last executing test programs: 9m40.865777062s ago: executing program 32 (id=1380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="01000000020001000003be8c", 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r6, r6, 0x0) close(r1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 9m32.298477707s ago: executing program 33 (id=1509): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x67) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) close(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(r0, 0x0, 0x4000010) 9m28.554510258s ago: executing program 34 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000062998a7900998ec02bab7204000000001811510d", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x2, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="980b", 0x2}], 0x1) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xb67}, 0x18) socket$xdp(0x2c, 0x3, 0x0) 8m1.436190827s ago: executing program 4 (id=2927): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0xa}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x7fffffffff}, 0x18) read(r0, 0x0, 0x0) epoll_create(0xd) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f00000002c0)=0x3, 0x4) 8m1.375704928s ago: executing program 4 (id=2930): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) close_range(r0, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setown(r4, 0x8, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 8m1.29969068s ago: executing program 4 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0xfffff804, 0x8, 0x10000, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000380)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000690369d360161ba000870000bf91000000000000b7029c0a0000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000800)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53e90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de03861ad36b401bb7641", 0x96}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r7, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/4114, 0x1012}], 0x1}, 0x40000100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4100040000000000200012800b0001006272696467650000100002800a001400ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf255d0000001000a636060006000802110000010000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20041) 8m1.227764671s ago: executing program 2 (id=2935): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 8m1.119141744s ago: executing program 2 (id=2936): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d402000020000000180000000000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095", @ANYRES64=r0, @ANYRES64, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000280)='module_load\x00', r1}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000100)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x400, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getpeername$l2tp(r5, &(0x7f00000004c0), &(0x7f0000000580)=0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m59.722978484s ago: executing program 2 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x1c}}, 0x0) 7m59.657950245s ago: executing program 2 (id=2951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x7, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) 7m59.533227337s ago: executing program 4 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x7, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) 7m58.797302863s ago: executing program 2 (id=2954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9f", 0x1, r2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 7m58.689059776s ago: executing program 4 (id=2955): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000007e08f8650c25c83176840000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m58.02211763s ago: executing program 4 (id=2963): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064", 0x14}, {&(0x7f0000000100)="174640b6d80fb2eedc81ba60ccbb9df1", 0x10}], 0x2}}], 0x1, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x904, 0x8) openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 7m58.02046006s ago: executing program 35 (id=2963): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064", 0x14}, {&(0x7f0000000100)="174640b6d80fb2eedc81ba60ccbb9df1", 0x10}], 0x2}}], 0x1, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x904, 0x8) openat$cgroup_ro(r8, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 7m57.274805836s ago: executing program 7 (id=2987): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000e40)={@broadcast, @local, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x8906}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) 7m56.354059796s ago: executing program 7 (id=3001): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 7m56.315894107s ago: executing program 7 (id=3002): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x20000}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r4 = dup2(r3, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) utimes(0x0, 0x0) dup(r0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getdents(r0, 0xfffffffffffffffd, 0x2f) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @private=0xa010100}], 0x30) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10050}, 0x400) 7m56.074912672s ago: executing program 2 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x4, r6, 0x2e}, 0x10) 7m56.056476243s ago: executing program 7 (id=3006): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pidfd_getfd(r2, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r5, 0x4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f00000008c0)='-0', 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 7m56.026665953s ago: executing program 36 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x4, r6, 0x2e}, 0x10) 7m55.956880605s ago: executing program 7 (id=3009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) 7m55.69429906s ago: executing program 7 (id=3010): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, 0x0, 0x0) 7m55.69395836s ago: executing program 37 (id=3010): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, 0x0, 0x0) 7m41.407778929s ago: executing program 8 (id=3211): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) io_setup(0x2, &(0x7f0000000180)) io_setup(0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0400"/14, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket(0xf, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00'}, 0x18) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0xc5, 0x29, 0x2, {0x6ec, [{{0x0, 0x4, 0x5}, 0x5, 0xb, 0x7, './file0'}, {{0x10, 0x1, 0x2}, 0x6, 0x4, 0x7, './file0'}, {{0x20, 0x3}, 0xffffffffffffffff, 0x6, 0x7, './file0'}, {{0x4, 0x0, 0x5}, 0xfffffffffffffff8, 0x6, 0x7, './file0'}, {{0xa6, 0x4, 0x3}, 0x9, 0x8, 0x7, './file0'}, {{0x40, 0x3, 0x5}, 0xdc, 0xf1, 0x7, './file0'}]}}, 0xc5) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 7m41.30232454s ago: executing program 8 (id=3213): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 7m41.267775581s ago: executing program 8 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="1300"/20, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x8, 0x5, 0x0) 7m41.202194813s ago: executing program 8 (id=3217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x7, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) 7m41.108809845s ago: executing program 8 (id=3219): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 7m40.538167327s ago: executing program 8 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x7, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) 7m40.361173141s ago: executing program 38 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x7, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) 14.568267335s ago: executing program 9 (id=9153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@resuid}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 14.266561142s ago: executing program 9 (id=9159): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 14.111097976s ago: executing program 9 (id=9161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0xfffff804, 0x8, 0x10000, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b001000000000003f84a7a82ba100", @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000690369d360161ba000870000bf91000000000000b7029c0a0000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r6, 0x0, 0x0) 12.395949992s ago: executing program 9 (id=9185): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000000500260001"], 0x58}}, 0x0) capget(&(0x7f0000001dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001e00)={0x6, 0x8, 0x1, 0x5, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x18}) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') write$tun(r7, 0x0, 0x46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0xc3f53dbdd1297681, 0x1, 0xa, 0x0, 0x3, 0x20, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x3e, &(0x7f00000001c0)=""/62, 0x41000, 0x34, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r0, r0], &(0x7f0000000540)=[{0x3, 0x2, 0xc, 0x1}], 0x10, 0xe, @void, @value}, 0x94) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = syz_io_uring_setup(0x31d8, &(0x7f0000000180)={0x0, 0xa812, 0x1, 0x0, 0x7b}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r10, 0x70b3, 0x57df, 0x68, &(0x7f0000000280)={[0x9]}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.04440533s ago: executing program 9 (id=9194): socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x5, 0x0) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000000000000000080000000030011400000011907800000000e000007600004e20001c907804000000ffffff7f0900000000000000e98379fe"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) dup(r0) 8.590702684s ago: executing program 5 (id=9231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) 8.381051459s ago: executing program 5 (id=9233): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 6.929331801s ago: executing program 5 (id=9242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 6.368335363s ago: executing program 5 (id=9244): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2, 0x2b, r0}, 0x10) 4.265015538s ago: executing program 1 (id=9265): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000380)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x97, 0x2bc, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x4, [@fwd={0x7}, @datasec={0xf, 0x0, 0x0, 0xf, 0x1, [], "e3"}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x65, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x54, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x34, 0x1}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000000)=""/99, 0x80, 0x63, 0x0, 0xe8ca, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$eJzs3d9rXFkdAPDvnSRt0qYmVR9q0Vq0khbtTNLYNvhQI4g+Faz1PcZkEkImmZCZtE0okuIfIIi/0CeffBF8FkH6J6hQ0HcRUYrbdh92YXdnmcmdbZudSSbb+dEmnw+c3HPuvZPv92SYkzn3Xu4N4Mg6HxHTEdEXEZciYiRdn0lLbO+U6n5Pn9yfq5YkKpXb/08iSdfVf1eSLk+mLxuMiO9/N+JHycfjlja3lmcLhfx62s6VV9Zypc2ty0srs4v5xfzq9OTEtanrU1enxtvW1xvf/s8vf/r779z4y9fu/mvmfxd/XE1rOI7Vtr3Yj1Zst7jfTtcHan+Luv6IWD9IsNdYX9qfgV4nAgBAS6rf8T8dEV+KiGe/6XU2AAAAQCdUvjkc7yURFQAAAODQytSugU0y2fRagOHIZLLZnWt4PxsnMoViqfzVheLG6nx1W8RoDGQWlgr58fRa4dEYSKrtiVr9efvKrvZkRJyOiJ+PDNXa2bliYb7XBz8AAADgiDi5a/7/9sjO/B8AAAA4ZEZ7nQAAAADQceb/AAAAcPg1nf8n/d1NBAAAAOiE7928WS2V+vOv5+9sbiwX71yez5eWsysbc9m54vpadrFYXKzds29lv99XKBbXvh6rG/dy5XypnCttbs2sFDdWyzO153rP5D0nGgAAALrv9Bcf/jOJiO1vDNVK1bF0Wwtz9enOZgd0UuZguyedygPovr5eJwD0zD4X+P7t891KBOg65+OBfSb2v9jVPuBhAwAA4HUw9rlXOv/vfCC8wUzk4ej6ROf/T7U/D6D73OALjq6mc3wTAzgaju+/y2CzDX9tcy4AAEDHDNdKksmmU/7hyGSy2Z1D/KMxkCwsFfLjEfGpiPjHyMDxanui10kDAAAAAAAAAAAAAAAAAAAAAAAAwBumUkmiAgAAABxqEZn/JumD/MdGLgzvPj5wLHlnpLaMiLu/vf2re7Pl8vpEdf1bH60v/zpdf6UXRzAAAACA3erz9Po8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa6emT+3P10s24j78VEaON4vfHYG05+KeRiDjxLIn+F16XRERfG+JvP4iIM43iJ9W0YjTNYnf8TEQM9Tj+yTbEh6PsYXX8mW70+cvE+dqy8eevPy2v6vH5ZuNfpj7+1ca5RuPfqRZjnH30x1zT+A8izvY3Hn/q8ZNXHH9/+IOtrWbbKr+LGGv4/yd5KVauvLKWK21uXV5amV3ML+ZXJycnrk1dn7o6NZ5bWCrk058NY/zsC3/+YK/+n2gSf3Sf/l9osf/vP7r35DN7xL/45d3x3629/2f2iF/9238l/T9Q3T5Wr2/v1F907g9/P7dX/+eb9H+/9/9ii/2/dOsn/25xVwCgC0qbW8uzhUJ+XeWNrAx4B9tcGYrXIo12VW6lH/QDv7zHAxMAANB2z7/09zoTAAAAAAAAAAAAAAAAAAAAOLo6fhOy4y/fWWCwd10FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjThwEAAP//sxnTZg==") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 3.70962226s ago: executing program 6 (id=9268): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x3574, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 3.349453588s ago: executing program 1 (id=9271): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0xa3, &(0x7f0000000840)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000008c0), 0x8, 0x5d, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001880)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) sendmmsg$inet(r0, &(0x7f0000005280)=[{{&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="f79efa07278c34858ee0ffafe14dff03634f6ba1aa25873d275fd4c69232823296334d84aae768b32c230bb4e8793bb02cfe0652d5cdd5f0c13ab5b758f4f373fd87cf5db72e9f8340b72b9218f709381e15b5655a60362e74b449801f7d02bd71f583be3271bd6ace", 0x69}, {&(0x7f0000000300)="2d4fa999e8634f848d23aa864cddca731b02f2260edbd92c44710bf19d4fb1e56a53ee2fc4a9aac6692fab6f271dc611599d172bca4c7f07abe179bb7ca5ad1f7b1bbbca2fdfa2ef5f8a3f3113fa43b54518bda1dfb4f7dce22f78d1f14ffed101b625ada472976f6e9f93c9603939e539bb61720f99a0fd75c41972b934efdcdcd7928cc606e3c03348ce0b28762199da86d9af05afd69f5b42eae7d67b6ca6a9b1dfae7906640ead46a01404ca76bdd8f7a664c14d065ea9111dd36ac0a240cd8da60cf49df4eaf27101512c703d002b34a4215d2c203eb68f605f4d84fb578caa79bc02fdd2fbfc6b599ddc522933b94b00b7", 0xf4}], 0x2, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="cfb3cde64e031227c5d48f8fa901a33363a1c8157937f1990f68f1ffc9200de83cdb76fd5daf3109dcfd30549ca6949e491a18d262bb31d48a8f151982b6a2d32d1b797c53efd85648c9985214fd2d89391e032db5dc0d4842c64ac2f870bc54de8431b317421cd2eea006c78642b24b34f3245c2e995856cc9ebc06c55dbc19b19f36005dae536a4898cd5568e911cae86817cf28378104c97112e5d8fc83cb34429e1112451bdc6e78a7ef9b298cade750774f35e22e95935a7e748971fc77d1f69175d74c678e", 0xc8}, {&(0x7f0000000580)="790e78d469d0884419b58ec0841b6fedb7bcc41112d72da071967b474213705bfd04fa8731f0e87ddc020a80b94e640771396882e08381b2f8140ede56923d43e1aef9a21f7cfbd7d99a377c4ed8f1d395e17ecf7923", 0x56}, {&(0x7f0000000600)="cdd22ce50c0defc15c804fac6b7c92a28f75a73b41fb13e5baf706cbccbecf615381393391fb8498d8b5275f3dfc0e3571813f82f0302ce7d6a121d71086fccea1d0dfff6f51a223ef3ce2c7457bd4e29981960b02b24ab08eef725eba5b10ea6d8836708297ea3b0e713e35d52e44e31fd9ca0e3477787044c87350fbfc", 0x7e}, {&(0x7f0000000680)="6d503ea5a82509c2ba2cfb9d26929de314fc408912eb3f5f0ac920764889b0346e9d8f08a3f41f72ff3516ea8a2a8051b323f91a2d903a3a41c0a374f8fe66b38f149a34201ec4561706fcfaaea80c173f2c27f18c77bf0cb2402846f5b2f399da01271e10b10dd0e379a0b4ed415438e29c846287da37cba06ba371a96c14d9c66b2170", 0x84}], 0x4, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x38}}, {{&(0x7f0000000ac0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001000)=[{0x0}, {0x0}, {&(0x7f0000000e40)="ee72b0cc7116bbb9061bde853ce2303925539c98665f4af559eb2f2a74b3991787361a500afc51baaa45953f", 0x2c}, {0x0}], 0x4, &(0x7f0000001080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)}}, {{&(0x7f0000001380)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x30}}, {{&(0x7f0000001980)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002d40), 0x0, &(0x7f0000005480)}}], 0x6, 0x4000010) r4 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xea4e, 0x0, 0x10000002, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 3.106016293s ago: executing program 3 (id=9274): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) inotify_init1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30ffff00000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa1fb9c11cf8a54e19ff08000000810039000800457f002c00008000001190780a010100e0000008001890780000000f00"/64], 0x0) close(r4) 2.976247306s ago: executing program 1 (id=9275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000200)=""/114, 0x72, 0x0, &(0x7f0000000300)=""/94, 0x5e}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x2}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.792508299s ago: executing program 6 (id=9276): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x7f, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.746208891s ago: executing program 1 (id=9277): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x10, 0x80, 0x9, 0x6, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x65, 0x0, 0x81, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x3, [{@loopback, 0x1000}, {@multicast2, 0x80000001}, {@multicast1, 0x7}, {@empty, 0x5}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000980)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = socket(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x9466}], 0x1, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24044084) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=r10, @ANYRES8, @ANYRESOCT=r7, @ANYBLOB="67379b93c401c239d052d58fc4df9c4e177c5c01b728ea7b5ce2fae782b6dd9cc290deb6a8066e636d5a02b6fa445aad4bbb85b92d543211b5d6e9da385203334782c55d8e7a7b2d19d4ff34e6066a4cb0aa031cfea13eea59d33c818a543f3d7ecbb7b1b9e3fa04f789e66e59573a38736a3b294a97dcaf355bf3c59be94e5f57f7ac2490456383b5dd2f596e17de1b7e521edc1a3296f82f309504b695462a105364047271e8ad767eedc400200d6f7c71065d007f5396fcc40df14d0849048da08429a80fdb84768bb6e4dcb3f5d5fa047b85", @ANYRESDEC, @ANYRESDEC=r9, @ANYRES8=r8], 0x48) sendmsg$nl_netfilter(r4, &(0x7f0000000900)={&(0x7f0000000740), 0xc, &(0x7f00000008c0)={&(0x7f0000001980)={0x1154, 0xc, 0x7, 0x801, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x5}, [@generic="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", @typed={0x8, 0x102, 0x0, 0x0, @u32=0x2f00}, @nested={0x42, 0x3e, 0x0, 0x1, [@typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@remote}, @generic="ac9e3187af2e542c2cea", @typed={0x8, 0x141, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x6}, @typed={0xc, 0x74, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x2}]}, @generic="4ae6fb78f8c12ab6c59bb55e4f926b3d60015d20234dc730062b6ee48f9ec9e673f2ca143c14a902ff9f3a86d825eaa20c5e6216cf2ac8a5ac8385023df081560e438df522471be712920de7efe3b49f407f0d942fdb5b93cab7373e5a73aa610cf375c51b44ef0528176622294cd716d5aee40b4c9e4f85c92d5f159b460c299bb2bf27963e40d7fcb651dee84a772e54d3a420c247e07f1aee1034eae9949ee75760379981268131c2272c221de68191ac6aa03203f3537c7d2f8d855ab3bab2fb73741ac5e38b2c9711f51ecad52ed2a2d1697fe5efd23d8005925b5087dde79107186e11b2caf51a5272c3fdb1dc62d3"]}, 0x1154}, 0x1, 0x0, 0x0, 0x40000}, 0x8) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x29}) 2.718985482s ago: executing program 6 (id=9278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0xfffff804, 0x8, 0x10000, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b001000000000003f84a7a82ba100", @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000690369d360161ba000870000bf91000000000000b7029c0a0000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r6, 0x0, 0x0) 2.509163746s ago: executing program 0 (id=9279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.154610563s ago: executing program 3 (id=9280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0xfffff804, 0x8, 0x10000, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000380)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b001000000000003f84a7a82ba1000000000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C+\tj$\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000690369d360161ba000870000bf91000000000000b7029c0a0000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000800)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53e90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de03861ad36b401bb7641", 0x96}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r9, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf255d0000001000a636060006000802110000010000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20041) 1.82872355s ago: executing program 1 (id=9281): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000380)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x97, 0x2bc, &(0x7f0000000ec0)="$eJzs3T9rJGUYAPBnNpvZRYtdwUoEB7SwOi7X2myQHBxupWyhFhq8O5DsIiQQ8A+uV9naWNraCIKdX8LGbyDYCnYGDIzM7kx2N042uzGbqPf7NXnzzvO887xvZhJS5Mn7L44OHmbx+Mlnv0S7nUSjF704SaIbjah8EQt6XwUA8F92kufxez61Tl4SEe3NlQUAbNDaP/9/2HhJAMCGvfX2O2/s9vt7b2ZZO+6PvjweFL/ZFx+n13cfx4cxjEdxNzpxGpGfmY7v53k+bmaFbrwyGh8PiszRez+V6+/+FjHJ34lOdCdTi/kP+ns72dRc/rio45ny/r0i/1504vma+z/o792ryY9BGq++PFf/nejEzx/ERzGMtKxtskoj4vOdLHs9//qPT98tZov8ZHw8aMXDhZPKt27wywIAAAAAAAAAAAAAAAAAAAAAwP/cnbJ3Tism/XuKqbL/ztZp8cl2ZJXuYn+eaX5SLXSuP9A4j2+q/jx3syzLy8BZfjNeaEbzdnYNAAAAAAAAAAAAAAAAAAAA/y5HH39ysD8cPjq8lkHVDaAZEYfl+Crr9OZmXorlwa3yPvvDYaMcLlk5tqqYJGJpGcUmVq75z7LtwdWO7rmLav7u+5XX+fbyvZeD7RVi/uGgeroO9pP6M2xFNdOOcvDjfEy66mOTXnQpnz4SxUzn8nXS2kudtfeePjsZjJfERHJWWE3Ma79OT66cSeJccDo51dr07aPZa1179/bqz3PxpvxNctatI7mubz8AAAAAAAAAAAAAAAAAAMCc2R/91lx8sjS1kbc2VhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3KjZ//9fYzAuk1cITuPw6Ja3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFPgrwAAAP//34lchQ==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x4, [@fwd={0x7}, @datasec={0xf, 0x0, 0x0, 0xf, 0x1, [], "e3"}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x65, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x54, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x34, 0x1}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000000)=""/99, 0x80, 0x63, 0x0, 0xe8ca, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 1.275890772s ago: executing program 3 (id=9282): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000000)='./file0\x00', 0x121) 1.054070607s ago: executing program 3 (id=9283): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@resuid}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 822.573352ms ago: executing program 1 (id=9284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0xfffff804, 0x8, 0x10000, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000380)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b001000000000003f84a7a82ba1000000000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C+\tj$\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000690369d360161ba000870000bf91000000000000b7029c0a0000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000800)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53e90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de03861ad36b401bb7641", 0x96}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r8, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/4114, 0x1012}], 0x1}, 0x40000100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4100040000000000200012800b0001006272696467650000100002800a001400ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf255d0000001000a636060006000802110000010000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20041) 606.133307ms ago: executing program 0 (id=9285): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000000)='./file0\x00', 0x121) 605.755657ms ago: executing program 6 (id=9286): socket$inet(0x2, 0xa, 0x7f) clock_nanosleep(0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 582.677037ms ago: executing program 0 (id=9287): socket$inet(0x2, 0xa, 0x7f) clock_nanosleep(0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 575.217908ms ago: executing program 6 (id=9288): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 508.082929ms ago: executing program 6 (id=9289): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) unshare(0x40020000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x7ff, 0x9, 0xe, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) 448.88892ms ago: executing program 3 (id=9290): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x56e, &(0x7f00000011c0)="$eJzs3U1rVFcfAPD/nbz4+jxGEGm7KAEXtVgnJumLhS7ssrRSod3bIbkGycSRzERMKlQXdeOmSKGUCqUfoPsupV+g9EMIrSBFQrvoZsqd3ImjmcnEODrTzu8HV8+5947nnLn3nPmfOSM3gKE1mf1RiHg5Ir5KIg61HBuN/ODkxnnrD6/NZVsS9fonfySR5Pua5yf53wfyzEsR8fOXEScKW8utrq4tlsrldDnPT9WWLk9VV9dOXlwqLaQL6aWZ2dnTb83OvPvO2z1r6+vn/vr247sfnL51bP2bH+8fvp3EmTiYH2ttxzO43pqZjMn8PRmLM0+cON2DwgZJ0u8KsCsjeT8fi2wMOBQjea8H/vu+iIg6MKQS/R+GVDMOaM7tW+bBI52jhjYT+n+pB+9vTIC2tn9047uR2NuYG+1fTx6bGWXz3YkelJ+V8dPvd25nW/TuewiArq7fiIhTo6Nbx78kH/9279QOznmyDOMfvDh3s/jnjXbxT2Ez/ok28c+BNn13N7r3/8L9Ni9LevUtdRb/vdc2/t2McSdG8tz/GjHfWHLhYjnNxrb/R8TxGNuT5bdbzzm9fq/e6Vhr/JdtWfnNWDCvx/3RPY+/Zr5UKz1Lm1s9uBHxStv4N9m8/kmb65+9H+d2WMbR9M6rnY51b//zVf8h4rW21//Rilay/frkVON+mGreFVv9efPoL53K73f7s+u/f/v2TySt67XVpy/j+71/p52Obd/+gx3v//Hk00Z6PN93tVSrLU9HjCcfbd0/8+i1zXzz/Kz9x49tP/61u//3RcRnXVteb9T85pGbHU8dgOv/6/xTXf+nT9z78PPvOpW/s/HvzUbqeL5nJ+PfTiv4LO8dAAAAAAAADJpCY5U1KRQ304VCsbjx+44jsb9QrlRrJy5UVi7Nb6zGTsRYobnSfajl9xDT+e9hm/mZJ/KzEXE4Ir4e2dfIF+cq5fl+Nx4AAAAAAAAAAAAAAAAAAAAGxIEO//8/81v7J4CNv9gaAs+VR37D8Ora/3vxpCdgIPn8h+G1q/6/r/f1AF48n/8wpMb6XQGgn3z+w/DS/2F46f8wvPR/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KlzZ89mW3394bW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZa6/XvlSuXy9EysXJ2qpdXaVHV17fxSZeVS7fzFpdJCej71tCEAAAAAAAAAAAAAAAAAAADYqrq6tlgql9NlCYldJUYHoxoSLYlbPejdfR6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDFPwEAAP//j6c30Q==") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x10000) 431.739941ms ago: executing program 0 (id=9291): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x56e, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, 0x0, 0x0, 0x8000c61) 197.412176ms ago: executing program 0 (id=9292): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 195.917536ms ago: executing program 3 (id=9293): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0xa3, &(0x7f0000000840)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000008c0), 0x8, 0x5d, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001880)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) sendmmsg$inet(r0, &(0x7f0000005280)=[{{&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="f79efa07278c34858ee0ffafe14dff03634f6ba1aa25873d275fd4c69232823296334d84aae768b32c230bb4e8793bb02cfe0652d5cdd5f0c13ab5b758f4f373fd87cf5db72e9f8340b72b9218f709381e15b5655a60362e74b449801f7d02bd71f583be3271bd6ace", 0x69}, {&(0x7f0000000300)="2d4fa999e8634f848d23aa864cddca731b02f2260edbd92c44710bf19d4fb1e56a53ee2fc4a9aac6692fab6f271dc611599d172bca4c7f07abe179bb7ca5ad1f7b1bbbca2fdfa2ef5f8a3f3113fa43b54518bda1dfb4f7dce22f78d1f14ffed101b625ada472976f6e9f93c9603939e539bb61720f99a0fd75c41972b934efdcdcd7928cc606e3c03348ce0b28762199da86d9af05afd69f5b42eae7d67b6ca6a9b1dfae7906640ead46a01404ca76bdd8f7a664c14d065ea9111dd36ac0a240cd8da60cf49df4eaf27101512c703d002b34a4215d2c203eb68f605f4d84fb578caa79bc02fdd2fbfc6b599ddc522933b94b00b7", 0xf4}], 0x2, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="cfb3cde64e031227c5d48f8fa901a33363a1c8157937f1990f68f1ffc9200de83cdb76fd5daf3109dcfd30549ca6949e491a18d262bb31d48a8f151982b6a2d32d1b797c53efd85648c9985214fd2d89391e032db5dc0d4842c64ac2f870bc54de8431b317421cd2eea006c78642b24b34f3245c2e995856cc9ebc06c55dbc19b19f36005dae536a4898cd5568e911cae86817cf28378104c97112e5d8fc83cb34429e1112451bdc6e78a7ef9b298cade750774f35e22e95935a7e748971fc77d1f69175d74c678e", 0xc8}, {&(0x7f0000000580)="790e78d469d0884419b58ec0841b6fedb7bcc41112d72da071967b474213705bfd04fa8731f0e87ddc020a80b94e640771396882e08381b2f8140ede56923d43e1aef9a21f7cfbd7d99a377c4ed8f1d395e17ecf7923", 0x56}, {&(0x7f0000000600)="cdd22ce50c0defc15c804fac6b7c92a28f75a73b41fb13e5baf706cbccbecf615381393391fb8498d8b5275f3dfc0e3571813f82f0302ce7d6a121d71086fccea1d0dfff6f51a223ef3ce2c7457bd4e29981960b02b24ab08eef725eba5b10ea6d8836708297ea3b0e713e35d52e44e31fd9ca0e3477787044c87350fbfc", 0x7e}, {&(0x7f0000000680)="6d503ea5a82509c2ba2cfb9d26929de314fc408912eb3f5f0ac920764889b0346e9d8f08a3f41f72ff3516ea8a2a8051b323f91a2d903a3a41c0a374f8fe66b38f149a34201ec4561706fcfaaea80c173f2c27f18c77bf0cb2402846f5b2f399da01271e10b10dd0e379a0b4ed415438e29c846287da37cba06ba371a96c14d9c66b2170", 0x84}], 0x4, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x38}}, {{&(0x7f0000000ac0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000b00)="05926aee6761516b44fd241ea3bb783192ca8b73083207e657228ebb78d22d72a69f5dc1ff97b06df2b1446c514faa98d3f72f12d7cdca8c6d7152ad6fff2a183791b59305f06b1e797f0f0a80cfdaa9e0ffe6eae08fda71811255fd139ba5b84a8dc46a2dc4aaba7d2e19e7b5208a882fa41e6b91", 0x75}, {&(0x7f0000000b80)="234c0ba90c8cc8269e3493dd0b4606f6c1dae33b3e98c0bb52321c9ba0997c12e9985f2879be44e8d6c86f95819c843b7fcc5b4a96456219a09f70030fb901e8afa0093b2cb6c221a3994b87915decdbb8e5aae55d79e23f521d9c8f16fd0d0fbd448bdc91c723d1c65603100cfab9cd39c4f4c0e2cfe92159ec7c741d8806d3cdf5affaf3ebe47d94b5d281f62a15a153b8f4f9a955576847317876fc5722aeeb93a98f9b355e08a73905cd6e1b17c1de5eed5b79473480f4e0d3eebd842f89221a1182685f841b1913791f4304b4a02d8f4963336bcdcbe9169125e4a7145b5a5c47548654b2732b760ae89d2a406861f4700f5824861340", 0xf9}, {&(0x7f0000000d00)="c1c6b4cdc4988b309ff33b2a70447e342a1c76b1b8347fa8af2242f3bee1a4930585fa7f7f448d1c8dbd19c1fd6cd1d144bbbdacc87e2120bd0889b1b264a8ae24232103f671defbf7c0d273389920a45f00bd4300d642b6151de93961e8cd6a532c2dc2c4d71a86071adf07d73cf3d76af1335268e0f81402ec59d41bbf0a4c869242a7d6c11714e2588318a111248d4bbcbd9fc217d09f03d99e1b0313c23ccfe1d35e5305f88635135858", 0xac}, {0x0}, {&(0x7f0000000e40)="ee72b0cc7116bbb9061bde853ce2303925539c98665f4af559eb2f2a74b3991787361a500afc51baaa45953f", 0x2c}, {0x0}], 0x6, &(0x7f0000001080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)}}, {{&(0x7f0000001380)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x30}}, {{&(0x7f0000001980)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002d40), 0x0, &(0x7f0000005480)}}], 0x6, 0x4000010) r4 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xea4e, 0x0, 0x10000002, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 0s ago: executing program 0 (id=9294): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2, 0x2b, r0}, 0x10) kernel console output (not intermixed with test programs): 692.284521][ T305] syz.6.8970: attempt to access beyond end of device [ 692.284521][ T305] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 692.300285][T32763] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.313956][ T305] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 692.344943][ T307] loop6: detected capacity change from 0 to 512 [ 692.360584][ T307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.373562][ T307] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.406815][ T307] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.8971: corrupted inode contents [ 692.420016][ T307] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.8971: mark_inode_dirty error [ 692.431670][ T307] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.8971: corrupted inode contents [ 692.443866][ T307] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.8971: mark_inode_dirty error [ 692.456202][ T307] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.8971: mark inode dirty (error -117) [ 692.469233][ T307] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 692.492652][T28608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.681377][ T330] loop5: detected capacity change from 0 to 164 [ 692.771724][ T340] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 692.782074][ T328] blktrace: Concurrent blktraces are not allowed on sg0 [ 692.826349][ T343] loop5: detected capacity change from 0 to 512 [ 692.841272][ T343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.854269][ T343] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.933709][ T350] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.8983: corrupted inode contents [ 692.973205][ T350] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.8983: mark_inode_dirty error [ 692.989670][ T350] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.8983: corrupted inode contents [ 693.003011][ T350] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.8983: mark_inode_dirty error [ 693.016021][ T350] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.8983: mark inode dirty (error -117) [ 693.030602][ T350] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 693.070886][ T361] bridge0: entered promiscuous mode [ 693.071591][T25092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.078574][ T361] bridge0: port 3(macvlan2) entered blocking state [ 693.091919][ T361] bridge0: port 3(macvlan2) entered disabled state [ 693.098999][ T361] macvlan2: entered allmulticast mode [ 693.104465][ T361] bridge0: entered allmulticast mode [ 693.129857][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.138955][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.152605][ T361] macvlan2: left allmulticast mode [ 693.153287][ T368] loop5: detected capacity change from 0 to 164 [ 693.157821][ T361] bridge0: left allmulticast mode [ 693.172542][ T361] bridge0: left promiscuous mode [ 693.205732][ T371] program syz.5.8994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.315216][ T377] blktrace: Concurrent blktraces are not allowed on sg0 [ 693.374869][ T382] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.426695][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.435458][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.444304][ T382] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.539792][ T382] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.619789][ T382] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.693706][ T382] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.705576][ T382] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.718902][ T382] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.734310][ T382] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.795985][ T391] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.847792][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.857452][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.867360][ T391] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.989981][ T391] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.039747][ T391] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.122631][ T391] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.134675][ T391] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.149222][ T391] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.161283][ T391] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.673895][ T403] syz.6.9005 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 694.684962][ T403] CPU: 1 UID: 0 PID: 403 Comm: syz.6.9005 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 694.685005][ T403] Tainted: [W]=WARN [ 694.685092][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.685109][ T403] Call Trace: [ 694.685185][ T403] [ 694.685194][ T403] __dump_stack+0x1d/0x30 [ 694.685214][ T403] dump_stack_lvl+0xe8/0x140 [ 694.685234][ T403] dump_stack+0x15/0x1b [ 694.685255][ T403] dump_header+0x81/0x220 [ 694.685336][ T403] oom_kill_process+0x334/0x3f0 [ 694.685454][ T403] out_of_memory+0x979/0xb80 [ 694.685526][ T403] try_charge_memcg+0x5e6/0x9e0 [ 694.685591][ T403] charge_memcg+0x51/0xc0 [ 694.685694][ T403] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 694.685730][ T403] __read_swap_cache_async+0x1df/0x350 [ 694.685764][ T403] swap_cluster_readahead+0x277/0x3e0 [ 694.685873][ T403] swapin_readahead+0xde/0x6f0 [ 694.685909][ T403] ? __filemap_get_folio+0x4f7/0x6b0 [ 694.685950][ T403] ? __rcu_read_unlock+0x34/0x70 [ 694.686041][ T403] ? swap_cache_get_folio+0x77/0x200 [ 694.686075][ T403] do_swap_page+0x301/0x2430 [ 694.686095][ T403] ? css_rstat_updated+0xcd/0x5b0 [ 694.686205][ T403] ? __pfx_default_wake_function+0x10/0x10 [ 694.686231][ T403] handle_mm_fault+0x9a5/0x2be0 [ 694.686262][ T403] ? mas_walk+0xf2/0x120 [ 694.686381][ T403] do_user_addr_fault+0x636/0x1090 [ 694.686427][ T403] exc_page_fault+0x62/0xa0 [ 694.686462][ T403] asm_exc_page_fault+0x26/0x30 [ 694.686488][ T403] RIP: 0033:0x7fe430935368 [ 694.686559][ T403] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 5a 28 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 [ 694.686583][ T403] RSP: 002b:00007ffdf860c720 EFLAGS: 00010206 [ 694.686603][ T403] RAX: 00000000000a9970 RBX: 00007fe430c87ba0 RCX: 00000000000a96f0 [ 694.686619][ T403] RDX: 0000000000000280 RSI: 00007ffdf860c700 RDI: 0000000000000001 [ 694.686635][ T403] RBP: 00007fe430c87ba0 R08: 00000000262de79e R09: 7fffffffffffffff [ 694.686721][ T403] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000a9ab2 [ 694.686798][ T403] R13: 00007fe430c86160 R14: ffffffffffffffff R15: 00007ffdf860c830 [ 694.686889][ T403] [ 694.686898][ T403] memory: usage 307200kB, limit 307200kB, failcnt 7596 [ 694.803762][ T411] SELinux: ebitmap: truncated map [ 694.805524][ T403] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 694.805544][ T403] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 694.813528][ T411] SELinux: failed to load policy [ 694.816229][ T403] Memory cgroup stats for /syz6: [ 694.816968][ T403] cache 0 [ 694.941546][ T415] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 694.945894][ T403] rss 0 [ 694.945905][ T403] shmem 0 [ 694.945914][ T403] mapped_file 0 [ 694.945924][ T403] dirty 0 [ 694.967798][ T403] writeback 8192 [ 694.971391][ T403] workingset_refault_anon 2106 [ 694.976176][ T403] workingset_refault_file 17924 [ 694.981081][ T403] swap 200704 [ 694.984395][ T403] swapcached 12288 [ 694.988175][ T403] pgpgin 618782 [ 694.991643][ T403] pgpgout 618777 [ 694.995282][ T403] pgfault 461047 [ 694.998922][ T403] pgmajfault 1395 [ 695.002597][ T403] inactive_anon 8192 [ 695.006513][ T403] active_anon 4096 [ 695.010292][ T403] inactive_file 0 [ 695.013943][ T403] active_file 8192 [ 695.017703][ T403] unevictable 0 [ 695.021226][ T403] hierarchical_memory_limit 314572800 [ 695.026664][ T403] hierarchical_memsw_limit 9223372036854771712 [ 695.032889][ T403] total_cache 0 [ 695.036377][ T403] total_rss 0 [ 695.039728][ T403] total_shmem 0 [ 695.043217][ T403] total_mapped_file 0 [ 695.047277][ T403] total_dirty 0 [ 695.050791][ T403] total_writeback 8192 [ 695.054952][ T403] total_workingset_refault_anon 2106 [ 695.060285][ T403] total_workingset_refault_file 17924 [ 695.065676][ T403] total_swap 200704 [ 695.069530][ T403] total_swapcached 12288 [ 695.073834][ T403] total_pgpgin 618782 [ 695.077883][ T403] total_pgpgout 618777 [ 695.081972][ T403] total_pgfault 461047 [ 695.086143][ T403] total_pgmajfault 1395 [ 695.090454][ T403] total_inactive_anon 8192 [ 695.094933][ T403] total_active_anon 4096 [ 695.099233][ T403] total_inactive_file 0 [ 695.103411][ T403] total_active_file 8192 [ 695.107722][ T403] total_unevictable 0 [ 695.111763][ T403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9005,pid=403,uid=0 [ 695.126633][ T403] Memory cgroup out of memory: Killed process 403 (syz.6.9005) total-vm:93884kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 695.231706][ T426] __nla_validate_parse: 28 callbacks suppressed [ 695.231725][ T426] netlink: 71 bytes leftover after parsing attributes in process `syz.3.9012'. [ 695.250271][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9012'. [ 695.289557][ T428] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 695.322080][T32763] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.350690][ T430] bridge0: entered promiscuous mode [ 695.359046][ T430] bridge0: port 3(macvlan2) entered blocking state [ 695.365668][ T430] bridge0: port 3(macvlan2) entered disabled state [ 695.374294][ T430] macvlan2: entered allmulticast mode [ 695.379760][ T430] bridge0: entered allmulticast mode [ 695.386262][ T430] macvlan2: left allmulticast mode [ 695.391489][ T430] bridge0: left allmulticast mode [ 695.405364][ T430] bridge0: left promiscuous mode [ 695.419696][T32763] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.439439][T32763] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.439584][ T436] loop6: detected capacity change from 0 to 512 [ 695.452367][T32763] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.472277][ T436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.491015][ T441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=441 comm=syz.5.9015 [ 695.523939][ T436] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 695.537810][ T434] loop5: detected capacity change from 0 to 1024 [ 695.557595][ T434] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 695.568621][ T434] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 695.593570][ T434] JBD2: no valid journal superblock found [ 695.599452][ T434] EXT4-fs (loop5): Could not load journal inode [ 695.614584][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9016: corrupted inode contents [ 695.642531][ T436] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.9016: mark_inode_dirty error [ 695.655059][ T436] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9016: corrupted inode contents [ 695.667407][ T436] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.9016: mark_inode_dirty error [ 695.679726][ T436] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.9016: mark inode dirty (error -117) [ 695.693287][ T436] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 695.721958][T28608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.834963][ T455] program syz.5.9022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.864928][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 695.866782][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 695.866806][ T29] audit: type=1326 audit(1750653697.923:22114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 695.886083][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 695.904292][ T29] audit: type=1326 audit(1750653697.943:22115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 695.935990][ T29] audit: type=1326 audit(1750653697.943:22116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 695.941052][ T456] loop7: detected capacity change from 0 to 16384 [ 695.959545][ T29] audit: type=1326 audit(1750653697.943:22117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 695.989385][ T29] audit: type=1326 audit(1750653697.943:22118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.012944][ T29] audit: type=1326 audit(1750653697.943:22119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.036585][ T29] audit: type=1326 audit(1750653697.943:22120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.060530][ T29] audit: type=1326 audit(1750653697.943:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.106732][ T29] audit: type=1326 audit(1750653698.163:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.130269][ T29] audit: type=1326 audit(1750653698.163:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=448 comm="syz.6.9019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 696.181583][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 696.190693][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 696.209281][ T473] loop5: detected capacity change from 0 to 164 [ 696.238704][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 696.263210][ T473] bio_check_eod: 4 callbacks suppressed [ 696.263229][ T473] syz.5.9027: attempt to access beyond end of device [ 696.263229][ T473] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 696.288063][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 696.296920][ T473] syz.5.9027: attempt to access beyond end of device [ 696.296920][ T473] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 696.407534][ T488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9031'. [ 696.442260][ T489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=489 comm=syz.3.9029 [ 696.462408][ T483] loop3: detected capacity change from 0 to 1024 [ 696.473223][ T483] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 696.484210][ T483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 696.512333][ T483] JBD2: no valid journal superblock found [ 696.518263][ T483] EXT4-fs (loop3): Could not load journal inode [ 696.685321][ T501] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.724634][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9037'. [ 696.759173][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.786796][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.801010][ T501] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.815160][ T511] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 696.869242][ T520] loop3: detected capacity change from 0 to 164 [ 696.882282][ T501] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.905209][ T520] syz.3.9040: attempt to access beyond end of device [ 696.905209][ T520] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 696.919675][ T520] syz.3.9040: attempt to access beyond end of device [ 696.919675][ T520] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 696.955657][ T501] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.980050][ T520] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 697.010560][ T501] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.026636][ T501] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.038718][ T526] loop9: detected capacity change from 0 to 164 [ 697.042112][ T501] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.056939][ T501] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.082570][ T526] syz.9.9043: attempt to access beyond end of device [ 697.082570][ T526] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 697.096924][ T526] syz.9.9043: attempt to access beyond end of device [ 697.096924][ T526] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 697.164267][ T529] loop7: detected capacity change from 0 to 16384 [ 697.255297][ T535] loop9: detected capacity change from 0 to 128 [ 697.270167][ T529] blk_print_req_error: 28 callbacks suppressed [ 697.270189][ T529] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0 [ 697.290783][ T529] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 697.296882][ T535] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 697.300848][ T529] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 697.322331][ T529] buffer_io_error: 1897 callbacks suppressed [ 697.322343][ T529] Buffer I/O error on dev loop7, logical block 416, async page read [ 697.322998][ T535] ext4 filesystem being mounted at /555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 697.422122][ T540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=540 comm=syz.1.9048 [ 697.500039][ T529] I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 697.509976][ T529] Buffer I/O error on dev loop7, logical block 64, lost async page write [ 697.518467][ T529] Buffer I/O error on dev loop7, logical block 65, lost async page write [ 697.526966][ T529] Buffer I/O error on dev loop7, logical block 66, lost async page write [ 697.535511][ T529] Buffer I/O error on dev loop7, logical block 67, lost async page write [ 697.544210][ T529] Buffer I/O error on dev loop7, logical block 68, lost async page write [ 697.552773][ T529] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 697.561326][ T529] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 697.569905][ T529] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 697.578440][ T529] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 697.591001][ T529] I/O error, dev loop7, sector 1536 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 697.605225][T24810] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 697.617579][ T529] I/O error, dev loop7, sector 2560 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 697.696443][ T554] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 697.720577][ T557] bridge0: port 3(macvlan3) entered blocking state [ 697.727284][ T557] bridge0: port 3(macvlan3) entered disabled state [ 697.740334][ T557] macvlan3: entered allmulticast mode [ 697.745884][ T557] bridge0: entered allmulticast mode [ 697.771589][ T563] loop9: detected capacity change from 0 to 164 [ 697.785372][ T563] syz.9.9054: attempt to access beyond end of device [ 697.785372][ T563] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 697.785643][ T557] macvlan3: left allmulticast mode [ 697.804463][ T557] bridge0: left allmulticast mode [ 697.819372][ T563] syz.9.9054: attempt to access beyond end of device [ 697.819372][ T563] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 697.845768][ T570] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.858186][ T563] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 697.887489][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.925500][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.948871][ T570] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.095410][ T570] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.127415][ T588] loop9: detected capacity change from 0 to 128 [ 698.144044][ T588] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 698.159241][ T588] ext4 filesystem being mounted at /561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 698.163882][ T570] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.485187][ T570] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.567826][ T570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.623702][ T570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.651726][ T595] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.665226][ T570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.686925][ T597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.689267][T24810] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 698.704761][ T597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.741564][ T595] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.793433][ T595] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.848434][ T595] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.945077][ T595] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.957445][ T595] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.973066][ T595] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.986534][ T595] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.484205][ T609] syz.6.9067 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 699.498469][ T609] CPU: 1 UID: 0 PID: 609 Comm: syz.6.9067 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 699.498522][ T609] Tainted: [W]=WARN [ 699.498532][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.498548][ T609] Call Trace: [ 699.498556][ T609] [ 699.498565][ T609] __dump_stack+0x1d/0x30 [ 699.498587][ T609] dump_stack_lvl+0xe8/0x140 [ 699.498606][ T609] dump_stack+0x15/0x1b [ 699.498624][ T609] dump_header+0x81/0x220 [ 699.498682][ T609] oom_kill_process+0x334/0x3f0 [ 699.498724][ T609] out_of_memory+0x979/0xb80 [ 699.498783][ T609] try_charge_memcg+0x5e6/0x9e0 [ 699.498813][ T609] obj_cgroup_charge_pages+0xa6/0x150 [ 699.498896][ T609] __memcg_kmem_charge_page+0x9f/0x170 [ 699.498968][ T609] __alloc_frozen_pages_noprof+0x188/0x360 [ 699.499051][ T609] alloc_pages_mpol+0xb3/0x250 [ 699.499096][ T609] alloc_pages_noprof+0x90/0x130 [ 699.499126][ T609] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 699.499226][ T609] __kvmalloc_node_noprof+0x30f/0x4e0 [ 699.499257][ T609] ? ip_set_alloc+0x1f/0x30 [ 699.499320][ T609] ? ip_set_alloc+0x1f/0x30 [ 699.499346][ T609] ? __kmalloc_cache_noprof+0x189/0x320 [ 699.499410][ T609] ip_set_alloc+0x1f/0x30 [ 699.499459][ T609] hash_netiface_create+0x282/0x740 [ 699.499492][ T609] ? __pfx_hash_netiface_create+0x10/0x10 [ 699.499613][ T609] ip_set_create+0x3c9/0x960 [ 699.499662][ T609] ? __nla_parse+0x40/0x60 [ 699.499728][ T609] nfnetlink_rcv_msg+0x4c3/0x590 [ 699.499762][ T609] ? should_fail_ex+0x30/0x280 [ 699.499818][ T609] ? selinux_capable+0x1f9/0x270 [ 699.499879][ T609] netlink_rcv_skb+0x120/0x220 [ 699.499922][ T609] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 699.499961][ T609] nfnetlink_rcv+0x16b/0x1690 [ 699.499988][ T609] ? __kfree_skb+0x109/0x150 [ 699.500047][ T609] ? nlmon_xmit+0x4f/0x60 [ 699.500070][ T609] ? consume_skb+0x49/0x150 [ 699.500104][ T609] ? nlmon_xmit+0x4f/0x60 [ 699.500128][ T609] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 699.500188][ T609] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 699.500226][ T609] ? __dev_queue_xmit+0x182/0x1fb0 [ 699.500269][ T609] ? ref_tracker_free+0x37d/0x3e0 [ 699.500317][ T609] ? __netlink_deliver_tap+0x4dc/0x500 [ 699.500481][ T609] netlink_unicast+0x59e/0x670 [ 699.500522][ T609] netlink_sendmsg+0x58b/0x6b0 [ 699.500551][ T609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.500605][ T609] __sock_sendmsg+0x142/0x180 [ 699.500632][ T609] ____sys_sendmsg+0x31e/0x4e0 [ 699.500669][ T609] ___sys_sendmsg+0x17b/0x1d0 [ 699.500744][ T609] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 699.500797][ T609] __x64_sys_sendmsg+0xd4/0x160 [ 699.500944][ T609] x64_sys_call+0x2999/0x2fb0 [ 699.500972][ T609] do_syscall_64+0xd2/0x200 [ 699.500996][ T609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 699.501030][ T609] ? clear_bhb_loop+0x40/0x90 [ 699.501060][ T609] ? clear_bhb_loop+0x40/0x90 [ 699.501088][ T609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.501116][ T609] RIP: 0033:0x7fe430a5e929 [ 699.501136][ T609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.501156][ T609] RSP: 002b:00007fe42f0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.501180][ T609] RAX: ffffffffffffffda RBX: 00007fe430c85fa0 RCX: 00007fe430a5e929 [ 699.501251][ T609] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 699.501265][ T609] RBP: 00007fe430ae0b39 R08: 0000000000000000 R09: 0000000000000000 [ 699.501342][ T609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.501356][ T609] R13: 0000000000000000 R14: 00007fe430c85fa0 R15: 00007ffdf860c5b8 [ 699.501378][ T609] [ 699.501385][ T609] memory: usage 307200kB, limit 307200kB, failcnt 7877 [ 699.662764][ T623] blktrace: Concurrent blktraces are not allowed on sg0 [ 699.663873][ T609] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 699.663895][ T609] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 699.894584][ T609] Memory cgroup stats for /syz6: [ 699.894820][ T609] cache 0 [ 699.902824][ T609] rss 0 [ 699.905663][ T609] shmem 0 [ 699.908721][ T609] mapped_file 0 [ 699.912232][ T609] dirty 0 [ 699.915178][ T609] writeback 0 [ 699.918554][ T609] workingset_refault_anon 2151 [ 699.923350][ T609] workingset_refault_file 17989 [ 699.928269][ T609] swap 200704 [ 699.931570][ T609] swapcached 0 [ 699.935023][ T609] pgpgin 624335 [ 699.938520][ T609] pgpgout 624333 [ 699.942092][ T609] pgfault 465030 [ 699.945639][ T609] pgmajfault 1420 [ 699.949313][ T609] inactive_anon 0 [ 699.953014][ T609] active_anon 0 [ 699.956551][ T609] inactive_file 8192 [ 699.960486][ T609] active_file 0 [ 699.964055][ T609] unevictable 0 [ 699.967579][ T609] hierarchical_memory_limit 314572800 [ 699.972987][ T609] hierarchical_memsw_limit 9223372036854771712 [ 699.979164][ T609] total_cache 0 [ 699.982623][ T609] total_rss 0 [ 699.985905][ T609] total_shmem 0 [ 699.989400][ T609] total_mapped_file 0 [ 699.993443][ T609] total_dirty 0 [ 699.996983][ T609] total_writeback 0 [ 700.000890][ T609] total_workingset_refault_anon 2151 [ 700.006271][ T609] total_workingset_refault_file 17989 [ 700.011719][ T609] total_swap 200704 [ 700.015545][ T609] total_swapcached 0 [ 700.019514][ T609] total_pgpgin 624335 [ 700.023579][ T609] total_pgpgout 624333 [ 700.027642][ T609] total_pgfault 465030 [ 700.031733][ T609] total_pgmajfault 1420 [ 700.035902][ T609] total_inactive_anon 0 [ 700.040086][ T609] total_active_anon 0 [ 700.044097][ T609] total_inactive_file 8192 [ 700.048557][ T609] total_active_file 0 [ 700.052562][ T609] total_unevictable 0 [ 700.056615][ T609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9067,pid=608,uid=0 [ 700.071236][ T609] Memory cgroup out of memory: Killed process 608 (syz.6.9067) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 700.200481][ T630] bridge0: port 3(macvlan3) entered blocking state [ 700.207113][ T630] bridge0: port 3(macvlan3) entered disabled state [ 700.215003][ T630] macvlan3: entered allmulticast mode [ 700.220510][ T630] bridge0: entered allmulticast mode [ 700.227464][ T630] macvlan3: left allmulticast mode [ 700.232671][ T630] bridge0: left allmulticast mode [ 700.328449][ T634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.341218][ T634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.471318][ T641] loop7: detected capacity change from 0 to 16384 [ 700.537381][ T642] __nla_validate_parse: 28 callbacks suppressed [ 700.537501][ T642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9076'. [ 700.573679][ T641] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 700.584613][ T652] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.584850][ T641] I/O error, dev loop7, sector 4392 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 700.604529][ T641] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 700.614256][ T641] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 700.639390][ T654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.649135][ T654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.659244][ T652] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.715026][ T652] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.741853][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.750915][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.769855][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.779447][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.791106][ T652] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.811899][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.821960][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 700.850379][ T657] blktrace: Concurrent blktraces are not allowed on sg0 [ 700.891085][ T663] netlink: 71 bytes leftover after parsing attributes in process `syz.6.9083'. [ 700.900657][ T663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9083'. [ 700.904394][ T665] bridge0: entered promiscuous mode [ 700.916357][ T665] bridge0: port 3(macvlan2) entered blocking state [ 700.923272][ T665] bridge0: port 3(macvlan2) entered disabled state [ 700.933534][ T665] macvlan2: entered allmulticast mode [ 700.939087][ T665] bridge0: entered allmulticast mode [ 700.945135][ T667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9085'. [ 700.957024][ T665] macvlan2: left allmulticast mode [ 700.962379][ T665] bridge0: left allmulticast mode [ 700.970083][ T665] bridge0: left promiscuous mode [ 701.114147][ T682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=682 comm=syz.6.9087 [ 701.136759][ T674] loop6: detected capacity change from 0 to 1024 [ 701.151192][ T674] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 701.162230][ T674] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 701.172711][ T674] JBD2: no valid journal superblock found [ 701.178583][ T674] EXT4-fs (loop6): Could not load journal inode [ 701.747604][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.757446][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.951440][ T697] bridge0: port 3(macvlan3) entered blocking state [ 701.958094][ T697] bridge0: port 3(macvlan3) entered disabled state [ 701.969020][ T699] loop9: detected capacity change from 0 to 164 [ 701.975603][ T697] macvlan3: entered allmulticast mode [ 701.981105][ T697] bridge0: entered allmulticast mode [ 701.990305][ T699] syz.9.9096: attempt to access beyond end of device [ 701.990305][ T699] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 701.995014][ T697] macvlan3: left allmulticast mode [ 702.004241][ T699] syz.9.9096: attempt to access beyond end of device [ 702.004241][ T699] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 702.009470][ T697] bridge0: left allmulticast mode [ 702.028354][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 702.028390][ T29] audit: type=1326 audit(1750653704.093:22234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.9.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 702.058046][ T29] audit: type=1326 audit(1750653704.093:22235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.9.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 702.081616][ T29] audit: type=1326 audit(1750653704.093:22236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.9.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 702.105252][ T29] audit: type=1326 audit(1750653704.093:22237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.9.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 702.128711][ T29] audit: type=1326 audit(1750653704.093:22238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.9.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 702.226666][ T707] loop9: detected capacity change from 0 to 1024 [ 702.234851][ T707] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.241963][ T707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 702.250791][ T707] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 702.262366][ T707] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.9099: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 702.282378][ T707] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.9099: couldn't read orphan inode 11 (err -117) [ 702.295192][ T707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.312720][ T707] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.9099: Invalid block bitmap block 0 in block_group 0 [ 702.327686][ T707] Quota error (device loop9): write_blk: dquota write failed [ 702.335155][ T707] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 702.346470][ T707] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.9099: Failed to acquire dquot type 0 [ 702.360207][ T707] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.9099: Invalid inode table block 8589934593 in block_group 0 [ 702.388275][ T51] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 702.404862][T24810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.486331][ T722] loop6: detected capacity change from 0 to 512 [ 702.542593][ T722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.564813][ T722] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 702.599826][ T722] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9104: corrupted inode contents [ 702.613340][ T722] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.9104: mark_inode_dirty error [ 702.627785][ T722] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9104: corrupted inode contents [ 702.640064][ T722] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.9104: mark_inode_dirty error [ 702.653190][ T722] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.9104: mark inode dirty (error -117) [ 702.667465][ T722] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 702.691904][T28608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.824546][ T733] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 702.838329][ T734] loop9: detected capacity change from 0 to 128 [ 702.865859][ T734] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 702.903466][ T734] ext4 filesystem being mounted at /577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 702.996277][ T713] syz.1.9101 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 703.010535][ T713] CPU: 1 UID: 0 PID: 713 Comm: syz.1.9101 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 703.010586][ T713] Tainted: [W]=WARN [ 703.010595][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.010611][ T713] Call Trace: [ 703.010618][ T713] [ 703.010628][ T713] __dump_stack+0x1d/0x30 [ 703.010654][ T713] dump_stack_lvl+0xe8/0x140 [ 703.010679][ T713] dump_stack+0x15/0x1b [ 703.010741][ T713] dump_header+0x81/0x220 [ 703.010849][ T713] oom_kill_process+0x334/0x3f0 [ 703.010887][ T713] out_of_memory+0x979/0xb80 [ 703.010917][ T713] try_charge_memcg+0x5e6/0x9e0 [ 703.010944][ T713] obj_cgroup_charge_pages+0xa6/0x150 [ 703.010986][ T713] __memcg_kmem_charge_page+0x9f/0x170 [ 703.011048][ T713] __alloc_frozen_pages_noprof+0x188/0x360 [ 703.011085][ T713] alloc_pages_mpol+0xb3/0x250 [ 703.011133][ T713] alloc_pages_noprof+0x90/0x130 [ 703.011225][ T713] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 703.011267][ T713] __kvmalloc_node_noprof+0x30f/0x4e0 [ 703.011293][ T713] ? ip_set_alloc+0x1f/0x30 [ 703.011319][ T713] ? ip_set_alloc+0x1f/0x30 [ 703.011358][ T713] ? __kmalloc_cache_noprof+0x189/0x320 [ 703.011384][ T713] ip_set_alloc+0x1f/0x30 [ 703.011409][ T713] hash_netiface_create+0x282/0x740 [ 703.011483][ T713] ? __pfx_hash_netiface_create+0x10/0x10 [ 703.011511][ T713] ip_set_create+0x3c9/0x960 [ 703.011540][ T713] ? save_fpregs_to_fpstate+0x100/0x160 [ 703.011659][ T713] nfnetlink_rcv_msg+0x4c3/0x590 [ 703.011681][ T713] ? should_fail_ex+0x30/0x280 [ 703.011799][ T713] ? selinux_capable+0x1f9/0x270 [ 703.011912][ T713] netlink_rcv_skb+0x120/0x220 [ 703.011942][ T713] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 703.012052][ T713] nfnetlink_rcv+0x16b/0x1690 [ 703.012085][ T713] ? __kfree_skb+0x109/0x150 [ 703.012195][ T713] ? nlmon_xmit+0x4f/0x60 [ 703.012214][ T713] ? consume_skb+0x49/0x150 [ 703.012285][ T713] ? nlmon_xmit+0x4f/0x60 [ 703.012304][ T713] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 703.012337][ T713] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 703.012365][ T713] ? __dev_queue_xmit+0x182/0x1fb0 [ 703.012478][ T713] ? ref_tracker_free+0x37d/0x3e0 [ 703.012545][ T713] ? __netlink_deliver_tap+0x4dc/0x500 [ 703.012605][ T713] netlink_unicast+0x59e/0x670 [ 703.012717][ T713] netlink_sendmsg+0x58b/0x6b0 [ 703.012737][ T713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.012756][ T713] __sock_sendmsg+0x142/0x180 [ 703.012778][ T713] ____sys_sendmsg+0x31e/0x4e0 [ 703.012826][ T713] ___sys_sendmsg+0x17b/0x1d0 [ 703.012879][ T713] __x64_sys_sendmsg+0xd4/0x160 [ 703.012943][ T713] x64_sys_call+0x2999/0x2fb0 [ 703.012998][ T713] do_syscall_64+0xd2/0x200 [ 703.013014][ T713] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 703.013036][ T713] ? clear_bhb_loop+0x40/0x90 [ 703.013112][ T713] ? clear_bhb_loop+0x40/0x90 [ 703.013132][ T713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.013151][ T713] RIP: 0033:0x7f956f1fe929 [ 703.013176][ T713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.013201][ T713] RSP: 002b:00007f956d867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.013276][ T713] RAX: ffffffffffffffda RBX: 00007f956f425fa0 RCX: 00007f956f1fe929 [ 703.013336][ T713] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 703.013347][ T713] RBP: 00007f956f280b39 R08: 0000000000000000 R09: 0000000000000000 [ 703.013358][ T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.013370][ T713] R13: 0000000000000000 R14: 00007f956f425fa0 R15: 00007fffb7d03b88 [ 703.013402][ T713] [ 703.013464][ T713] memory: usage 307200kB, limit 307200kB, failcnt 6195 [ 703.378796][ T713] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 703.378818][ T713] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 703.394142][ T713] Memory cgroup stats for /syz1: [ 703.394736][ T713] cache 0 [ 703.402951][ T713] rss 4096 [ 703.406015][ T713] shmem 0 [ 703.409071][ T713] mapped_file 0 [ 703.412609][ T713] dirty 0 [ 703.415596][ T713] writeback 0 [ 703.418992][ T713] workingset_refault_anon 1970 [ 703.423765][ T713] workingset_refault_file 11530 [ 703.428721][ T713] swap 196608 [ 703.432023][ T713] swapcached 12288 [ 703.435757][ T713] pgpgin 606784 [ 703.439244][ T713] pgpgout 606781 [ 703.442857][ T713] pgfault 403508 [ 703.446401][ T713] pgmajfault 1187 [ 703.450241][ T713] inactive_anon 12288 [ 703.454426][ T713] active_anon 0 [ 703.458124][ T713] inactive_file 0 [ 703.461769][ T713] active_file 0 [ 703.465286][ T713] unevictable 0 [ 703.468836][ T713] hierarchical_memory_limit 314572800 [ 703.474224][ T713] hierarchical_memsw_limit 9223372036854771712 [ 703.480513][ T713] total_cache 0 [ 703.483986][ T713] total_rss 4096 [ 703.487535][ T713] total_shmem 0 [ 703.491030][ T713] total_mapped_file 0 [ 703.495034][ T713] total_dirty 0 [ 703.498520][ T713] total_writeback 0 [ 703.502464][ T713] total_workingset_refault_anon 1970 [ 703.507792][ T713] total_workingset_refault_file 11530 [ 703.513249][ T713] total_swap 196608 [ 703.517145][ T713] total_swapcached 12288 [ 703.521438][ T713] total_pgpgin 606784 [ 703.525428][ T713] total_pgpgout 606781 [ 703.529606][ T713] total_pgfault 403508 [ 703.533773][ T713] total_pgmajfault 1187 [ 703.537978][ T713] total_inactive_anon 12288 [ 703.542553][ T713] total_active_anon 0 [ 703.546553][ T713] total_inactive_file 0 [ 703.550762][ T713] total_active_file 0 [ 703.554786][ T713] total_unevictable 0 [ 703.558912][ T713] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9101,pid=712,uid=0 [ 703.573549][ T713] Memory cgroup out of memory: Killed process 712 (syz.1.9101) total-vm:93812kB, anon-rss:932kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 703.594770][T24810] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 703.790333][ T729] Can't find ip_set type hash:ip, [ 703.851884][ T751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.868727][ T751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.929618][ T756] loop5: detected capacity change from 0 to 512 [ 703.958238][ T756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.979190][ T756] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.004066][ T753] loop6: detected capacity change from 0 to 1024 [ 704.014787][ T763] netlink: 'syz.9.9117': attribute type 21 has an invalid length. [ 704.014878][ T753] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 704.033734][ T753] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 704.042913][ T763] netlink: 'syz.9.9117': attribute type 1 has an invalid length. [ 704.046767][ T753] JBD2: no valid journal superblock found [ 704.057021][ T753] EXT4-fs (loop6): Could not load journal inode [ 704.072452][ T652] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.081853][ T756] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.9116: corrupted inode contents [ 704.094724][ T756] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.9116: mark_inode_dirty error [ 704.106594][ T756] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.9116: corrupted inode contents [ 704.118724][ T756] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.9116: mark_inode_dirty error [ 704.131008][ T756] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.9116: mark inode dirty (error -117) [ 704.133952][ T652] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.143834][ T756] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 704.156947][ T652] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.183778][ T652] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.193756][T25092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.240412][ T772] bridge0: port 3(macvlan3) entered blocking state [ 704.247028][ T772] bridge0: port 3(macvlan3) entered disabled state [ 704.264697][ T772] macvlan3: entered allmulticast mode [ 704.270199][ T772] bridge0: entered allmulticast mode [ 704.296505][ T772] macvlan3: left allmulticast mode [ 704.301773][ T772] bridge0: left allmulticast mode [ 704.314877][ T781] bridge0: entered promiscuous mode [ 704.324204][ T781] bridge0: port 3(macvlan2) entered blocking state [ 704.330888][ T781] bridge0: port 3(macvlan2) entered disabled state [ 704.338485][ T781] macvlan2: entered allmulticast mode [ 704.343983][ T781] bridge0: entered allmulticast mode [ 704.352070][ T781] macvlan2: left allmulticast mode [ 704.357408][ T781] bridge0: left allmulticast mode [ 704.366030][ T781] bridge0: left promiscuous mode [ 704.843094][T23612] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 704.854119][T23612] CPU: 1 UID: 0 PID: 23612 Comm: syz-executor Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 704.854200][T23612] Tainted: [W]=WARN [ 704.854208][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.854263][T23612] Call Trace: [ 704.854270][T23612] [ 704.854279][T23612] __dump_stack+0x1d/0x30 [ 704.854304][T23612] dump_stack_lvl+0xe8/0x140 [ 704.854329][T23612] dump_stack+0x15/0x1b [ 704.854351][T23612] dump_header+0x81/0x220 [ 704.854390][T23612] oom_kill_process+0x334/0x3f0 [ 704.854426][T23612] out_of_memory+0x979/0xb80 [ 704.854493][T23612] try_charge_memcg+0x5e6/0x9e0 [ 704.854556][T23612] charge_memcg+0x51/0xc0 [ 704.854624][T23612] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 704.854663][T23612] __read_swap_cache_async+0x1df/0x350 [ 704.854754][T23612] swap_cluster_readahead+0x277/0x3e0 [ 704.854792][T23612] swapin_readahead+0xde/0x6f0 [ 704.854822][T23612] ? __filemap_get_folio+0x4f7/0x6b0 [ 704.854877][T23612] ? swap_cache_get_folio+0x77/0x200 [ 704.854950][T23612] do_swap_page+0x301/0x2430 [ 704.855039][T23612] ? finish_task_switch+0xad/0x2b0 [ 704.855064][T23612] ? __pfx_default_wake_function+0x10/0x10 [ 704.855090][T23612] handle_mm_fault+0x9a5/0x2be0 [ 704.855120][T23612] ? mas_walk+0xf2/0x120 [ 704.855216][T23612] do_user_addr_fault+0x636/0x1090 [ 704.855253][T23612] ? fpregs_restore_userregs+0xe2/0x1d0 [ 704.855318][T23612] ? switch_fpu_return+0xe/0x20 [ 704.855430][T23612] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 704.855461][T23612] exc_page_fault+0x62/0xa0 [ 704.855573][T23612] asm_exc_page_fault+0x26/0x30 [ 704.855597][T23612] RIP: 0033:0x7f66940c11a5 [ 704.855618][T23612] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 704.855641][T23612] RSP: 002b:00007ffcd3f6b9c8 EFLAGS: 00010246 [ 704.855661][T23612] RAX: 0000000000000000 RBX: 00000000000005ca RCX: 00007f66940c11a3 [ 704.855691][T23612] RDX: 00007ffcd3f6b9e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.855707][T23612] RBP: 00007ffcd3f6ba4c R08: 000000002f397558 R09: 0000000000000000 [ 704.855719][T23612] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 704.855731][T23612] R13: 00000000000927c0 R14: 00000000000abf81 R15: 00007ffcd3f6baa0 [ 704.855852][T23612] [ 704.855859][T23612] memory: usage 307200kB, limit 307200kB, failcnt 8327 [ 705.095949][T23612] memory+swap: usage 307772kB, limit 9007199254740988kB, failcnt 0 [ 705.103927][T23612] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 705.111250][T23612] Memory cgroup stats for /syz3: [ 705.111490][T23612] cache 0 [ 705.119432][T23612] rss 0 [ 705.122231][T23612] shmem 0 [ 705.125186][T23612] mapped_file 0 [ 705.128690][T23612] dirty 0 [ 705.132326][T23612] writeback 8192 [ 705.136046][T23612] workingset_refault_anon 1944 [ 705.140923][T23612] workingset_refault_file 19643 [ 705.145805][T23612] swap 585728 [ 705.149365][T23612] swapcached 12288 [ 705.153262][T23612] pgpgin 782978 [ 705.156763][T23612] pgpgout 782971 [ 705.160382][T23612] pgfault 508812 [ 705.163955][T23612] pgmajfault 1365 [ 705.167768][T23612] inactive_anon 8192 [ 705.172730][T23612] active_anon 4096 [ 705.173908][ T793] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 705.176550][T23612] inactive_file 0 [ 705.176562][T23612] active_file 16384 [ 705.176570][T23612] unevictable 0 [ 705.176579][T23612] hierarchical_memory_limit 314572800 [ 705.176588][T23612] hierarchical_memsw_limit 9223372036854771712 [ 705.176598][T23612] total_cache 0 [ 705.211671][T23612] total_rss 0 [ 705.214996][T23612] total_shmem 0 [ 705.218552][T23612] total_mapped_file 0 [ 705.222586][T23612] total_dirty 0 [ 705.226094][T23612] total_writeback 8192 [ 705.230224][T23612] total_workingset_refault_anon 1944 [ 705.235529][T23612] total_workingset_refault_file 19643 [ 705.240972][T23612] total_swap 585728 [ 705.244801][T23612] total_swapcached 12288 [ 705.249132][T23612] total_pgpgin 782978 [ 705.253150][T23612] total_pgpgout 782971 [ 705.257230][T23612] total_pgfault 508812 [ 705.261363][T23612] total_pgmajfault 1365 [ 705.265566][T23612] total_inactive_anon 8192 [ 705.270066][T23612] total_active_anon 4096 [ 705.274323][T23612] total_inactive_file 0 [ 705.278581][T23612] total_active_file 16384 [ 705.282926][T23612] total_unevictable 0 [ 705.286966][T23612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9121,pid=773,uid=0 [ 705.301848][T23612] Memory cgroup out of memory: Killed process 773 (syz.3.9121) total-vm:93884kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 705.423948][ T798] loop5: detected capacity change from 0 to 128 [ 705.440436][ T798] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 705.454963][ T798] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 705.508928][ T777] Can't find ip_set type hash:ip,po [ 705.540811][ T804] netlink: 'syz.1.9131': attribute type 21 has an invalid length. [ 705.550216][ T804] __nla_validate_parse: 6 callbacks suppressed [ 705.550232][ T804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9131'. [ 705.565699][ T804] netlink: 'syz.1.9131': attribute type 1 has an invalid length. [ 705.583268][ T806] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.634331][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.647704][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.664148][ T813] bridge0: port 3(macvlan3) entered blocking state [ 705.670950][ T813] bridge0: port 3(macvlan3) entered disabled state [ 705.677955][ T813] macvlan3: entered allmulticast mode [ 705.683458][ T813] bridge0: entered allmulticast mode [ 705.693039][ T813] macvlan3: left allmulticast mode [ 705.698311][ T813] bridge0: left allmulticast mode [ 705.709773][ T806] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.723680][ T817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.732371][ T817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.737586][ T820] bridge0: entered promiscuous mode [ 705.747352][ T820] bridge0: port 3(macvlan2) entered blocking state [ 705.754055][ T820] bridge0: port 3(macvlan2) entered disabled state [ 705.761101][ T820] macvlan2: entered allmulticast mode [ 705.766563][ T820] bridge0: entered allmulticast mode [ 705.775410][ T820] macvlan2: left allmulticast mode [ 705.780627][ T820] bridge0: left allmulticast mode [ 705.780773][ T825] loop3: detected capacity change from 0 to 1024 [ 705.786835][ T820] bridge0: left promiscuous mode [ 705.798196][ T825] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 705.809204][ T825] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 705.819903][ T825] JBD2: no valid journal superblock found [ 705.825759][ T825] EXT4-fs (loop3): Could not load journal inode [ 705.844488][ T806] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.899593][ T806] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.985403][ T806] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.996471][ T806] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.008091][ T806] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.019892][ T806] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.701336][ T854] loop9: detected capacity change from 0 to 164 [ 706.728709][ T854] syz.9.9147: attempt to access beyond end of device [ 706.728709][ T854] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 706.765867][ T854] syz.9.9147: attempt to access beyond end of device [ 706.765867][ T854] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 706.810593][ T29] audit: type=1326 audit(1750653708.873:22239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.9.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 706.834107][ T29] audit: type=1326 audit(1750653708.873:22240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.9.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 706.867877][ T29] audit: type=1326 audit(1750653708.923:22241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.9.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f996915e929 code=0x7ffc0000 [ 706.917583][ T857] loop9: detected capacity change from 0 to 256 [ 707.116740][ T861] bridge0: entered promiscuous mode [ 707.136189][ T861] bridge0: port 3(macvlan2) entered blocking state [ 707.142836][ T861] bridge0: port 3(macvlan2) entered disabled state [ 707.168355][ T861] macvlan2: entered allmulticast mode [ 707.173830][ T861] bridge0: entered allmulticast mode [ 707.324112][ T861] macvlan2: left allmulticast mode [ 707.329360][ T861] bridge0: left allmulticast mode [ 707.366908][ T861] bridge0: left promiscuous mode [ 707.651247][ T874] bridge0: entered promiscuous mode [ 707.665994][ T874] bridge0: port 3(macvlan2) entered blocking state [ 707.672663][ T874] bridge0: port 3(macvlan2) entered disabled state [ 707.679430][ T874] macvlan2: entered allmulticast mode [ 707.684926][ T874] bridge0: entered allmulticast mode [ 707.697819][ T874] macvlan2: left allmulticast mode [ 707.702987][ T874] bridge0: left allmulticast mode [ 707.708512][ T874] bridge0: left promiscuous mode [ 707.782567][ T839] Can't find ip_set type hash:ip,po [ 707.844853][ T882] loop9: detected capacity change from 0 to 1024 [ 707.864825][ T882] EXT4-fs: Ignoring removed mblk_io_submit option [ 707.886250][ T882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 707.895026][ T882] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 707.895538][ T887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9155'. [ 707.906845][ T882] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.9153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 707.934127][ T882] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.9153: couldn't read orphan inode 11 (err -117) [ 707.946611][ T882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.960432][ T887] loop5: detected capacity change from 0 to 128 [ 707.970124][ T887] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.984523][ T882] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.9153: Invalid block bitmap block 0 in block_group 0 [ 707.989508][ T887] ext4 filesystem being mounted at /574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 708.031201][ T882] __quota_error: 2 callbacks suppressed [ 708.031216][ T882] Quota error (device loop9): write_blk: dquota write failed [ 708.044363][ T882] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 708.073497][ T882] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.9153: Failed to acquire dquot type 0 [ 708.104799][T24810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.114012][ T896] loop3: detected capacity change from 0 to 164 [ 708.123250][ T896] syz.3.9158: attempt to access beyond end of device [ 708.123250][ T896] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 708.164942][ T896] syz.3.9158: attempt to access beyond end of device [ 708.164942][ T896] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 708.187876][ T29] audit: type=1326 audit(1750653710.253:22244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.9158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669408e929 code=0x7ffc0000 [ 708.200168][ T902] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 708.211661][ T29] audit: type=1326 audit(1750653710.253:22245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.9158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669408e929 code=0x7ffc0000 [ 708.243477][ T29] audit: type=1326 audit(1750653710.253:22246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.9158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f669408e929 code=0x7ffc0000 [ 708.266862][ T29] audit: type=1326 audit(1750653710.253:22247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.9158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669408e929 code=0x7ffc0000 [ 708.266894][ T29] audit: type=1326 audit(1750653710.253:22248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.9158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669408e929 code=0x7ffc0000 [ 708.354851][ T909] loop6: detected capacity change from 0 to 164 [ 708.392838][ T909] syz.6.9163: attempt to access beyond end of device [ 708.392838][ T909] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 708.407346][ T909] syz.6.9163: attempt to access beyond end of device [ 708.407346][ T909] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 708.432415][ T909] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 708.453546][T25092] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 708.471714][ T29] audit: type=1326 audit(1750653710.493:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.6.9163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 708.495300][ T29] audit: type=1326 audit(1750653710.493:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.6.9163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 708.519097][ T29] audit: type=1326 audit(1750653710.493:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=906 comm="syz.6.9163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 708.780270][ T931] bridge0: entered promiscuous mode [ 708.792938][ T931] bridge0: port 3(macvlan2) entered blocking state [ 708.799608][ T931] bridge0: port 3(macvlan2) entered disabled state [ 708.817275][ T931] macvlan2: entered allmulticast mode [ 708.822768][ T931] bridge0: entered allmulticast mode [ 708.838388][ T931] macvlan2: left allmulticast mode [ 708.843629][ T931] bridge0: left allmulticast mode [ 708.857524][ T931] bridge0: left promiscuous mode [ 708.870040][ T939] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 708.897041][ T942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9174'. [ 708.946410][ T945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.955875][ T945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.027799][ T904] syz.9.9161 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 709.042043][ T904] CPU: 0 UID: 0 PID: 904 Comm: syz.9.9161 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 709.042123][ T904] Tainted: [W]=WARN [ 709.042132][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 709.042146][ T904] Call Trace: [ 709.042152][ T904] [ 709.042160][ T904] __dump_stack+0x1d/0x30 [ 709.042181][ T904] dump_stack_lvl+0xe8/0x140 [ 709.042279][ T904] dump_stack+0x15/0x1b [ 709.042300][ T904] dump_header+0x81/0x220 [ 709.042334][ T904] oom_kill_process+0x334/0x3f0 [ 709.042389][ T904] out_of_memory+0x979/0xb80 [ 709.042433][ T904] try_charge_memcg+0x5e6/0x9e0 [ 709.042471][ T904] obj_cgroup_charge_pages+0xa6/0x150 [ 709.042567][ T904] __memcg_kmem_charge_page+0x9f/0x170 [ 709.042609][ T904] __alloc_frozen_pages_noprof+0x188/0x360 [ 709.042658][ T904] alloc_pages_mpol+0xb3/0x250 [ 709.042706][ T904] alloc_pages_noprof+0x90/0x130 [ 709.042865][ T904] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 709.042916][ T904] __kvmalloc_node_noprof+0x30f/0x4e0 [ 709.042962][ T904] ? ip_set_alloc+0x1f/0x30 [ 709.042997][ T904] ? ip_set_alloc+0x1f/0x30 [ 709.043034][ T904] ? hash_netiface_create+0x21b/0x740 [ 709.043097][ T904] ? __kmalloc_cache_noprof+0x189/0x320 [ 709.043165][ T904] ip_set_alloc+0x1f/0x30 [ 709.043236][ T904] hash_netiface_create+0x282/0x740 [ 709.043266][ T904] ? __pfx_hash_netiface_create+0x10/0x10 [ 709.043296][ T904] ip_set_create+0x3c9/0x960 [ 709.043406][ T904] ? __nla_parse+0x40/0x60 [ 709.043498][ T904] nfnetlink_rcv_msg+0x4c3/0x590 [ 709.043541][ T904] ? selinux_capable+0x1f9/0x270 [ 709.043576][ T904] netlink_rcv_skb+0x120/0x220 [ 709.043685][ T904] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 709.043715][ T904] nfnetlink_rcv+0x16b/0x1690 [ 709.043739][ T904] ? __kfree_skb+0x109/0x150 [ 709.043766][ T904] ? nlmon_xmit+0x4f/0x60 [ 709.043806][ T904] ? consume_skb+0x49/0x150 [ 709.043832][ T904] ? nlmon_xmit+0x4f/0x60 [ 709.043975][ T904] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 709.044007][ T904] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 709.044036][ T904] ? __dev_queue_xmit+0x182/0x1fb0 [ 709.044071][ T904] ? ref_tracker_free+0x37d/0x3e0 [ 709.044183][ T904] ? __netlink_deliver_tap+0x4dc/0x500 [ 709.044219][ T904] netlink_unicast+0x59e/0x670 [ 709.044279][ T904] netlink_sendmsg+0x58b/0x6b0 [ 709.044300][ T904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.044319][ T904] __sock_sendmsg+0x142/0x180 [ 709.044344][ T904] ____sys_sendmsg+0x31e/0x4e0 [ 709.044414][ T904] ___sys_sendmsg+0x17b/0x1d0 [ 709.044444][ T904] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 709.044484][ T904] __x64_sys_sendmsg+0xd4/0x160 [ 709.044546][ T904] x64_sys_call+0x2999/0x2fb0 [ 709.044572][ T904] do_syscall_64+0xd2/0x200 [ 709.044603][ T904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 709.044628][ T904] ? clear_bhb_loop+0x40/0x90 [ 709.044648][ T904] ? clear_bhb_loop+0x40/0x90 [ 709.044765][ T904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.044785][ T904] RIP: 0033:0x7f996915e929 [ 709.044800][ T904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.044882][ T904] RSP: 002b:00007f99677c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.044900][ T904] RAX: ffffffffffffffda RBX: 00007f9969385fa0 RCX: 00007f996915e929 [ 709.044911][ T904] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 709.044923][ T904] RBP: 00007f99691e0b39 R08: 0000000000000000 R09: 0000000000000000 [ 709.044935][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.044969][ T904] R13: 0000000000000000 R14: 00007f9969385fa0 R15: 00007ffd214db998 [ 709.045048][ T904] [ 709.045054][ T904] memory: usage 307200kB, limit 307200kB, failcnt 3464 [ 709.415259][ T904] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 709.423261][ T904] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 709.430596][ T904] Memory cgroup stats for /syz9: [ 709.430970][ T904] cache 0 [ 709.438959][ T904] rss 4096 [ 709.442043][ T904] shmem 0 [ 709.445003][ T904] mapped_file 0 [ 709.448657][ T904] dirty 0 [ 709.451608][ T904] writeback 0 [ 709.454959][ T904] workingset_refault_anon 1387 [ 709.459818][ T904] workingset_refault_file 5934 [ 709.464600][ T904] swap 192512 [ 709.468020][ T904] swapcached 8192 [ 709.471692][ T904] pgpgin 479126 [ 709.475162][ T904] pgpgout 479123 [ 709.478760][ T904] pgfault 345678 [ 709.482336][ T904] pgmajfault 791 [ 709.485947][ T904] inactive_anon 8192 [ 709.490167][ T904] active_anon 0 [ 709.493846][ T904] inactive_file 4096 [ 709.497841][ T904] active_file 0 [ 709.501340][ T904] unevictable 0 [ 709.504809][ T904] hierarchical_memory_limit 314572800 [ 709.510253][ T904] hierarchical_memsw_limit 9223372036854771712 [ 709.516448][ T904] total_cache 0 [ 709.519949][ T904] total_rss 4096 [ 709.523527][ T904] total_shmem 0 [ 709.526998][ T904] total_mapped_file 0 [ 709.531180][ T904] total_dirty 0 [ 709.534660][ T904] total_writeback 0 [ 709.538507][ T904] total_workingset_refault_anon 1387 [ 709.543862][ T904] total_workingset_refault_file 5934 [ 709.549208][ T904] total_swap 192512 [ 709.553039][ T904] total_swapcached 8192 [ 709.557239][ T904] total_pgpgin 479126 [ 709.561269][ T904] total_pgpgout 479123 [ 709.565381][ T904] total_pgfault 345678 [ 709.569600][ T904] total_pgmajfault 791 [ 709.573678][ T904] total_inactive_anon 8192 [ 709.578137][ T904] total_active_anon 0 [ 709.582223][ T904] total_inactive_file 4096 [ 709.586637][ T904] total_active_file 0 [ 709.590804][ T904] total_unevictable 0 [ 709.594819][ T904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9161,pid=903,uid=0 [ 709.609596][ T904] Memory cgroup out of memory: Killed process 903 (syz.9.9161) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 709.850898][ T962] loop6: detected capacity change from 0 to 164 [ 709.867366][ T962] syz.6.9183: attempt to access beyond end of device [ 709.867366][ T962] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 709.882306][ T962] syz.6.9183: attempt to access beyond end of device [ 709.882306][ T962] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 709.936895][ T964] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 709.989377][ T919] Can't find ip_set type hash:ip,po [ 710.031997][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.032562][ T969] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9185'. [ 710.060197][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.096409][ T969] loop9: detected capacity change from 0 to 128 [ 710.106070][ T969] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.125365][ T974] loop3: detected capacity change from 0 to 512 [ 710.162599][ T969] ext4 filesystem being mounted at /591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 710.205556][ T983] loop1: detected capacity change from 0 to 1024 [ 710.207456][ T974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.224983][ T974] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 710.270692][ T983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.278968][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 710.298775][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 710.300421][ T974] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.9187: corrupted inode contents [ 710.325138][T24810] EXT4-fs error (device loop9): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 710.338955][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 710.353283][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 710.367641][ T974] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.9187: mark_inode_dirty error [ 710.382520][T32146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.384380][T24810] EXT4-fs error (device loop9): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 710.404837][ T974] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.9187: corrupted inode contents [ 710.417034][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 710.431678][ T974] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.9187: mark_inode_dirty error [ 710.446042][ T974] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.9187: mark inode dirty (error -117) [ 710.458815][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 710.478516][ T974] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 710.500465][T24810] EXT4-fs error (device loop9): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 710.529108][T24810] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 710.608234][T23612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.667482][T24810] syz_tun (unregistering): left allmulticast mode [ 710.805612][ T1008] syz!: rxe_newlink: already configured on team_slave_0 [ 710.830886][T24810] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.021767][ T56] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.034061][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.043400][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.069208][ T56] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.079132][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.088642][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.126601][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.137405][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9205'. [ 711.156815][ T56] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.169892][ T1032] blktrace: Concurrent blktraces are not allowed on sg0 [ 711.223527][ T56] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.279968][ T993] syz.1.9195 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 711.294221][ T993] CPU: 0 UID: 0 PID: 993 Comm: syz.1.9195 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 711.294283][ T993] Tainted: [W]=WARN [ 711.294293][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.294310][ T993] Call Trace: [ 711.294319][ T993] [ 711.294327][ T993] __dump_stack+0x1d/0x30 [ 711.294348][ T993] dump_stack_lvl+0xe8/0x140 [ 711.294372][ T993] dump_stack+0x15/0x1b [ 711.294388][ T993] dump_header+0x81/0x220 [ 711.294450][ T993] oom_kill_process+0x334/0x3f0 [ 711.294522][ T993] out_of_memory+0x979/0xb80 [ 711.294669][ T993] try_charge_memcg+0x5e6/0x9e0 [ 711.294706][ T993] obj_cgroup_charge_pages+0xa6/0x150 [ 711.294755][ T993] __memcg_kmem_charge_page+0x9f/0x170 [ 711.294866][ T993] __alloc_frozen_pages_noprof+0x188/0x360 [ 711.294907][ T993] alloc_pages_mpol+0xb3/0x250 [ 711.295036][ T993] alloc_pages_noprof+0x90/0x130 [ 711.295077][ T993] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 711.295197][ T993] __kvmalloc_node_noprof+0x30f/0x4e0 [ 711.295237][ T993] ? ip_set_alloc+0x1f/0x30 [ 711.295274][ T993] ? ip_set_alloc+0x1f/0x30 [ 711.295309][ T993] ? __kmalloc_cache_noprof+0x189/0x320 [ 711.295360][ T993] ip_set_alloc+0x1f/0x30 [ 711.295388][ T993] hash_netiface_create+0x282/0x740 [ 711.295428][ T993] ? __pfx_hash_netiface_create+0x10/0x10 [ 711.295527][ T993] ip_set_create+0x3c9/0x960 [ 711.295604][ T993] ? __nla_parse+0x40/0x60 [ 711.295627][ T993] nfnetlink_rcv_msg+0x4c3/0x590 [ 711.295725][ T993] ? should_fail_ex+0x30/0x280 [ 711.295837][ T993] ? selinux_capable+0x1f9/0x270 [ 711.295893][ T993] netlink_rcv_skb+0x120/0x220 [ 711.295976][ T993] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 711.296096][ T993] nfnetlink_rcv+0x16b/0x1690 [ 711.296130][ T993] ? __kfree_skb+0x109/0x150 [ 711.296242][ T993] ? nlmon_xmit+0x4f/0x60 [ 711.296297][ T993] ? consume_skb+0x49/0x150 [ 711.296336][ T993] ? nlmon_xmit+0x4f/0x60 [ 711.296361][ T993] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 711.296456][ T993] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 711.296494][ T993] ? __dev_queue_xmit+0x182/0x1fb0 [ 711.296610][ T993] ? ref_tracker_free+0x37d/0x3e0 [ 711.296653][ T993] ? __netlink_deliver_tap+0x4dc/0x500 [ 711.296700][ T993] netlink_unicast+0x59e/0x670 [ 711.296796][ T993] netlink_sendmsg+0x58b/0x6b0 [ 711.296817][ T993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.296840][ T993] __sock_sendmsg+0x142/0x180 [ 711.296885][ T993] ____sys_sendmsg+0x31e/0x4e0 [ 711.296962][ T993] ___sys_sendmsg+0x17b/0x1d0 [ 711.297005][ T993] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 711.297064][ T993] __x64_sys_sendmsg+0xd4/0x160 [ 711.297179][ T993] x64_sys_call+0x2999/0x2fb0 [ 711.297201][ T993] do_syscall_64+0xd2/0x200 [ 711.297218][ T993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 711.297250][ T993] ? clear_bhb_loop+0x40/0x90 [ 711.297314][ T993] ? clear_bhb_loop+0x40/0x90 [ 711.297366][ T993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.297395][ T993] RIP: 0033:0x7f956f1fe929 [ 711.297415][ T993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.297437][ T993] RSP: 002b:00007f956d867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.297462][ T993] RAX: ffffffffffffffda RBX: 00007f956f425fa0 RCX: 00007f956f1fe929 [ 711.297517][ T993] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 711.297534][ T993] RBP: 00007f956f280b39 R08: 0000000000000000 R09: 0000000000000000 [ 711.297551][ T993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.297567][ T993] R13: 0000000000000000 R14: 00007f956f425fa0 R15: 00007fffb7d03b88 [ 711.297591][ T993] [ 711.297598][ T993] memory: usage 307200kB, limit 307200kB, failcnt 6461 [ 711.366960][ T1015] chnl_net:caif_netlink_parms(): no params data found [ 711.369168][ T993] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 711.682600][ T993] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 711.689913][ T993] Memory cgroup stats for /syz1: [ 711.692584][ T993] cache 0 [ 711.700619][ T993] rss 4096 [ 711.703722][ T993] shmem 0 [ 711.706759][ T993] mapped_file 0 [ 711.710332][ T993] dirty 0 [ 711.713296][ T993] writeback 0 [ 711.716642][ T993] workingset_refault_anon 2037 [ 711.721561][ T993] workingset_refault_file 11530 [ 711.726439][ T993] swap 196608 [ 711.729766][ T993] swapcached 8192 [ 711.733478][ T993] pgpgin 608538 [ 711.736956][ T993] pgpgout 608536 [ 711.740590][ T993] pgfault 406517 [ 711.744164][ T993] pgmajfault 1223 [ 711.747842][ T993] inactive_anon 4096 [ 711.751750][ T993] active_anon 4096 [ 711.755532][ T993] inactive_file 0 [ 711.759271][ T993] active_file 0 [ 711.762750][ T993] unevictable 0 [ 711.766234][ T993] hierarchical_memory_limit 314572800 [ 711.771645][ T993] hierarchical_memsw_limit 9223372036854771712 [ 711.777885][ T993] total_cache 0 [ 711.781624][ T993] total_rss 4096 [ 711.785178][ T993] total_shmem 0 [ 711.788821][ T993] total_mapped_file 0 [ 711.793049][ T993] total_dirty 0 [ 711.796674][ T993] total_writeback 0 [ 711.800723][ T993] total_workingset_refault_anon 2037 [ 711.806041][ T993] total_workingset_refault_file 11530 [ 711.811478][ T993] total_swap 196608 [ 711.815351][ T993] total_swapcached 8192 [ 711.819559][ T993] total_pgpgin 608538 [ 711.823689][ T993] total_pgpgout 608536 [ 711.827802][ T993] total_pgfault 406517 [ 711.831897][ T993] total_pgmajfault 1223 [ 711.836079][ T993] total_inactive_anon 4096 [ 711.840696][ T993] total_active_anon 4096 [ 711.844965][ T993] total_inactive_file 0 [ 711.849165][ T993] total_active_file 0 [ 711.853156][ T993] total_unevictable 0 [ 711.857146][ T993] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9195,pid=992,uid=0 [ 711.871803][ T993] Memory cgroup out of memory: Killed process 992 (syz.1.9195) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 711.891497][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.911314][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.926610][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.933916][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.943532][ T1015] bridge_slave_0: entered allmulticast mode [ 711.950440][ T1015] bridge_slave_0: entered promiscuous mode [ 711.957704][ T56] bridge_slave_1: left allmulticast mode [ 711.963524][ T56] bridge_slave_1: left promiscuous mode [ 711.969411][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.979713][ T56] bridge_slave_0: left allmulticast mode [ 711.985429][ T56] bridge_slave_0: left promiscuous mode [ 711.991198][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.109849][ T1000] Can't find ip_set type hash:ip,por [ 712.179417][ T56] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 712.187547][ T56] bridge2 (unregistering): left promiscuous mode [ 712.199332][ T1064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9211'. [ 712.230905][ T1066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9212'. [ 712.289197][ T1068] loop3: detected capacity change from 0 to 128 [ 712.300539][ T1068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 712.313058][ T1068] ext4 filesystem being mounted at /588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 712.399978][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.409894][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.419598][ T56] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 712.428250][ T56] bond0 (unregistering): Released all slaves [ 712.436672][ T56] bond1 (unregistering): Released all slaves [ 712.444905][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.452115][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.459474][ T1015] bridge_slave_1: entered allmulticast mode [ 712.466164][ T1015] bridge_slave_1: entered promiscuous mode [ 712.540338][T23612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.541801][ T1015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.550232][ T1076] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 712.575118][ T56] tipc: Left network mode [ 712.582457][ T1015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.684675][ T1083] loop1: detected capacity change from 0 to 512 [ 712.700655][ T1015] team0: Port device team_slave_0 added [ 712.738215][ T1015] team0: Port device team_slave_1 added [ 712.746493][ T56] hsr_slave_0: left promiscuous mode [ 712.760350][ T56] hsr_slave_1: left promiscuous mode [ 712.767325][ T1083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.770048][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.787399][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.810586][ T1083] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.822888][ T1095] netlink: 'syz.5.9221': attribute type 21 has an invalid length. [ 712.833700][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.841267][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.862605][ T56] veth1_vlan: left promiscuous mode [ 712.872985][ T56] veth0_vlan: left promiscuous mode [ 712.887374][ T1083] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.9218: corrupted inode contents [ 712.924052][ T1083] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.9218: mark_inode_dirty error [ 712.948858][ T1083] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.9218: corrupted inode contents [ 712.970965][ T1083] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.9218: mark_inode_dirty error [ 713.006445][ T1083] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.9218: mark inode dirty (error -117) [ 713.023617][ T56] team0 (unregistering): Port device team_slave_1 removed [ 713.031127][ T1083] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 713.043607][ T56] team0 (unregistering): Port device team_slave_0 removed [ 713.072245][T32146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.093752][ T1095] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9221'. [ 713.102988][ T1095] netlink: 'syz.5.9221': attribute type 1 has an invalid length. [ 713.149773][ T1015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.156768][ T1015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.182845][ T1015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.202021][ T1111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9223'. [ 713.211207][ T1015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.218309][ T1015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.244611][ T1015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.265117][ T1112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.274147][ T1112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.360881][ T1015] hsr_slave_0: entered promiscuous mode [ 713.370389][ T1015] hsr_slave_1: entered promiscuous mode [ 713.397665][ T1127] loop5: detected capacity change from 0 to 128 [ 713.436838][ T1127] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 713.457799][ T1127] ext4 filesystem being mounted at /594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 713.562837][T25092] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.731113][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 713.731133][ T29] audit: type=1326 audit(1750653715.793:22286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.766257][ T1146] loop7: detected capacity change from 0 to 16384 [ 713.796589][ T29] audit: type=1326 audit(1750653715.833:22287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.820256][ T29] audit: type=1326 audit(1750653715.833:22288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.843807][ T29] audit: type=1326 audit(1750653715.833:22289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.867423][ T29] audit: type=1326 audit(1750653715.833:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.891036][ T29] audit: type=1326 audit(1750653715.833:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.914559][ T29] audit: type=1326 audit(1750653715.833:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.938199][ T29] audit: type=1326 audit(1750653715.833:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.961838][ T29] audit: type=1326 audit(1750653715.833:22294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 713.985397][ T29] audit: type=1326 audit(1750653715.833:22295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.6.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe430a5e929 code=0x7ffc0000 [ 714.044836][ T1168] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.079217][ T1174] netlink: 'syz.1.9232': attribute type 21 has an invalid length. [ 714.087169][ T1174] netlink: 'syz.1.9232': attribute type 1 has an invalid length. [ 714.096792][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.113790][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.173881][ T1178] loop3: detected capacity change from 0 to 256 [ 714.277703][ T1015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 714.305940][ T1168] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.320658][ T1015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 714.344088][ T1015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 714.380675][ T1015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 714.420048][ T1168] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.532981][ T1168] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.607007][ T1168] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.626121][ T1168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.642397][ T1168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.725388][ T1168] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.821687][ T1015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.881242][ T1015] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.897340][ T1204] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 714.906257][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.913426][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.928214][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.935378][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.148966][ T1224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.183477][ T1224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.283536][ T1015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.475305][ T1015] veth0_vlan: entered promiscuous mode [ 715.485564][ T1255] loop5: detected capacity change from 0 to 512 [ 715.502611][ T1015] veth1_vlan: entered promiscuous mode [ 715.581187][ T1015] veth0_macvtap: entered promiscuous mode [ 715.601285][ T1015] veth1_macvtap: entered promiscuous mode [ 715.630425][ T1015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.657530][ T1210] syz.6.9239 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 715.661468][ T1015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.668655][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: syz.6.9239 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 715.668735][ T1210] Tainted: [W]=WARN [ 715.668746][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.668765][ T1210] Call Trace: [ 715.668773][ T1210] [ 715.668786][ T1210] __dump_stack+0x1d/0x30 [ 715.668815][ T1210] dump_stack_lvl+0xe8/0x140 [ 715.668843][ T1210] dump_stack+0x15/0x1b [ 715.668867][ T1210] dump_header+0x81/0x220 [ 715.668978][ T1210] oom_kill_process+0x334/0x3f0 [ 715.669022][ T1210] out_of_memory+0x979/0xb80 [ 715.669098][ T1210] try_charge_memcg+0x5e6/0x9e0 [ 715.669197][ T1210] charge_memcg+0x51/0xc0 [ 715.669242][ T1210] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 715.669367][ T1210] __read_swap_cache_async+0x1df/0x350 [ 715.669416][ T1210] swap_cluster_readahead+0x277/0x3e0 [ 715.669466][ T1210] swapin_readahead+0xde/0x6f0 [ 715.669581][ T1210] ? __filemap_get_folio+0x4f7/0x6b0 [ 715.669631][ T1210] ? __rcu_read_unlock+0x34/0x70 [ 715.669663][ T1210] ? swap_cache_get_folio+0x77/0x200 [ 715.669773][ T1210] do_swap_page+0x301/0x2430 [ 715.669847][ T1210] ? css_rstat_updated+0xcd/0x5b0 [ 715.669893][ T1210] ? __pfx_default_wake_function+0x10/0x10 [ 715.669937][ T1210] handle_mm_fault+0x9a5/0x2be0 [ 715.669970][ T1210] ? mas_walk+0xf2/0x120 [ 715.670099][ T1210] do_user_addr_fault+0x636/0x1090 [ 715.670245][ T1210] exc_page_fault+0x62/0xa0 [ 715.670285][ T1210] asm_exc_page_fault+0x26/0x30 [ 715.670314][ T1210] RIP: 0033:0x7fe43093538c [ 715.670335][ T1210] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 715.670361][ T1210] RSP: 002b:00007ffdf860c720 EFLAGS: 00010283 [ 715.670385][ T1210] RAX: 0000000000000000 RBX: 00007fe430c86080 RCX: 0000000000000000 [ 715.670429][ T1210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555888ba808 [ 715.670446][ T1210] RBP: 00007fe430c87ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 715.670464][ T1210] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000aec18 [ 715.670482][ T1210] R13: 00007ffdf860c810 R14: ffffffffffffffff R15: 00007ffdf860c830 [ 715.670549][ T1210] [ 715.670559][ T1210] memory: usage 307200kB, limit 307200kB, failcnt 8143 [ 715.700517][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.704084][ T1210] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 715.707465][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.710430][ T1210] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 715.710445][ T1210] Memory cgroup stats for /syz6: [ 715.717190][ T1210] cache 0 [ 715.719457][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.723557][ T1210] rss 0 [ 715.723567][ T1210] shmem 0 [ 715.727919][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.732752][ T1210] mapped_file 0 [ 715.732762][ T1210] dirty 0 [ 715.826127][ T1255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.827850][ T1210] writeback 0 [ 715.847713][ T1255] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.853778][ T1210] workingset_refault_anon 2172 [ 716.005793][ T1210] workingset_refault_file 18021 [ 716.010709][ T1210] swap 196608 [ 716.014036][ T1210] swapcached 4096 [ 716.017687][ T1210] pgpgin 628606 [ 716.021300][ T1210] pgpgout 628603 [ 716.024877][ T1210] pgfault 469543 [ 716.028462][ T1210] pgmajfault 1434 [ 716.032118][ T1210] inactive_anon 0 [ 716.035798][ T1210] active_anon 4096 [ 716.039571][ T1210] inactive_file 0 [ 716.043225][ T1210] active_file 8192 [ 716.047026][ T1210] unevictable 0 [ 716.050680][ T1210] hierarchical_memory_limit 314572800 [ 716.056258][ T1210] hierarchical_memsw_limit 9223372036854771712 [ 716.062482][ T1210] total_cache 0 [ 716.066073][ T1210] total_rss 0 [ 716.069607][ T1210] total_shmem 0 [ 716.073094][ T1210] total_mapped_file 0 [ 716.077105][ T1210] total_dirty 0 [ 716.080740][ T1210] total_writeback 0 [ 716.084654][ T1210] total_workingset_refault_anon 2172 [ 716.090043][ T1210] total_workingset_refault_file 18021 [ 716.095495][ T1210] total_swap 196608 [ 716.099353][ T1210] total_swapcached 4096 [ 716.103538][ T1210] total_pgpgin 628606 [ 716.107565][ T1210] total_pgpgout 628603 [ 716.111705][ T1210] total_pgfault 469543 [ 716.115803][ T1210] total_pgmajfault 1434 [ 716.120084][ T1210] total_inactive_anon 0 [ 716.124317][ T1210] total_active_anon 4096 [ 716.128643][ T1210] total_inactive_file 0 [ 716.132821][ T1210] total_active_file 8192 [ 716.137092][ T1210] total_unevictable 0 [ 716.141152][ T1210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9239,pid=1210,uid=0 [ 716.155784][ T1210] Memory cgroup out of memory: Killed process 1210 (syz.6.9239) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 716.189770][T25092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.204491][ T1307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=1307 comm=syz.1.9245 [ 716.262803][ T1312] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.300969][ T1296] loop1: detected capacity change from 0 to 1024 [ 716.316068][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.325337][ T1316] __nla_validate_parse: 3 callbacks suppressed [ 716.325356][ T1316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9202'. [ 716.350228][ T1312] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.360983][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.371096][ T1296] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 716.382108][ T1296] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 716.398955][ T1296] JBD2: no valid journal superblock found [ 716.404742][ T1296] EXT4-fs (loop1): Could not load journal inode [ 716.424503][ T1324] blktrace: Concurrent blktraces are not allowed on sg0 [ 716.467279][ T1312] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.543652][ T1330] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 716.566787][ T1312] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.705304][ T1312] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.754884][ T1312] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.768591][ T1351] loop0: detected capacity change from 0 to 512 [ 716.807637][ T1312] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.831325][ T1351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.845062][ T1351] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.868510][ T1312] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.975424][ T1368] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.9252: corrupted inode contents [ 717.002177][ T1368] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.9252: mark_inode_dirty error [ 717.014867][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.025194][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.034595][ T1368] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.9252: corrupted inode contents [ 717.047108][ T1368] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.9252: mark_inode_dirty error [ 717.060678][ T1368] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.9252: mark inode dirty (error -117) [ 717.079080][ T1368] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 717.087664][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.118184][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.125990][ T1381] blktrace: Concurrent blktraces are not allowed on sg0 [ 717.148413][ T1015] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.274096][ T1337] chnl_net:caif_netlink_parms(): no params data found [ 717.288075][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.315535][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9254'. [ 717.330729][ T1404] bridge0: entered promiscuous mode [ 717.337377][ T1404] bridge0: port 3(macvlan2) entered blocking state [ 717.344003][ T1404] bridge0: port 3(macvlan2) entered disabled state [ 717.350926][ T1404] macvlan2: entered allmulticast mode [ 717.356344][ T1404] bridge0: entered allmulticast mode [ 717.362777][ T1404] macvlan2: left allmulticast mode [ 717.368017][ T1404] bridge0: left allmulticast mode [ 717.375254][ T1404] bridge0: left promiscuous mode [ 717.418514][ T1409] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 717.492707][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.499969][ T1337] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.521604][ T1337] bridge_slave_0: entered allmulticast mode [ 717.529352][ T1337] bridge_slave_0: entered promiscuous mode [ 717.537240][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.544492][ T1337] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.545951][ T1337] bridge_slave_1: entered allmulticast mode [ 717.560090][ T1337] bridge_slave_1: entered promiscuous mode [ 717.596645][ T1337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.656130][ T1337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.683749][ T1424] loop3: detected capacity change from 0 to 512 [ 717.718800][ T1337] team0: Port device team_slave_0 added [ 717.727170][ T1337] team0: Port device team_slave_1 added [ 717.760322][ T1337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.767335][ T1337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.793473][ T1337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.822323][ T1337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.829475][ T1337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.855671][ T1337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.898150][ T1424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.915546][ T1424] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 717.963978][ T1337] hsr_slave_0: entered promiscuous mode [ 717.993086][ T1337] hsr_slave_1: entered promiscuous mode [ 718.008901][ T1337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.016714][ T1337] Cannot create hsr debugfs directory [ 718.025434][ T1424] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.9263: corrupted inode contents [ 718.047176][ T1424] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.9263: mark_inode_dirty error [ 718.064051][ T1424] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.9263: corrupted inode contents [ 718.097324][ T1424] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.9263: mark_inode_dirty error [ 718.109905][ T1424] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.9263: mark inode dirty (error -117) [ 718.129650][ T1451] loop1: detected capacity change from 0 to 256 [ 718.144538][ T1424] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 718.165127][ T1337] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.261695][T23612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.399637][ T1337] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.697184][ T1462] loop6: detected capacity change from 0 to 512 [ 718.879346][ T1337] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.906158][ T1462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.926770][ T1462] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.945931][ T1473] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 718.964438][ T1474] loop0: detected capacity change from 0 to 256 [ 719.059461][ T1337] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.152391][ T1462] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9268: corrupted inode contents [ 719.209906][ T1462] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.9268: mark_inode_dirty error [ 719.350257][ T1497] bridge0: entered promiscuous mode [ 719.365541][ T1462] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.9268: corrupted inode contents [ 719.438602][ T1497] bridge0: port 3(macvlan2) entered blocking state [ 719.445214][ T1497] bridge0: port 3(macvlan2) entered disabled state [ 719.452335][ T1497] macvlan2: entered allmulticast mode [ 719.457897][ T1497] bridge0: entered allmulticast mode [ 719.471411][ T1462] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.9268: mark_inode_dirty error [ 719.486451][ T1462] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.9268: mark inode dirty (error -117) [ 719.508636][ T1462] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 719.534133][ T1497] macvlan2: left allmulticast mode [ 719.539403][ T1497] bridge0: left allmulticast mode [ 719.567709][ T1497] bridge0: left promiscuous mode [ 719.588056][T28608] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.715020][ T1521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=1521 comm=syz.1.9277 [ 719.769726][ T1521] loop1: detected capacity change from 0 to 1024 [ 719.817857][ T1521] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 719.828890][ T1521] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 719.904513][ T1521] JBD2: no valid journal superblock found [ 719.910370][ T1521] EXT4-fs (loop1): Could not load journal inode [ 720.500219][ T1623] loop1: detected capacity change from 0 to 256 [ 720.508596][ T1515] syz.6.9278 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 720.519746][ T1515] CPU: 0 UID: 0 PID: 1515 Comm: syz.6.9278 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 720.519838][ T1515] Tainted: [W]=WARN [ 720.519845][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.519858][ T1515] Call Trace: [ 720.519863][ T1515] [ 720.519873][ T1515] __dump_stack+0x1d/0x30 [ 720.519899][ T1515] dump_stack_lvl+0xe8/0x140 [ 720.519924][ T1515] dump_stack+0x15/0x1b [ 720.519994][ T1515] dump_header+0x81/0x220 [ 720.520033][ T1515] oom_kill_process+0x334/0x3f0 [ 720.520121][ T1515] out_of_memory+0x979/0xb80 [ 720.520157][ T1515] try_charge_memcg+0x5e6/0x9e0 [ 720.520191][ T1515] charge_memcg+0x51/0xc0 [ 720.520270][ T1515] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 720.520338][ T1515] __read_swap_cache_async+0x1df/0x350 [ 720.520377][ T1515] swap_cluster_readahead+0x277/0x3e0 [ 720.520431][ T1515] swapin_readahead+0xde/0x6f0 [ 720.520471][ T1515] ? __filemap_get_folio+0x4f7/0x6b0 [ 720.520525][ T1515] ? swap_cache_get_folio+0x77/0x200 [ 720.520591][ T1515] do_swap_page+0x301/0x2430 [ 720.520619][ T1515] ? css_rstat_updated+0xcd/0x5b0 [ 720.520656][ T1515] ? __pfx_default_wake_function+0x10/0x10 [ 720.520686][ T1515] handle_mm_fault+0x9a5/0x2be0 [ 720.520716][ T1515] ? mas_walk+0xf2/0x120 [ 720.520783][ T1515] do_user_addr_fault+0x636/0x1090 [ 720.520833][ T1515] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 720.520920][ T1515] exc_page_fault+0x62/0xa0 [ 720.520955][ T1515] asm_exc_page_fault+0x26/0x30 [ 720.520982][ T1515] RIP: 0033:0x7fe430a5e886 [ 720.521002][ T1515] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 720.521026][ T1515] RSP: 002b:00007ffdf860c6f0 EFLAGS: 00010246 [ 720.521060][ T1515] RAX: 00000000000afe11 RBX: 00007fe430c85fa0 RCX: 00000000000afc80 [ 720.521075][ T1515] RDX: 0000000000000191 RSI: 0000000000000000 RDI: 00000000000003e8 [ 720.521087][ T1515] RBP: 00007fe430c87ba0 R08: 0000000017f05a9e R09: 7fffffffffffffff [ 720.521099][ T1515] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000afe59 [ 720.521124][ T1515] R13: 00007ffdf860c810 R14: ffffffffffffffff R15: 00007ffdf860c830 [ 720.521150][ T1515] [ 720.521159][ T1515] memory: usage 307200kB, limit 307200kB, failcnt 8326 [ 720.751927][ T1515] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 720.759974][ T1515] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 720.767422][ T1515] Memory cgroup stats for /syz6: [ 720.772053][ T1515] cache 0 [ 720.780121][ T1515] rss 0 [ 720.782932][ T1515] shmem 0 [ 720.786351][ T1515] mapped_file 0 [ 720.789907][ T1515] dirty 0 [ 720.792950][ T1515] writeback 4096 [ 720.796651][ T1515] workingset_refault_anon 2213 [ 720.801636][ T1515] workingset_refault_file 18023 [ 720.806513][ T1515] swap 192512 [ 720.809868][ T1515] swapcached 8192 [ 720.813513][ T1515] pgpgin 629946 [ 720.816995][ T1515] pgpgout 629942 [ 720.820594][ T1515] pgfault 471458 [ 720.824186][ T1515] pgmajfault 1468 [ 720.827910][ T1515] inactive_anon 4096 [ 720.831839][ T1515] active_anon 4096 [ 720.835580][ T1515] inactive_file 0 [ 720.839295][ T1515] active_file 8192 [ 720.843056][ T1515] unevictable 0 [ 720.846531][ T1515] hierarchical_memory_limit 314572800 [ 720.852071][ T1515] hierarchical_memsw_limit 9223372036854771712 [ 720.858329][ T1515] total_cache 0 [ 720.861856][ T1515] total_rss 0 [ 720.865182][ T1515] total_shmem 0 [ 720.868788][ T1515] total_mapped_file 0 [ 720.872850][ T1515] total_dirty 0 [ 720.876328][ T1515] total_writeback 4096 [ 720.880467][ T1515] total_workingset_refault_anon 2213 [ 720.885895][ T1515] total_workingset_refault_file 18023 [ 720.891321][ T1515] total_swap 192512 [ 720.895219][ T1515] total_swapcached 8192 [ 720.899435][ T1515] total_pgpgin 629946 [ 720.903468][ T1515] total_pgpgout 629942 [ 720.907660][ T1515] total_pgfault 471458 [ 720.911859][ T1515] total_pgmajfault 1468 [ 720.916029][ T1515] total_inactive_anon 4096 [ 720.920496][ T1515] total_active_anon 4096 [ 720.924778][ T1515] total_inactive_file 0 [ 720.929067][ T1515] total_active_file 8192 [ 720.933410][ T1515] total_unevictable 0 [ 720.937443][ T1515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9278,pid=1515,uid=0 [ 720.952338][ T1515] Memory cgroup out of memory: Killed process 1515 (syz.6.9278) total-vm:93752kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 721.114059][ T1337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 721.280205][ T1337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 721.376196][ T1337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 721.390912][ T1673] loop3: detected capacity change from 0 to 1024 [ 721.414877][ T56] bridge_slave_1: left allmulticast mode [ 721.420631][ T56] bridge_slave_1: left promiscuous mode [ 721.426318][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.435658][ T1673] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.455724][ T1673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 721.493808][ T1673] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 721.509609][ T56] bridge_slave_0: left allmulticast mode [ 721.515392][ T56] bridge_slave_0: left promiscuous mode [ 721.521223][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.546909][ T1673] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.9283: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 721.591100][ T1673] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.9283: couldn't read orphan inode 11 (err -117) [ 721.620773][ T1673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.658619][ T1673] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9283: Invalid block bitmap block 0 in block_group 0 [ 721.678679][ T1673] __quota_error: 6 callbacks suppressed [ 721.678698][ T1673] Quota error (device loop3): write_blk: dquota write failed [ 721.691744][ T1673] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 721.750551][ T1673] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9283: Failed to acquire dquot type 0 [ 721.814162][ T1696] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 721.864081][ T56] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 721.891336][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 721.909322][ T56] bridge1 (unregistering): left promiscuous mode [ 721.924278][T23612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.938671][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 721.978961][ T1704] loop0: detected capacity change from 0 to 1024 [ 721.987374][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 722.000808][ T1706] loop3: detected capacity change from 0 to 1024 [ 722.027015][ T1704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.041532][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 722.063140][ T1706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.076750][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.099408][ T1713] blktrace: Concurrent blktraces are not allowed on sg0 [ 722.119374][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.136548][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 722.147013][ T1015] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.163615][ T56] bond0 (unregistering): Released all slaves [ 722.172221][T23612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.183040][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9289'. [ 722.205403][ T56] bond1 (unregistering): Released all slaves [ 722.207922][ T1716] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 722.228006][ T1337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 722.253630][ T56] tipc: Left network mode [ 722.357500][ T1337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.395834][ T1679] syz.1.9284 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 722.410054][ T1679] CPU: 1 UID: 0 PID: 1679 Comm: syz.1.9284 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 722.410133][ T1679] Tainted: [W]=WARN [ 722.410139][ T1679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.410153][ T1679] Call Trace: [ 722.410159][ T1679] [ 722.410168][ T1679] __dump_stack+0x1d/0x30 [ 722.410192][ T1679] dump_stack_lvl+0xe8/0x140 [ 722.410211][ T1679] dump_stack+0x15/0x1b [ 722.410234][ T1679] dump_header+0x81/0x220 [ 722.410314][ T1679] oom_kill_process+0x334/0x3f0 [ 722.410346][ T1679] out_of_memory+0x979/0xb80 [ 722.410436][ T1679] try_charge_memcg+0x5e6/0x9e0 [ 722.410494][ T1679] obj_cgroup_charge_pages+0xa6/0x150 [ 722.410527][ T1679] __memcg_kmem_charge_page+0x9f/0x170 [ 722.410589][ T1679] __alloc_frozen_pages_noprof+0x188/0x360 [ 722.410627][ T1679] alloc_pages_mpol+0xb3/0x250 [ 722.410660][ T1679] alloc_pages_noprof+0x90/0x130 [ 722.410808][ T1679] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 722.410860][ T1679] __kvmalloc_node_noprof+0x30f/0x4e0 [ 722.410953][ T1679] ? ip_set_alloc+0x1f/0x30 [ 722.410984][ T1679] ? ip_set_alloc+0x1f/0x30 [ 722.411012][ T1679] ? __kmalloc_cache_noprof+0x189/0x320 [ 722.411081][ T1679] ip_set_alloc+0x1f/0x30 [ 722.411195][ T1679] hash_netiface_create+0x282/0x740 [ 722.411260][ T1679] ? __pfx_hash_netiface_create+0x10/0x10 [ 722.411365][ T1679] ip_set_create+0x3c9/0x960 [ 722.411424][ T1679] nfnetlink_rcv_msg+0x4c3/0x590 [ 722.411451][ T1679] ? should_fail_ex+0x30/0x280 [ 722.411565][ T1679] ? selinux_capable+0x1f9/0x270 [ 722.411608][ T1679] netlink_rcv_skb+0x120/0x220 [ 722.411683][ T1679] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 722.411760][ T1679] nfnetlink_rcv+0x16b/0x1690 [ 722.411786][ T1679] ? __kfree_skb+0x109/0x150 [ 722.411821][ T1679] ? nlmon_xmit+0x4f/0x60 [ 722.411891][ T1679] ? consume_skb+0x49/0x150 [ 722.411989][ T1679] ? nlmon_xmit+0x4f/0x60 [ 722.412017][ T1679] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 722.412073][ T1679] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 722.412186][ T1679] ? __dev_queue_xmit+0x182/0x1fb0 [ 722.412234][ T1679] ? ref_tracker_free+0x37d/0x3e0 [ 722.412356][ T1679] ? __netlink_deliver_tap+0x4dc/0x500 [ 722.412467][ T1679] netlink_unicast+0x59e/0x670 [ 722.412502][ T1679] netlink_sendmsg+0x58b/0x6b0 [ 722.412529][ T1679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.412629][ T1679] __sock_sendmsg+0x142/0x180 [ 722.412661][ T1679] ____sys_sendmsg+0x31e/0x4e0 [ 722.412708][ T1679] ___sys_sendmsg+0x17b/0x1d0 [ 722.412749][ T1679] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 722.412898][ T1679] __x64_sys_sendmsg+0xd4/0x160 [ 722.412947][ T1679] x64_sys_call+0x2999/0x2fb0 [ 722.412975][ T1679] do_syscall_64+0xd2/0x200 [ 722.413013][ T1679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 722.413053][ T1679] ? clear_bhb_loop+0x40/0x90 [ 722.413081][ T1679] ? clear_bhb_loop+0x40/0x90 [ 722.413135][ T1679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.413163][ T1679] RIP: 0033:0x7f956f1fe929 [ 722.413181][ T1679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.413199][ T1679] RSP: 002b:00007f956d867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.413217][ T1679] RAX: ffffffffffffffda RBX: 00007f956f425fa0 RCX: 00007f956f1fe929 [ 722.413234][ T1679] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 722.413250][ T1679] RBP: 00007f956f280b39 R08: 0000000000000000 R09: 0000000000000000 [ 722.413281][ T1679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.413294][ T1679] R13: 0000000000000000 R14: 00007f956f425fa0 R15: 00007fffb7d03b88 [ 722.413312][ T1679] [ 722.413319][ T1679] memory: usage 307200kB, limit 307200kB, failcnt 6668 [ 722.460901][ T1337] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.469620][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.470135][ T1679] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 722.474711][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.479575][ T1679] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 722.490517][ T1677] ================================================================== [ 722.496220][ T1679] Memory cgroup stats for /syz1 [ 722.501009][ T1677] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 722.505967][ T1679] : [ 722.511711][ T1677] [ 722.511718][ T1677] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 722.511736][ T1677] tick_do_update_jiffies64+0x113/0x1c0 [ 722.517582][ T1679] cache 0 [ 722.521599][ T1677] tick_nohz_handler+0x7f/0x2d0 [ 722.521630][ T1677] __hrtimer_run_queues+0x20f/0x5a0 [ 722.526112][ T1679] rss 0 [ 722.526122][ T1679] shmem 0 [ 722.531642][ T1677] hrtimer_interrupt+0x21a/0x460 [ 722.531670][ T1677] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 722.535998][ T1679] mapped_file 0 [ 722.536010][ T1679] dirty 0 [ 722.541188][ T1677] sysvec_apic_timer_interrupt+0x6f/0x80 [ 722.546924][ T1679] writeback 8192 [ 722.551509][ T1677] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.551540][ T1677] console_flush_all+0x55b/0x730 [ 722.556458][ T1679] workingset_refault_anon 2061 [ 722.561215][ T1677] console_unlock+0xa1/0x330 [ 722.561238][ T1677] vprintk_emit+0x388/0x650 [ 722.566255][ T1679] workingset_refault_file 11562 [ 722.566268][ T1679] swap 208896 [ 722.571010][ T1677] vprintk_default+0x26/0x30 [ 722.571036][ T1677] vprintk+0x1d/0x30 [ 722.571060][ T1677] _printk+0x79/0xa0 [ 722.576516][ T1679] swapcached 16384 [ 722.581183][ T1677] mem_cgroup_print_oom_meminfo+0xdc/0x250 [ 722.581212][ T1677] dump_header+0xa0/0x220 [ 722.585784][ T1679] pgpgin 615920 [ 722.590102][ T1677] oom_kill_process+0x334/0x3f0 [ 722.590137][ T1677] out_of_memory+0x979/0xb80 [ 722.594641][ T1679] pgpgout 615916 [ 722.598958][ T1677] try_charge_memcg+0x5e6/0x9e0 [ 722.598982][ T1677] obj_cgroup_charge_pages+0xa6/0x150 [ 722.599009][ T1677] __memcg_kmem_charge_page+0x9f/0x170 [ 722.604306][ T1679] pgfault 415092 [ 722.609494][ T1677] __alloc_frozen_pages_noprof+0x188/0x360 [ 722.609537][ T1677] alloc_pages_mpol+0xb3/0x250 [ 722.614725][ T1679] pgmajfault 1242 [ 722.619736][ T1677] alloc_pages_noprof+0x90/0x130 [ 722.619774][ T1677] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 722.619806][ T1677] __kvmalloc_node_noprof+0x30f/0x4e0 [ 722.619832][ T1677] ip_set_alloc+0x1f/0x30 [ 722.625283][ T1679] inactive_anon 16384 [ 722.630040][ T1677] hash_netiface_create+0x282/0x740 [ 722.630077][ T1677] ip_set_create+0x3c9/0x960 [ 722.634825][ T1679] active_anon 0 [ 722.634836][ T1679] inactive_file 0 [ 722.640189][ T1677] nfnetlink_rcv_msg+0x4c3/0x590 [ 722.640221][ T1677] netlink_rcv_skb+0x120/0x220 [ 722.644886][ T1679] active_file 0 [ 722.649742][ T1677] nfnetlink_rcv+0x16b/0x1690 [ 722.649778][ T1677] netlink_unicast+0x59e/0x670 [ 722.649811][ T1677] netlink_sendmsg+0x58b/0x6b0 [ 722.649832][ T1677] __sock_sendmsg+0x142/0x180 [ 722.649854][ T1677] ____sys_sendmsg+0x31e/0x4e0 [ 722.654543][ T1679] unevictable 0 [ 722.660339][ T1677] ___sys_sendmsg+0x17b/0x1d0 [ 722.660382][ T1677] __x64_sys_sendmsg+0xd4/0x160 [ 722.665220][ T1679] hierarchical_memory_limit 314572800 [ 722.669892][ T1677] x64_sys_call+0x2999/0x2fb0 [ 722.669920][ T1677] do_syscall_64+0xd2/0x200 [ 722.674417][ T1679] hierarchical_memsw_limit 9223372036854771712 [ 722.680506][ T1677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.680534][ T1677] [ 722.680542][ T1677] read to 0xffffffff868099c0 of 8 bytes by task 1677 on cpu 0: [ 722.680561][ T1677] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 722.680587][ T1677] count_shadow_nodes+0x6a/0x230 [ 722.680603][ T1677] do_shrink_slab+0x63/0x680 [ 722.685284][ T1679] total_cache 0 [ 722.685295][ T1679] total_rss 0 [ 722.689957][ T1677] shrink_slab+0x448/0x760 [ 722.689989][ T1677] shrink_node+0x6c3/0x2120 [ 722.695884][ T1679] total_shmem 0 [ 722.700294][ T1677] do_try_to_free_pages+0x3f6/0xcd0 [ 722.700321][ T1677] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 722.719951][ T1679] total_mapped_file 0 [ 722.728325][ T1677] try_charge_memcg+0x358/0x9e0 [ 722.728352][ T1677] charge_memcg+0x51/0xc0 [ 722.736326][ T1679] total_dirty 0 [ 722.736338][ T1679] total_writeback 8192 [ 722.744292][ T1677] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 722.744333][ T1677] __read_swap_cache_async+0x1df/0x350 [ 722.752331][ T1679] total_workingset_refault_anon 2061 [ 722.760277][ T1677] swap_cluster_readahead+0x277/0x3e0 [ 722.768308][ T1679] total_workingset_refault_file 11562 [ 722.771290][ T1677] swapin_readahead+0xde/0x6f0 [ 722.778153][ T1679] total_swap 208896 [ 722.784705][ T1677] do_swap_page+0x301/0x2430 [ 722.791745][ T1679] total_swapcached 16384 [ 722.799600][ T1677] handle_mm_fault+0x9a5/0x2be0 [ 722.799628][ T1677] do_user_addr_fault+0x636/0x1090 [ 722.806898][ T1679] total_pgpgin 615920 [ 722.814171][ T1677] exc_page_fault+0x62/0xa0 [ 722.822276][ T1679] total_pgpgout 615916 [ 722.827101][ T1677] asm_exc_page_fault+0x26/0x30 [ 722.836928][ T1679] total_pgfault 415092 [ 722.839304][ T1677] [ 722.839310][ T1677] value changed: 0x000000010000a4d3 -> 0x000000010000a4d4 [ 722.839326][ T1677] [ 722.839332][ T1677] Reported by Kernel Concurrency Sanitizer on: [ 722.841649][ T1679] total_pgmajfault 1242 [ 722.849711][ T1677] CPU: 0 UID: 0 PID: 1677 Comm: syz.1.9284 Tainted: G W 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 722.855270][ T1679] total_inactive_anon 16384 [ 722.858210][ T1677] Tainted: [W]=WARN [ 722.858220][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.858237][ T1677] ================================================================== [ 722.863071][ T1679] total_active_anon 0 [ 722.877799][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.878934][ T1679] total_inactive_file 0 [ 722.884873][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.888347][ T1679] total_active_file 0 [ 722.913522][ T1337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 722.916193][ T1679] total_unevictable 0 [ 722.920854][ T1337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.925340][ T1679] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 723.003016][ T1337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.006418][ T1679] ,cpuset=/ [ 723.203041][ T1337] veth0_vlan: entered promiscuous mode [ 723.205633][ T1679] ,mems_allowed=0 [ 723.222158][ T1337] veth1_vlan: entered promiscuous mode [ 723.222421][ T1679] ,oom_memcg= [ 723.245332][ T1337] veth0_macvtap: entered promiscuous mode [ 723.246434][ T1679] /syz1,task_memcg= [ 723.285814][ T1337] veth1_macvtap: entered promiscuous mode [ 723.291965][ T1679] /syz1,task=syz.1.9284,pid=1677,uid=0 [ 723.452850][ T1679] Memory cgroup out of memory: Killed process 1677 (syz.1.9284) total-vm:100168kB, anon-rss:1064kB, file-rss:26280kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 723.492509][ T1337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.510488][ T1337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.521750][ T1337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.530599][ T1337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.539418][ T1337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.548563][ T1337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.600261][ T56] hsr_slave_0: left promiscuous mode [ 723.618321][ T56] hsr_slave_1: left promiscuous mode [ 723.624124][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.631635][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.658355][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.665840][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.690711][ T56] veth1_macvtap: left promiscuous mode [ 723.696316][ T56] veth0_macvtap: left promiscuous mode [ 723.717838][ T56] veth1_vlan: left promiscuous mode [ 723.723215][ T56] veth0_vlan: left promiscuous mode [ 723.868918][ T56] team0 (unregistering): Port device team_slave_1 removed [ 723.888589][ T56] team0 (unregistering): Port device team_slave_0 removed [ 723.899912][ T2513] smc: removing ib device syz! [ 723.928153][ T56] team0 (unregistering): Port device dummy0 removed