last executing test programs: 3.282465562s ago: executing program 1 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e6043"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x8f9}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) pread64(r0, &(0x7f0000000e00)=""/226, 0xe2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 3.273844742s ago: executing program 2 (id=3302): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) 3.252487402s ago: executing program 2 (id=3304): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='xen_mmu_write_cr3\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000280), &(0x7f0000000840)=r2}, 0x20) r3 = open(&(0x7f0000000080)='./file0\x00', 0x492000, 0x2) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@local}, &(0x7f0000000100)=0x14) r4 = syz_clone(0xc2102200, &(0x7f00000010c0)="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", 0x1000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000020c0)="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") setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) write$P9_RGETLOCK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="230000003701000000000000000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0500010100004a293a23"], 0x23) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000000700000000000000fbffffff01840000", @ANYRES32=r1, @ANYBLOB='\b*\x00'/20, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0400000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000dcab1b6c0951f814aab1b7b60e8d882540b4bef606d5d6e5be16fb22aa2153c211338b011487b55911d0d56104c43a511ee5c673e0887a2f7d4710429d2f56795704b12be1102cf98d0589fe65d4d2a6d444403b81af7f0c318acf7cf3f30db21feff53445a5d702e7722c0ca83acb5e09ff23a792a41554"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40800) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x6, 0x4f, 0x3, 0x6}, {0x6, 0x4, 0x2, 0x6749}, {0x7, 0x4, 0xa0, 0x8}, {0x0, 0xff, 0x80, 0xe8fe}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket(0x1e, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r9) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ustat(0x9, &(0x7f0000000000)) 3.179244053s ago: executing program 2 (id=3307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB="e3", @ANYRES16=r0, @ANYRES32], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e0a000002000500000000000000000000000000000000e1c475178df3d360a3c90000000000000028877887fc52ccf7b8da4e9270618364ad5c9830c65c7679df920de4f1f596ffbeaf20e2f171b6723eb4f563bb0200e2bfbb7d036cdfdb63de14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRES32=r0, @ANYRES8=r2, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x5319, 0x0) socket(0xa, 0x3, 0x7) r6 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000680003806400008008000340000000"], 0x118}}, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) socket$netlink(0x10, 0x3, 0x14) 3.056205455s ago: executing program 2 (id=3311): getpid() r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x21, 0x16, 0x15, 0x0, 0x8, 0x1001, 0xd, 0x16a, 0x1}}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x2200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x1, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000006bebb405a8b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000955fbed6f3e40921113a5aaacbf68326ef2e9100becb29164c9ce248c9cf76a5fac39cc4f5a2475d2fae9a08f4eb4eacb4a0099f9c1d6f6d1c3da7ece659b84af9b833ab59ca539b4d581c00a56a13fcdbb1cf9c6e57b383921c1c1a46955d46121c93ff59879458365637b611088a56175d154353734e362c6b64de95057115987c59df13912e9a9b2a095fd88fc4b96f37da5e479f0e4d748265c90eea831e3561b08502683ea499"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa00000a1) close(r4) 3.008019006s ago: executing program 0 (id=3312): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2b, 0x80801, 0x1) setsockopt(r1, 0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000800)='./bus\x00', r12}, 0x18) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmmsg$inet6(r9, &(0x7f0000001180)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="0543", 0x2}], 0x1}}], 0x2, 0x4004851) setsockopt(r9, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) connect$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @remote, 0x8}, 0x1c) 2.654795461s ago: executing program 3 (id=3317): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='xen_mmu_write_cr3\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000280), &(0x7f0000000840)=r2}, 0x20) r3 = open(&(0x7f0000000080)='./file0\x00', 0x492000, 0x2) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@local}, &(0x7f0000000100)=0x14) r4 = syz_clone(0xc2102200, &(0x7f00000010c0)="142771f9d3d7f41ba4045cb7ba257f65b0dce16f58106b9234aeb92dbe42b1636e2cdfcbce618a3f0db1282c8f3f3ca9d43c95e8be08d324a189851c0c06c0010f98b4f00cffab868e7f53c62ba784dc2d5754bc0454d0af71331c07a5bf160c49376330464d14b4727bf2de3e75ae6ef616dd4bee40235451d4b3e00da8f4d61340f6778a29749b81098b699f8d29f3a2bb0e4bb33e941eaf2d54504c3c50b8daa9db3a821297f56a08213e5b7e3a6e93116e5cd3cc06cb257ef3f93e2209e513b68b5bc26f0a6e53e56c31164538c129481a8358c0301c49c7cbea285435c9c883e9ca1168f799a4a790c29138e4b86b6b35a1587405e843d323c93957130f93832bc13342b6978d5e5db4fb85e3c7340494547d099403aa562a574632438e3786d21a4bf72b0abdf2b6df8bcf8c3badaafba644992c22748cd03970a9e8e2c297bbd92d60bdbc36294fe96ffa581f39af4324be890d4637ddfb8302cd6b3dfb9a92e4b0a2fd2db9ee6af744825609a13307a80be236bff8fa04a128a65ab5a12eb4c5f1677b8bb71ba69dd5f4831f27283c899bbbfd854e2b9864894f861db4440b0862b265abdf5bd8de20ad19211fbe69bc8e7478865b83c0af35d2d2880c09073d22437461dc4876338325039146b84715039b55a7b80679e7e6a6f6e2823b31667fcb260972530cc47ca576a55e44990bc5aad330d478f11686db124b444d15c31c63206e9cea5f82e23c28bb8ea387620808e33f09c38f8d339474eca77b4e6eb3c2ce81faff1652780432b7a6d8293c2e8f208fb6b8f5e27a7b12df9724d21386a17cb2e1f8e02efd98ab00b1c0cf0158db7aeb13b1ea595949316d46aaa917fbb2a5b14a9495b5a882331c19dd09ebf51b3432dc721c283af5e5c53581fed60a96214370202794e164502ef2361772cec58c1c143d38b2a395f692b8db18498947418b05a1f1c30b0d2cb3750900105d3261d7defb627e9e37b9625883eeb009a329eb014e62fe25e341c89fe955f57e4598c5368f2883db78fb17d23c30d23f7837d7b1447018750f9a989d9186e5a413e9d537c7a45801cc5d504e397f1b1d5c9f3e38f6b74c95c04aa65cb2aae990222e46ec90e39da5eb213b7219ff4ad11276362576f4a5d26b569d34c2fea72fe4de1848c5e93ea7adcdfa3a90a33ba52528c537477a871a5f337d4bcdc52b878c8ac08604c1198611a83f84dc8202440f73074a7165e6df3c106571dbff262090b64f0875ecdbe8eb106aa2ecf855e22125f2259252a7f8c630936f3127426f36b896cf415a983dc94712c6ad1044d28b82c3456426a7acfcb53041fbffd6d2978d79690024f491764a284d08eeb1b35b601ac549f3a601f4405b95602cf993406221e506ef8aa47f99e3f753ae475df9d050e1dc2dfd785e98223f0ec6cb8d3cfd860249a8f968fb2d4edda999e9970abec83110a6c4051bed7d0eb8f60e9095e2fbc1f9a6ec1f674956b063efcc2d05840b8e62c367c3a97c67f4b92f03e627ba2e3d9e5edb4cc84dd9d866287e7255ed506c548a65e41d522c3fd39b68e67856fc3d285e01632daa77cb6091e18ea7fa26aae587a355aecd36e30c3f8a0b274e7dcbdafe987b5329b8e0bf49b3e8ee11b04e1ec864df1aa3b743cc2826e403b0dcaa1b74cd220aa6c8b84144aee4ece9998faf6f5830e9caf8d396af69204c77957430be7ff0de69fbdaea12fb897748d80dfeb6cd76c492640657f3e3cce88d3c8de1712d9be6b975dc94363690b583d3420d9ad0eff4ae8c190ec57c0ce915e58d198ed1936ff050fe58575013cfc80328f40db30795aea358deb9f61bf9e19dc4938e44fcbf7e4600fc6800b1b980e44924f7cbd06030e93f06596d12c5caba9ab6e69ee0bec04ea4248c6e7b1dfe6b72aeb6d3eae661ea6a5f4bcd915b2a251810ad8c32426da166beefb8c485b68ff3f475f3c2add4072a764a2104bdede7b68e832d8e76e93f4fe356109c815e74f3c080d004d1f05e7bdf667897c7075975385d6f11ad15dd47e607cd4c0cc8e82325a38e2c5588f1957d6dcb3a6eac6f9e50c9f569d9284ed55598f4789454c206da179dbc0143dad7da11328b3fc7514ef9d99eb9862f3550feacd604f1dab3cee08869f3cc7a29a603d7a66d484b53149ca5d89a360774392a5298088eac5a4ab3c03bcd489f314cfd2f2ae7a04831044de89e2a52bdfbab468f6c527c13a7e7b73a8f393c1a13a62cf6fb4014da66ea38ae9c4a6a43273cee4db666e215ac96c8b45efd79e1005d6bf019ab79a401b51ba71fce18353f940448e3d850235b35bed5b2a720bf7c595ccc7f4ea780788899e1955a0c03846a1943772689c87c4a7af546d70bdedef97fe63c3857b09c12529bcc9951aac9c4a35dd9ce851873ae009e418c64d954b1e34eed46a3090511812706bcd7cd5452275ffc733495565426f41ea3360f0c5b14dfa41bc7111f9c047392f0e6b9249a208dfa219def1670165eb9b95c3e7201782491d9b5cd85ce42aeab749a94326aeab1bb9256e2da0384f4d5c1642fda0ae99373e47f24218b0833b11937447a1c5ef9b8a230795630ba1a5e63bdb6c3529f2a5b55dfb9a18958e4d676f2b2f6a8dd6386b0c4e71d7385099e91f8f65d35026b5aa07cc7a2c5259947ceedcadf58b5bc03e9737cccf5c3ceafb47dbb8e1d4dfb64dcbaeee8efc302d1712567c078c25c7e39cf8bca9c8064b2f68af5438ac387553cf14363333018d605985a820285ee615a37c2234ac82586b3fa3c14281071ef34f8aa30845b8cd084fa063f13a09c1373fd32fdfa8775eab390def7ca9c4963b9611c4ce4d85483948d765fefb1257c257a3b05e01cd57763e1443403019925c128f7654fcd857067ce3986590946719ea19ef1ab71d1da01fc8b2ab0d8b6ec2a3ec5802bcc7a5eaeeab3042fa3dd0c0739412afba2a6f0b25c111b542d9185f76a82c7500a59d3e592f206c1ff752f4d3093888112c2d8a2f11b59fa7f83d0cffc17fcb9185da3d5996c3088889a73e94cd71256866066906d1f16dd87dfa4a431a58019de62f901727867d4adba4de1f061d59f2a533b0e8c390ded6fbd9d92133676034b1dae1d3ab23231d87aee38529dda2be78f154fe798b7eef39e99dafe38783ff2e8f39ee83ad11870f34a405854e0ee590e33f14376609ce020eabaf476bb96dc1ccff6b71449110d1470ec82dd66c6da1f2b8f736b6fded5ed5dd3d6164d577be96ec90eaa09d861da67aad99ca565ed0f12d54123ea69a7f68c14a8a7af73d2778eb2ce51de510fd42a21bf951aa720eb1e95bef60e190f47f9d41959de2f6e3497d66c80ac3ce127b222e781f2deafc3132f2405f47fe6914ee51bb561cb2fbd367337238644ac3a1526b1d61b80aeee1f080474771a1cfb7ff20e6e621a8937799dd4e73b75d73f82d51d88d53b333cc5b6b835cb06ff09102d9a91eb2e8401c92ec082e1ea50f66e617a31a9fb0ceaaea61397e7349c331a6a00f563ffc52f5d031ac7f06caaf6880d57ca2e3b0da19c715a76571e14d5d0042e4044a3f12b80595804ef22f95e59ba46be133bfa8e125aebfa9f0d9963516230e61097dfb024c3e9f66ef4cd37479496fa61167d029c690622d3194a500f60550a2001f1be930cdb80378b05ba698947a5a137e8bd2b1e90c61b7b9b738e8b3d0c7af2fba480ab0b1de6c03e8b6d74101f39fb04e698781ba184add507e9db1a4cd0bf641f2be268aa5efdc5582ff0830d61d39c0abe33fe62d45efa986554ec3202e7fb0d9d09bb09a31bf72903b934386a04c179ead6afef3b69065c37ec57e5d9e095062258a9bef7cb7c2e5640c02213fdf05ca4ba4a1a7d616e20c66a7876ebc259afbf4813442070cf0f1d6741124be9602bbfcb2330a5784c4f9bb9b3d7e30c9d06a30fe9c24b05d961b6c16604e06ef72d3a0c9366f15ee096f16df0bcc15e58a9ab4c0d1d2b7887879ba3ff0b12f827f5000c5ba0e46193661245cd0e3953ff71a185a3d73b430d949068b435f87a0f25afd6823b1d17acf0755e00023b7d53b8b3e233dad8298f0b601069a3d255112633f3177afcbcad9c5f448a5e76b5e473afa623247ae5883db1c277bfb2bdce76f46c06531306f4526cd8973380344a2bbd8d84ddb4e33325b925ea06da22d319a25c00ca23b363f1fd1c121268d939585056575c2b1d91b87f1f6d49c488a3a935465e9e3ddd5cca1372f521ee43ba26cfdbded15e299c8347774194f799b178b7c4bc8b5e3c6b4f022bd5a42dd421d9c994b25fa57cb8cf24b8428913164963bd5b44b5c94b0ee98e50525132646fc05cfb8f755142554ef76b9e9ab8ce490750bfe4f452c8aca1f29b98630ad72785f81ad34c0d8f571b736910fc4a47f59ce2fcfcfbf64f19de99bfa9f9d9eaa5907f07db725e167606aabc1c133e360c66129fdcd3e7718de06d90f77a3bb10536e91ce9856ec9f3f530f53feb75f4b881dcb6c9f63dc436989e06cd98c1a47b6183d0ed3ddf19c15edbb47d386a68f176494d539f584f57c1b1f73164f9d5c653c5ad79e68a623fd1650d3b4c0d6dbfd1d16bf7db0a01247a94996c3d0928a8ce8b9ef0bc9b03358cba977f57f48b4e7859ce3db23059c201d833aa437cf2a74f8273cd60a755656e0936643fa9ee4e0bb07983eec8abd8f0bb7b9e1c69a91d6cbb661a3c804579652a4e73664f22c0137ba6150cd6bf631bb970e2895d117d084f6303046522d8ca0834ade34c6a03e7501c4b78c55adef2d52740f308e84e98abcbbe4800d0b1cf9f00c38967d017e09d126dccd13fac68739a79de7296dfb8b31fbd084c6ff928846d9b097262a6064245bdcee60230053bfe04783f746559077f8d053a4b59c600533bc512d1ca2a38060b0a558c0936bcdbb7b8b6be21a4597d282cc9e75bb7d21a9b03b90bfcfa47dc2776a338fe9e15f06bb202f2e06f78f48f71c1923fd63d0b581efbd89f9c3a91f204c29055a26452caff8b3fb60b05ddabf296637e7c26c23a84664f0c49ab823df1130a47638b1b49cd19e2469e6107d6af0c5964570f29c562a50c5253b21a055719dd108dd71f6f62aa094890ef597873367242aa93fa04d9230e8a35cc0cef6141d072daf6ded8dbb86e44cd7c037bf1f47d2902ab18b0540a524b0bf4f08187930eba3f20f252f5edd79174db2c87be0e268ea3d4123431acbb9e2f7897140fd1f810ecc41dd0a6e09ae79f211692ca5e3e1da46e4bfa4ebf34104755047a84555329f286a94c15b0b861493213786a20cc92b3f2d9eff5eec324344335500f9d56c8c848c995d6b5bf41e6173062963f962d2f9354dbe0a6ba73bc2541ebcd36f72bdddd0aa41ac2773a226c27cfd21d83ee3157e18b35687cb60059597d0441ee252f735826335a2da2d1f62569c85352dbac71c768563ad8b4180959e2e0b131d4f9f07b67ce8a4ddbddf2a3d6a05a4f6aca24567664edf882a25f2d0ca8ccf9741bde3e3e80ccca5d0ca99a6c96b7a73f7b105b1e81c90679f44600f1449dcd6de57e493419fd27be07720e2c02cc0d74e48d9458a117aeeb0c1af0395d7d71414713b69c91432ac3ee937b9c7a32a9c2192072011d11e48238bb6c8f57253c31f3cbaf3f03370ecdbb13144c7b540622c9f24933b4e5c898fe5c9fe049a9cc34054e6bb7618bce7bd754003e9c7f967f4c36e4d307395cc6842bd4ff4899709c682d98cd1b550b147b3cb34726188fbe2b3018d0b6eb8da272297832245e27baab0d0e9a41f389210f7d818547ec", 0x1000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000020c0)="f74a0e5ce03f5627eaad1e9b0c0051f0f09cdc796b491a482d0d98caa373f0071105499a63a72aea166fe5a79931aff2ce1def5602a4a30488800b1fa30c4b759bdd19c2a4cfd814098fe78b80a0fe0acb975a28376410a4dafb1daffe9d01257d0e43acda264f7b7121776646dfdc9a4b04fdf603aa603fda6693646fd0c01cd5421890c0a0cd6090fa82ddde4aa483b9f7f94db98b55b1fe3b365d84d54e3fdc0b7b0449558219c1ac949be0890e4543bb443e208b763c742be35def7038700818839d641c2afdf36f68100f958f83436a078ab3a221fbe79abe9f5d87b6140bb428e78d4f6553697fb7379c79428244d57c2e806e4dd6d486a2e352f0f1daad84fc03890518bd6545ce91239db465eec0dfe5119f803c3e1a0fb5dba32d80844578bd2025bcd76e6ef865009b9ecde41ba9645ddae14d573e3eb7c51d20e04ab0a824bf7e5aa35de2fd0f6191317ae9f3044d1dd272a90a2ef8afded27cab7b92ffb062101928ad34defd612f72fb15f875123627012d6d14f818c09649a7bfa27b61e3fb2d039e07723b316844dbfb1380985c8bfeda092a661995858a1f9414167b16bf044af8fe2c7afa514233bd2640940171148a8ccfd89668edfef3d2d713e556ce768357656441db61b27f84bfb415e08edf18906f0ce342b958a9a3b56b249c972459b7542a15c499b8a9dfbaf32b1e9b1c21667ecb328ba29c0b758e08301349074c337367ec8d1f25f629193c5d8f5780f01265836b10ba1c019cd293e71e6e6505681319584e4b3f96ae1d1293122b3a371421b51e7e9059c9fefdeb5f4fea7c5476d0706316edd7cbed584aea1849a06921df6845fcfd3728c5f850e48c73f95c5729c905af30c36d47580b6bf97d58463546fe8270513783005f93d8b96112189c52bc9149708918c4aff97d058700b583aa2716487cdedfb914d62568359f0769f0b6e6ba949055b6ee3c4ddf2764df4615ad2a18fc76c04101d21aba50ec85ab03361e76458849f7d0cd1790b70e51e9eac9d4129b7d87c29c4f74b5aeee6f12134dea2de63c11a19c0324b0f2492294edb2aeea12d995b55abe3d81a0b5decdfa19abbc9ae7dfc6b9cd28bc8a857b7717d1565cc5902d0facb6a079ba5574607b769300a03d606ba35d47893f694da026b277df055f4a4bd6049fe3787ea3b6cb595198c1129e9f7b2c6cce9dc151da18b3c35407c78450ea5cd4ef310705aeef718be2b06326e9a4dd62830db0387767dfa4a9ddb148b2c0162c90b655c6b42eabff1d0f1f1c9fa9c3f0b39aae6a57db0a82ae6a51d3c86dd3b8fc5f2b5d9781ba88a779f6c8d3bd61f3f7dbdeaa35629f94b9363f0ce8b69f9f5df84f121324120f5a8af88cb9b7130942bc7e599aa31bf7b4c0ed48ec7231b112bdbaad595c26fa3c5677799a4335abffb488f89a792ce270b806d125b7171ae4b53c4120c168adff2d4697bbf5eec0ae962b41aea5918299ba8dbab7da9f23f7330ddde0db58acb70e4515edc3c1972e59d2e6e46c5eb94c594ae016d6c8fadfad9820a1ca3c761198af3e053e02223bff99e52182fde5f434cc872ca7ab3fb5d5e9f4c5410441e379fef19d8c47ec2c7021196b325b8145ffb2fff97d8bfcd0e912184b91c02df0e9745f65c5542957cbee69e86a4c2a9076d81e1a8a0913db30ee243ac73f206f85353f2c1357ec029cc84c3dffc6b685dea2bbc023a1ee67f13736d3fe684fc57ca38764f421991db63e855812a78360910ef8eb4c90cd6a54d41bab563465673ed8b2f7e5ef373813733d5780726e771b36308d71689de09ebbf2e8505fe676000ebcbf6204f74149958256ceec81aa76ed88988e0fa9119a1bd644e4c408c82203848a85f130da0584f7c7aaaf6b48359507b23c3877451dc8e5f931578b9f896beb7d19fb79ec28cf2d0e53782789ea2d6498c47b83c3f0de67e03b2eb97fdb149341f9d068ca3b51600b9698610674a70d9d542cc0a681e58194e1c65c22835f1da356c4143b3936b23ffd089f324f34bf36696537a1d66ea53541bce5eba214789946f7d7b09c81c93dee8b9328370a852989e7461d09a1773cae8ba867e9058c609e8525fb182aaf9db2a3112d76c556477b20b250727cf3b40312c49280adada2af3d436719bf2bf6b6d9e3cfb911a11fcb9eec9764700bbe110819e86ee309eeef656079bf49f05588e5181db60df6725e0162f0915ba9a769dd460ca202a63fac9852658ff3b67a60db79c9b66af0f7bc3604ee95b2dd53eea5ecc1c0ae304ae7e7372bce16635e2614c744a55a90a29533e02e2869f0ef77007854cf81e95a87842a19ee318c0d71bec8740d96cc6ee11dc79bd818323c6443506f4b8994d15fec5b197967c9eef29a12b56c6475f46c51a4c2d45ad87c7b741937e28e39fe388ca0373bbb90283326b019b82a411f4586adad9990460b422f6e0c2628a812707514b63f220ca99730d1a819e9fe09ec9b550e0d3175405de093faa1d62a1b9ba4777d3edc655e002ea23b6b9ec738abc21874563ef9f335d6486905f93db477b7a08860b0ae0b85c88ef88b2aa42c8fddcc52b1f61cefbdd8aa95c03d71ea93f81e182e17b3bc4eed3ed81a9aeef3cf7902a63aaa9f0dafc643b7a16961d5e7f36f1861d20a5ec55d1c08f8f13ca1b385c8d6e7c1ffb3bd0d8bc853621af3a78c7529c4abc0bfdbf8aaee42571a776a3095c435c57670d17a87ea789221516011f7cd20d0e0dceccf8c8505533bd009d73279e25e61fb457e3a9c2058e18ff0e53dcc9202692bf5a2fd04654627fe7abc4f9015a29ccc56eda68c2e4c6c3aefad50e9fffa9bdda4a436e2b434c6fd3e311c959bc0b6ee6ff3525407378d55ce01d78f45bf707349fd13e32e610d9480d3454eece411a71be61a4550e3370d2f8372b4f5207be87fc9fe7f748b23c69cbdd5a92ad7ed5c962e2f78fd178a43b1b4d9e47c6094cf93ce05215b1685ec0a4548919522cbb7ce1380be86c73c9d3013e11c6666a156e69296fcc843892c74d38ad3896d911c66df458aec01df2c0714fe8820d7168798d62a41d549d478f50a7c06856d532a9c22054cf1e997c70fbc9625b8eb3fd64b4a433d546889dd8865008c80fd23ce82d8914c34359d22b84103008f45bc87100dc2e0f6b1fb77c2d114663683f1e02c6ef7cd864ea1ae83a4d53ec2a1b00d8b1e61b423faba4d57b748290131360020f413816c480525e99a4b95fd65aea98982a9bfb87d2cf9a672c3ace91d3cece76335f571685f4520210a810a7c0c45cdcbffd27091037c93dd310c443c2cbe18edd625a71c9d943cb07314cc3681858c67d64861fb2176df07c3e615f2a1f2b026c8a7f78632219082c2876efb81cbe5714eec5c4effe8604887385a5f59d72c2efb9bf606f800e4145bea84377816e4f5d8d1b4912d6e0ad366af7e3dc7d360436cea7e473468711423ab1d3829a217dafb1fe7e0dc67401263d0cf58f8ee9d8f02e5a6b63e70d1f87d625f8b5be92b9ee1893e71d751a88118eac28ef97a949bd6164210a4a30437fbd811f742cdd9d75d3a24a0c60bdf18680a03381281881209d946444c1a5f4f8568f9e20e23cfad7a18d5a7190ffc1b142df35e60f427c31fc9179a0c1cdfe33f56ae5248328fe5679a3c9866d90270b21f24a649633274582e1edcccf229e4c63006e019d0634ed08a5a6e1adcc558460fd58325f178debcdd80ef50ef77b69608a68665ebefc30af708041bb3f4d6d1af6b80a29cb2ffb79fd0945c2f6bd2fc7d58d648d8a02bae6f2719cd94bdb9be85c271930f44146dd6e93fd4df23e3b8e310120c5aa26564c80104343faeb9a5b9cee8eff7b5979981e7237d0c7a222ec93670aedf81338bca282fe3b2445bcb06cff1a7c2c97129cd8b1d9dde66a70938c1d8169251bfdcab6017899aad803e80456521dfefde244e23bb67d5c7753d21f6430f5ecccb505e41d021d4805fdc05661db090fb61f9af4e72cad250001ca373afe67101eaa4157b1212cfeef34a76d99f3375a086b2ede9dd47e97dd7af74c1d4b4d48293287c29d92923aa720ec8623de03ac476d03cd35f93037710ed4374842cae73229d755bace8f7613b628025e3724c4e25b87b5f674a3bd4fe58dc2c78c56f68b1d22731d310f00d9cde41b9849461c67651568cc5ad094531ce8abc43f720761b5dced10ab6b3e7e6caced5b104bc806a0d5c4e3325c5c2714013b44fb4d5690484f6d0e70cdd55025a88299047db0e7ccf81d12030c7c69f46503d47078cb7a142de5eb98ca7b2cd56887588ac77d5bda95bf39480fbaed02c5bb86f0739baeafd0b2eff23a8e82b450d79ef31acedceb0f7147f41f3cdfdc13b90c206db2fddea382025c4725368eade326c297b0cd800e72620b51607e9cc5c6d1b6d0c4cfdc1d68dafe82602e6e2b2add3553de78b6d6ec076f488722fdb07aa7060b0e73e8fa5e4ed6e901e8b3ee0a2d578547292ebb51067c9c8dba19110d36e150232b5c0f414c5404cac861e7c8275dbf7e4c1e0f103fdc63ad5d3cde522d354f7af9701abc4a6a172628b41a30de13470ff33f8ddbd22f92d6a7def70553a9cf4808a62156169e71a9b9320ac9356ec66d520a4548a2c1677b05180b35e7168e806bcecf69a9fb5ed81842508c2d1564ca124772c1e3398af8b6bb0679b82e34edc3a86ab6027d42eb4538afb44a867bdd1536ce52fac0c9dca17f47c7d27ceb2e07999d927f732854e9903912d3885d04d59aa7555be042a195da1acb749fe7a3ae98460ffb0ba6297456912c18ffa5cea704ce492f585b09b4007d8f5bd32220837eaae3fe24b74e84f3442245b015c11e1eedd18aebfbf903a2fb19089467a3e16a866c72236b7bc25176ab006e4b589e4a2a9d25bafbe245bfbe050374a5e8a0c3d0aca2d2070ade39c3022030e196e80d4d40a58a919834fcfb5273a90a8929da95489a61a5b69ccfe1554c887eb193806c17caca5bb19f46f4c2458c65418a847d5289b1d24148f933a38f3d22f5f581379bb48a9fb1f4f0ee24bb9f1cd67fef34936d4e77f96553a8519a03f63b9ea96d4df86ec96a0f5673e4af97ed0c155493ccc3b8a61a025a01d0cc503dd2faffb6bfa57bff82595e941d935c53c719037092ee166b7f770e6163464c0d338e44577f57fab6833c3a12281c8c8b447e87b7be4b59e6ddbe14d80c827691ff1b92ffe2e80d51872aa8bc5042b373139fc190e03dd2113287a19611dba0453523ffdcf867c393ea0888185861d1230b34abb3058ba82b1a4060ea9b3a67431eaf77bfd80bfb6939f89ea47a183b3f658fd26b8c179e8c8a4c130728b9f8e023a7d52b9bb536ef5fcfaddd18369cab9a0da2d1a87bdf852423870f2c20050aa15f9994bd2eed6f2f8e274b60d8deb82c76003d7205dba0b8760f31cc47f29f00160dcb16c300251fd85c68fc0b694bfee1bfff83ec6a0882ac0a1fb94375f54f065a9d469e3b33bb320d9ff8f75ae09991ca5960aaf45417d4a9dab1230816661e9bc563cc791f122a8d8819918b29d0ebf90a59fc9ae60bbbdbee5cbe8869908b3cdab28f0536985d05ecba897da4a988a9356f6600624b1753cb8fe8afc848ae3726fcd08073a71c926d1aa1b353f3cd6a0fc8040dfd0830a9a4215817afda1ff2e4e26dd6b1ef1acdf0466e6c97d69d4a6bbe0cb349ee2d4cb0fa2a2dfc5d746db3f6780387903d372c0fbd11acd19e3e419dcf20a2a1a14658ed7681f539e4283ff76367b1dae3e18c12a0c5fdab752036478f25f") setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) write$P9_RGETLOCK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="230000003701000000000000000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0500010100004a293a23"], 0x23) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000000700000000000000fbffffff01840000", @ANYRES32=r1, @ANYBLOB='\b*\x00'/20, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0400000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000dcab1b6c0951f814aab1b7b60e8d882540b4bef606d5d6e5be16fb22aa2153c211338b011487b55911d0d56104c43a511ee5c673e0887a2f7d4710429d2f56795704b12be1102cf98d0589fe65d4d2a6d444403b81af7f0c318acf7cf3f30db21feff53445a5d702e7722c0ca83acb5e09ff23a792a41554"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40800) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x6, 0x4f, 0x3, 0x6}, {0x6, 0x4, 0x2, 0x6749}, {0x7, 0x4, 0xa0, 0x8}, {0x0, 0xff, 0x80, 0xe8fe}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket(0x1e, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r9) ustat(0x9, &(0x7f0000000000)) 2.570660412s ago: executing program 3 (id=3318): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x0, 0xc) sendfile(r0, r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(0x0, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) 2.428972394s ago: executing program 1 (id=3319): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40e443, 0x0) close_range(0xffffffffffffffff, r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a805f12a6fdbce88acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES8=0xffffffffffffffff], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000009581d3c4fb1b516d17cb5885dd9f7bce005ea9ca9c8ae7358e08a41e38dc0d195e29cf401e6a59138ed5f7db21cd8b305dbbd46fb1c2fa97da4a29f0ef07791274cf78456edd8871ecd2a647a111fd2c9e6b8e07722c62d1db1a79282529591e7828711bde313f9e3eb32db12b026ffaa3b5f214ee8c79a8c499e38c604575fe869902c5efc7206763262e7ba7a5ff8836d94700bd2a6f56d32a855bf70ae0dd859da95ed220e8cb016ad20411c94226e62b6ba4c208a8"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0x401, 0x6, 0x4000, 0xac9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x40, 0x558}) r4 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) unshare(0x42000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 2.353330925s ago: executing program 1 (id=3320): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.765750874s ago: executing program 1 (id=3323): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.682834395s ago: executing program 0 (id=3324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x2c020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) 1.640907036s ago: executing program 3 (id=3325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000002}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="62ceed221eda8173c92b8b7b", @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000080000000000014000600ff05000000000000000000000000000108000100c6bcf9dd17b779"], 0x50}}, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) lstat(0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000000020104000000000000000002000000240002801400018008000100ac1414aa08000200e00000010c0002800500010000000000180003801400018008000100ac141441081a0200ac1414bb040001"], 0x54}}, 0x40) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 1.445420709s ago: executing program 0 (id=3326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) close_range(r1, r2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000011ff0300000174ed82"], 0x1c) write$selinux_context(r6, &(0x7f0000000000)='system_u:object_r:userio_device_t:s0\x00', 0x25) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 1.399520539s ago: executing program 3 (id=3328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlockall() 1.36287984s ago: executing program 0 (id=3329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) setgroups(0x0, 0x0) 1.315925361s ago: executing program 3 (id=3330): creat(0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) 1.291771811s ago: executing program 0 (id=3331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x8e1eb7f89cc1165}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="af6188900daecef92afd63498e6066511ff6895e5d07ab38b7ba6c8f369272e0a99b8ddd5f9288350e0ac6bdc4db338268c68e945c0d0ee84109a6e1dc196bd36b959a69d91c273b75d8e3a7cab971317791e916fa9bfd301705847fd444ad1f44c1e72b1bc4d1fb7d475eb1143488431c2c8588ab933eef6bd83b34aaf77f08b62dd5f75ee903b814cce8206cfe922b9f4b351858bced9f7c1e4fab3e9811e668c04ea5a3786b62152d4c7f296389d009fd27d6ce3b8ca31db35709a128f3a4de41467fad386916c87021e62a9b561cf6ef1bcd7e70aa66df27c92173ed3f9fbbc88d0d99e12208c75f492c289c7ae8404b3e99461978", 0xf7}, {&(0x7f00000001c0)="e13e6be9a4fa840c3e6aa03824498440ba8cb3fbb8500e390554b0b13bde3ae278198ea3fa9d8683b7cafad2a8a1eeb7cd8c0b761c638d79cacb91648727db5b6a7899d7806eac4da1684caf88f9614a6e680a48b892cae842395e2c11b8b90e40150dfef3f166e41c7d67364a42a47c0b912b5bc706b79c24694d8adfc71b", 0x7f}], 0x2, 0x0, 0x0, 0x8010}, 0xf5) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = io_uring_setup(0x5824, &(0x7f00000003c0)={0x0, 0xdf09, 0x2010, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000300)={r2, r4, 0x4f91, 0x22, &(0x7f00000002c0)="d5f5995ab0c3e885b243780b3f833618a29d5f344006f358867b19e5f2620e715fcb", 0x3, 0x52, 0xd2b8, 0xffff, 0x8, 0x0, 0xce8, 'syz1\x00'}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(r6, r7, 0x0, 0x20000023896) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRESOCT=r6, @ANYRES16=r1, @ANYBLOB="995e9661cd93891dd086be4da25abb8b6f63c5935402a206be3d2945d258f623bfe9dd504b6c9ceebef35d9493a4a4415e9736ecd5912b912780858acf37f1e63ee72d25ce4c17"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1.257090261s ago: executing program 1 (id=3333): creat(0x0, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) 1.172109533s ago: executing program 2 (id=3334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2b, 0x80801, 0x1) setsockopt(r1, 0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000800)='./bus\x00', r12}, 0x18) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmmsg$inet6(r9, &(0x7f0000001180)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="0543", 0x2}], 0x1}}], 0x2, 0x4004851) setsockopt(r9, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) connect$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @remote, 0x8}, 0x1c) 1.170711533s ago: executing program 4 (id=3335): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x0, 0xc) sendfile(r0, r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(0x0, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) 684.22069ms ago: executing program 0 (id=3336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x8e1eb7f89cc1165}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="af6188900daecef92afd63498e6066511ff6895e5d07ab38b7ba6c8f369272e0a99b8ddd5f9288350e0ac6bdc4db338268c68e945c0d0ee84109a6e1dc196bd36b959a69d91c273b75d8e3a7cab971317791e916fa9bfd301705847fd444ad1f44c1e72b1bc4d1fb7d475eb1143488431c2c8588ab933eef6bd83b34aaf77f08b62dd5f75ee903b814cce8206cfe922b9f4b351858bced9f7c1e4fab3e9811e668c04ea5a3786b62152d4c7f296389d009fd27d6ce3b8ca31db35709a128f3a4de41467fad386916c87021e62a9b561cf6ef1bcd7e70aa66df27c92173ed3f9fbbc88d0d99e12208c75f492c289c7ae8404b3e99461978", 0xf7}], 0x1, 0x0, 0x0, 0x8010}, 0xf5) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = io_uring_setup(0x5824, &(0x7f00000003c0)={0x0, 0xdf09, 0x2010, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000300)={r4, r6, 0x4f91, 0x22, &(0x7f00000002c0)="d5f5995ab0c3e885b243780b3f833618a29d5f344006f358867b19e5f2620e715fcb", 0x3, 0x52, 0xd2b8, 0xffff, 0x8, 0x0, 0xce8, 'syz1\x00'}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(r8, r9, 0x0, 0x20000023896) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=r5, @ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES32=r6, @ANYRESOCT=r8, @ANYRES16=r3, @ANYBLOB="995e9661cd93891dd086be4da25abb8b6f63c5935402a206be3d2945d258f623bfe9dd504b6c9ceebef35d9493a4a4415e9736ecd5912b912780858acf37f1e63ee72d25ce4c17"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r11, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 456.569954ms ago: executing program 3 (id=3337): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1e00010000000000000000000000007f00000100000000000000000000000000040000000000000a0080005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 339.403335ms ago: executing program 1 (id=3338): getpid() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x2200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x1, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000006bebb405a8b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000955fbed6f3e40921113a5aaacbf68326ef2e9100becb29164c9ce248c9cf76a5fac39cc4f5a2475d2fae9a08f4eb4eacb4a0099f9c1d6f6d1c3da7ece659b84af9b833ab59ca539b4d581c00a56a13fcdbb1cf9c6e57b383921c1c1a46955d46121c93ff59879458365637b611088a56175d154353734e362c6b64de95057115987c59df13912e9a9b2a095fd88fc4b96f37da5e479f0e4d748265c90eea831e3561b08502683ea499"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa00000a1) close(r4) 316.822376ms ago: executing program 4 (id=3339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000040) 300.827806ms ago: executing program 2 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000a03000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000280)=@sr0, r10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}}, 0x4000880) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000008240004801300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x190, r2, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x19, 0x3, "3da46abe99c31eca212f7e6b474df0d56c749f3eb7"}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "d35669d9b5b7760871a889d6c77a160c74eebdfaba66d1b440dc58d4b6ff9e61dc4f7637ada483d931ab09c6d9a04dd3b40d94a8c60e66c7a9d934d4710b84b6449f044d6317a953a7ef3f1a30b4edd76d90b7cb8a6a8eb49483215356e5ad4fc03112ef93b4f99b1202f8c42daac7ffc98d220e1b6ccccbd1cdf29d8706634c1db241380942f8c0e95d151ce7b23ef0b2bd88b78e22c98c9b76f9fd037e3fa93d3ce9f0c6e3dcbfb036079107b1641b8ebdae6b6fb2b6f9c815b7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2805}, 0x8040) 209.783837ms ago: executing program 4 (id=3341): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r0, 0x2f, 0x18, 0x4, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 100.944749ms ago: executing program 4 (id=3342): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x0, 0xc) sendfile(r0, r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(0x0, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) unshare(0x24040000) unshare(0x2c020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) msgget$private(0x0, 0x69c) 76.213679ms ago: executing program 4 (id=3343): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40e443, 0x0) close_range(0xffffffffffffffff, r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a805f12a6fdbce88acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES8=0xffffffffffffffff], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000009581d3c4fb1b516d17cb5885dd9f7bce005ea9ca9c8ae7358e08a41e38dc0d195e29cf401e6a59138ed5f7db21cd8b305dbbd46fb1c2fa97da4a29f0ef07791274cf78456edd8871ecd2a647a111fd2c9e6b8e07722c62d1db1a79282529591e7828711bde313f9e3eb32db12b026ffaa3b5f214ee8c79a8c499e38c604575fe869902c5efc7206763262e7ba7a5ff8836d94700bd2a6f56d32a855bf70ae0dd859da95ed220e8cb016ad20411c94226e62b6ba4c208a8"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0x401, 0x6, 0x4000, 0xac9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x40, 0x558}) r4 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) unshare(0x42000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 0s ago: executing program 4 (id=3344): r0 = getpid() setreuid(0xee00, 0x0) (async) io_setup(0xffff, &(0x7f0000000940)) (async) io_setup(0xff, &(0x7f0000001040)) (async) r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x6, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)={0x14, 0x22, 0x601, 0x0, 0x0, "", [@nested={0x4, 0x13f}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64) prlimit64(r0, 0x6, &(0x7f0000000040)={0x80, 0x192b}, 0x0) (async, rerun: 64) setns(r1, 0x24020000) syz_clone3(&(0x7f0000000080)={0xb1244500, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x61, 0x0, 0x0, 0xff14}, 0x58) kernel console output (not intermixed with test programs): 292.136694][T12546] swapin_readahead+0xde/0x6f0 [ 292.136731][T12546] ? __filemap_get_folio+0x49f/0x650 [ 292.136762][T12546] ? swap_cache_get_folio+0x77/0x200 [ 292.136787][T12546] do_swap_page+0x301/0x2460 [ 292.136817][T12546] ? _raw_spin_unlock+0x26/0x50 [ 292.136848][T12546] ? finish_task_switch+0xad/0x2b0 [ 292.136881][T12546] ? __pfx_default_wake_function+0x10/0x10 [ 292.136909][T12546] handle_mm_fault+0xb60/0x2ae0 [ 292.136941][T12546] ? mas_walk+0xf2/0x120 [ 292.137048][T12546] do_user_addr_fault+0x636/0x1090 [ 292.137077][T12546] ? switch_fpu_return+0xe/0x20 [ 292.137127][T12546] exc_page_fault+0x54/0xc0 [ 292.137204][T12546] asm_exc_page_fault+0x26/0x30 [ 292.137230][T12546] RIP: 0033:0x7f07b79f53ac [ 292.137251][T12546] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 292.137275][T12546] RSP: 002b:00007ffca54586f0 EFLAGS: 00010206 [ 292.137295][T12546] RAX: 0000000000000000 RBX: 00007f07b7d45fa0 RCX: 0000000000000000 [ 292.137312][T12546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555916fa808 [ 292.137377][T12546] RBP: 00007f07b7d47ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 292.137393][T12546] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000047503 [ 292.137409][T12546] R13: 00007f07b7d46160 R14: ffffffffffffffff R15: 00007ffca5458800 [ 292.137435][T12546] [ 292.137445][T12546] memory: usage 307200kB, limit 307200kB, failcnt 1857 [ 292.175742][T12575] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 292.179733][T12546] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 292.179752][T12546] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 292.179827][T12546] Memory cgroup stats for /syz0: [ 292.180159][T12546] cache 0 [ 292.184465][T12575] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 292.189107][T12546] rss 0 [ 292.189123][T12546] shmem 0 [ 292.189205][T12546] mapped_file 0 [ 292.189214][T12546] dirty 0 [ 292.189223][T12546] writeback 8192 [ 292.189232][T12546] workingset_refault_anon 1309 [ 292.189243][T12546] workingset_refault_file 1636 [ 292.189254][T12546] swap 196608 [ 292.442504][T12577] lo speed is unknown, defaulting to 1000 [ 292.444943][T12546] swapcached 20480 [ 292.444955][T12546] pgpgin 502946 [ 292.444964][T12546] pgpgout 502937 [ 292.461761][T12546] pgfault 355799 [ 292.465360][T12546] pgmajfault 535 [ 292.465611][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 292.468905][T12546] inactive_anon 20480 [ 292.468916][T12546] active_anon 0 [ 292.468926][T12546] inactive_file 16384 [ 292.489302][T12546] active_file 0 [ 292.492854][T12546] unevictable 0 [ 292.496329][T12546] hierarchical_memory_limit 314572800 [ 292.501735][T12546] hierarchical_memsw_limit 9223372036854771712 [ 292.507911][T12546] total_cache 0 [ 292.511486][T12546] total_rss 0 [ 292.514794][T12546] total_shmem 0 [ 292.518263][T12546] total_mapped_file 0 [ 292.522286][T12546] total_dirty 0 [ 292.525881][T12546] total_writeback 8192 [ 292.529966][T12546] total_workingset_refault_anon 1309 [ 292.535313][T12546] total_workingset_refault_file 1636 [ 292.540797][T12546] total_swap 196608 [ 292.544628][T12546] total_swapcached 20480 [ 292.546345][T12580] sctp: [Deprecated]: syz.2.2936 (pid 12580) Use of int in max_burst socket option deprecated. [ 292.546345][T12580] Use struct sctp_assoc_value instead [ 292.548875][T12546] total_pgpgin 502946 [ 292.548887][T12546] total_pgpgout 502937 [ 292.548897][T12546] total_pgfault 355799 [ 292.576740][T12546] total_pgmajfault 535 [ 292.580920][T12546] total_inactive_anon 20480 [ 292.585499][T12546] total_active_anon 0 [ 292.589549][T12546] total_inactive_file 16384 [ 292.594096][T12546] total_active_file 0 [ 292.598099][T12546] total_unevictable 0 [ 292.602194][T12546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2925,pid=12546,uid=0 [ 292.617004][T12546] Memory cgroup out of memory: Killed process 12546 (syz.0.2925) total-vm:95928kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 292.898018][T12585] 9pnet: p9_errstr2errno: server reported unknown error [ 292.975204][T12591] netlink: 'syz.4.2942': attribute type 6 has an invalid length. [ 293.042107][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 293.049019][T12599] lo speed is unknown, defaulting to 1000 [ 293.051809][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 293.106734][T12602] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.136373][T12600] loop3: detected capacity change from 0 to 8192 [ 293.143166][T12600] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 293.176226][T12606] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.188394][T12606] loop2: detected capacity change from 0 to 512 [ 293.195688][T12606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.217661][T12599] loop3: detected capacity change from 0 to 512 [ 293.224858][T12606] EXT4-fs (loop2): 1 truncate cleaned up [ 293.232009][T12599] ext4: Unknown parameter 'smackfshat' [ 293.241940][T12605] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.260667][T12606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.315523][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 293.324578][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 293.334067][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 293.384654][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 293.456581][T12605] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.538030][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.579717][T12623] loop2: detected capacity change from 0 to 1024 [ 293.589345][T12623] EXT4-fs: Ignoring removed nobh option [ 293.595090][T12623] EXT4-fs: Ignoring removed bh option [ 293.610958][T12605] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.639577][T12623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.657043][T12632] netlink: 'syz.3.2958': attribute type 6 has an invalid length. [ 293.683898][T12623] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2954: Allocating blocks 385-513 which overlap fs metadata [ 293.699428][T12623] EXT4-fs (loop2): pa ffff888106dd1930: logic 16, phys. 129, len 24 [ 293.707529][T12623] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 293.720383][T12516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.779754][T12605] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.798109][T12639] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 293.829816][T12641] sctp: [Deprecated]: syz.0.2960 (pid 12641) Use of int in max_burst socket option deprecated. [ 293.829816][T12641] Use struct sctp_assoc_value instead [ 293.852727][T12637] lo speed is unknown, defaulting to 1000 [ 293.858643][T12639] loop3: detected capacity change from 0 to 512 [ 293.867990][T12516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.879163][T12639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.897380][T12639] EXT4-fs (loop3): 1 truncate cleaned up [ 293.898590][T12623] veth1_macvtap: left promiscuous mode [ 293.904186][T12639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.909708][T12623] macsec0: entered promiscuous mode [ 293.926058][T12623] macsec0: entered allmulticast mode [ 293.939344][T12623] veth1_macvtap: entered promiscuous mode [ 293.945197][T12623] veth1_macvtap: entered allmulticast mode [ 293.951631][T12623] macsec0: left promiscuous mode [ 293.956646][T12623] macsec0: left allmulticast mode [ 293.961743][T12623] veth1_macvtap: left allmulticast mode [ 293.986265][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.997175][T12516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.023286][T12516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.035062][T12516] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.047248][T12516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.047943][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.090577][T12605] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.107399][T12649] 9pnet: Could not find request transport: fd0x0000000000000003 [ 294.116753][T12605] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.124821][T12649] 9pnet: Could not find request transport: fd0x0000000000000003 [ 294.164905][T12605] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.181901][T12646] lo speed is unknown, defaulting to 1000 [ 294.193969][T12653] loop3: detected capacity change from 0 to 8192 [ 294.199543][T12605] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.215399][T12653] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 294.271826][T12653] loop3: detected capacity change from 0 to 512 [ 294.284045][T12653] ext4: Unknown parameter 'smackfshat' [ 294.314825][T12657] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.429835][T12657] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.449981][T12673] loop3: detected capacity change from 0 to 1024 [ 294.457309][T12673] EXT4-fs: Ignoring removed nobh option [ 294.463160][T12673] EXT4-fs: Ignoring removed bh option [ 294.472774][T12673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.489521][T12673] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2974: Allocating blocks 385-513 which overlap fs metadata [ 294.504524][T12673] EXT4-fs (loop3): pa ffff888105ab7e70: logic 16, phys. 129, len 24 [ 294.512568][T12673] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 294.539605][T12657] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.591571][T12677] veth1_macvtap: left promiscuous mode [ 294.597367][T12677] macsec0: entered promiscuous mode [ 294.602730][T12677] macsec0: entered allmulticast mode [ 294.617225][T12673] veth1_macvtap: entered promiscuous mode [ 294.623095][T12673] veth1_macvtap: entered allmulticast mode [ 294.628512][T12679] 9pnet: Could not find request transport: fd0x0000000000000003 [ 294.629128][T12673] macsec0: left promiscuous mode [ 294.642050][T12673] macsec0: left allmulticast mode [ 294.647108][T12673] veth1_macvtap: left allmulticast mode [ 294.681966][T12657] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.695530][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.704843][T12679] 9pnet: Could not find request transport: fd0x0000000000000003 [ 294.785760][T12683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.803867][T12683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.918397][T12683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.929919][T12683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.977660][T12691] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.988610][T12691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.047626][T12683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.059960][T12683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.083192][T12695] lo speed is unknown, defaulting to 1000 [ 295.109759][T12691] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.122220][T12691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.175126][T12696] loop2: detected capacity change from 0 to 8192 [ 295.182504][T12696] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 295.206974][T12683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.219468][T12683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.230874][T12696] loop2: detected capacity change from 0 to 512 [ 295.238452][T12696] ext4: Unknown parameter 'smackfshat' [ 295.254661][T12691] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.265161][T12691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.316529][T12700] lo speed is unknown, defaulting to 1000 [ 295.419047][T12702] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.427696][T12702] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.436745][T12702] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.445396][T12702] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.458841][T12702] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.467372][T12702] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.475972][T12702] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.484822][T12702] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.537685][T12691] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.548882][T12691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.584349][T12683] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.592641][T12683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.606541][T12683] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.614807][T12683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.636045][T12683] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.644331][T12683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.667359][T12683] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.675831][T12683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.687977][T12706] sctp: [Deprecated]: syz.2.2986 (pid 12706) Use of int in max_burst socket option deprecated. [ 295.687977][T12706] Use struct sctp_assoc_value instead [ 295.706978][T12705] lo speed is unknown, defaulting to 1000 [ 295.731534][T12708] 9pnet: Could not find request transport: fd0x0000000000000003 [ 295.753984][T12708] 9pnet: Could not find request transport: fd0x0000000000000003 [ 295.836420][T12712] lo speed is unknown, defaulting to 1000 [ 295.876380][T12717] loop3: detected capacity change from 0 to 8192 [ 295.883388][T12717] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 295.913464][T12716] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.923105][T12716] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.932655][T12716] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.932766][T12717] loop3: detected capacity change from 0 to 512 [ 295.933114][T12717] ext4: Unknown parameter 'smackfshat' [ 295.941773][T12716] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.985482][T12691] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.993850][T12691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.005146][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 296.005161][ T29] audit: type=1326 audit(1747248606.212:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.012051][T12691] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.038736][ T29] audit: type=1326 audit(1747248606.212:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.043277][T12691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.047833][T12691] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.066795][ T29] audit: type=1326 audit(1747248606.212:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.066834][ T29] audit: type=1326 audit(1747248606.212:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.075129][T12691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.080031][T12691] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.083429][ T29] audit: type=1326 audit(1747248606.212:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.106931][T12691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.130341][ T29] audit: type=1326 audit(1747248606.212:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.203738][ T29] audit: type=1326 audit(1747248606.212:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.227394][ T29] audit: type=1326 audit(1747248606.212:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.251245][ T29] audit: type=1326 audit(1747248606.212:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.274875][ T29] audit: type=1326 audit(1747248606.212:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24ade969 code=0x7ffc0000 [ 296.352369][T12729] lo speed is unknown, defaulting to 1000 [ 296.425765][T12730] loop3: detected capacity change from 0 to 8192 [ 296.432496][T12730] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 296.483410][T12729] loop3: detected capacity change from 0 to 512 [ 296.490206][T12729] ext4: Unknown parameter 'smackfshat' [ 296.539450][T12732] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.548510][T12732] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.558630][T12732] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.567930][T12732] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.596575][T12740] 9pnet_fd: Insufficient options for proto=fd [ 296.603478][T12740] 9pnet_fd: Insufficient options for proto=fd [ 296.603709][T12732] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.619688][T12732] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.629258][T12732] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.638188][T12732] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.793517][T12749] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.804886][T12749] loop2: detected capacity change from 0 to 512 [ 296.812147][T12749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.823595][T12749] EXT4-fs (loop2): 1 truncate cleaned up [ 296.829686][T12749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.844291][T12749] __nla_validate_parse: 11 callbacks suppressed [ 296.844309][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.859467][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.869598][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.890677][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.899644][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.909018][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.956069][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.965157][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 296.974575][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 297.008454][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.067743][T12763] lo speed is unknown, defaulting to 1000 [ 297.135914][T12769] sctp: [Deprecated]: syz.2.3006 (pid 12769) Use of int in max_burst socket option deprecated. [ 297.135914][T12769] Use struct sctp_assoc_value instead [ 297.166840][T12768] lo speed is unknown, defaulting to 1000 [ 297.293515][T12777] 9pnet_fd: Insufficient options for proto=fd [ 297.300051][T12777] 9pnet_fd: Insufficient options for proto=fd [ 297.763241][T12789] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.774141][T12789] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.826128][T12789] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.836797][T12789] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.890790][T12789] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.901107][T12789] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.916411][T12791] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 297.932340][T12791] loop2: detected capacity change from 0 to 512 [ 297.939312][T12791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 297.951268][T12791] EXT4-fs (loop2): 1 truncate cleaned up [ 297.957375][T12791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.971784][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'. [ 297.999445][T12789] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.010684][T12789] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.058955][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.103744][T12789] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.113124][T12789] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.141522][T12789] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.150185][T12789] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.221328][T12789] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.230719][T12789] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.250206][T12805] lo speed is unknown, defaulting to 1000 [ 298.324149][T12789] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.334324][T12789] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.475165][T12815] 9pnet_fd: Insufficient options for proto=fd [ 298.483006][T12815] 9pnet_fd: Insufficient options for proto=fd [ 298.692173][T12657] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.717116][T12657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.729420][T12657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.743747][T12657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.764033][T12827] veth1_macvtap: left promiscuous mode [ 298.769590][T12827] macsec0: entered promiscuous mode [ 298.774973][T12827] macsec0: entered allmulticast mode [ 298.789201][T12827] veth1_macvtap: entered promiscuous mode [ 298.795026][T12827] veth1_macvtap: entered allmulticast mode [ 298.801347][T12827] macsec0: left promiscuous mode [ 298.806382][T12827] macsec0: left allmulticast mode [ 298.811565][T12827] veth1_macvtap: left allmulticast mode [ 298.940868][T12839] lo speed is unknown, defaulting to 1000 [ 299.041614][T12846] 9pnet_fd: Insufficient options for proto=fd [ 299.048099][T12846] 9pnet_fd: Insufficient options for proto=fd [ 299.091159][T12842] loop2: detected capacity change from 0 to 8192 [ 299.097944][T12842] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 299.137327][T12839] loop2: detected capacity change from 0 to 512 [ 299.144102][T12839] ext4: Unknown parameter 'smackfshat' [ 300.071472][T12855] syz.3.3039 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 300.085741][T12855] CPU: 1 UID: 0 PID: 12855 Comm: syz.3.3039 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 300.085772][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 300.085785][T12855] Call Trace: [ 300.085792][T12855] [ 300.085799][T12855] __dump_stack+0x1d/0x30 [ 300.085819][T12855] dump_stack_lvl+0xe8/0x140 [ 300.085839][T12855] dump_stack+0x15/0x1b [ 300.085930][T12855] dump_header+0x81/0x220 [ 300.086021][T12855] oom_kill_process+0x334/0x3f0 [ 300.086058][T12855] out_of_memory+0x979/0xb80 [ 300.086087][T12855] ? css_next_descendant_pre+0x138/0x160 [ 300.086110][T12855] mem_cgroup_out_of_memory+0x13d/0x190 [ 300.086155][T12855] try_charge_memcg+0x5e2/0x870 [ 300.086336][T12855] obj_cgroup_charge_pages+0xb7/0x1a0 [ 300.086368][T12855] __memcg_kmem_charge_page+0x9f/0x170 [ 300.086400][T12855] __alloc_frozen_pages_noprof+0x188/0x360 [ 300.086443][T12855] alloc_pages_mpol+0xb3/0x250 [ 300.086507][T12855] alloc_pages_noprof+0x90/0x130 [ 300.086530][T12855] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 300.086578][T12855] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 300.086611][T12855] ? ip_set_alloc+0x1f/0x30 [ 300.086706][T12855] ? ip_set_alloc+0x1f/0x30 [ 300.086732][T12855] ? __kmalloc_cache_noprof+0x189/0x320 [ 300.086762][T12855] ip_set_alloc+0x1f/0x30 [ 300.086819][T12855] hash_netiface_create+0x282/0x740 [ 300.086857][T12855] ? __pfx_hash_netiface_create+0x10/0x10 [ 300.086895][T12855] ip_set_create+0x3cc/0x960 [ 300.087010][T12855] ? __nla_parse+0x40/0x60 [ 300.087033][T12855] nfnetlink_rcv_msg+0x4c6/0x590 [ 300.087118][T12855] netlink_rcv_skb+0x120/0x220 [ 300.087198][T12855] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 300.087298][T12855] nfnetlink_rcv+0x16b/0x1690 [ 300.087322][T12855] ? __kfree_skb+0x109/0x150 [ 300.087339][T12855] ? nlmon_xmit+0x4f/0x60 [ 300.087397][T12855] ? consume_skb+0x49/0x150 [ 300.087434][T12855] ? nlmon_xmit+0x4f/0x60 [ 300.087460][T12855] ? dev_hard_start_xmit+0x39e/0x3d0 [ 300.087491][T12855] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 300.087527][T12855] ? __dev_queue_xmit+0x182/0x1fb0 [ 300.087549][T12855] ? __list_del_entry_valid_or_report+0x65/0x130 [ 300.087579][T12855] ? ref_tracker_free+0x37d/0x3e0 [ 300.087625][T12855] ? __netlink_deliver_tap+0x4dc/0x500 [ 300.087673][T12855] netlink_unicast+0x5a1/0x670 [ 300.087715][T12855] netlink_sendmsg+0x58b/0x6b0 [ 300.087780][T12855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.087878][T12855] __sock_sendmsg+0x142/0x180 [ 300.087915][T12855] ____sys_sendmsg+0x31e/0x4e0 [ 300.087946][T12855] ___sys_sendmsg+0x17b/0x1d0 [ 300.087980][T12855] __x64_sys_sendmsg+0xd4/0x160 [ 300.088038][T12855] x64_sys_call+0x2999/0x2fb0 [ 300.088067][T12855] do_syscall_64+0xd0/0x1a0 [ 300.088100][T12855] ? clear_bhb_loop+0x40/0x90 [ 300.088149][T12855] ? clear_bhb_loop+0x40/0x90 [ 300.088177][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.088219][T12855] RIP: 0033:0x7f881ae8e969 [ 300.088240][T12855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.088262][T12855] RSP: 002b:00007f88194f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.088317][T12855] RAX: ffffffffffffffda RBX: 00007f881b0b5fa0 RCX: 00007f881ae8e969 [ 300.088407][T12855] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 300.088419][T12855] RBP: 00007f881af10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 300.088452][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.088468][T12855] R13: 0000000000000000 R14: 00007f881b0b5fa0 R15: 00007ffd82f67158 [ 300.088494][T12855] [ 300.088502][T12855] memory: usage 307200kB, limit 307200kB, failcnt 895 [ 300.203147][T12883] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.207607][T12855] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 300.207627][T12855] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 300.218029][T12883] loop2: detected capacity change from 0 to 512 [ 300.222760][T12855] Memory cgroup stats for [ 300.229309][T12883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.233107][T12855] /syz3: [ 300.233822][T12855] cache 0 [ 300.249108][T12883] EXT4-fs (loop2): 1 truncate cleaned up [ 300.252828][T12855] rss 0 [ 300.252846][T12855] shmem 0 [ 300.252872][T12855] mapped_file 0 [ 300.252879][T12855] dirty 0 [ 300.252885][T12855] writeback 0 [ 300.252894][T12855] workingset_refault_anon 858 [ 300.252905][T12855] workingset_refault_file 1397 [ 300.258333][T12883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.262181][T12855] swap 188416 [ 300.262192][T12855] swapcached 16384 [ 300.549975][T12855] pgpgin 339131 [ 300.553503][T12855] pgpgout 339116 [ 300.557056][T12855] pgfault 404167 [ 300.560700][T12855] pgmajfault 295 [ 300.564327][T12855] inactive_anon 16384 [ 300.568461][T12855] active_anon 0 [ 300.572065][T12855] inactive_file 45056 [ 300.576056][T12855] active_file 0 [ 300.579703][T12855] unevictable 0 [ 300.583353][T12855] hierarchical_memory_limit 314572800 [ 300.588777][T12855] hierarchical_memsw_limit 9223372036854771712 [ 300.595046][T12855] total_cache 0 [ 300.598513][T12855] total_rss 0 [ 300.601826][T12855] total_shmem 0 [ 300.605277][T12855] total_mapped_file 0 [ 300.609280][T12855] total_dirty 0 [ 300.612824][T12855] total_writeback 0 [ 300.616680][T12855] total_workingset_refault_anon 858 [ 300.621914][T12855] total_workingset_refault_file 1397 [ 300.627193][T12855] total_swap 188416 [ 300.631054][T12855] total_swapcached 16384 [ 300.635387][T12855] total_pgpgin 339131 [ 300.639453][T12855] total_pgpgout 339116 [ 300.643541][T12855] total_pgfault 404167 [ 300.647599][T12855] total_pgmajfault 295 [ 300.651717][T12855] total_inactive_anon 16384 [ 300.656234][T12855] total_active_anon 0 [ 300.660212][T12855] total_inactive_file 45056 [ 300.664768][T12855] total_active_file 0 [ 300.668782][T12855] total_unevictable 0 [ 300.672874][T12855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3039,pid=12853,uid=0 [ 300.687697][T12855] Memory cgroup out of memory: Killed process 12853 (syz.3.3039) total-vm:95928kB, anon-rss:936kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 300.727130][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.781020][T12899] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.824908][T12899] loop2: detected capacity change from 0 to 512 [ 300.855339][T12899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.886748][T12899] EXT4-fs (loop2): 1 truncate cleaned up [ 300.893357][T12899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.912630][T12901] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.923602][T12901] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.020370][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.040156][T12901] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.051936][T12901] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.097003][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 301.097031][ T29] audit: type=1326 audit(1747248611.302:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e877e969 code=0x7ffc0000 [ 301.109413][T12907] loop1: detected capacity change from 0 to 512 [ 301.128825][ T29] audit: type=1326 audit(1747248611.302:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e877e969 code=0x7ffc0000 [ 301.158122][ T29] audit: type=1326 audit(1747248611.362:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f13e877e969 code=0x7ffc0000 [ 301.181814][ T29] audit: type=1326 audit(1747248611.362:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e877e969 code=0x7ffc0000 [ 301.205545][ T29] audit: type=1326 audit(1747248611.362:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e877e969 code=0x7ffc0000 [ 301.231654][T12907] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 301.241870][T12907] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 301.251907][T12907] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3057: Failed to acquire dquot type 1 [ 301.264119][T12907] EXT4-fs (loop1): 1 truncate cleaned up [ 301.270300][T12907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.282974][T12907] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.304391][T12901] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.315196][T12901] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.356125][ T29] audit: type=1107 audit(1747248611.562:6271): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='l' [ 301.455301][T12901] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.466588][T12901] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.715860][T12921] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 301.749425][T12918] lo speed is unknown, defaulting to 1000 [ 301.869682][T12921] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.907621][T12901] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.916104][T12901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.929025][T12901] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.937568][T12901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.950262][T12901] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.958697][T12901] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.971507][T12901] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.979915][T12901] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.003175][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.034491][T12929] lo speed is unknown, defaulting to 1000 [ 302.036615][T12931] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.050518][ T29] audit: type=1326 audit(1747248612.252:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 302.074292][ T29] audit: type=1326 audit(1747248612.262:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 302.101848][T12934] loop4: detected capacity change from 0 to 512 [ 302.108772][T12934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.165588][T12934] EXT4-fs (loop4): 1 truncate cleaned up [ 302.175209][T12938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.187370][T12934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.241107][T12931] __nla_validate_parse: 11 callbacks suppressed [ 302.241123][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3063'. [ 302.256584][T12931] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3063'. [ 302.325339][T12938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.350882][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 302.373260][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.423599][T12949] sctp: [Deprecated]: syz.3.3069 (pid 12949) Use of int in max_burst socket option deprecated. [ 302.423599][T12949] Use struct sctp_assoc_value instead [ 302.428946][T12938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.473559][T12948] lo speed is unknown, defaulting to 1000 [ 302.498333][T12950] loop1: detected capacity change from 0 to 8192 [ 302.507760][T12950] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 302.539446][T12938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.594669][T12944] lo speed is unknown, defaulting to 1000 [ 302.660134][T12950] loop1: detected capacity change from 0 to 512 [ 302.667321][T12950] ext4: Unknown parameter 'smackfshat' [ 302.781900][T12938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.833366][T12963] loop1: detected capacity change from 0 to 512 [ 302.852073][T12963] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3075: Failed to acquire dquot type 1 [ 302.864358][T12963] EXT4-fs (loop1): 1 truncate cleaned up [ 302.870633][T12963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.883316][T12963] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.883427][T12938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.964070][T12938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.057898][T12938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.125286][T12967] lo speed is unknown, defaulting to 1000 [ 303.407617][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3076'. [ 303.506401][T12980] lo speed is unknown, defaulting to 1000 [ 303.601361][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 303.623130][T12983] loop2: detected capacity change from 0 to 8192 [ 303.629837][T12983] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 303.695699][T12980] loop2: detected capacity change from 0 to 512 [ 303.703001][T12980] ext4: Unknown parameter 'smackfshat' [ 303.720465][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.886477][T13002] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 303.900489][T13002] loop1: detected capacity change from 0 to 512 [ 303.916317][T13002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.939283][T13002] EXT4-fs (loop1): 1 truncate cleaned up [ 303.945464][T13002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.020276][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.168590][T13021] lo speed is unknown, defaulting to 1000 [ 304.305175][T13028] netlink: 'syz.0.3094': attribute type 6 has an invalid length. [ 304.464634][T13032] lo speed is unknown, defaulting to 1000 [ 304.572619][T13039] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.587539][T13039] loop2: detected capacity change from 0 to 512 [ 304.599843][T13039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.621793][T13039] EXT4-fs (loop2): 1 truncate cleaned up [ 304.627927][T13039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.645064][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'. [ 304.710787][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.064384][T12375] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 305.075334][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 305.075425][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 305.075442][T12375] Call Trace: [ 305.075561][T12375] [ 305.075571][T12375] __dump_stack+0x1d/0x30 [ 305.075643][T12375] dump_stack_lvl+0xe8/0x140 [ 305.075663][T12375] dump_stack+0x15/0x1b [ 305.075678][T12375] dump_header+0x81/0x220 [ 305.075738][T12375] oom_kill_process+0x334/0x3f0 [ 305.075770][T12375] out_of_memory+0x979/0xb80 [ 305.075869][T12375] ? css_next_descendant_pre+0x138/0x160 [ 305.075897][T12375] mem_cgroup_out_of_memory+0x13d/0x190 [ 305.076006][T12375] try_charge_memcg+0x5e2/0x870 [ 305.076039][T12375] charge_memcg+0x51/0xc0 [ 305.076069][T12375] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 305.076110][T12375] __read_swap_cache_async+0x1df/0x350 [ 305.076257][T12375] swap_cluster_readahead+0x277/0x3e0 [ 305.076303][T12375] swapin_readahead+0xde/0x6f0 [ 305.076326][T12375] ? __filemap_get_folio+0x49f/0x650 [ 305.076353][T12375] ? probe_sched_wakeup+0x85/0xa0 [ 305.076502][T12375] ? swap_cache_get_folio+0x77/0x200 [ 305.076530][T12375] do_swap_page+0x301/0x2460 [ 305.076565][T12375] ? _raw_spin_unlock+0x26/0x50 [ 305.076592][T12375] ? finish_task_switch+0xad/0x2b0 [ 305.076647][T12375] ? __pfx_default_wake_function+0x10/0x10 [ 305.076681][T12375] handle_mm_fault+0xb60/0x2ae0 [ 305.076717][T12375] ? mas_walk+0xf2/0x120 [ 305.076750][T12375] do_user_addr_fault+0x636/0x1090 [ 305.076823][T12375] ? switch_fpu_return+0xe/0x20 [ 305.076860][T12375] exc_page_fault+0x54/0xc0 [ 305.076888][T12375] asm_exc_page_fault+0x26/0x30 [ 305.076915][T12375] RIP: 0033:0x7fee7fe711e5 [ 305.076936][T12375] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 305.076991][T12375] RSP: 002b:00007ffdfface598 EFLAGS: 00010246 [ 305.077011][T12375] RAX: 0000000000000000 RBX: 0000000000000036 RCX: 00007fee7fe711e3 [ 305.077028][T12375] RDX: 00007ffdfface5b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.077044][T12375] RBP: 00007ffdfface61c R08: 0000000000b7f9d7 R09: 0000000000000000 [ 305.077060][T12375] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 305.077074][T12375] R13: 00000000000927c0 R14: 000000000004a4fe R15: 00007ffdfface670 [ 305.077099][T12375] [ 305.077108][T12375] memory: usage 307200kB, limit 307200kB, failcnt 874 [ 305.106613][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3103'. [ 305.110731][T12375] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 305.110753][T12375] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 305.110769][T12375] Memory cgroup stats for /syz1: [ 305.111128][T12375] cache 0 [ 305.336020][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 305.337318][T12375] rss 0 [ 305.337329][T12375] shmem 0 [ 305.337337][T12375] mapped_file 0 [ 305.337348][T12375] dirty 0 [ 305.337356][T12375] writeback 0 [ 305.337365][T12375] workingset_refault_anon 1145 [ 305.337385][T12375] workingset_refault_file 1624 [ 305.337396][T12375] swap 200704 [ 305.337405][T12375] swapcached 4096 [ 305.337414][T12375] pgpgin 357584 [ 305.337488][T12375] pgpgout 357575 [ 305.337497][T12375] pgfault 358425 [ 305.337504][T12375] pgmajfault 430 [ 305.337513][T12375] inactive_anon 4096 [ 305.337524][T12375] active_anon 0 [ 305.337533][T12375] inactive_file 32768 [ 305.337543][T12375] active_file 0 [ 305.337630][T12375] unevictable 0 [ 305.337675][T12375] hierarchical_memory_limit 314572800 [ 305.337687][T12375] hierarchical_memsw_limit 9223372036854771712 [ 305.337699][T12375] total_cache 0 [ 305.337708][T12375] total_rss 0 [ 305.337716][T12375] total_shmem 0 [ 305.337726][T12375] total_mapped_file 0 [ 305.337735][T12375] total_dirty 0 [ 305.345540][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3104'. [ 305.350129][T12375] total_writeback 0 [ 305.350141][T12375] total_workingset_refault_anon 1145 [ 305.350152][T12375] total_workingset_refault_file 1624 [ 305.350163][T12375] total_swap 200704 [ 305.350174][T12375] total_swapcached 4096 [ 305.350207][T12375] total_pgpgin 357584 [ 305.350218][T12375] total_pgpgout 357575 [ 305.350292][T12375] total_pgfault 358425 [ 305.350303][T12375] total_pgmajfault 430 [ 305.350314][T12375] total_inactive_anon 4096 [ 305.350402][T12375] total_active_anon 0 [ 305.350413][T12375] total_inactive_file 32768 [ 305.350423][T12375] total_active_file 0 [ 305.350433][T12375] total_unevictable 0 [ 305.350443][T12375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3092,pid=13018,uid=0 [ 305.350617][T12375] Memory cgroup out of memory: Killed process 13018 (syz.1.3092) total-vm:95928kB, anon-rss:1064kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 305.583300][T13063] netlink: 'syz.0.3106': attribute type 6 has an invalid length. [ 305.681039][T13064] lo speed is unknown, defaulting to 1000 [ 305.763608][ T3418] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.773443][ T3418] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.845650][ T3418] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.855584][ T3418] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.879352][T13064] chnl_net:caif_netlink_parms(): no params data found [ 305.909637][T13077] lo speed is unknown, defaulting to 1000 [ 305.924791][T13087] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 305.937080][T13087] loop1: detected capacity change from 0 to 512 [ 305.950512][T13087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 305.964232][T13080] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.976342][T13080] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.992253][T13087] EXT4-fs (loop1): 1 truncate cleaned up [ 305.998418][T13087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.017899][ T3418] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.027812][ T3418] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.077546][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.084705][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.092151][T13064] bridge_slave_0: entered allmulticast mode [ 306.098901][T13064] bridge_slave_0: entered promiscuous mode [ 306.107011][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.114325][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.122176][T13064] bridge_slave_1: entered allmulticast mode [ 306.128767][T13064] bridge_slave_1: entered promiscuous mode [ 306.153481][T13080] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.165609][T13080] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.187919][T13064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.198271][ T3418] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.208244][ T3418] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.225231][T13064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.245073][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.299328][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 306.299345][ T29] audit: type=1326 audit(1747248616.502:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.340313][ T29] audit: type=1326 audit(1747248616.502:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.363976][ T29] audit: type=1326 audit(1747248616.502:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.387562][ T29] audit: type=1326 audit(1747248616.502:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.388968][T13080] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.411126][ T29] audit: type=1326 audit(1747248616.502:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.411177][ T29] audit: type=1326 audit(1747248616.502:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.411207][ T29] audit: type=1326 audit(1747248616.502:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.411293][ T29] audit: type=1326 audit(1747248616.502:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.411327][ T29] audit: type=1326 audit(1747248616.502:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.411441][ T29] audit: type=1326 audit(1747248616.552:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 306.581898][T13080] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.597928][T13064] team0: Port device team_slave_0 added [ 306.605240][T13064] team0: Port device team_slave_1 added [ 306.622868][T13064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.629974][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.656220][T13064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.667857][T13064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.674870][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.701024][T13064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.741983][T13080] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.751838][T13080] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.785672][T13064] hsr_slave_0: entered promiscuous mode [ 306.792251][T13064] hsr_slave_1: entered promiscuous mode [ 306.798180][T13064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.806097][T13064] Cannot create hsr debugfs directory [ 306.853151][ T3418] bond3 (unregistering): (slave gretap1): Releasing active interface [ 306.872885][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.882952][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.892663][ T3418] bond0 (unregistering): Released all slaves [ 306.901495][ T3418] bond1 (unregistering): Released all slaves [ 306.910141][ T3418] bond2 (unregistering): Released all slaves [ 306.918611][ T3418] bond3 (unregistering): Released all slaves [ 306.927492][ T3418] bond4 (unregistering): Released all slaves [ 306.936942][ T3418] bond5 (unregistering): Released all slaves [ 306.945824][ T3418] bond6 (unregistering): Released all slaves [ 306.957993][T13104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.968343][T13104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.995723][T13080] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.004096][T13080] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.017451][T13080] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.025823][T13080] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.038262][T13080] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.046641][T13080] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.061713][ T3418] hsr_slave_0: left promiscuous mode [ 307.067519][ T3418] hsr_slave_1: left promiscuous mode [ 307.076201][ T3418] veth1_macvtap: left promiscuous mode [ 307.081829][ T3418] veth0_macvtap: left promiscuous mode [ 307.087525][ T3418] veth1_vlan: left promiscuous mode [ 307.092845][ T3418] veth0_vlan: left promiscuous mode [ 307.152422][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 307.163926][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 307.198951][T13104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.210757][T13104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.237456][T13080] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.245793][T13080] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.286613][T13107] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.305768][T13107] loop2: detected capacity change from 0 to 512 [ 307.313864][T13107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 307.327628][T13107] EXT4-fs (loop2): 1 truncate cleaned up [ 307.334339][T13107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.365324][T13104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.375967][T13104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.415668][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.439391][T13121] loop2: detected capacity change from 0 to 512 [ 307.450097][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 307.473320][T13121] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3121: Failed to acquire dquot type 1 [ 307.478596][T13104] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.485408][T13121] EXT4-fs (loop2): 1 truncate cleaned up [ 307.485874][T13121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.496334][T13104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.501234][T13121] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.557745][T13124] lo speed is unknown, defaulting to 1000 [ 307.710332][T13104] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.718578][T13104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.733715][T13104] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.742016][T13104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.787894][T13135] lo speed is unknown, defaulting to 1000 [ 308.059079][T13064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.102951][T13104] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.111229][T13104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.130047][T13064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.147455][T13104] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.156009][T13104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.165154][T13064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.200491][T13064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.250867][T13140] loop1: detected capacity change from 0 to 512 [ 308.263276][T13140] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3127: Failed to acquire dquot type 1 [ 308.275171][T13140] EXT4-fs (loop1): 1 truncate cleaned up [ 308.287174][T13064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.306436][T13064] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.313783][T13140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.326439][T13140] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.412338][ T274] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.419594][ T274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.432180][ T274] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.439322][ T274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.487961][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.607251][T13152] lo speed is unknown, defaulting to 1000 [ 308.832961][T13064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.010953][T13163] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 309.022967][T13163] loop2: detected capacity change from 0 to 512 [ 309.029989][T13163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 309.053208][T13163] EXT4-fs (loop2): 1 truncate cleaned up [ 309.059254][T13163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.169948][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.171118][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.196486][T13176] loop3: detected capacity change from 0 to 1024 [ 309.210168][T13176] EXT4-fs: Ignoring removed nobh option [ 309.215845][T13176] EXT4-fs: Ignoring removed bh option [ 309.250928][T13064] veth0_vlan: entered promiscuous mode [ 309.261847][T13176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.287824][T13064] veth1_vlan: entered promiscuous mode [ 309.321676][T13064] veth0_macvtap: entered promiscuous mode [ 309.329082][T13064] veth1_macvtap: entered promiscuous mode [ 309.337233][T13176] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3135: Allocating blocks 385-513 which overlap fs metadata [ 309.339063][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.361877][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.373576][T13064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.386348][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3136'. [ 309.401654][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.408410][T13176] EXT4-fs (loop3): pa ffff888105ab7d90: logic 16, phys. 129, len 24 [ 309.412248][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.413091][T13064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.420331][T13176] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, [ 309.432850][T13064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.437548][T13176] free 0, pa_free 8 [ 309.446080][T13064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.467344][T13064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.476241][T13064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.659904][T13176] veth1_macvtap: left promiscuous mode [ 309.665859][T13176] macsec0: entered promiscuous mode [ 309.671300][T13176] macsec0: entered allmulticast mode [ 309.680659][T13176] veth1_macvtap: entered promiscuous mode [ 309.686451][T13176] veth1_macvtap: entered allmulticast mode [ 309.693286][T13176] macsec0: left promiscuous mode [ 309.698406][T13176] macsec0: left allmulticast mode [ 309.703536][T13176] veth1_macvtap: left allmulticast mode [ 309.753148][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.875231][T13203] lo speed is unknown, defaulting to 1000 [ 309.976735][T13205] loop3: detected capacity change from 0 to 8192 [ 309.983628][T13205] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 310.021434][T13205] loop3: detected capacity change from 0 to 512 [ 310.030398][T13205] ext4: Unknown parameter 'smackfshat' [ 310.115970][T13207] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 310.129134][T13207] loop3: detected capacity change from 0 to 512 [ 310.136801][T13207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 310.152500][T13207] EXT4-fs (loop3): 1 truncate cleaned up [ 310.158864][T13207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.175542][T13209] netlink: 'syz.2.3143': attribute type 6 has an invalid length. [ 310.352985][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.395236][T13223] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 310.436844][T13232] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 310.462862][T13232] loop3: detected capacity change from 0 to 512 [ 310.494467][T13241] loop4: detected capacity change from 0 to 1024 [ 310.501774][T13232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 310.512166][T13241] EXT4-fs: Ignoring removed nobh option [ 310.517843][T13241] EXT4-fs: Ignoring removed bh option [ 310.526324][ T274] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.545890][T13232] EXT4-fs (loop3): 1 truncate cleaned up [ 310.546556][T13220] lo speed is unknown, defaulting to 1000 [ 310.558394][T13232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.577849][T13241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.594565][ T274] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.612850][T13241] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3152: Allocating blocks 385-513 which overlap fs metadata [ 310.634265][T13241] EXT4-fs (loop4): pa ffff888106dd1690: logic 16, phys. 129, len 24 [ 310.642352][T13241] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 310.664825][T13232] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3149'. [ 310.673872][T13232] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3149'. [ 310.696663][ T274] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.780122][ T274] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.838853][T13251] veth1_macvtap: left promiscuous mode [ 310.848800][T13251] macsec0: entered promiscuous mode [ 310.854143][T13251] macsec0: entered allmulticast mode [ 310.887326][T13220] chnl_net:caif_netlink_parms(): no params data found [ 310.916395][T13253] veth1_macvtap: entered promiscuous mode [ 310.922250][T13253] veth1_macvtap: entered allmulticast mode [ 310.928491][T13253] macsec0: left promiscuous mode [ 310.933619][T13253] macsec0: left allmulticast mode [ 310.938687][T13253] veth1_macvtap: left allmulticast mode [ 310.946772][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.003056][T13064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.033665][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 311.062910][T13264] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 311.080040][ T274] bridge_slave_1: left allmulticast mode [ 311.085843][ T274] bridge_slave_1: left promiscuous mode [ 311.091554][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.100021][ T274] bridge_slave_0: left allmulticast mode [ 311.105886][ T274] bridge_slave_0: left promiscuous mode [ 311.111717][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.244027][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.261704][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.278215][ T274] bond0 (unregistering): Released all slaves [ 311.294424][T13231] syz.1.3150 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 311.297423][ T274] bond1 (unregistering): Released all slaves [ 311.308560][T13231] CPU: 1 UID: 0 PID: 13231 Comm: syz.1.3150 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 311.308597][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.308616][T13231] Call Trace: [ 311.308624][T13231] [ 311.308636][T13231] __dump_stack+0x1d/0x30 [ 311.308734][T13231] dump_stack_lvl+0xe8/0x140 [ 311.308761][T13231] dump_stack+0x15/0x1b [ 311.308784][T13231] dump_header+0x81/0x220 [ 311.308839][T13231] oom_kill_process+0x334/0x3f0 [ 311.308878][T13231] out_of_memory+0x979/0xb80 [ 311.308917][T13231] mem_cgroup_out_of_memory+0x13d/0x190 [ 311.309076][T13231] try_charge_memcg+0x5e2/0x870 [ 311.309125][T13231] obj_cgroup_charge_pages+0xb7/0x1a0 [ 311.309156][T13231] __memcg_kmem_charge_page+0x9f/0x170 [ 311.309187][T13231] __alloc_frozen_pages_noprof+0x188/0x360 [ 311.309230][T13231] alloc_pages_mpol+0xb3/0x250 [ 311.309287][T13231] alloc_pages_noprof+0x90/0x130 [ 311.309333][T13231] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 311.309436][T13231] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 311.309463][T13231] ? ip_set_alloc+0x1f/0x30 [ 311.309495][T13231] ? ip_set_alloc+0x1f/0x30 [ 311.309622][T13231] ? __kmalloc_cache_noprof+0x189/0x320 [ 311.309653][T13231] ip_set_alloc+0x1f/0x30 [ 311.309689][T13231] hash_netiface_create+0x282/0x740 [ 311.309730][T13231] ? __pfx_hash_netiface_create+0x10/0x10 [ 311.309809][T13231] ip_set_create+0x3cc/0x960 [ 311.309862][T13231] ? __nla_parse+0x40/0x60 [ 311.309893][T13231] nfnetlink_rcv_msg+0x4c6/0x590 [ 311.310030][T13231] netlink_rcv_skb+0x120/0x220 [ 311.310092][T13231] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 311.310135][T13231] nfnetlink_rcv+0x16b/0x1690 [ 311.310171][T13231] ? __kfree_skb+0x109/0x150 [ 311.310194][T13231] ? nlmon_xmit+0x4f/0x60 [ 311.310224][T13231] ? consume_skb+0x49/0x150 [ 311.310323][T13231] ? nlmon_xmit+0x4f/0x60 [ 311.310349][T13231] ? dev_hard_start_xmit+0x39e/0x3d0 [ 311.310378][T13231] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 311.310405][T13231] ? __dev_queue_xmit+0x182/0x1fb0 [ 311.310431][T13231] ? cgroup_rstat_updated+0xa3/0x510 [ 311.310541][T13231] ? ref_tracker_free+0x37d/0x3e0 [ 311.310591][T13231] ? __netlink_deliver_tap+0x4dc/0x500 [ 311.310620][T13231] netlink_unicast+0x5a1/0x670 [ 311.310723][T13231] netlink_sendmsg+0x58b/0x6b0 [ 311.310751][T13231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.310797][T13231] __sock_sendmsg+0x142/0x180 [ 311.310834][T13231] ____sys_sendmsg+0x31e/0x4e0 [ 311.310866][T13231] ___sys_sendmsg+0x17b/0x1d0 [ 311.310983][T13231] __x64_sys_sendmsg+0xd4/0x160 [ 311.311031][T13231] x64_sys_call+0x2999/0x2fb0 [ 311.311060][T13231] do_syscall_64+0xd0/0x1a0 [ 311.311101][T13231] ? clear_bhb_loop+0x40/0x90 [ 311.311130][T13231] ? clear_bhb_loop+0x40/0x90 [ 311.311178][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.311281][T13231] RIP: 0033:0x7fee7fe3e969 [ 311.311303][T13231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.311406][T13231] RSP: 002b:00007fee7e4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.311433][T13231] RAX: ffffffffffffffda RBX: 00007fee80065fa0 RCX: 00007fee7fe3e969 [ 311.311451][T13231] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 311.311470][T13231] RBP: 00007fee7fec0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 311.311488][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.311574][T13231] R13: 0000000000000000 R14: 00007fee80065fa0 R15: 00007ffdfface258 [ 311.311600][T13231] [ 311.311648][T13231] memory: usage 307200kB, limit 307200kB, failcnt 1075 [ 311.359829][ T274] bond2 (unregistering): Released all slaves [ 311.361337][T13231] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 311.361358][T13231] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 311.395226][ T274] bond3 (unregistering): Released all slaves [ 311.398077][T13231] Memory cgroup stats for [ 311.406054][ T274] bond4 (unregistering): Released all slaves [ 311.407783][T13231] /syz1: [ 311.410488][T13231] cache 0 [ 311.421999][ T274] bond5 (unregistering): Released all slaves [ 311.423584][T13231] rss 0 [ 311.431486][ T274] bond6 (unregistering): Released all slaves [ 311.433629][T13231] shmem 0 [ 311.441252][ T274] bond7 (unregistering): Released all slaves [ 311.443219][T13231] mapped_file 0 [ 311.452292][ T274] bond8 (unregistering): Released all slaves [ 311.453509][T13231] dirty 0 [ 311.460870][ T274] bond9 (unregistering): Released all slaves [ 311.462824][T13231] writeback 0 [ 311.471308][ T274] bond10 (unregistering): Released all slaves [ 311.473076][T13231] workingset_refault_anon 1191 [ 311.481236][ T274] bond11 (unregistering): Released all slaves [ 311.482296][T13231] workingset_refault_file 1737 [ 311.779018][T13231] swap 200704 [ 311.782322][T13231] swapcached 4096 [ 311.785982][T13231] pgpgin 361898 [ 311.789454][T13231] pgpgout 361889 [ 311.793059][T13231] pgfault 362795 [ 311.796622][T13231] pgmajfault 455 [ 311.800164][T13231] inactive_anon 4096 [ 311.804127][T13231] active_anon 0 [ 311.807661][T13231] inactive_file 32768 [ 311.811659][T13231] active_file 0 [ 311.815121][T13231] unevictable 0 [ 311.818567][T13231] hierarchical_memory_limit 314572800 [ 311.823994][T13231] hierarchical_memsw_limit 9223372036854771712 [ 311.830199][T13231] total_cache 0 [ 311.833763][T13231] total_rss 0 [ 311.837117][T13231] total_shmem 0 [ 311.840678][T13231] total_mapped_file 0 [ 311.844670][T13231] total_dirty 0 [ 311.848140][T13231] total_writeback 0 [ 311.851996][T13231] total_workingset_refault_anon 1191 [ 311.857317][T13231] total_workingset_refault_file 1737 [ 311.862648][T13231] total_swap 200704 [ 311.866551][T13231] total_swapcached 4096 [ 311.870794][T13231] total_pgpgin 361898 [ 311.874787][T13231] total_pgpgout 361889 [ 311.878870][T13231] total_pgfault 362795 [ 311.883039][T13231] total_pgmajfault 455 [ 311.887122][T13231] total_inactive_anon 4096 [ 311.891624][T13231] total_active_anon 0 [ 311.895619][T13231] total_inactive_file 32768 [ 311.900167][T13231] total_active_file 0 [ 311.904213][T13231] total_unevictable 0 [ 311.908270][T13231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3150,pid=13229,uid=0 [ 311.923103][T13231] Memory cgroup out of memory: Killed process 13229 (syz.1.3150) total-vm:95928kB, anon-rss:936kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 311.944773][T13275] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 311.953558][T13265] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 311.978813][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.986217][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.013576][T13220] bridge_slave_0: entered allmulticast mode [ 312.023403][T13220] bridge_slave_0: entered promiscuous mode [ 312.031510][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3157'. [ 312.052850][T13220] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.059954][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.079822][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.090636][T13220] bridge_slave_1: entered allmulticast mode [ 312.096747][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.105152][T13220] bridge_slave_1: entered promiscuous mode [ 312.130122][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3159'. [ 312.139206][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3159'. [ 312.154768][ T274] hsr_slave_0: left promiscuous mode [ 312.160748][ T274] hsr_slave_1: left promiscuous mode [ 312.169642][ T274] veth1_macvtap: left promiscuous mode [ 312.176411][ T274] veth0_macvtap: left promiscuous mode [ 312.186596][ T274] veth1_vlan: left promiscuous mode [ 312.191966][ T274] veth0_vlan: left promiscuous mode [ 312.237527][T13283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3159'. [ 312.246590][T13283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3159'. [ 312.289802][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 312.289816][ T29] audit: type=1326 audit(1747248622.492:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.327493][ T274] team0 (unregistering): Port device team_slave_1 removed [ 312.337552][ T29] audit: type=1326 audit(1747248622.532:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.361264][ T29] audit: type=1326 audit(1747248622.532:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.384912][ T29] audit: type=1326 audit(1747248622.532:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.418426][ T274] team0 (unregistering): Port device team_slave_0 removed [ 312.455882][ T29] audit: type=1326 audit(1747248622.542:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.479515][ T29] audit: type=1326 audit(1747248622.542:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 312.534834][T13277] ip6gretap0: entered promiscuous mode [ 312.542249][T13277] batadv_slave_1: entered promiscuous mode [ 312.567402][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.592914][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.632899][T13220] team0: Port device team_slave_0 added [ 312.639634][T13220] team0: Port device team_slave_1 added [ 312.694770][T13220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.701806][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.728022][T13220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.767453][T13220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.774545][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.800512][T13220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.833708][T13220] hsr_slave_0: entered promiscuous mode [ 312.840178][T13220] hsr_slave_1: entered promiscuous mode [ 312.846560][T13220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.854364][T13220] Cannot create hsr debugfs directory [ 313.003411][ T29] audit: type=1326 audit(1747248623.212:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 313.027220][ T29] audit: type=1326 audit(1747248623.212:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 313.050946][ T29] audit: type=1326 audit(1747248623.212:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 313.074563][ T29] audit: type=1326 audit(1747248623.212:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.1.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7fe3e969 code=0x7ffc0000 [ 313.183185][T13298] loop3: detected capacity change from 0 to 2048 [ 313.216094][T13220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.221055][T13298] Alternate GPT is invalid, using primary GPT. [ 313.229198][T13298] loop3: p1 p2 p3 [ 313.235231][T13220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.246055][T13220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.255227][T13220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.292022][T13220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.304650][T13220] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.314203][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.321381][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.332884][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.339979][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.344924][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3167'. [ 313.404640][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.469181][T13220] veth0_vlan: entered promiscuous mode [ 313.477309][T13220] veth1_vlan: entered promiscuous mode [ 313.493360][T13220] veth0_macvtap: entered promiscuous mode [ 313.501395][T13220] veth1_macvtap: entered promiscuous mode [ 313.511746][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.522385][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.532226][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.542915][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.553801][T13220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.565027][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.575572][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.585501][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.596107][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.607029][T13220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.617021][T13220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.625795][T13220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.634627][T13220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.643452][T13220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.690169][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'. [ 313.699241][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'. [ 313.708289][T13319] netlink: 'syz.2.3146': attribute type 4 has an invalid length. [ 313.722616][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 313.731678][T13319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.739090][T13319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.747074][T13319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.754748][T13319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.774473][T13321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 313.829727][T13321] loop2: detected capacity change from 0 to 2048 [ 313.891092][T13327] lo speed is unknown, defaulting to 1000 [ 313.899603][T13321] Alternate GPT is invalid, using primary GPT. [ 313.905995][T13321] loop2: p1 p2 p3 [ 314.212888][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 314.342902][T13344] lo speed is unknown, defaulting to 1000 [ 314.569851][T13349] loop4: detected capacity change from 0 to 128 [ 314.690470][T13351] lo speed is unknown, defaulting to 1000 [ 315.004661][T13355] lo speed is unknown, defaulting to 1000 [ 315.097333][T13355] chnl_net:caif_netlink_parms(): no params data found [ 315.134081][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.141264][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.148772][T13355] bridge_slave_0: entered allmulticast mode [ 315.155419][T13355] bridge_slave_0: entered promiscuous mode [ 315.163005][ T274] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.172872][ T274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.183850][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.191088][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.198415][T13355] bridge_slave_1: entered allmulticast mode [ 315.205089][T13355] bridge_slave_1: entered promiscuous mode [ 315.222751][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.232943][ T274] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.242905][ T274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.254837][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.274865][T13355] team0: Port device team_slave_0 added [ 315.282517][T13355] team0: Port device team_slave_1 added [ 315.299588][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.306673][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.332658][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.344444][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.351437][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.377440][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.390038][ T274] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.399832][ T274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.428070][T13355] hsr_slave_0: entered promiscuous mode [ 315.434177][T13355] hsr_slave_1: entered promiscuous mode [ 315.440109][T13355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.447887][T13355] Cannot create hsr debugfs directory [ 315.475649][ T274] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.485560][ T274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.540808][ T274] bridge_slave_1: left allmulticast mode [ 315.546489][ T274] bridge_slave_1: left promiscuous mode [ 315.552192][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.559855][ T274] bridge_slave_0: left allmulticast mode [ 315.565541][ T274] bridge_slave_0: left promiscuous mode [ 315.571276][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.619380][ T274] bond3 (unregistering): (slave gretap1): Releasing active interface [ 315.803548][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.814510][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.824522][ T274] bond0 (unregistering): Released all slaves [ 315.858876][ T274] bond1 (unregistering): Released all slaves [ 315.875313][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 315.878385][ T274] bond2 (unregistering): Released all slaves [ 315.893757][ T274] bond3 (unregistering): Released all slaves [ 315.894020][T13395] loop4: detected capacity change from 0 to 512 [ 315.930717][T13395] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3189: Failed to acquire dquot type 1 [ 315.942777][T13395] EXT4-fs (loop4): 1 truncate cleaned up [ 315.948948][T13395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.961626][T13395] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.988730][ T274] hsr_slave_0: left promiscuous mode [ 316.003464][ T274] hsr_slave_1: left promiscuous mode [ 316.032831][ T274] veth1_macvtap: left promiscuous mode [ 316.038418][ T274] veth0_macvtap: left promiscuous mode [ 316.047592][ T274] veth1_vlan: left promiscuous mode [ 316.058507][ T274] veth0_vlan: left promiscuous mode [ 316.291647][ T274] team0 (unregistering): Port device team_slave_1 removed [ 316.339799][ T274] team0 (unregistering): Port device team_slave_0 removed [ 316.463917][ T31] smc: removing ib device syz0 [ 316.537295][ T23] lo speed is unknown, defaulting to 1000 [ 316.543117][ T23] syz0: Port: 1 Link DOWN [ 316.629232][T13408] loop3: detected capacity change from 0 to 512 [ 316.662943][T13408] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.685344][T13408] EXT4-fs (loop3): mount failed [ 316.705153][T13355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.716454][T13408] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 316.747821][T13355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.767398][T13355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.781115][T13355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.798531][T13064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.879411][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.906617][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.918881][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.926075][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.936793][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.943879][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.954815][T13425] FAULT_INJECTION: forcing a failure. [ 316.954815][T13425] name failslab, interval 1, probability 0, space 0, times 0 [ 316.967511][T13425] CPU: 1 UID: 0 PID: 13425 Comm: syz.3.3198 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 316.967550][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.967567][T13425] Call Trace: [ 316.967582][T13425] [ 316.967591][T13425] __dump_stack+0x1d/0x30 [ 316.967614][T13425] dump_stack_lvl+0xe8/0x140 [ 316.967637][T13425] dump_stack+0x15/0x1b [ 316.967659][T13425] should_fail_ex+0x265/0x280 [ 316.967779][T13425] should_failslab+0x8c/0xb0 [ 316.967817][T13425] kmem_cache_alloc_noprof+0x50/0x310 [ 316.967842][T13425] ? security_inode_alloc+0x37/0x100 [ 316.967921][T13425] security_inode_alloc+0x37/0x100 [ 316.967941][T13425] inode_init_always_gfp+0x4b7/0x500 [ 316.968030][T13425] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 316.968058][T13425] alloc_inode+0x58/0x170 [ 316.968132][T13425] new_inode+0x1d/0xe0 [ 316.968238][T13425] shmem_get_inode+0x244/0x750 [ 316.968337][T13425] __shmem_file_setup+0x122/0x1f0 [ 316.968364][T13425] shmem_file_setup+0x3b/0x50 [ 316.968393][T13425] __se_sys_memfd_create+0x2c3/0x590 [ 316.968515][T13425] __x64_sys_memfd_create+0x31/0x40 [ 316.968618][T13425] x64_sys_call+0x122f/0x2fb0 [ 316.968643][T13425] do_syscall_64+0xd0/0x1a0 [ 316.968677][T13425] ? clear_bhb_loop+0x40/0x90 [ 316.968705][T13425] ? clear_bhb_loop+0x40/0x90 [ 316.968752][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.968777][T13425] RIP: 0033:0x7f881ae8e969 [ 316.968792][T13425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.968809][T13425] RSP: 002b:00007f88194f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 316.968864][T13425] RAX: ffffffffffffffda RBX: 000000000000081c RCX: 00007f881ae8e969 [ 316.968880][T13425] RDX: 00007f88194f6ef0 RSI: 0000000000000000 RDI: 00007f881af11444 [ 316.968895][T13425] RBP: 0000200000001540 R08: 00007f88194f6bb7 R09: 00007f88194f6e40 [ 316.968911][T13425] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 316.968924][T13425] R13: 00007f88194f6ef0 R14: 00007f88194f6eb0 R15: 0000200000000380 [ 316.968943][T13425] [ 317.295131][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 317.295145][ T29] audit: type=1400 audit(1747248627.502:6643): avc: denied { sys_module } for pid=13355 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.323214][ T29] audit: type=1400 audit(1747248627.502:6644): avc: denied { module_request } for pid=13355 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 317.360585][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 317.360768][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.385075][ T29] audit: type=1400 audit(1747248627.592:6645): avc: denied { map_create } for pid=13433 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 317.404498][ T29] audit: type=1400 audit(1747248627.592:6646): avc: denied { prog_load } for pid=13433 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 317.423689][ T29] audit: type=1400 audit(1747248627.592:6647): avc: denied { bpf } for pid=13433 comm="syz.3.3200" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.444551][ T29] audit: type=1400 audit(1747248627.592:6648): avc: denied { perfmon } for pid=13433 comm="syz.3.3200" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.465920][ T29] audit: type=1326 audit(1747248627.592:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f881ae85927 code=0x7ffc0000 [ 317.488880][T13355] veth0_vlan: entered promiscuous mode [ 317.489546][ T29] audit: type=1326 audit(1747248627.592:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f881ae2ab39 code=0x7ffc0000 [ 317.498720][T13355] veth1_vlan: entered promiscuous mode [ 317.518718][ T29] audit: type=1326 audit(1747248627.592:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881ae8e969 code=0x7ffc0000 [ 317.548150][ T29] audit: type=1326 audit(1747248627.592:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f881ae85927 code=0x7ffc0000 [ 317.586918][T13355] veth0_macvtap: entered promiscuous mode [ 317.597935][T13355] veth1_macvtap: entered promiscuous mode [ 317.608380][T13448] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 317.638677][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.649304][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.659312][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.659635][T13448] loop2: detected capacity change from 0 to 512 [ 317.669893][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.671026][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.694793][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.705294][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.713472][T13452] loop4: detected capacity change from 0 to 512 [ 317.715133][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.731870][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.735330][T13448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 317.756563][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.769832][T13355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.778698][T13355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.787460][T13355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.796335][T13355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.809374][T13448] EXT4-fs (loop2): 1 truncate cleaned up [ 317.815549][T13452] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3204: Failed to acquire dquot type 1 [ 317.835523][T13452] EXT4-fs (loop4): 1 truncate cleaned up [ 317.842063][T13452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.854867][T13452] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.901504][T13448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.974533][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3202'. [ 317.983619][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3202'. [ 318.135259][T13474] netlink: 'syz.0.3180': attribute type 6 has an invalid length. [ 318.214684][T13220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.284474][T13477] netlink: 'syz.1.3210': attribute type 6 has an invalid length. [ 318.341529][T13479] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 318.349782][T13479] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 318.601731][T13064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.699825][T13487] loop2: detected capacity change from 0 to 8192 [ 318.770367][T13509] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 318.787134][T13510] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 318.797174][T13510] team0: Device hsr_slave_0 failed to register rx_handler [ 318.909002][T13513] sctp: [Deprecated]: syz.3.3222 (pid 13513) Use of int in max_burst socket option deprecated. [ 318.909002][T13513] Use struct sctp_assoc_value instead [ 319.355955][T13516] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 319.452620][T13523] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.534799][T13527] loop1: detected capacity change from 0 to 512 [ 319.582149][T13527] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3228: Failed to acquire dquot type 1 [ 319.594450][T13527] EXT4-fs (loop1): 1 truncate cleaned up [ 319.600664][T13527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.613465][T13527] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.421839][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.502353][T13561] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 320.534546][T13561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.553178][T13561] bond1: (slave gretap1): making interface the new active one [ 320.563715][T13561] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 320.648146][T13566] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 320.676311][T13566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.841665][T13572] sctp: [Deprecated]: syz.1.3241 (pid 13572) Use of int in max_burst socket option deprecated. [ 320.841665][T13572] Use struct sctp_assoc_value instead [ 321.080595][T13577] loop3: detected capacity change from 0 to 764 [ 321.180514][T13581] FAULT_INJECTION: forcing a failure. [ 321.180514][T13581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.193890][T13581] CPU: 1 UID: 0 PID: 13581 Comm: syz.4.3244 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 321.193995][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 321.194048][T13581] Call Trace: [ 321.194055][T13581] [ 321.194065][T13581] __dump_stack+0x1d/0x30 [ 321.194092][T13581] dump_stack_lvl+0xe8/0x140 [ 321.194113][T13581] dump_stack+0x15/0x1b [ 321.194128][T13581] should_fail_ex+0x265/0x280 [ 321.194249][T13581] should_fail+0xb/0x20 [ 321.194282][T13581] should_fail_usercopy+0x1a/0x20 [ 321.194301][T13581] _copy_from_iter+0xcf/0xdd0 [ 321.194319][T13581] ? __build_skb_around+0x1a0/0x200 [ 321.194368][T13581] ? __alloc_skb+0x223/0x320 [ 321.194410][T13581] netlink_sendmsg+0x471/0x6b0 [ 321.194438][T13581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.194476][T13581] __sock_sendmsg+0x142/0x180 [ 321.194510][T13581] ____sys_sendmsg+0x31e/0x4e0 [ 321.194540][T13581] ___sys_sendmsg+0x17b/0x1d0 [ 321.194643][T13581] __x64_sys_sendmsg+0xd4/0x160 [ 321.194668][T13581] x64_sys_call+0x2999/0x2fb0 [ 321.194746][T13581] do_syscall_64+0xd0/0x1a0 [ 321.194792][T13581] ? clear_bhb_loop+0x40/0x90 [ 321.194819][T13581] ? clear_bhb_loop+0x40/0x90 [ 321.194847][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.194874][T13581] RIP: 0033:0x7fbff1a0e969 [ 321.194892][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.194916][T13581] RSP: 002b:00007fbff0077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.195131][T13581] RAX: ffffffffffffffda RBX: 00007fbff1c35fa0 RCX: 00007fbff1a0e969 [ 321.195232][T13581] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 321.195250][T13581] RBP: 00007fbff0077090 R08: 0000000000000000 R09: 0000000000000000 [ 321.195313][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.195330][T13581] R13: 0000000000000000 R14: 00007fbff1c35fa0 R15: 00007ffe90cc2078 [ 321.195357][T13581] [ 321.421090][T13585] loop4: detected capacity change from 0 to 512 [ 321.428229][T13585] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.437572][T13585] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 321.447808][T13585] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 321.461068][T13585] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 321.469245][T13585] System zones: 0-2, 18-18, 34-35 [ 321.476603][T13585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.513840][T13064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.539283][T13594] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 321.564720][T13594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.647656][T13601] netlink: 'syz.4.3251': attribute type 6 has an invalid length. [ 321.694039][T13597] loop1: detected capacity change from 0 to 8192 [ 321.700700][T13597] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 321.724803][T13597] loop1: detected capacity change from 0 to 512 [ 321.731428][T13597] ext4: Unknown parameter 'smackfshat' [ 321.919790][T13615] loop1: detected capacity change from 0 to 8192 [ 322.155162][T13626] sctp: [Deprecated]: syz.4.3262 (pid 13626) Use of int in max_burst socket option deprecated. [ 322.155162][T13626] Use struct sctp_assoc_value instead [ 322.355231][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 322.355238][T13629] random: crng reseeded on system resumption [ 322.355250][ T29] audit: type=1400 audit(1747248632.562:7130): avc: denied { read write } for pid=13628 comm="syz.0.3263" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 322.355281][ T29] audit: type=1400 audit(1747248632.562:7131): avc: denied { ioctl open } for pid=13628 comm="syz.0.3263" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 322.445973][ T29] audit: type=1326 audit(1747248632.642:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.469757][ T29] audit: type=1326 audit(1747248632.642:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.493408][ T29] audit: type=1326 audit(1747248632.652:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.517035][ T29] audit: type=1326 audit(1747248632.652:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.541244][ T29] audit: type=1326 audit(1747248632.652:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.565071][ T29] audit: type=1326 audit(1747248632.652:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.588650][ T29] audit: type=1326 audit(1747248632.652:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.612158][ T29] audit: type=1326 audit(1747248632.652:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2919e969 code=0x7ffc0000 [ 322.799360][T13635] loop2: detected capacity change from 0 to 8192 [ 322.808375][T13635] vfat: Unknown parameter 'x(qÞ1?ž>³-±+oú£µòîŒy¨Ä™ãŒ`Euþ†™ÅïÇ gc&.{§¥ÿˆ6ÙG' [ 322.864759][T13635] loop2: detected capacity change from 0 to 512 [ 322.878210][T13648] loop1: detected capacity change from 0 to 1024 [ 322.885167][T13635] ext4: Unknown parameter 'smackfshat' [ 322.945763][T13648] EXT4-fs: Ignoring removed nobh option [ 322.951535][T13648] EXT4-fs: Ignoring removed bh option [ 322.968875][T13655] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 322.983063][T13648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.009940][T13648] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3271: Allocating blocks 385-513 which overlap fs metadata [ 323.025930][T13648] EXT4-fs (loop1): pa ffff888106dd1690: logic 16, phys. 129, len 24 [ 323.034365][T13648] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 323.046935][T13660] __nla_validate_parse: 1 callbacks suppressed [ 323.046950][T13660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3274'. [ 323.134683][T13664] veth1_macvtap: left promiscuous mode [ 323.140483][T13664] macsec0: entered promiscuous mode [ 323.145712][T13664] macsec0: entered allmulticast mode [ 323.168433][T13648] veth1_macvtap: entered promiscuous mode [ 323.174411][T13648] veth1_macvtap: entered allmulticast mode [ 323.180805][T13648] macsec0: left promiscuous mode [ 323.185997][T13648] macsec0: left allmulticast mode [ 323.191323][T13648] veth1_macvtap: left allmulticast mode [ 323.222568][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.233637][T13668] random: crng reseeded on system resumption [ 323.312616][T13671] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 323.324322][T13671] loop1: detected capacity change from 0 to 512 [ 323.331613][T13671] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.349372][T13671] EXT4-fs (loop1): 1 truncate cleaned up [ 323.360122][T13671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.414876][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 323.423994][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 323.434023][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 323.615245][T13688] netlink: 'syz.3.3282': attribute type 6 has an invalid length. [ 323.657338][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.726153][T13694] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 323.751896][T13694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.769363][T13694] bond1: (slave gretap1): making interface the new active one [ 323.778181][T13694] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 323.798065][T13694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3286'. [ 323.865450][T13702] loop3: detected capacity change from 0 to 1024 [ 323.872904][T13702] EXT4-fs: Ignoring removed nobh option [ 323.878569][T13702] EXT4-fs: Ignoring removed bh option [ 323.912142][T13702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.949847][T13700] sctp: [Deprecated]: syz.1.3284 (pid 13700) Use of int in max_burst socket option deprecated. [ 323.949847][T13700] Use struct sctp_assoc_value instead [ 323.976139][T13702] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3288: Allocating blocks 385-513 which overlap fs metadata [ 323.990589][T13710] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.000045][T13702] EXT4-fs (loop3): pa ffff888105ab7e00: logic 16, phys. 129, len 24 [ 324.008189][T13702] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 324.108809][T13714] veth1_macvtap: left promiscuous mode [ 324.115171][T13714] macsec0: entered promiscuous mode [ 324.120489][T13714] macsec0: entered allmulticast mode [ 324.128179][T13714] veth1_macvtap: entered promiscuous mode [ 324.133981][T13714] veth1_macvtap: entered allmulticast mode [ 324.140985][T13714] macsec0: left promiscuous mode [ 324.146070][T13714] macsec0: left allmulticast mode [ 324.151677][T13714] veth1_macvtap: left allmulticast mode [ 324.318705][T11809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.584438][T13727] netlink: 'syz.0.3296': attribute type 6 has an invalid length. [ 324.768189][T13751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.779668][T13751] loop2: detected capacity change from 0 to 512 [ 324.787890][T13751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.799844][T13751] EXT4-fs (loop2): 1 truncate cleaned up [ 324.806039][T13751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.820330][T13751] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3307'. [ 324.829473][T13751] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3307'. [ 324.884142][T13220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.899320][T13760] netlink: 'syz.0.3310': attribute type 6 has an invalid length. [ 325.090344][T13765] sctp: [Deprecated]: syz.0.3312 (pid 13765) Use of int in max_burst socket option deprecated. [ 325.090344][T13765] Use struct sctp_assoc_value instead [ 325.111741][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 325.122988][T13772] ip6gre1: entered allmulticast mode [ 325.599938][T13789] loop1: detected capacity change from 0 to 512 [ 325.617031][T13789] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.626185][T13789] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 325.662155][T13789] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 325.683622][T13789] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 325.691775][T13794] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.704363][T13794] loop4: detected capacity change from 0 to 512 [ 325.711517][T13789] System zones: 0-2, 18-18, 34-35 [ 325.717225][T13789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.730068][T13794] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.768441][T13794] EXT4-fs (loop4): 1 truncate cleaned up [ 325.768956][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.780697][T13794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.804630][T13763] syz.2.3311 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 325.818939][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.2.3311 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 325.818977][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 325.818989][T13763] Call Trace: [ 325.818995][T13763] [ 325.819003][T13763] __dump_stack+0x1d/0x30 [ 325.819049][T13763] dump_stack_lvl+0xe8/0x140 [ 325.819071][T13763] dump_stack+0x15/0x1b [ 325.819092][T13763] dump_header+0x81/0x220 [ 325.819171][T13763] oom_kill_process+0x334/0x3f0 [ 325.819198][T13763] out_of_memory+0x979/0xb80 [ 325.819247][T13763] ? css_next_descendant_pre+0x138/0x160 [ 325.819275][T13763] mem_cgroup_out_of_memory+0x13d/0x190 [ 325.819319][T13763] try_charge_memcg+0x5e2/0x870 [ 325.819425][T13763] obj_cgroup_charge_pages+0xb7/0x1a0 [ 325.819454][T13763] __memcg_kmem_charge_page+0x9f/0x170 [ 325.819485][T13763] __alloc_frozen_pages_noprof+0x188/0x360 [ 325.819527][T13763] alloc_pages_mpol+0xb3/0x250 [ 325.819622][T13763] alloc_pages_noprof+0x90/0x130 [ 325.819654][T13763] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 325.819706][T13763] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 325.819812][T13763] ? ip_set_alloc+0x1f/0x30 [ 325.819848][T13763] ? ip_set_alloc+0x1f/0x30 [ 325.819883][T13763] ? __kmalloc_cache_noprof+0x189/0x320 [ 325.819935][T13763] ip_set_alloc+0x1f/0x30 [ 325.819961][T13763] hash_netiface_create+0x282/0x740 [ 325.820059][T13763] ? __pfx_hash_netiface_create+0x10/0x10 [ 325.820099][T13763] ip_set_create+0x3cc/0x960 [ 325.820229][T13763] ? __nla_parse+0x40/0x60 [ 325.820257][T13763] nfnetlink_rcv_msg+0x4c6/0x590 [ 325.820372][T13763] netlink_rcv_skb+0x120/0x220 [ 325.820417][T13763] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 325.820510][T13763] nfnetlink_rcv+0x16b/0x1690 [ 325.820544][T13763] ? __kfree_skb+0x109/0x150 [ 325.820565][T13763] ? nlmon_xmit+0x4f/0x60 [ 325.820589][T13763] ? consume_skb+0x49/0x150 [ 325.820700][T13763] ? nlmon_xmit+0x4f/0x60 [ 325.820728][T13763] ? dev_hard_start_xmit+0x39e/0x3d0 [ 325.820761][T13763] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 325.820788][T13763] ? __dev_queue_xmit+0x182/0x1fb0 [ 325.820815][T13763] ? __list_del_entry_valid_or_report+0x65/0x130 [ 325.820947][T13763] ? ref_tracker_free+0x37d/0x3e0 [ 325.821000][T13763] ? __netlink_deliver_tap+0x4dc/0x500 [ 325.821040][T13763] netlink_unicast+0x5a1/0x670 [ 325.821084][T13763] netlink_sendmsg+0x58b/0x6b0 [ 325.821113][T13763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.821150][T13763] __sock_sendmsg+0x142/0x180 [ 325.821183][T13763] ____sys_sendmsg+0x31e/0x4e0 [ 325.821207][T13763] ___sys_sendmsg+0x17b/0x1d0 [ 325.821312][T13763] __x64_sys_sendmsg+0xd4/0x160 [ 325.821346][T13763] x64_sys_call+0x2999/0x2fb0 [ 325.821373][T13763] do_syscall_64+0xd0/0x1a0 [ 325.821396][T13763] ? clear_bhb_loop+0x40/0x90 [ 325.821477][T13763] ? clear_bhb_loop+0x40/0x90 [ 325.821502][T13763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.821531][T13763] RIP: 0033:0x7f7f2919e969 [ 325.821551][T13763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.821576][T13763] RSP: 002b:00007f7f27807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.821651][T13763] RAX: ffffffffffffffda RBX: 00007f7f293c5fa0 RCX: 00007f7f2919e969 [ 325.821669][T13763] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 325.821683][T13763] RBP: 00007f7f29220ab1 R08: 0000000000000000 R09: 0000000000000000 [ 325.821695][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.821707][T13763] R13: 0000000000000000 R14: 00007f7f293c5fa0 R15: 00007fff3a212df8 [ 325.821782][T13763] [ 326.175407][T13763] memory: usage 307200kB, limit 307200kB, failcnt 339 [ 326.182349][T13763] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 326.190344][T13763] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 326.197663][T13763] Memory cgroup stats for /syz2: [ 326.198067][T13763] cache 12288 [ 326.206492][T13763] rss 16384 [ 326.209634][T13763] shmem 0 [ 326.212628][T13763] mapped_file 0 [ 326.216148][T13763] dirty 0 [ 326.219156][T13763] writeback 0 [ 326.222477][T13763] workingset_refault_anon 806 [ 326.227179][T13763] workingset_refault_file 1099 [ 326.231990][T13763] swap 184320 [ 326.235301][T13763] swapcached 20480 [ 326.239123][T13763] pgpgin 303917 [ 326.242613][T13763] pgpgout 303900 [ 326.246172][T13763] pgfault 333872 [ 326.249733][T13763] pgmajfault 351 [ 326.253316][T13763] inactive_anon 0 [ 326.257134][T13763] active_anon 0 [ 326.260674][T13763] inactive_file 0 [ 326.264611][T13763] active_file 49152 [ 326.268506][T13763] unevictable 0 [ 326.272003][T13763] hierarchical_memory_limit 314572800 [ 326.277384][T13763] hierarchical_memsw_limit 9223372036854771712 [ 326.283580][T13763] total_cache 12288 [ 326.287556][T13763] total_rss 16384 [ 326.291239][T13763] total_shmem 0 [ 326.294794][T13763] total_mapped_file 0 [ 326.298954][T13763] total_dirty 0 [ 326.302751][T13763] total_writeback 0 [ 326.306573][T13763] total_workingset_refault_anon 806 [ 326.311815][T13763] total_workingset_refault_file 1099 [ 326.314446][T13794] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3322'. [ 326.317104][T13763] total_swap 184320 [ 326.317116][T13763] total_swapcached 20480 [ 326.326079][T13794] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3322'. [ 326.329871][T13763] total_pgpgin 303917 [ 326.329882][T13763] total_pgpgout 303900 [ 326.329890][T13763] total_pgfault 333872 [ 326.329897][T13763] total_pgmajfault 351 [ 326.329904][T13763] total_inactive_anon 0 [ 326.329912][T13763] total_active_anon 0 [ 326.329919][T13763] total_inactive_file 0 [ 326.329926][T13763] total_active_file 49152 [ 326.329934][T13763] total_unevictable 0 [ 326.329942][T13763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3311,pid=13761,uid=0 [ 326.395250][T13763] Memory cgroup out of memory: Killed process 13761 (syz.2.3311) total-vm:95928kB, anon-rss:936kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 326.418976][T13801] loop1: detected capacity change from 0 to 512 [ 326.467543][T13801] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.476708][T13801] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 326.504774][T13801] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 326.523522][T13064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.546478][T13801] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 326.594699][T13801] System zones: 0-2, 18-18, 34-35 [ 326.623419][T13801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.672209][T13817] netlink: 'syz.4.3332': attribute type 1 has an invalid length. [ 326.684146][T12375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.705626][T13817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.852177][T13825] sctp: [Deprecated]: syz.2.3334 (pid 13825) Use of int in max_burst socket option deprecated. [ 326.852177][T13825] Use struct sctp_assoc_value instead [ 327.491778][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 327.491796][ T29] audit: type=1400 audit(1747248637.702:7510): avc: denied { read } for pid=13832 comm="syz.3.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.545184][ T29] audit: type=1400 audit(1747248637.752:7511): avc: denied { create } for pid=13832 comm="syz.3.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.565824][ T29] audit: type=1400 audit(1747248637.752:7512): avc: denied { write } for pid=13832 comm="syz.3.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.586268][ T29] audit: type=1400 audit(1747248637.752:7513): avc: denied { nlmsg_write } for pid=13832 comm="syz.3.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.640112][ T29] audit: type=1400 audit(1747248637.822:7514): avc: denied { read } for pid=13835 comm="syz.1.3338" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.663562][ T29] audit: type=1400 audit(1747248637.822:7515): avc: denied { open } for pid=13835 comm="syz.1.3338" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.687473][ T29] audit: type=1400 audit(1747248637.822:7516): avc: denied { ioctl } for pid=13835 comm="syz.1.3338" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.767565][ T29] audit: type=1326 audit(1747248637.972:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 327.791372][ T29] audit: type=1326 audit(1747248637.972:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 327.815136][ T29] audit: type=1326 audit(1747248637.972:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff1a0e969 code=0x7ffc0000 [ 327.947015][T13854] ================================================================== [ 327.955152][T13854] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 327.962505][T13854] [ 327.964833][T13854] write to 0xffff888104bb5200 of 8 bytes by task 13852 on cpu 0: [ 327.972563][T13854] mas_wmb_replace+0xe46/0x14a0 [ 327.977438][T13854] mas_wr_store_entry+0x17ae/0x2b60 [ 327.982649][T13854] mas_store_prealloc+0x74d/0x9e0 [ 327.987683][T13854] vma_iter_store_new+0x1c5/0x200 [ 327.992727][T13854] vma_complete+0x125/0x570 [ 327.997247][T13854] __split_vma+0x54c/0x610 [ 328.001671][T13854] vma_modify+0x107/0x210 [ 328.006038][T13854] vma_modify_flags+0x101/0x130 [ 328.010909][T13854] mprotect_fixup+0x2cc/0x570 [ 328.015596][T13854] do_mprotect_pkey+0x6d6/0x980 [ 328.020455][T13854] __x64_sys_mprotect+0x48/0x60 [ 328.025312][T13854] x64_sys_call+0x2794/0x2fb0 [ 328.030029][T13854] do_syscall_64+0xd0/0x1a0 [ 328.034545][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.040452][T13854] [ 328.042781][T13854] read to 0xffff888104bb5200 of 8 bytes by task 13854 on cpu 1: [ 328.050414][T13854] mas_state_walk+0x485/0x650 [ 328.055098][T13854] mas_walk+0x30/0x120 [ 328.059173][T13854] lock_vma_under_rcu+0xa2/0x2f0 [ 328.064127][T13854] do_user_addr_fault+0x233/0x1090 [ 328.069255][T13854] exc_page_fault+0x54/0xc0 [ 328.073763][T13854] asm_exc_page_fault+0x26/0x30 [ 328.078625][T13854] [ 328.080953][T13854] value changed: 0xffff888104bb5c0e -> 0xffff888104bb5200 [ 328.088061][T13854] [ 328.090385][T13854] Reported by Kernel Concurrency Sanitizer on: [ 328.096537][T13854] CPU: 1 UID: 0 PID: 13854 Comm: syz.4.3344 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 328.109043][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 328.119123][T13854] ==================================================================