file 0 [ 663.211690][T21305] dirty 0 [ 663.214722][T21305] writeback 0 [ 663.218029][T21305] workingset_refault_anon 543 [ 663.222722][T21305] workingset_refault_file 757 [ 663.227473][T21305] swap 229376 [ 663.230831][T21305] swapcached 0 [ 663.234268][T21305] pgpgin 627153 [ 663.237759][T21305] pgpgout 627152 [ 663.241382][T21305] pgfault 638549 [ 663.244985][T21305] pgmajfault 300 [ 663.248555][T21305] inactive_anon 0 [ 663.252236][T21305] active_anon 0 [ 663.255754][T21305] inactive_file 0 [ 663.259449][T21305] active_file 4096 [ 663.263229][T21305] unevictable 0 [ 663.266770][T21305] hierarchical_memory_limit 314572800 [ 663.272160][T21305] hierarchical_memsw_limit 9223372036854771712 [ 663.278414][T21305] total_cache 0 [ 663.281892][T21305] total_rss 0 [ 663.285252][T21305] total_shmem 0 [ 663.288737][T21305] total_mapped_file 0 [ 663.292737][T21305] total_dirty 0 [ 663.296266][T21305] total_writeback 0 [ 663.300157][T21305] total_workingset_refault_anon 543 [ 663.305412][T21305] total_workingset_refault_file 757 [ 663.310667][T21305] total_swap 229376 [ 663.314536][T21305] total_swapcached 0 [ 663.318522][T21305] total_pgpgin 627153 [ 663.322518][T21305] total_pgpgout 627152 [ 663.326692][T21305] total_pgfault 638549 [ 663.330768][T21305] total_pgmajfault 300 [ 663.334920][T21305] total_inactive_anon 0 [ 663.339087][T21305] total_active_anon 0 [ 663.343100][T21305] total_inactive_file 0 [ 663.347289][T21305] total_active_file 4096 [ 663.351566][T21305] total_unevictable 0 [ 663.355693][T21305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9189,pid=29550,uid=0 [ 663.370521][T21305] Memory cgroup out of memory: Killed process 29550 (syz.5.9189) total-vm:93884kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 663.389350][T28661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.443099][T29582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9197'. [ 663.528573][T29586] 9pnet_fd: p9_fd_create_tcp (29586): problem connecting socket to 127.0.0.1 [ 663.538146][T29586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9199'. [ 663.665416][T29602] netlink: 'syz.6.9207': attribute type 10 has an invalid length. [ 663.673342][T29602] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9207'. [ 663.704526][T29605] loop2: detected capacity change from 0 to 128 [ 663.723558][T29605] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 663.766854][T29605] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 663.844985][T29608] syzkaller0: entered promiscuous mode [ 663.850578][T29608] syzkaller0: entered allmulticast mode [ 663.930529][T29615] netlink: 830 bytes leftover after parsing attributes in process `syz.6.9211'. [ 664.512943][T29631] 9pnet_fd: p9_fd_create_tcp (29631): problem connecting socket to 127.0.0.1 [ 664.522362][T29631] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9215'. [ 665.319896][T29650] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9223'. [ 665.449054][ T29] audit: type=1400 audit(1751093104.578:20388): avc: denied { connect } for pid=29653 comm="syz.0.9225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 665.582788][T29658] 9pnet_fd: p9_fd_create_tcp (29658): problem connecting socket to 127.0.0.1 [ 665.720388][T29667] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 665.855184][ T29] audit: type=1326 audit(1751093104.918:20389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.879377][ T29] audit: type=1326 audit(1751093104.918:20390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.903011][ T29] audit: type=1326 audit(1751093104.918:20391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.926678][ T29] audit: type=1326 audit(1751093104.928:20392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.950320][ T29] audit: type=1326 audit(1751093104.928:20393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.973903][ T29] audit: type=1326 audit(1751093104.928:20394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 665.997603][ T29] audit: type=1326 audit(1751093104.928:20395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 666.021259][ T29] audit: type=1326 audit(1751093104.928:20396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 666.044924][ T29] audit: type=1326 audit(1751093104.928:20397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29665 comm="syz.7.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a92e929 code=0x7ffc0000 [ 666.225127][T29692] 9pnet_fd: p9_fd_create_tcp (29692): problem connecting socket to 127.0.0.1 [ 666.702140][T29711] netlink: 'syz.5.9245': attribute type 10 has an invalid length. [ 666.801071][T29711] veth0_vlan: left promiscuous mode [ 666.806980][T29711] veth0_vlan: entered promiscuous mode [ 666.814980][T29711] team0: Device veth0_vlan failed to register rx_handler [ 666.826751][T29716] __nla_validate_parse: 7 callbacks suppressed [ 666.826769][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9246'. [ 666.875945][T29716] loop7: detected capacity change from 0 to 1024 [ 666.881301][T29719] loop5: detected capacity change from 0 to 512 [ 666.900496][T29720] netlink: 830 bytes leftover after parsing attributes in process `syz.6.9247'. [ 666.927564][T29719] EXT4-fs (loop5): 1 orphan inode deleted [ 666.936041][T29719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.953294][T28739] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 666.976008][T29716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.998198][T29719] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.156274][T21305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.169710][T29732] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.9246: Allocating blocks 385-513 which overlap fs metadata [ 667.209273][T29697] syz.2.9241 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 667.220488][T29697] CPU: 0 UID: 0 PID: 29697 Comm: syz.2.9241 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 667.220529][T29697] Tainted: [W]=WARN [ 667.220537][T29697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.220580][T29697] Call Trace: [ 667.220588][T29697] [ 667.220596][T29697] __dump_stack+0x1d/0x30 [ 667.220617][T29697] dump_stack_lvl+0xe8/0x140 [ 667.220638][T29697] dump_stack+0x15/0x1b [ 667.220660][T29697] dump_header+0x81/0x220 [ 667.220766][T29697] oom_kill_process+0x334/0x3f0 [ 667.220792][T29737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9253'. [ 667.220815][T29697] out_of_memory+0x979/0xb80 [ 667.220855][T29697] try_charge_memcg+0x5e6/0x9e0 [ 667.220898][T29697] charge_memcg+0x51/0xc0 [ 667.221025][T29697] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 667.221078][T29697] __read_swap_cache_async+0x1df/0x350 [ 667.221126][T29697] swap_cluster_readahead+0x376/0x3e0 [ 667.221229][T29697] swapin_readahead+0xde/0x6f0 [ 667.221285][T29697] ? __filemap_get_folio+0x4f7/0x6b0 [ 667.221335][T29697] ? __tcp_transmit_skb+0x139f/0x1a60 [ 667.221366][T29697] ? swap_cache_get_folio+0x77/0x200 [ 667.221457][T29697] do_swap_page+0x301/0x2430 [ 667.221526][T29697] ? __pfx_default_wake_function+0x10/0x10 [ 667.221559][T29697] handle_mm_fault+0x9a5/0x2be0 [ 667.221591][T29697] ? mas_walk+0xf2/0x120 [ 667.221697][T29697] do_user_addr_fault+0x636/0x1090 [ 667.221742][T29697] ? fpregs_restore_userregs+0xe2/0x1d0 [ 667.221783][T29697] ? arch_exit_work+0x30/0x40 [ 667.221825][T29697] exc_page_fault+0x62/0xa0 [ 667.221944][T29697] asm_exc_page_fault+0x26/0x30 [ 667.221973][T29697] RIP: 0033:0x7f79041fd9f0 [ 667.221994][T29697] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 667.222019][T29697] RSP: 002b:00007ffe95702e48 EFLAGS: 00010246 [ 667.222040][T29697] RAX: 00000000816a6575 RBX: 00007f7905095720 RCX: ffffffff816a6575 [ 667.222057][T29697] RDX: 0000000000000575 RSI: ffffffff816a6575 RDI: 000000000000000d [ 667.222113][T29697] RBP: ffffffff816a6575 R08: 00007f7904550000 R09: 00007f7904552000 [ 667.222159][T29697] R10: 00000000816a6579 R11: 000000000000000d R12: 000000000000000d [ 667.222175][T29697] R13: 0000000000000000 R14: ffffffff816a680e R15: 0000000000047318 [ 667.222193][T29697] ? htab_map_alloc+0x3ce/0x6d0 [ 667.222223][T29697] ? htab_map_alloc+0x135/0x6d0 [ 667.222326][T29697] ? htab_map_alloc+0x135/0x6d0 [ 667.222358][T29697] ? htab_map_alloc+0x135/0x6d0 [ 667.222471][T29697] [ 667.222480][T29697] memory: usage 307200kB, limit 307200kB, failcnt 10811 [ 667.483861][T29697] memory+swap: usage 22424kB, limit 9007199254740988kB, failcnt 0 [ 667.491683][T29697] kmem: usage 22112kB, limit 9007199254740988kB, failcnt 0 [ 667.499012][T29697] Memory cgroup stats for /syz2: [ 667.500059][T29697] cache 0 [ 667.508020][T29697] rss 24576 [ 667.511219][T29697] shmem 0 [ 667.514250][T29697] mapped_file 0 [ 667.517728][T29697] dirty 0 [ 667.520685][T29697] writeback 0 [ 667.524093][T29697] workingset_refault_anon 509 [ 667.528798][T29697] workingset_refault_file 1474 [ 667.533687][T29697] swap 188416 [ 667.536992][T29697] swapcached 24576 [ 667.540717][T29697] pgpgin 542351 [ 667.544249][T29697] pgpgout 542342 [ 667.547819][T29697] pgfault 426922 [ 667.551412][T29697] pgmajfault 319 [ 667.555043][T29697] inactive_anon 0 [ 667.558762][T29697] active_anon 24576 [ 667.562700][T29697] inactive_file 0 [ 667.566518][T29697] active_file 0 [ 667.569979][T29697] unevictable 0 [ 667.573465][T29697] hierarchical_memory_limit 314572800 [ 667.578841][T29697] hierarchical_memsw_limit 9223372036854771712 [ 667.585064][T29697] total_cache 0 [ 667.588547][T29697] total_rss 24576 [ 667.592181][T29697] total_shmem 0 [ 667.595659][T29697] total_mapped_file 0 [ 667.599643][T29697] total_dirty 0 [ 667.603160][T29697] total_writeback 0 [ 667.607004][T29697] total_workingset_refault_anon 509 [ 667.612249][T29697] total_workingset_refault_file 1474 [ 667.618165][T29697] total_swap 188416 [ 667.621974][T29697] total_swapcached 24576 [ 667.626238][T29697] total_pgpgin 542351 [ 667.630303][T29697] total_pgpgout 542342 [ 667.634417][T29697] total_pgfault 426922 [ 667.638485][T29697] total_pgmajfault 319 [ 667.642554][T29697] total_inactive_anon 0 [ 667.646798][T29697] total_active_anon 24576 [ 667.651193][T29697] total_inactive_file 0 [ 667.652302][T29714] EXT4-fs (loop7): pa ffff888106e85380: logic 16, phys. 129, len 24 [ 667.655381][T29697] total_active_file 0 [ 667.655394][T29697] total_unevictable 0 [ 667.655405][T29697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg= [ 667.663490][T29714] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, [ 667.667549][T29697] /syz2 [ 667.671592][T29714] free 0, pa_free 8 [ 667.696703][T29697] ,task_memcg=/syz2,task=syz.2.9241,pid=29697,uid=0 [ 667.703469][T29697] Memory cgroup out of memory: Killed process 29697 (syz.2.9241) total-vm:93884kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 667.727535][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.775072][T29745] loop2: detected capacity change from 0 to 128 [ 667.782269][T29745] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 667.795795][T29745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 667.796316][T29750] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 667.969802][T29763] netlink: 830 bytes leftover after parsing attributes in process `syz.7.9261'. [ 667.989847][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9264'. [ 668.001344][T29765] tmpfs: Bad value for 'huge' [ 668.190045][T29780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9269'. [ 668.272364][T29788] loop2: detected capacity change from 0 to 256 [ 668.593602][T29801] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9275'. [ 668.760154][T29806] loop0: detected capacity change from 0 to 512 [ 668.811458][T29806] EXT4-fs (loop0): 1 orphan inode deleted [ 668.827543][T28739] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 668.886843][T29806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.933293][T29806] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.936925][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9281'. [ 668.952615][T29815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9281'. [ 669.005021][T28661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.047059][T29817] netlink: 'syz.5.9283': attribute type 10 has an invalid length. [ 669.054997][T29817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9283'. [ 669.104718][T29819] loop0: detected capacity change from 0 to 256 [ 669.238490][T29827] netlink: 'syz.5.9287': attribute type 10 has an invalid length. [ 669.246943][T29827] veth0_vlan: left promiscuous mode [ 669.263250][T29827] veth0_vlan: entered promiscuous mode [ 669.273584][T29827] team0: Device veth0_vlan failed to register rx_handler [ 669.433648][T29847] netlink: 'syz.5.9294': attribute type 10 has an invalid length. [ 669.520141][T29855] loop5: detected capacity change from 0 to 1024 [ 669.546758][T29855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.695451][T29871] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.9300: Allocating blocks 385-513 which overlap fs metadata [ 669.823386][T29874] netlink: 'syz.6.9303': attribute type 10 has an invalid length. [ 669.865185][T29874] veth0_vlan: left promiscuous mode [ 669.878987][T29874] veth0_vlan: entered promiscuous mode [ 669.897198][T29874] team0: Device veth0_vlan failed to register rx_handler [ 669.987984][T29883] loop0: detected capacity change from 0 to 512 [ 669.995486][T29883] journal_path: Non-blockdev passed as './file0/../file0' [ 670.002717][T29883] EXT4-fs: error: could not find journal device path [ 670.165268][T29838] 9pnet_fd: p9_fd_create_tcp (29838): problem connecting socket to 127.0.0.1 [ 670.222352][T29891] netlink: 'syz.0.9311': attribute type 10 has an invalid length. [ 670.342212][T29854] EXT4-fs (loop5): pa ffff888106e85380: logic 16, phys. 129, len 24 [ 670.350657][T29854] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 670.447285][T21305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.475302][T29917] loop2: detected capacity change from 0 to 128 [ 670.486908][T29917] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 670.526357][T29917] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 670.536964][T29918] loop7: detected capacity change from 0 to 128 [ 670.554460][T29922] 9pnet_fd: p9_fd_create_tcp (29922): problem connecting socket to 127.0.0.1 [ 670.567687][T29918] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 670.607368][T29924] netlink: 'syz.5.9324': attribute type 10 has an invalid length. [ 670.613958][T29918] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 670.707289][T29928] loop5: detected capacity change from 0 to 512 [ 670.735366][T29928] EXT4-fs (loop5): 1 orphan inode deleted [ 670.744091][T29928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.757053][ T555] __quota_error: 87 callbacks suppressed [ 670.757092][ T555] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 670.772551][ T555] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 670.816029][T29928] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.844247][T21305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.047491][T29940] loop0: detected capacity change from 0 to 256 [ 671.811107][T29958] 9pnet_fd: p9_fd_create_tcp (29958): problem connecting socket to 127.0.0.1 [ 671.856164][T29958] __nla_validate_parse: 19 callbacks suppressed [ 671.856190][T29958] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9334'. [ 672.006485][T29960] loop2: detected capacity change from 0 to 128 [ 672.116301][T29964] bio_check_eod: 3613 callbacks suppressed [ 672.116318][T29964] syz.2.9335: attempt to access beyond end of device [ 672.116318][T29964] loop2: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 672.164891][T29964] syz.2.9335: attempt to access beyond end of device [ 672.164891][T29964] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 672.187993][T29969] netlink: 'syz.5.9339': attribute type 10 has an invalid length. [ 672.204881][T29965] syzkaller0: entered promiscuous mode [ 672.210408][T29965] syzkaller0: entered allmulticast mode [ 672.233853][T29964] syz.2.9335: attempt to access beyond end of device [ 672.233853][T29964] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 672.247417][T29964] syz.2.9335: attempt to access beyond end of device [ 672.247417][T29964] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 672.261171][T29964] syz.2.9335: attempt to access beyond end of device [ 672.261171][T29964] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 672.303267][T29969] veth0_vlan: left promiscuous mode [ 672.308670][T29964] syz.2.9335: attempt to access beyond end of device [ 672.308670][T29964] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 672.310134][T29969] veth0_vlan: entered promiscuous mode [ 672.334153][T29969] team0: Device veth0_vlan failed to register rx_handler [ 672.347718][T29964] syz.2.9335: attempt to access beyond end of device [ 672.347718][T29964] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 672.373961][T29964] syz.2.9335: attempt to access beyond end of device [ 672.373961][T29964] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 672.403812][T29976] loop7: detected capacity change from 0 to 512 [ 672.416955][T29964] syz.2.9335: attempt to access beyond end of device [ 672.416955][T29964] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 672.438304][T29964] syz.2.9335: attempt to access beyond end of device [ 672.438304][T29964] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 672.464456][T29976] EXT4-fs (loop7): 1 orphan inode deleted [ 672.470676][T29976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.484082][ T37] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 672.494162][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 672.516689][T29976] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.534822][T29985] loop5: detected capacity change from 0 to 128 [ 672.563473][T29985] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 672.613574][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9343'. [ 672.622588][T29987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9343'. [ 672.653595][T29989] netlink: 'syz.2.9344': attribute type 10 has an invalid length. [ 672.661487][T29989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9344'. [ 672.672079][T23347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.682190][T29985] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.684440][T29989] dummy0: entered promiscuous mode [ 672.707029][T29989] bridge0: port 3(dummy0) entered blocking state [ 672.713507][T29989] bridge0: port 3(dummy0) entered disabled state [ 672.720169][T29989] dummy0: entered allmulticast mode [ 672.730938][T29989] bridge0: port 3(dummy0) entered blocking state [ 672.737392][T29989] bridge0: port 3(dummy0) entered forwarding state [ 672.772817][T29994] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9346'. [ 673.246325][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9350'. [ 673.255292][T30008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9350'. [ 673.824620][T30012] netlink: 'syz.6.9351': attribute type 10 has an invalid length. [ 673.832700][T30012] veth0_vlan: left promiscuous mode [ 673.843366][T30012] veth0_vlan: entered promiscuous mode [ 673.850053][T30012] team0: Device veth0_vlan failed to register rx_handler [ 674.074055][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9354'. [ 674.083107][T30019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9354'. [ 674.158481][T30024] loop0: detected capacity change from 0 to 128 [ 674.253613][T30031] netlink: 'syz.6.9358': attribute type 10 has an invalid length. [ 674.261493][T30031] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9358'. [ 674.871926][T30016] syz.5.9352 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 674.883034][T30016] CPU: 1 UID: 0 PID: 30016 Comm: syz.5.9352 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 674.883076][T30016] Tainted: [W]=WARN [ 674.883085][T30016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.883104][T30016] Call Trace: [ 674.883111][T30016] [ 674.883125][T30016] __dump_stack+0x1d/0x30 [ 674.883146][T30016] dump_stack_lvl+0xe8/0x140 [ 674.883170][T30016] dump_stack+0x15/0x1b [ 674.883192][T30016] dump_header+0x81/0x220 [ 674.883278][T30016] oom_kill_process+0x334/0x3f0 [ 674.883312][T30016] out_of_memory+0x979/0xb80 [ 674.883401][T30016] try_charge_memcg+0x5e6/0x9e0 [ 674.883431][T30016] charge_memcg+0x51/0xc0 [ 674.883473][T30016] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 674.883533][T30016] __read_swap_cache_async+0x1df/0x350 [ 674.883635][T30016] swap_cluster_readahead+0x277/0x3e0 [ 674.883679][T30016] swapin_readahead+0xde/0x6f0 [ 674.883817][T30016] ? __filemap_get_folio+0x4f7/0x6b0 [ 674.883893][T30016] ? swap_cache_get_folio+0x77/0x200 [ 674.883984][T30016] do_swap_page+0x301/0x2430 [ 674.884011][T30016] ? css_rstat_updated+0xcd/0x5b0 [ 674.884057][T30016] ? __pfx_default_wake_function+0x10/0x10 [ 674.884088][T30016] handle_mm_fault+0x9a5/0x2be0 [ 674.884148][T30016] ? mas_walk+0xf2/0x120 [ 674.884188][T30016] do_user_addr_fault+0x636/0x1090 [ 674.884230][T30016] ? fpregs_restore_userregs+0xad/0x1d0 [ 674.884270][T30016] ? switch_fpu_return+0xe/0x20 [ 674.884337][T30016] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 674.884369][T30016] exc_page_fault+0x62/0xa0 [ 674.884398][T30016] asm_exc_page_fault+0x26/0x30 [ 674.884432][T30016] RIP: 0033:0x7f51ab87538c [ 674.884449][T30016] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 674.884469][T30016] RSP: 002b:00007ffc668409f0 EFLAGS: 00010206 [ 674.884488][T30016] RAX: 0000000000000000 RBX: 00007f51abbc5fa0 RCX: 0000000000000000 [ 674.884504][T30016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555774b5808 [ 674.884521][T30016] RBP: 00007f51abbc7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 674.884612][T30016] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a4df8 [ 674.884629][T30016] R13: 00007f51abbc6160 R14: ffffffffffffffff R15: 00007ffc66840b00 [ 674.884728][T30016] [ 674.884737][T30016] memory: usage 307200kB, limit 307200kB, failcnt 1794 [ 675.124561][T30016] memory+swap: usage 228112kB, limit 9007199254740988kB, failcnt 0 [ 675.132562][T30016] kmem: usage 209536kB, limit 9007199254740988kB, failcnt 0 [ 675.140021][T30016] Memory cgroup stats for /syz5: [ 675.179297][T30016] cache 4096 [ 675.187910][T30016] rss 0 [ 675.190732][T30016] shmem 0 [ 675.193766][T30016] mapped_file 4096 [ 675.197506][T30016] dirty 0 [ 675.200491][T30016] writeback 8192 [ 675.204074][T30016] workingset_refault_anon 702 [ 675.208856][T30016] workingset_refault_file 760 [ 675.213673][T30016] swap 217088 [ 675.216983][T30016] swapcached 12288 [ 675.220723][T30016] pgpgin 629255 [ 675.224230][T30016] pgpgout 629250 [ 675.227800][T30016] pgfault 642706 [ 675.231388][T30016] pgmajfault 377 [ 675.234987][T30016] inactive_anon 8192 [ 675.238905][T30016] active_anon 4096 [ 675.242688][T30016] inactive_file 0 [ 675.246417][T30016] active_file 8192 [ 675.250176][T30016] unevictable 0 [ 675.253807][T30016] hierarchical_memory_limit 314572800 [ 675.259207][T30016] hierarchical_memsw_limit 9223372036854771712 [ 675.265463][T30016] total_cache 4096 [ 675.269201][T30016] total_rss 0 [ 675.272502][T30016] total_shmem 0 [ 675.276102][T30016] total_mapped_file 4096 [ 675.280362][T30016] total_dirty 0 [ 675.283866][T30016] total_writeback 8192 [ 675.287955][T30016] total_workingset_refault_anon 702 [ 675.293266][T30016] total_workingset_refault_file 760 [ 675.298519][T30016] total_swap 217088 [ 675.302362][T30016] total_swapcached 12288 [ 675.306674][T30016] total_pgpgin 629255 [ 675.310753][T30016] total_pgpgout 629250 [ 675.314860][T30016] total_pgfault 642706 [ 675.318959][T30016] total_pgmajfault 377 [ 675.323067][T30016] total_inactive_anon 8192 [ 675.327513][T30016] total_active_anon 4096 [ 675.331843][T30016] total_inactive_file 0 [ 675.336069][T30016] total_active_file 8192 [ 675.340340][T30016] total_unevictable 0 [ 675.344350][T30016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9352,pid=30016,uid=0 [ 675.359223][T30016] Memory cgroup out of memory: Killed process 30016 (syz.5.9352) total-vm:95932kB, anon-rss:936kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 675.789476][T30064] netlink: 'syz.5.9369': attribute type 10 has an invalid length. [ 675.827079][T30064] veth0_vlan: left promiscuous mode [ 675.855341][T30064] veth0_vlan: entered promiscuous mode [ 675.898821][T30064] team0: Device veth0_vlan failed to register rx_handler [ 676.058984][T30047] syz.6.9364 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 676.073215][T30047] CPU: 1 UID: 0 PID: 30047 Comm: syz.6.9364 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 676.073254][T30047] Tainted: [W]=WARN [ 676.073261][T30047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 676.073351][T30047] Call Trace: [ 676.073360][T30047] [ 676.073369][T30047] __dump_stack+0x1d/0x30 [ 676.073408][T30047] dump_stack_lvl+0xe8/0x140 [ 676.073491][T30047] dump_stack+0x15/0x1b [ 676.073513][T30047] dump_header+0x81/0x220 [ 676.073547][T30047] oom_kill_process+0x334/0x3f0 [ 676.073583][T30047] out_of_memory+0x979/0xb80 [ 676.073690][T30047] try_charge_memcg+0x5e6/0x9e0 [ 676.073785][T30047] obj_cgroup_charge_pages+0xa6/0x150 [ 676.073826][T30047] __memcg_kmem_charge_page+0x9f/0x170 [ 676.073859][T30047] __alloc_frozen_pages_noprof+0x188/0x360 [ 676.073901][T30047] alloc_pages_mpol+0xb3/0x250 [ 676.073972][T30047] alloc_pages_noprof+0x90/0x130 [ 676.074012][T30047] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 676.074069][T30047] __kvmalloc_node_noprof+0x30f/0x4e0 [ 676.074168][T30047] ? ip_set_alloc+0x1f/0x30 [ 676.074202][T30047] ? ip_set_alloc+0x1f/0x30 [ 676.074229][T30047] ? hash_netiface_create+0x21b/0x740 [ 676.074304][T30047] ? __kmalloc_cache_noprof+0x189/0x320 [ 676.074334][T30047] ip_set_alloc+0x1f/0x30 [ 676.074364][T30047] hash_netiface_create+0x282/0x740 [ 676.074417][T30047] ? __pfx_hash_netiface_create+0x10/0x10 [ 676.074451][T30047] ip_set_create+0x3c9/0x960 [ 676.074507][T30047] ? __nla_parse+0x40/0x60 [ 676.074533][T30047] nfnetlink_rcv_msg+0x4c6/0x590 [ 676.074643][T30047] ? should_fail_ex+0x30/0x280 [ 676.074700][T30047] ? selinux_capable+0x1f9/0x270 [ 676.074742][T30047] netlink_rcv_skb+0x120/0x220 [ 676.074839][T30047] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 676.074879][T30047] nfnetlink_rcv+0x16b/0x1690 [ 676.074912][T30047] ? __kfree_skb+0x109/0x150 [ 676.074965][T30047] ? nlmon_xmit+0x4f/0x60 [ 676.075070][T30047] ? consume_skb+0x49/0x150 [ 676.075101][T30047] ? nlmon_xmit+0x4f/0x60 [ 676.075128][T30047] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 676.075214][T30047] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 676.075308][T30047] ? __dev_queue_xmit+0x182/0x1fb0 [ 676.075341][T30047] ? __rcu_read_lock+0x37/0x50 [ 676.075368][T30047] ? alloc_pages_nolock_noprof+0xd3/0x1d0 [ 676.075404][T30047] ? ref_tracker_free+0x37d/0x3e0 [ 676.075446][T30047] ? __netlink_deliver_tap+0x4dc/0x500 [ 676.075484][T30047] netlink_unicast+0x5a1/0x670 [ 676.075596][T30047] netlink_sendmsg+0x58b/0x6b0 [ 676.075647][T30047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.075667][T30047] __sock_sendmsg+0x142/0x180 [ 676.075694][T30047] ____sys_sendmsg+0x31e/0x4e0 [ 676.075732][T30047] ___sys_sendmsg+0x17b/0x1d0 [ 676.075801][T30047] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 676.075843][T30047] __x64_sys_sendmsg+0xd4/0x160 [ 676.075894][T30047] x64_sys_call+0x2999/0x2fb0 [ 676.075917][T30047] do_syscall_64+0xd2/0x200 [ 676.075936][T30047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 676.076031][T30047] ? clear_bhb_loop+0x40/0x90 [ 676.076106][T30047] ? clear_bhb_loop+0x40/0x90 [ 676.076209][T30047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.076237][T30047] RIP: 0033:0x7fe5c64de929 [ 676.076257][T30047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.076277][T30047] RSP: 002b:00007fe5c4b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.076295][T30047] RAX: ffffffffffffffda RBX: 00007fe5c6705fa0 RCX: 00007fe5c64de929 [ 676.076308][T30047] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 676.076380][T30047] RBP: 00007fe5c6560b39 R08: 0000000000000000 R09: 0000000000000000 [ 676.076396][T30047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.076411][T30047] R13: 0000000000000000 R14: 00007fe5c6705fa0 R15: 00007ffc7f87c0c8 [ 676.076432][T30047] [ 676.076441][T30047] memory: usage 307200kB, limit 307200kB, failcnt 11258 [ 676.464085][T30047] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 676.472025][T30047] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 676.479449][T30047] Memory cgroup stats for /syz6: [ 676.479635][T30047] cache 0 [ 676.487606][T30047] rss 0 [ 676.490400][T30047] shmem 0 [ 676.493420][T30047] mapped_file 0 [ 676.496951][T30047] dirty 0 [ 676.499961][T30047] writeback 0 [ 676.503320][T30047] workingset_refault_anon 8248 [ 676.508115][T30047] workingset_refault_file 425 [ 676.512811][T30047] swap 200704 [ 676.516191][T30047] swapcached 4096 [ 676.519902][T30047] pgpgin 959368 [ 676.523429][T30047] pgpgout 959367 [ 676.526986][T30047] pgfault 832549 [ 676.530634][T30047] pgmajfault 1278 [ 676.534371][T30047] inactive_anon 0 [ 676.538081][T30047] active_anon 4096 [ 676.542257][T30047] inactive_file 0 [ 676.546008][T30047] active_file 0 [ 676.549486][T30047] unevictable 0 [ 676.552998][T30047] hierarchical_memory_limit 314572800 [ 676.558513][T30047] hierarchical_memsw_limit 9223372036854771712 [ 676.564890][T30047] total_cache 0 [ 676.568386][T30047] total_rss 0 [ 676.571686][T30047] total_shmem 0 [ 676.575190][T30047] total_mapped_file 0 [ 676.579205][T30047] total_dirty 0 [ 676.582796][T30047] total_writeback 0 [ 676.586713][T30047] total_workingset_refault_anon 8248 [ 676.592060][T30047] total_workingset_refault_file 425 [ 676.597299][T30047] total_swap 200704 [ 676.601129][T30047] total_swapcached 4096 [ 676.605361][T30047] total_pgpgin 959368 [ 676.609360][T30047] total_pgpgout 959367 [ 676.613505][T30047] total_pgfault 832555 [ 676.617613][T30047] total_pgmajfault 1278 [ 676.621873][T30047] total_inactive_anon 0 [ 676.626065][T30047] total_active_anon 4096 [ 676.630399][T30047] total_inactive_file 0 [ 676.634828][T30047] total_active_file 0 [ 676.638830][T30047] total_unevictable 0 [ 676.642842][T30047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9364,pid=30046,uid=0 [ 676.657728][T30047] Memory cgroup out of memory: Killed process 30046 (syz.6.9364) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 676.851133][T30083] loop0: detected capacity change from 0 to 128 [ 676.857988][T30083] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 676.908541][T30083] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 676.927806][T30089] loop7: detected capacity change from 0 to 256 [ 676.934865][T30087] netlink: 'syz.5.9377': attribute type 10 has an invalid length. [ 676.942731][T30087] __nla_validate_parse: 4 callbacks suppressed [ 676.942743][T30087] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9377'. [ 677.015956][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9379'. [ 677.025111][T30093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9379'. [ 677.396933][T30109] loop2: detected capacity change from 0 to 128 [ 677.464133][T30110] bio_check_eod: 14711 callbacks suppressed [ 677.464153][T30110] syz.2.9386: attempt to access beyond end of device [ 677.464153][T30110] loop2: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 677.508409][T30110] syz.2.9386: attempt to access beyond end of device [ 677.508409][T30110] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 677.527176][T30110] syz.2.9386: attempt to access beyond end of device [ 677.527176][T30110] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 677.583031][T30110] syz.2.9386: attempt to access beyond end of device [ 677.583031][T30110] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 677.609670][T30110] syz.2.9386: attempt to access beyond end of device [ 677.609670][T30110] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 677.641727][T30110] syz.2.9386: attempt to access beyond end of device [ 677.641727][T30110] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 677.670603][T30110] syz.2.9386: attempt to access beyond end of device [ 677.670603][T30110] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 677.699400][T30110] syz.2.9386: attempt to access beyond end of device [ 677.699400][T30110] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 677.729508][T30110] syz.2.9386: attempt to access beyond end of device [ 677.729508][T30110] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 677.749609][T30114] loop5: detected capacity change from 0 to 128 [ 677.758014][T30110] syz.2.9386: attempt to access beyond end of device [ 677.758014][T30110] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 677.764567][T30114] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 677.823046][T30114] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 677.871730][T30118] netlink: 'syz.0.9389': attribute type 10 has an invalid length. [ 677.883576][T30118] veth0_vlan: left promiscuous mode [ 677.897107][T30120] netlink: 'syz.2.9390': attribute type 10 has an invalid length. [ 677.905064][T30120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9390'. [ 677.924546][T30118] veth0_vlan: entered promiscuous mode [ 677.940326][T30118] team0: Device veth0_vlan failed to register rx_handler [ 678.096873][T30100] syz.6.9384 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 678.107933][T30100] CPU: 0 UID: 0 PID: 30100 Comm: syz.6.9384 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 678.107971][T30100] Tainted: [W]=WARN [ 678.107979][T30100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 678.107994][T30100] Call Trace: [ 678.108001][T30100] [ 678.108061][T30100] __dump_stack+0x1d/0x30 [ 678.108085][T30100] dump_stack_lvl+0xe8/0x140 [ 678.108105][T30100] dump_stack+0x15/0x1b [ 678.108121][T30100] dump_header+0x81/0x220 [ 678.108155][T30100] oom_kill_process+0x334/0x3f0 [ 678.108210][T30100] out_of_memory+0x979/0xb80 [ 678.108243][T30100] try_charge_memcg+0x5e6/0x9e0 [ 678.108279][T30100] charge_memcg+0x51/0xc0 [ 678.108327][T30100] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 678.108363][T30100] __read_swap_cache_async+0x1df/0x350 [ 678.108420][T30100] swap_cluster_readahead+0x376/0x3e0 [ 678.108458][T30100] swapin_readahead+0xde/0x6f0 [ 678.108490][T30100] ? __filemap_get_folio+0x4f7/0x6b0 [ 678.108553][T30100] ? swap_cache_get_folio+0x77/0x200 [ 678.108586][T30100] do_swap_page+0x301/0x2430 [ 678.108606][T30100] ? __set_next_task_fair+0x5b/0x150 [ 678.108627][T30100] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 678.108682][T30100] ? finish_task_switch+0xad/0x2b0 [ 678.108711][T30100] ? __pfx_default_wake_function+0x10/0x10 [ 678.108784][T30100] handle_mm_fault+0x9a5/0x2be0 [ 678.108809][T30100] ? mas_walk+0xf2/0x120 [ 678.108852][T30100] do_user_addr_fault+0x636/0x1090 [ 678.108896][T30100] exc_page_fault+0x62/0xa0 [ 678.108924][T30100] asm_exc_page_fault+0x26/0x30 [ 678.108944][T30100] RIP: 0033:0x7fe5c639d9bf [ 678.108961][T30100] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 678.108979][T30100] RSP: 002b:00007ffc7f87c148 EFLAGS: 00010202 [ 678.108995][T30100] RAX: 000000008185c11f RBX: 00007fe5c7235720 RCX: 000000000000135d [ 678.109017][T30100] RDX: 000000000000011f RSI: ffffffff8185c11f RDI: 0000000000000004 [ 678.109032][T30100] RBP: ffffffff8185c11f R08: 00007fe5c66f0000 R09: 00007fe5c66f2000 [ 678.109048][T30100] R10: 000000008185c123 R11: 0000000000000004 R12: 0000000000000004 [ 678.109074][T30100] R13: 0000000000000000 R14: ffffffff8185c125 R15: 000000000000135d [ 678.109106][T30100] ? __vmalloc_node_range_noprof+0x735/0xe00 [ 678.109145][T30100] ? __vmalloc_node_range_noprof+0x72f/0xe00 [ 678.109262][T30100] ? __vmalloc_node_range_noprof+0x72f/0xe00 [ 678.109337][T30100] [ 678.109344][T30100] memory: usage 307200kB, limit 307200kB, failcnt 11368 [ 678.363223][T30100] memory+swap: usage 299616kB, limit 9007199254740988kB, failcnt 0 [ 678.371146][T30100] kmem: usage 294284kB, limit 9007199254740988kB, failcnt 0 [ 678.378480][T30100] Memory cgroup stats for /syz6: [ 678.385409][T30100] cache 0 [ 678.393546][T30100] rss 0 [ 678.396498][T30100] shmem 0 [ 678.399458][T30100] mapped_file 0 [ 678.402961][T30100] dirty 0 [ 678.405945][T30100] writeback 0 [ 678.409268][T30100] workingset_refault_anon 8266 [ 678.414237][T30100] workingset_refault_file 425 [ 678.418929][T30100] swap 221184 [ 678.422225][T30100] swapcached 0 [ 678.425631][T30100] pgpgin 959646 [ 678.429101][T30100] pgpgout 959646 [ 678.432657][T30100] pgfault 833005 [ 678.436316][T30100] pgmajfault 1289 [ 678.440021][T30100] inactive_anon 0 [ 678.443747][T30100] active_anon 0 [ 678.447223][T30100] inactive_file 0 [ 678.450871][T30100] active_file 0 [ 678.454431][T30100] unevictable 0 [ 678.457921][T30100] hierarchical_memory_limit 314572800 [ 678.463358][T30100] hierarchical_memsw_limit 9223372036854771712 [ 678.469538][T30100] total_cache 0 [ 678.473122][T30100] total_rss 0 [ 678.476431][T30100] total_shmem 0 [ 678.479967][T30100] total_mapped_file 0 [ 678.484048][T30100] total_dirty 0 [ 678.487591][T30100] total_writeback 0 [ 678.491424][T30100] total_workingset_refault_anon 8266 [ 678.496757][T30100] total_workingset_refault_file 425 [ 678.501988][T30100] total_swap 221184 [ 678.505851][T30100] total_swapcached 0 [ 678.509778][T30100] total_pgpgin 959646 [ 678.513822][T30100] total_pgpgout 959646 [ 678.518100][T30100] total_pgfault 833011 [ 678.522261][T30100] total_pgmajfault 1289 [ 678.526446][T30100] total_inactive_anon 0 [ 678.530669][T30100] total_active_anon 0 [ 678.534739][T30100] total_inactive_file 0 [ 678.538934][T30100] total_active_file 0 [ 678.542703][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9394'. [ 678.542956][T30100] total_unevictable 0 [ 678.542968][T30100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 678.551850][T30130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9394'. [ 678.555857][T30100] ,cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9384,pid=30100,uid=0 [ 678.582135][T30100] Memory cgroup out of memory: Killed process 30100 (syz.6.9384) total-vm:93884kB, anon-rss:932kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 678.712192][T30139] syzkaller0: entered promiscuous mode [ 678.718040][T30139] syzkaller0: entered allmulticast mode [ 678.772134][T30141] loop7: detected capacity change from 0 to 1024 [ 678.784574][T30141] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 678.795543][T30141] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 678.852072][T30141] JBD2: no valid journal superblock found [ 678.857920][T30141] EXT4-fs (loop7): Could not load journal inode [ 679.054734][T30147] loop5: detected capacity change from 0 to 128 [ 679.492169][T30158] netlink: 'syz.0.9405': attribute type 10 has an invalid length. [ 679.528212][T30158] veth0_vlan: left promiscuous mode [ 679.546933][T30158] veth0_vlan: entered promiscuous mode [ 679.561080][T30158] team0: Device veth0_vlan failed to register rx_handler [ 679.563125][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9407'. [ 679.577200][T30164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9407'. [ 679.789449][T30182] loop0: detected capacity change from 0 to 128 [ 679.806626][T30182] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.870082][T30187] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9414'. [ 679.879903][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9417'. [ 679.885286][T30182] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 680.042651][T30190] syzkaller0: entered promiscuous mode [ 680.048204][T30190] syzkaller0: entered allmulticast mode [ 680.131302][T30195] syzkaller0: entered promiscuous mode [ 680.136864][T30195] syzkaller0: entered allmulticast mode [ 680.222989][ T29] audit: type=1400 audit(1751093348.314:20483): avc: denied { append } for pid=30198 comm="syz.7.9420" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.247223][T30200] ªªªªªª: renamed from vlan0 [ 680.378587][T30204] netlink: 'syz.2.9421': attribute type 8 has an invalid length. [ 680.435199][T30204] loop2: detected capacity change from 0 to 1024 [ 680.502811][T30204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.624348][T30220] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.9421: Allocating blocks 385-513 which overlap fs metadata [ 680.697246][T30224] loop7: detected capacity change from 0 to 128 [ 680.766886][ T29] audit: type=1326 audit(1751093348.894:20484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.790573][ T29] audit: type=1326 audit(1751093348.894:20485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.814414][ T29] audit: type=1326 audit(1751093348.894:20486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.839750][ T29] audit: type=1326 audit(1751093348.894:20487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.863375][ T29] audit: type=1326 audit(1751093348.894:20488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.887046][ T29] audit: type=1326 audit(1751093348.894:20489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51ab99d290 code=0x7ffc0000 [ 680.910687][ T29] audit: type=1326 audit(1751093348.894:20490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.934461][ T29] audit: type=1326 audit(1751093348.894:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ab99e929 code=0x7ffc0000 [ 680.958105][ T29] audit: type=1326 audit(1751093348.894:20492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.5.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51ab99d290 code=0x7ffc0000 [ 681.016324][T30232] loop0: detected capacity change from 0 to 256 [ 681.050923][T30236] netlink: 'syz.0.9434': attribute type 10 has an invalid length. [ 681.075018][T30240] 9pnet_fd: p9_fd_create_tcp (30240): problem connecting socket to 127.0.0.1 [ 681.131592][T30251] netlink: 'syz.0.9440': attribute type 10 has an invalid length. [ 681.140355][T30251] veth0_vlan: left promiscuous mode [ 681.147064][T30251] veth0_vlan: entered promiscuous mode [ 681.154539][T30251] team0: Device veth0_vlan failed to register rx_handler [ 681.179729][T30253] netlink: 'syz.5.9438': attribute type 10 has an invalid length. [ 681.197075][T30253] veth0_vlan: left promiscuous mode [ 681.204500][T30253] veth0_vlan: entered promiscuous mode [ 681.211434][T30253] team0: Device veth0_vlan failed to register rx_handler [ 681.212714][T30201] EXT4-fs (loop2): pa ffff888106dd38c0: logic 16, phys. 129, len 24 [ 681.226626][T30201] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 681.274779][T28450] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.280387][T30255] syzkaller0: entered promiscuous mode [ 681.289456][T30255] syzkaller0: entered allmulticast mode [ 681.393848][T30263] loop0: detected capacity change from 0 to 256 [ 681.466534][T30265] netlink: 'syz.0.9446': attribute type 8 has an invalid length. [ 681.500310][T30265] loop0: detected capacity change from 0 to 1024 [ 681.607952][T30277] 9pnet_fd: p9_fd_create_tcp (30277): problem connecting socket to 127.0.0.1 [ 681.768500][T30288] netlink: 'syz.2.9452': attribute type 10 has an invalid length. [ 681.783678][T30265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.809809][T30288] veth0_vlan: left promiscuous mode [ 681.846960][T30288] veth0_vlan: entered promiscuous mode [ 681.878489][T30288] team0: Device veth0_vlan failed to register rx_handler [ 681.920894][T17935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.935613][T30295] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9446: Allocating blocks 385-513 which overlap fs metadata [ 681.984489][T30256] syz.6.9443 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 681.995543][T30256] CPU: 1 UID: 0 PID: 30256 Comm: syz.6.9443 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 681.995583][T30256] Tainted: [W]=WARN [ 681.995591][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.995652][T30256] Call Trace: [ 681.995660][T30256] [ 681.995669][T30256] __dump_stack+0x1d/0x30 [ 681.995696][T30256] dump_stack_lvl+0xe8/0x140 [ 681.995719][T30256] dump_stack+0x15/0x1b [ 681.995739][T30256] dump_header+0x81/0x220 [ 681.995806][T30256] oom_kill_process+0x334/0x3f0 [ 681.995846][T30256] out_of_memory+0x979/0xb80 [ 681.995886][T30256] try_charge_memcg+0x5e6/0x9e0 [ 681.995976][T30256] charge_memcg+0x51/0xc0 [ 681.996013][T30256] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 681.996080][T30256] __read_swap_cache_async+0x1df/0x350 [ 681.996189][T30256] swap_cluster_readahead+0x277/0x3e0 [ 681.996234][T30256] swapin_readahead+0xde/0x6f0 [ 681.996349][T30256] ? __filemap_get_folio+0x4f7/0x6b0 [ 681.996386][T30256] ? swap_cache_get_folio+0x77/0x200 [ 681.996455][T30256] do_swap_page+0x301/0x2430 [ 681.996482][T30256] ? css_rstat_updated+0xcd/0x5b0 [ 681.996525][T30256] ? __pfx_default_wake_function+0x10/0x10 [ 681.996559][T30256] handle_mm_fault+0x9a5/0x2be0 [ 681.996633][T30256] ? mas_walk+0xf2/0x120 [ 681.996679][T30256] do_user_addr_fault+0x636/0x1090 [ 681.996780][T30256] ? fpregs_restore_userregs+0xad/0x1d0 [ 681.996819][T30256] ? switch_fpu_return+0xe/0x20 [ 681.996863][T30256] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 681.996942][T30256] exc_page_fault+0x62/0xa0 [ 681.996980][T30256] asm_exc_page_fault+0x26/0x30 [ 681.997042][T30256] RIP: 0033:0x7fe5c63b538c [ 681.997062][T30256] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 681.997085][T30256] RSP: 002b:00007ffc7f87c230 EFLAGS: 00010206 [ 681.997171][T30256] RAX: 0000000000000000 RBX: 00007fe5c6705fa0 RCX: 0000000000000000 [ 681.997186][T30256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559226a808 [ 681.997202][T30256] RBP: 00007fe5c6707ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 681.997217][T30256] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a6a67 [ 681.997249][T30256] R13: 00007fe5c6706080 R14: ffffffffffffffff R15: 00007ffc7f87c340 [ 681.997273][T30256] [ 681.997287][T30256] memory: usage 307200kB, limit 307200kB, failcnt 11564 [ 682.236844][T30256] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 682.244773][T30256] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 682.252087][T30256] Memory cgroup stats for /syz6: [ 682.252751][T30256] cache 0 [ 682.260717][T30256] rss 4096 [ 682.263783][T30256] shmem 0 [ 682.266763][T30256] mapped_file 0 [ 682.270252][T30256] dirty 0 [ 682.273249][T30256] writeback 12288 [ 682.276906][T30256] workingset_refault_anon 8322 [ 682.281756][T30256] workingset_refault_file 425 [ 682.286497][T30256] swap 188416 [ 682.289814][T30256] swapcached 16384 [ 682.293579][T30256] pgpgin 960051 [ 682.295105][T30264] EXT4-fs (loop0): pa ffff888106e853f0: logic 16, phys. 129, len 24 [ 682.297071][T30256] pgpgout 960047 [ 682.305119][T30264] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, [ 682.308644][T30256] pgfault 833952 [ 682.308657][T30256] pgmajfault 1322 [ 682.317120][T30264] free 0, pa_free 8 [ 682.320656][T30256] inactive_anon 16384 [ 682.332290][T30256] active_anon 0 [ 682.335857][T30256] inactive_file 0 [ 682.339511][T30256] active_file 0 [ 682.343016][T30256] unevictable 0 [ 682.346507][T30256] hierarchical_memory_limit 314572800 [ 682.352004][T30256] hierarchical_memsw_limit 9223372036854771712 [ 682.358227][T30256] total_cache 0 [ 682.361710][T30256] total_rss 4096 [ 682.365303][T30256] total_shmem 0 [ 682.368783][T30256] total_mapped_file 0 [ 682.372768][T30256] total_dirty 0 [ 682.376278][T30256] total_writeback 12288 [ 682.380508][T30256] total_workingset_refault_anon 8322 [ 682.385837][T30256] total_workingset_refault_file 425 [ 682.391054][T30256] total_swap 188416 [ 682.395051][T30256] total_swapcached 16384 [ 682.399312][T30256] total_pgpgin 960051 [ 682.403381][T30256] total_pgpgout 960047 [ 682.407469][T30256] total_pgfault 833958 [ 682.411547][T30256] total_pgmajfault 1322 [ 682.415751][T30256] total_inactive_anon 16384 [ 682.420282][T30256] total_active_anon 0 [ 682.424282][T30256] total_inactive_file 0 [ 682.428453][T30256] total_active_file 0 [ 682.432440][T30256] total_unevictable 0 [ 682.436449][T30256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9443,pid=30256,uid=0 [ 682.451271][T30256] Memory cgroup out of memory: Killed process 30256 (syz.6.9443) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 682.469447][T17935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.480931][T28661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.544990][T30303] syzkaller0: entered promiscuous mode [ 682.550587][T30303] syzkaller0: entered allmulticast mode [ 682.551472][T30312] loop0: detected capacity change from 0 to 256 [ 682.586122][T17935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.658385][T30317] 9pnet_fd: p9_fd_create_tcp (30317): problem connecting socket to 127.0.0.1 [ 682.669366][T17935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.693131][T30317] __nla_validate_parse: 8 callbacks suppressed [ 682.693150][T30317] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9458'. [ 682.770678][T30326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9462'. [ 682.791042][T17935] dummy0: left allmulticast mode [ 682.797257][T17935] bridge0: port 3(dummy0) entered disabled state [ 682.813425][T17935] bridge_slave_1: left allmulticast mode [ 682.819183][T17935] bridge_slave_1: left promiscuous mode [ 682.825033][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.842568][T17935] bridge_slave_0: left allmulticast mode [ 682.848492][T17935] bridge_slave_0: left promiscuous mode [ 682.854645][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.921497][T30341] loop7: detected capacity change from 0 to 256 [ 682.975554][T17935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.991594][T17935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.015570][T17935] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 683.031602][T17935] bond0 (unregistering): Released all slaves [ 683.051531][T30351] 9pnet_fd: p9_fd_create_tcp (30351): problem connecting socket to 127.0.0.1 [ 683.064423][T30273] chnl_net:caif_netlink_parms(): no params data found [ 683.107315][ T6290] syz2: Port: 1 Link DOWN [ 683.113445][T30351] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9472'. [ 683.163000][T30357] loop0: detected capacity change from 0 to 128 [ 683.169538][T30352] syzkaller0: entered promiscuous mode [ 683.169858][T30357] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 683.175130][T30352] syzkaller0: entered allmulticast mode [ 683.257334][T30357] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 683.294093][T30273] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.301362][T30273] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.352069][T30273] bridge_slave_0: entered allmulticast mode [ 683.364204][T30369] loop7: detected capacity change from 0 to 256 [ 683.371449][T30273] bridge_slave_0: entered promiscuous mode [ 683.388626][T17935] hsr_slave_0: left promiscuous mode [ 683.394444][T17935] hsr_slave_1: left promiscuous mode [ 683.420367][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.427999][T17935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.479687][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.487330][T17935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.513136][T17935] veth0_macvtap: left promiscuous mode [ 683.523946][T17935] veth1_vlan: left promiscuous mode [ 683.655504][T17935] team0 (unregistering): Port device team_slave_1 removed [ 683.666407][T17935] team0 (unregistering): Port device team_slave_0 removed [ 683.681272][T17933] smc: removing ib device syz2 [ 683.713807][T30273] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.720963][T30273] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.728332][T30273] bridge_slave_1: entered allmulticast mode [ 683.738805][T30273] bridge_slave_1: entered promiscuous mode [ 683.760610][T30387] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9483'. [ 683.799181][T30273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.821056][T30273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.972872][T30395] syzkaller0: entered promiscuous mode [ 683.978543][T30395] syzkaller0: entered allmulticast mode [ 684.039454][T30273] team0: Port device team_slave_0 added [ 684.084381][T30273] team0: Port device team_slave_1 added [ 684.162422][T30398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9490'. [ 684.166140][T30273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.178428][T30273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.204528][T30273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.250782][T30273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.257890][T30273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.284011][T30273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.324593][T30404] loop0: detected capacity change from 0 to 256 [ 684.345303][T30273] hsr_slave_0: entered promiscuous mode [ 684.351658][T30273] hsr_slave_1: entered promiscuous mode [ 684.359623][T30273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.367487][T30273] Cannot create hsr debugfs directory [ 684.377600][T30383] 9pnet_fd: p9_fd_create_tcp (30383): problem connecting socket to 127.0.0.1 [ 684.424365][T25086] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 684.435397][T25086] CPU: 0 UID: 0 PID: 25086 Comm: syz-executor Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 684.435432][T25086] Tainted: [W]=WARN [ 684.435439][T25086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.435451][T25086] Call Trace: [ 684.435457][T25086] [ 684.435465][T25086] __dump_stack+0x1d/0x30 [ 684.435577][T25086] dump_stack_lvl+0xe8/0x140 [ 684.435602][T25086] dump_stack+0x15/0x1b [ 684.435619][T25086] dump_header+0x81/0x220 [ 684.435655][T25086] oom_kill_process+0x334/0x3f0 [ 684.435764][T25086] out_of_memory+0x979/0xb80 [ 684.435800][T25086] try_charge_memcg+0x5e6/0x9e0 [ 684.435830][T25086] charge_memcg+0x51/0xc0 [ 684.435907][T25086] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 684.436017][T25086] __read_swap_cache_async+0x1df/0x350 [ 684.436063][T25086] swap_cluster_readahead+0x277/0x3e0 [ 684.436166][T25086] swapin_readahead+0xde/0x6f0 [ 684.436244][T25086] ? __filemap_get_folio+0x4f7/0x6b0 [ 684.436300][T25086] ? swap_cache_get_folio+0x77/0x200 [ 684.436414][T25086] do_swap_page+0x301/0x2430 [ 684.436436][T25086] ? finish_task_switch+0xad/0x2b0 [ 684.436460][T25086] ? __pfx_default_wake_function+0x10/0x10 [ 684.436531][T25086] handle_mm_fault+0x9a5/0x2be0 [ 684.436560][T25086] ? mas_walk+0xf2/0x120 [ 684.436606][T25086] do_user_addr_fault+0x636/0x1090 [ 684.436651][T25086] ? fpregs_restore_userregs+0xe2/0x1d0 [ 684.436682][T25086] ? switch_fpu_return+0xe/0x20 [ 684.436785][T25086] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 684.436821][T25086] exc_page_fault+0x62/0xa0 [ 684.436858][T25086] asm_exc_page_fault+0x26/0x30 [ 684.436964][T25086] RIP: 0033:0x7fe5c65111a5 [ 684.437049][T25086] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 684.437072][T25086] RSP: 002b:00007ffc7f87c408 EFLAGS: 00010246 [ 684.437091][T25086] RAX: 0000000000000000 RBX: 00000000000003b4 RCX: 00007fe5c65111a3 [ 684.437108][T25086] RDX: 00007ffc7f87c420 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.437124][T25086] RBP: 00007ffc7f87c48c R08: 000000002f07f468 R09: 0000000000000000 [ 684.437182][T25086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 684.437196][T25086] R13: 00000000000927c0 R14: 00000000000a7111 R15: 00007ffc7f87c4e0 [ 684.437221][T25086] [ 684.437230][T25086] memory: usage 307200kB, limit 307200kB, failcnt 11790 [ 684.677619][T25086] memory+swap: usage 47016kB, limit 9007199254740988kB, failcnt 0 [ 684.685583][T25086] kmem: usage 42220kB, limit 9007199254740988kB, failcnt 0 [ 684.692831][T25086] Memory cgroup stats for /syz6: [ 684.694570][T25086] cache 0 [ 684.702581][T25086] rss 106496 [ 684.705843][T25086] shmem 0 [ 684.708813][T25086] mapped_file 0 [ 684.712288][T25086] dirty 0 [ 684.715301][T25086] writeback 0 [ 684.718642][T25086] workingset_refault_anon 8380 [ 684.723478][T25086] workingset_refault_file 425 [ 684.728171][T25086] swap 77824 [ 684.731416][T25086] swapcached 139264 [ 684.735359][T25086] pgpgin 964257 [ 684.738843][T25086] pgpgout 964222 [ 684.742411][T25086] pgfault 838323 [ 684.746034][T25086] pgmajfault 1342 [ 684.749703][T25086] inactive_anon 0 [ 684.753434][T25086] active_anon 143360 [ 684.757343][T25086] inactive_file 0 [ 684.761098][T25086] active_file 0 [ 684.764614][T25086] unevictable 0 [ 684.768138][T25086] hierarchical_memory_limit 314572800 [ 684.773576][T25086] hierarchical_memsw_limit 9223372036854771712 [ 684.779893][T25086] total_cache 0 [ 684.783499][T25086] total_rss 106496 [ 684.787311][T25086] total_shmem 0 [ 684.790795][T25086] total_mapped_file 0 [ 684.794906][T25086] total_dirty 0 [ 684.798428][T25086] total_writeback 0 [ 684.802261][T25086] total_workingset_refault_anon 8380 [ 684.807709][T25086] total_workingset_refault_file 425 [ 684.813075][T25086] total_swap 77824 [ 684.816817][T25086] total_swapcached 139264 [ 684.821274][T25086] total_pgpgin 964257 [ 684.825304][T25086] total_pgpgout 964222 [ 684.829428][T25086] total_pgfault 838329 [ 684.833531][T25086] total_pgmajfault 1342 [ 684.837707][T25086] total_inactive_anon 0 [ 684.841881][T25086] total_active_anon 143360 [ 684.846407][T25086] total_inactive_file 0 [ 684.851060][T25086] total_active_file 0 [ 684.855238][T25086] total_unevictable 0 [ 684.859249][T25086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9486,pid=30388,uid=0 [ 684.874043][T25086] Memory cgroup out of memory: Killed process 30388 (syz.6.9486) total-vm:93884kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 684.942275][T30418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9497'. [ 684.995168][T30421] netlink: 'syz.6.9498': attribute type 10 has an invalid length. [ 685.028102][T30421] veth0_vlan: left promiscuous mode [ 685.051391][T30421] veth0_vlan: entered promiscuous mode [ 685.068574][T30421] team0: Device veth0_vlan failed to register rx_handler [ 685.125049][T30427] loop2: detected capacity change from 0 to 128 [ 685.131931][T30427] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 685.166853][T30427] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 685.185744][T30429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9500'. [ 685.194920][T30429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9500'. [ 685.242171][T30273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 685.267517][T30273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 685.311510][T30273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.350305][T30273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.437519][T30437] loop0: detected capacity change from 0 to 256 [ 685.495735][T30440] 9pnet_fd: p9_fd_create_tcp (30440): problem connecting socket to 127.0.0.1 [ 685.562861][T30414] syz.7.9496 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 685.573962][T30414] CPU: 1 UID: 0 PID: 30414 Comm: syz.7.9496 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 685.574001][T30414] Tainted: [W]=WARN [ 685.574010][T30414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.574024][T30414] Call Trace: [ 685.574080][T30414] [ 685.574090][T30414] __dump_stack+0x1d/0x30 [ 685.574118][T30414] dump_stack_lvl+0xe8/0x140 [ 685.574142][T30414] dump_stack+0x15/0x1b [ 685.574160][T30414] dump_header+0x81/0x220 [ 685.574194][T30414] oom_kill_process+0x334/0x3f0 [ 685.574277][T30414] out_of_memory+0x979/0xb80 [ 685.574317][T30414] try_charge_memcg+0x5e6/0x9e0 [ 685.574353][T30414] charge_memcg+0x51/0xc0 [ 685.574422][T30414] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 685.574477][T30414] __read_swap_cache_async+0x1df/0x350 [ 685.574520][T30414] swap_cluster_readahead+0x277/0x3e0 [ 685.574587][T30414] swapin_readahead+0xde/0x6f0 [ 685.574672][T30414] ? __filemap_get_folio+0x4f7/0x6b0 [ 685.574715][T30414] ? swap_cache_get_folio+0x77/0x200 [ 685.574763][T30414] do_swap_page+0x301/0x2430 [ 685.574791][T30414] ? finish_task_switch+0xad/0x2b0 [ 685.574848][T30414] ? __pfx_default_wake_function+0x10/0x10 [ 685.574881][T30414] handle_mm_fault+0x9a5/0x2be0 [ 685.574933][T30414] ? mas_walk+0xf2/0x120 [ 685.575052][T30414] do_user_addr_fault+0x636/0x1090 [ 685.575092][T30414] ? fpregs_restore_userregs+0xe2/0x1d0 [ 685.575165][T30414] ? switch_fpu_return+0xe/0x20 [ 685.575272][T30414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 685.575306][T30414] exc_page_fault+0x62/0xa0 [ 685.575342][T30414] asm_exc_page_fault+0x26/0x30 [ 685.575368][T30414] RIP: 0033:0x7fb88a80538c [ 685.575399][T30414] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 685.575422][T30414] RSP: 002b:00007ffc26f9c020 EFLAGS: 00010206 [ 685.575441][T30414] RAX: 0000000000000000 RBX: 00007fb88ab55fa0 RCX: 0000000000000000 [ 685.575457][T30414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555566d1808 [ 685.575472][T30414] RBP: 00007fb88ab57ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 685.575487][T30414] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a781a [ 685.575505][T30414] R13: 00007fb88ab56240 R14: ffffffffffffffff R15: 00007ffc26f9c130 [ 685.575526][T30414] [ 685.575532][T30414] memory: usage 307200kB, limit 307200kB, failcnt 6352 [ 685.815762][T30414] memory+swap: usage 296232kB, limit 9007199254740988kB, failcnt 0 [ 685.823743][T30414] kmem: usage 277480kB, limit 9007199254740988kB, failcnt 0 [ 685.831108][T30414] Memory cgroup stats for /syz7: [ 685.849360][T30414] cache 0 [ 685.857522][T30414] rss 0 [ 685.860349][T30414] shmem 0 [ 685.863336][T30414] mapped_file 0 [ 685.866815][T30414] dirty 0 [ 685.869823][T30414] writeback 12288 [ 685.873418][T30440] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9504'. [ 685.873580][T30414] workingset_refault_anon 1088 [ 685.873658][T30414] workingset_refault_file 818 [ 685.892121][T30414] swap 217088 [ 685.895497][T30414] swapcached 16384 [ 685.899322][T30414] pgpgin 997120 [ 685.902853][T30414] pgpgout 997116 [ 685.906508][T30414] pgfault 865996 [ 685.910065][T30414] pgmajfault 667 [ 685.913660][T30414] inactive_anon 16384 [ 685.917666][T30414] active_anon 0 [ 685.921147][T30414] inactive_file 0 [ 685.924878][T30414] active_file 0 [ 685.928366][T30414] unevictable 0 [ 685.931859][T30414] hierarchical_memory_limit 314572800 [ 685.937300][T30414] hierarchical_memsw_limit 9223372036854771712 [ 685.943601][T30414] total_cache 0 [ 685.947126][T30414] total_rss 0 [ 685.950423][T30414] total_shmem 0 [ 685.954002][T30414] total_mapped_file 0 [ 685.958001][T30414] total_dirty 0 [ 685.961469][T30414] total_writeback 12288 [ 685.965654][T30414] total_workingset_refault_anon 1088 [ 685.970964][T30414] total_workingset_refault_file 818 [ 685.976342][T30414] total_swap 217088 [ 685.980172][T30414] total_swapcached 16384 [ 685.984466][T30414] total_pgpgin 997120 [ 685.988522][T30414] total_pgpgout 997116 [ 685.992670][T30414] total_pgfault 865996 [ 685.996779][T30414] total_pgmajfault 667 [ 686.000870][T30414] total_inactive_anon 16384 [ 686.005403][T30414] total_active_anon 0 [ 686.009418][T30414] total_inactive_file 0 [ 686.013714][T30414] total_active_file 0 [ 686.017721][T30414] total_unevictable 0 [ 686.021765][T30414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.9496,pid=30414,uid=0 [ 686.036650][T30414] Memory cgroup out of memory: Killed process 30414 (syz.7.9496) total-vm:98120kB, anon-rss:936kB, file-rss:26432kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 686.038577][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 686.038595][ T29] audit: type=1326 audit(1751093354.164:20541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.090691][ T29] audit: type=1326 audit(1751093354.214:20542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.103001][T30423] syz.2.9499 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 686.114805][ T29] audit: type=1326 audit(1751093354.214:20543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.125674][T30423] CPU: 1 UID: 0 PID: 30423 Comm: syz.2.9499 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 686.125753][T30423] Tainted: [W]=WARN [ 686.125764][T30423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 686.125838][T30423] Call Trace: [ 686.125848][T30423] [ 686.125862][T30423] __dump_stack+0x1d/0x30 [ 686.125892][T30423] dump_stack_lvl+0xe8/0x140 [ 686.125928][T30423] dump_stack+0x15/0x1b [ 686.126014][T30423] dump_header+0x81/0x220 [ 686.126082][T30423] oom_kill_process+0x334/0x3f0 [ 686.126128][T30423] out_of_memory+0x979/0xb80 [ 686.126173][T30423] try_charge_memcg+0x5e6/0x9e0 [ 686.126255][T30423] charge_memcg+0x51/0xc0 [ 686.126301][T30423] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 686.126353][T30423] __read_swap_cache_async+0x1df/0x350 [ 686.126449][T30423] swap_cluster_readahead+0x277/0x3e0 [ 686.126503][T30423] swapin_readahead+0xde/0x6f0 [ 686.126617][T30423] ? __filemap_get_folio+0x4f7/0x6b0 [ 686.126674][T30423] ? __rcu_read_unlock+0x34/0x70 [ 686.126707][T30423] ? swap_cache_get_folio+0x77/0x200 [ 686.126777][T30423] do_swap_page+0x301/0x2430 [ 686.126902][T30423] ? css_rstat_updated+0xcd/0x5b0 [ 686.127016][T30423] ? __pfx_default_wake_function+0x10/0x10 [ 686.127054][T30423] handle_mm_fault+0x9a5/0x2be0 [ 686.127150][T30423] ? mas_walk+0xf2/0x120 [ 686.127204][T30423] do_user_addr_fault+0x636/0x1090 [ 686.127312][T30423] exc_page_fault+0x62/0xa0 [ 686.127352][T30423] asm_exc_page_fault+0x26/0x30 [ 686.127380][T30423] RIP: 0033:0x7f790421538c [ 686.127404][T30423] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 686.127473][T30423] RSP: 002b:00007ffe95702f80 EFLAGS: 00010283 [ 686.127494][T30423] RAX: 0000000000000000 RBX: 00007f7904566080 RCX: 0000000000000000 [ 686.127512][T30423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556c73a808 [ 686.127529][T30423] RBP: 00007f7904567ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 686.127564][T30423] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a7906 [ 686.127604][T30423] R13: 00007f7904566080 R14: ffffffffffffffff R15: 00007ffe95703090 [ 686.127633][T30423] [ 686.127642][T30423] memory: usage 307200kB, limit 307200kB, failcnt 11218 [ 686.149295][ T29] audit: type=1326 audit(1751093354.214:20544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.149326][ T29] audit: type=1326 audit(1751093354.214:20545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.163419][T30423] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 686.163439][T30423] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 686.167309][ T29] audit: type=1326 audit(1751093354.214:20546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.177326][T30423] Memory cgroup stats for /syz2: [ 686.233181][T30423] cache 0 [ 686.237035][ T29] audit: type=1326 audit(1751093354.214:20547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.241757][T30423] rss 0 [ 686.241768][T30423] shmem 0 [ 686.247058][ T29] audit: type=1326 audit(1751093354.214:20548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.247092][ T29] audit: type=1326 audit(1751093354.214:20549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.252018][T30423] mapped_file 0 [ 686.252029][T30423] dirty 0 [ 686.257329][ T29] audit: type=1326 audit(1751093354.214:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30449 comm="syz.6.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c64de929 code=0x7ffc0000 [ 686.261912][T30423] writeback 0 [ 686.261923][T30423] workingset_refault_anon 639 [ 686.261931][T30423] workingset_refault_file 1731 [ 686.261939][T30423] swap 274432 [ 686.261955][T30423] swapcached 0 [ 686.261961][T30423] pgpgin 558645 [ 686.261968][T30423] pgpgout 558645 [ 686.261975][T30423] pgfault 447848 [ 686.261981][T30423] pgmajfault 403 [ 686.261988][T30423] inactive_anon 0 [ 686.261994][T30423] active_anon 0 [ 686.444658][T30273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.463556][T30423] inactive_file 0 [ 686.630156][T30423] active_file 0 [ 686.633678][T30423] unevictable 0 [ 686.637163][T30423] hierarchical_memory_limit 314572800 [ 686.642587][T30423] hierarchical_memsw_limit 9223372036854771712 [ 686.648833][T30423] total_cache 0 [ 686.652321][T30423] total_rss 0 [ 686.655762][T30423] total_shmem 0 [ 686.659284][T30423] total_mapped_file 0 [ 686.663345][T30423] total_dirty 0 [ 686.666825][T30423] total_writeback 0 [ 686.670663][T30423] total_workingset_refault_anon 639 [ 686.675897][T30423] total_workingset_refault_file 1731 [ 686.681288][T30423] total_swap 274432 [ 686.685192][T30423] total_swapcached 0 [ 686.689122][T30423] total_pgpgin 558645 [ 686.693244][T30423] total_pgpgout 558645 [ 686.697336][T30423] total_pgfault 447848 [ 686.701476][T30423] total_pgmajfault 403 [ 686.705593][T30423] total_inactive_anon 0 [ 686.709771][T30423] total_active_anon 0 [ 686.713862][T30423] total_inactive_file 0 [ 686.718037][T30423] total_active_file 0 [ 686.722034][T30423] total_unevictable 0 [ 686.726062][T30423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9499,pid=30423,uid=0 [ 686.740810][T30423] Memory cgroup out of memory: Killed process 30423 (syz.2.9499) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 686.772484][T30273] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.811659][T17935] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.818807][T17935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.853593][T30273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.864093][T30273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.914502][T17935] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.921675][T17935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.028180][T30273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.199812][T30480] vlan2: entered promiscuous mode [ 687.205157][T30480] vlan2: entered allmulticast mode [ 687.210310][T30480] hsr_slave_1: entered allmulticast mode [ 687.221749][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9512'. [ 687.283150][T30273] veth0_vlan: entered promiscuous mode [ 687.297588][T30273] veth1_vlan: entered promiscuous mode [ 687.310529][T30490] loop2: detected capacity change from 0 to 256 [ 687.327555][T30273] veth0_macvtap: entered promiscuous mode [ 687.345838][T30273] veth1_macvtap: entered promiscuous mode [ 687.368769][T30273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.378512][T30494] netlink: 'syz.0.9517': attribute type 10 has an invalid length. [ 687.390745][T30273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.405482][T30494] veth0_vlan: left promiscuous mode [ 687.411339][T30494] veth0_vlan: entered promiscuous mode [ 687.418895][T30494] team0: Device veth0_vlan failed to register rx_handler [ 687.431349][T30273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.440245][T30273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.449021][T30273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.457788][T30273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.673159][T30509] loop5: detected capacity change from 0 to 128 [ 687.738760][T30509] bio_check_eod: 5592 callbacks suppressed [ 687.738780][T30509] syz.5.9444: attempt to access beyond end of device [ 687.738780][T30509] loop5: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 687.760982][T30509] syz.5.9444: attempt to access beyond end of device [ 687.760982][T30509] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 687.777585][T30509] syz.5.9444: attempt to access beyond end of device [ 687.777585][T30509] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 687.853132][T30509] syz.5.9444: attempt to access beyond end of device [ 687.853132][T30509] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 687.866856][T30509] syz.5.9444: attempt to access beyond end of device [ 687.866856][T30509] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 687.880519][T30509] syz.5.9444: attempt to access beyond end of device [ 687.880519][T30509] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 687.894166][T30509] syz.5.9444: attempt to access beyond end of device [ 687.894166][T30509] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 687.907665][T30509] syz.5.9444: attempt to access beyond end of device [ 687.907665][T30509] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 687.921274][T30509] syz.5.9444: attempt to access beyond end of device [ 687.921274][T30509] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 687.953355][T30509] syz.5.9444: attempt to access beyond end of device [ 687.953355][T30509] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 688.202348][T30529] __nla_validate_parse: 2 callbacks suppressed [ 688.202364][T30529] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9526'. [ 688.373022][T30514] ================================================================== [ 688.381171][T30514] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 688.391035][T30514] [ 688.393373][T30514] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 688.401477][T30514] tick_do_update_jiffies64+0x113/0x1c0 [ 688.407079][T30514] tick_nohz_handler+0x7f/0x2d0 [ 688.411976][T30514] __hrtimer_run_queues+0x20f/0x5a0 [ 688.417219][T30514] hrtimer_interrupt+0x21a/0x460 [ 688.422197][T30514] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 688.428138][T30514] sysvec_apic_timer_interrupt+0x6f/0x80 [ 688.433811][T30514] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.439814][T30514] bpf_bprintf_prepare+0x1df/0xd50 [ 688.445050][T30514] bpf_trace_printk+0x84/0x1c0 [ 688.449852][T30514] bpf_prog_7288d49156658ef5+0x40/0x6c [ 688.455341][T30514] bpf_trace_run2+0x104/0x1c0 [ 688.460063][T30514] kfree+0x27b/0x320 [ 688.463993][T30514] shrink_lruvec+0x2a5/0x1b40 [ 688.468700][T30514] shrink_node+0x686/0x2120 [ 688.473237][T30514] do_try_to_free_pages+0x3f6/0xcd0 [ 688.478454][T30514] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 688.484366][T30514] try_charge_memcg+0x358/0x9e0 [ 688.489230][T30514] charge_memcg+0x51/0xc0 [ 688.493597][T30514] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 688.499611][T30514] __read_swap_cache_async+0x1df/0x350 [ 688.505097][T30514] swap_cluster_readahead+0x376/0x3e0 [ 688.510499][T30514] swapin_readahead+0xde/0x6f0 [ 688.515292][T30514] do_swap_page+0x301/0x2430 [ 688.519906][T30514] handle_mm_fault+0x9a5/0x2be0 [ 688.524795][T30514] do_user_addr_fault+0x636/0x1090 [ 688.529954][T30514] exc_page_fault+0x62/0xa0 [ 688.534608][T30514] asm_exc_page_fault+0x26/0x30 [ 688.539481][T30514] [ 688.541817][T30514] read to 0xffffffff868099c0 of 8 bytes by task 30514 on cpu 1: [ 688.549461][T30514] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 688.555745][T30514] count_shadow_nodes+0x6a/0x230 [ 688.560701][T30514] do_shrink_slab+0x60/0x680 [ 688.565313][T30514] shrink_slab+0x448/0x760 [ 688.569753][T30514] shrink_node+0x6c3/0x2120 [ 688.574276][T30514] do_try_to_free_pages+0x3f6/0xcd0 [ 688.579489][T30514] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 688.585401][T30514] try_charge_memcg+0x358/0x9e0 [ 688.590270][T30514] obj_cgroup_charge_pages+0xa6/0x150 [ 688.595668][T30514] __memcg_kmem_charge_page+0x9f/0x170 [ 688.601155][T30514] __alloc_frozen_pages_noprof+0x188/0x360 [ 688.606994][T30514] alloc_pages_mpol+0xb3/0x250 [ 688.611783][T30514] alloc_pages_noprof+0x90/0x130 [ 688.616747][T30514] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 688.622582][T30514] __kvmalloc_node_noprof+0x30f/0x4e0 [ 688.627980][T30514] ip_set_alloc+0x1f/0x30 [ 688.632334][T30514] hash_netiface_create+0x282/0x740 [ 688.637562][T30514] ip_set_create+0x3c9/0x960 [ 688.642184][T30514] nfnetlink_rcv_msg+0x4c6/0x590 [ 688.647366][T30514] netlink_rcv_skb+0x120/0x220 [ 688.652174][T30514] nfnetlink_rcv+0x16b/0x1690 [ 688.656880][T30514] netlink_unicast+0x5a1/0x670 [ 688.661675][T30514] netlink_sendmsg+0x58b/0x6b0 [ 688.666457][T30514] __sock_sendmsg+0x142/0x180 [ 688.671154][T30514] ____sys_sendmsg+0x31e/0x4e0 [ 688.675947][T30514] ___sys_sendmsg+0x17b/0x1d0 [ 688.680666][T30514] __x64_sys_sendmsg+0xd4/0x160 [ 688.685552][T30514] x64_sys_call+0x2999/0x2fb0 [ 688.690255][T30514] do_syscall_64+0xd2/0x200 [ 688.694772][T30514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.700773][T30514] [ 688.703107][T30514] value changed: 0x00000001000097ab -> 0x00000001000097ac [ 688.710310][T30514] [ 688.712651][T30514] Reported by Kernel Concurrency Sanitizer on: [ 688.718814][T30514] CPU: 1 UID: 0 PID: 30514 Comm: syz.6.9521 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 688.733029][T30514] Tainted: [W]=WARN [ 688.736840][T30514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.746909][T30514] ================================================================== [ 688.762624][T30513] syz.6.9521 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 688.773736][T30513] CPU: 0 UID: 0 PID: 30513 Comm: syz.6.9521 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 688.773842][T30513] Tainted: [W]=WARN [ 688.773851][T30513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.773944][T30513] Call Trace: [ 688.773952][T30513] [ 688.773962][T30513] __dump_stack+0x1d/0x30 [ 688.773990][T30513] dump_stack_lvl+0xe8/0x140 [ 688.774072][T30513] dump_stack+0x15/0x1b [ 688.774093][T30513] dump_header+0x81/0x220 [ 688.774176][T30513] oom_kill_process+0x334/0x3f0 [ 688.774216][T30513] out_of_memory+0x979/0xb80 [ 688.774331][T30513] try_charge_memcg+0x5e6/0x9e0 [ 688.774367][T30513] charge_memcg+0x51/0xc0 [ 688.774415][T30513] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 688.774466][T30513] __read_swap_cache_async+0x1df/0x350 [ 688.774502][T30513] swap_cluster_readahead+0x376/0x3e0 [ 688.774581][T30513] swapin_readahead+0xde/0x6f0 [ 688.774681][T30513] ? __filemap_get_folio+0x4f7/0x6b0 [ 688.774800][T30513] ? __rcu_read_unlock+0x34/0x70 [ 688.774839][T30513] ? swap_cache_get_folio+0x77/0x200 [ 688.774881][T30513] do_swap_page+0x301/0x2430 [ 688.774905][T30513] ? css_rstat_updated+0xcd/0x5b0 [ 688.774953][T30513] ? __pfx_default_wake_function+0x10/0x10 [ 688.774986][T30513] handle_mm_fault+0x9a5/0x2be0 [ 688.775020][T30513] ? mas_walk+0xf2/0x120 [ 688.775135][T30513] do_user_addr_fault+0x636/0x1090 [ 688.775183][T30513] exc_page_fault+0x62/0xa0 [ 688.775220][T30513] asm_exc_page_fault+0x26/0x30 [ 688.775246][T30513] RIP: 0033:0x7fe5c63b538c [ 688.775266][T30513] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 688.775349][T30513] RSP: 002b:00007ffc7f87c230 EFLAGS: 00010287 [ 688.775365][T30513] RAX: 0000000000000000 RBX: 00007fe5c6707040 RCX: 0000000000000000 [ 688.775378][T30513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559226a808 [ 688.775392][T30513] RBP: 00007fe5c6707ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 688.775408][T30513] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a833b [ 688.775424][T30513] R13: 00007fe5c6706080 R14: ffffffffffffffff R15: 00007ffc7f87c340 [ 688.775452][T30513] [ 688.775474][T30513] memory: usage 307200kB, limit 307200kB, failcnt 11954 [ 688.822669][T30532] syzkaller0: entered promiscuous mode [ 688.823320][T30513] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 688.823339][T30513] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 688.823388][T30513] Memory cgroup stats for /syz6 [ 688.827746][T30532] syzkaller0: entered allmulticast mode [ 688.832587][T30513] : [ 688.832784][T30513] cache 0 [ 689.041060][T30513] rss 0 [ 689.043920][T30513] shmem 0 [ 689.046989][T30513] mapped_file 0 [ 689.050449][T30513] dirty 0 [ 689.053459][T30513] writeback 0 [ 689.056804][T30513] workingset_refault_anon 8419 [ 689.061563][T30513] workingset_refault_file 425 [ 689.066332][T30513] swap 200704 [ 689.069619][T30513] swapcached 4096 [ 689.073285][T30513] pgpgin 967587 [ 689.076744][T30513] pgpgout 967586 [ 689.080285][T30513] pgfault 842302 [ 689.083933][T30513] pgmajfault 1360 [ 689.087577][T30513] inactive_anon 0 [ 689.091206][T30513] active_anon 0 [ 689.094689][T30513] inactive_file 0 [ 689.098324][T30513] active_file 0 [ 689.101779][T30513] unevictable 0 [ 689.105254][T30513] hierarchical_memory_limit 314572800 [ 689.110623][T30513] hierarchical_memsw_limit 9223372036854771712 [ 689.116874][T30513] total_cache 0 [ 689.120341][T30513] total_rss 0 [ 689.123675][T30513] total_shmem 0 [ 689.127144][T30513] total_mapped_file 0 [ 689.131128][T30513] total_dirty 0 [ 689.134724][T30513] total_writeback 0 [ 689.138619][T30513] total_workingset_refault_anon 8419 [ 689.143925][T30513] total_workingset_refault_file 425 [ 689.149200][T30513] total_swap 200704 [ 689.153049][T30513] total_swapcached 4096 [ 689.157214][T30513] total_pgpgin 967587 [ 689.161189][T30513] total_pgpgout 967586 [ 689.165279][T30513] total_pgfault 842308 [ 689.169403][T30513] total_pgmajfault 1360 [ 689.173575][T30513] total_inactive_anon 0 [ 689.177728][T30513] total_active_anon 0 [ 689.181776][T30513] total_inactive_file 0 [ 689.185979][T30513] total_active_file 0 [ 689.189963][T30513] total_unevictable 0 [ 689.193989][T30513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9521,pid=30513,uid=0 [ 689.208700][T30513] Memory cgroup out of memory: Killed process 30513 (syz.6.9521) total-vm:93752kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000