last executing test programs: 4m51.261884364s ago: executing program 32 (id=223): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x340) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x3f, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200640101020c000280050001000000000024000280140001800800010000000000080002007f0000010c00028040a6ec4844480500010000000000080007400000712833fad1eff78c42e3e22bbde5cd9f96308d"], 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000001080)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="02001fd3", @ANYRES32=0x0, @ANYBLOB="0200f9f3", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="040003000000000008000200", @ANYRES32=r5, @ANYBLOB="10000700000000002000010000000000"], 0x54, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) io_submit(r4, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m9.883580089s ago: executing program 2 (id=2363): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m9.84354266s ago: executing program 2 (id=2365): r0 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\r+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\xbe\n\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd8s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|y\xc6\f\x1e\x8fJw\xdc\r\xa7\n}Uc\x05<\xe9\x9f\x87\v\xbcLWk\fcC\xf5\x02z\x1e\xb2a\x18\xaaJ\x14=\bP\xc5e\x9d\xaf;\x8f\x87\xbe\x7f\x84\xdf\x05I:\xe66\x1c:\xe2\xe3\v\x8e\x04\xda\xc5U\xd4\x96\xf2\xc3x\x17\xd2\x98uMB0x0, &(0x7f0000000300)=0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x88100) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x40f9, 0xf08a, 0xe1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000040"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 3m9.455723846s ago: executing program 2 (id=2371): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x105, &(0x7f0000000440)=ANY=[], 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(0x0, 0x0) 3m9.311502398s ago: executing program 2 (id=2377): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x23a, &(0x7f0000000540)="$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") mount$9p_rdma(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,rq=0x0000000000000001,rq=0x000000002ec12a89,timeout=0x0000000000000006,uid>', @ANYRESDEC=0xee00, @ANYBLOB, @ANYBLOB]) 3m9.070756212s ago: executing program 4 (id=2381): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x10098}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000015c0)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0xc, 0x3, 0x8, 0x8001}]}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) acct(0x0) 3m8.943426254s ago: executing program 2 (id=2383): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x140, &(0x7f0000000fc0)={0x0, 0x3938700}) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 3m8.943257784s ago: executing program 34 (id=2383): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x140, &(0x7f0000000fc0)={0x0, 0x3938700}) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 3m8.942854864s ago: executing program 4 (id=2385): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 3m8.901968084s ago: executing program 4 (id=2386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) acct(0x0) 3m8.874899115s ago: executing program 4 (id=2387): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x105, &(0x7f0000000440)=ANY=[], 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(0x0, 0x0) 3m8.615819409s ago: executing program 4 (id=2389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003400000000008000340"], 0x122}}, 0x8010) 3m7.88253143s ago: executing program 4 (id=2398): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 3m7.88235045s ago: executing program 35 (id=2398): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 3m1.889964042s ago: executing program 6 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m1.876989942s ago: executing program 6 (id=2481): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m1.779446634s ago: executing program 6 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m1.760478014s ago: executing program 6 (id=2485): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f00000002c0)={[{@noquota}, {@nobh}]}, 0x1, 0x786, &(0x7f00000020c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000300)=0xfffffff8, 0x4) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000080)="ae", 0x1}], 0x1}}], 0x1, 0x8084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa131f373e4215f63, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001803010378ffffc4001000451300d80065000009069078ac1e0001ffffffff4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e18000079078000c1e61063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5030027c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4948d018596a46de500000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177"], 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="8106c7687246ead01d664d385795d1291f5b8ac38ce58ae902121e0adb8f4b1ea08664f5737e87aaa757b1c434e903d59a92d6275b732f513906fa6b088800043d745de1ffe6e42bc9e64780d1294156970dcc6b450b851f265cf2608f090005eddf32"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x3, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14006, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtaction={0x10c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_ctinfo={0xf4, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff004, 0x7, 0x20000000, 0x8, 0xfffffffa}}]}, {0xae, 0x6, "a3089700a838ccf984d970e328038c33dcd14f320b87ffacd832d3f9ba02429865b8787f1d107a4d26f39056c898b5b6193a333ea62702fbd8b59640919f967be0af5c38de681db912d2a2f365ada8747668c66fbbc7a62a770080cb123d851f388871821f5da59b39e0a5e28a43ee4cbc4f9dd73d41b2914b0a7ff263a6281d6d9f1277bbff5dea8ebb61d50006bfc0c6e25d4c4499b56d3c97753d1000"/170}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x28000400}, 0x8000) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 3m1.655070156s ago: executing program 6 (id=2490): r0 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\r+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\xbe\n\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd8s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|y\xc6\f\x1e\x8fJw\xdc\r\xa7\n}Uc\x05<\xe9\x9f\x87\v\xbcLWk\fcC\xf5\x02z\x1e\xb2a\x18\xaaJ\x14=\bP\xc5e\x9d\xaf;\x8f\x87\xbe\x7f\x84\xdf\x05I:\xe66\x1c:\xe2\xe3\v\x8e\x04\xda\xc5U\xd4\x96\xf2\xc3x\x17\xd2\x98uMB0x0, &(0x7f0000000300)=0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x88100) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x40f9, 0xf08a, 0xe1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200004000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 3m1.371926829s ago: executing program 6 (id=2501): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) acct(0x0) 3m1.37175134s ago: executing program 36 (id=2501): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) acct(0x0) 3m0.329023006s ago: executing program 3 (id=2516): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x10098}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000015c0)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0xc, 0x3, 0x8, 0x8001}]}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 3m0.165332278s ago: executing program 3 (id=2522): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.111301899s ago: executing program 3 (id=2524): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb39}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) link(0x0, 0x0) 2m59.938672342s ago: executing program 3 (id=2527): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f00000002c0)={[{@noquota}, {@nobh}]}, 0x1, 0x786, &(0x7f00000020c0)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000300)=0xfffffff8, 0x4) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000080)="ae", 0x1}], 0x1}}], 0x1, 0x8084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa131f373e4215f63, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001803010378ffffc4001000451300d80065000009069078ac1e0001ffffffff4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e18000079078000c1e61063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5030027c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4948d018596a46de500000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177"], 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="8106c7687246ead01d664d385795d1291f5b8ac38ce58ae902121e0adb8f4b1ea08664f5737e87aaa757b1c434e903d59a92d6275b732f513906fa6b088800043d745de1ffe6e42bc9e64780d1294156970dcc6b450b851f265cf2608f090005eddf32"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x3, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14006, &(0x7f0000000b00)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtaction={0x10c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_ctinfo={0xf4, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff004, 0x7, 0x20000000, 0x8, 0xfffffffa}}]}, {0xae, 0x6, "a3089700a838ccf984d970e328038c33dcd14f320b87ffacd832d3f9ba02429865b8787f1d107a4d26f39056c898b5b6193a333ea62702fbd8b59640919f967be0af5c38de681db912d2a2f365ada8747668c66fbbc7a62a770080cb123d851f388871821f5da59b39e0a5e28a43ee4cbc4f9dd73d41b2914b0a7ff263a6281d6d9f1277bbff5dea8ebb61d50006bfc0c6e25d4c4499b56d3c97753d1000"/170}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x28000400}, 0x8000) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 2m59.787285364s ago: executing program 3 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m59.615800497s ago: executing program 3 (id=2532): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x944b2e6245cec16f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = dup(0xffffffffffffffff) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000}) 2m59.591979817s ago: executing program 37 (id=2532): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x944b2e6245cec16f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = dup(0xffffffffffffffff) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000}) 10.215293103s ago: executing program 7 (id=4923): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 10.209294953s ago: executing program 7 (id=4924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x13, 0xa, 0x9, 0xab8, 0x40000, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3, 0x1, 0x1, 0x6, @local}, 0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 10.146910174s ago: executing program 7 (id=4926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000c4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0) sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r1, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.264296187s ago: executing program 7 (id=4942): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 9.195674428s ago: executing program 7 (id=4943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 9.177263849s ago: executing program 7 (id=4944): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1008}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syslog(0x9, 0x0, 0x0) 9.151245839s ago: executing program 38 (id=4944): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1008}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syslog(0x9, 0x0, 0x0) 4.700764068s ago: executing program 5 (id=4997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004) 4.687322608s ago: executing program 5 (id=4998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000600)=0x9) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}]}, 0x1, 0xb7f, &(0x7f0000002080)="$eJzs3M9rHOUbAPBnJj+atOk36ZciVsQGFCpIt01LLfbU9qg9CP4DDemmhEx/kERoQg+pHoonK3jxIOhB/AMEz7m0gifxokXBu1iktPfIbCbJ0uwmabrbtz8+H5id9513s8/zZMjO+5KdDeClNVo+5BEHIuJ8FjFcHc8jor/RGohYXHneg/vXJx7evz6RxfLyR/9mkVXHVl8rq/Z7qs5ARPx6Nov/f7ox7uz8wvR4UdRnqv6RuUtXj8zOLxyeujR+sX6xfnns5NjxEyePn3j3aJvM+x671vf33Tr39djpvT+cvX3tjZt/fJXF6Riqxprr6JTRGI3lSvPx3ogY73SwRHqqerKmY1lvwoQAANhU3jSHeyWGoyfWJ2/Dcfu3pMkBAAAAHbHcE2v/owIAAABeVJn1PwAAALzgVj8H8OD+9YnVLe0nEp6ue2ciYqRV/b2x2NgPNO403v0gi+bbWrOVH3tioxGx/+eRn8otunQf8mYWb0TEq63qzxr1jzTu4t5Yf76jO7A3Gn2k/zzVf7oD8VPXD8DLaenMyoVs4/UvX5v/RIvrX2+La9dOpL7+tZ//rdff02b+9+E2Y9QPfvZFu7Hm+V/x3et3yvjl/omKegz3bkS81tt+/lPWn7Wp//w2Y/T9+cuP7cbK+st6V7enXf/ytxGHWq5/1r/RJtv8+4mOTE4V9eqxZYybd77f3y5+8/kvtzL+6lrgaSjP/+429W91/q9uM8bSP4f+aje2Zf2D68/tr/bXxufmZsYi+rNzG48f2zyX1eesvkZZ/9tvbv7336r+8j1hsfo9lGuBG9W+7H/ySMzDH7z31o7r77Ky/gs7PP+3thnjm89n/m43lrp+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4PeUQMRZbX1tp5XqtF7ImI/bE7L67Mzr0zeeXjyxfKsYiR6Msnp4r60YgYXulnZX+s0V7vH3ukfzwi9kXEl8ODjX5t4kpxIXXxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkTEUOR5bWIyCPi4XCe12qpswIAAAA6biR1AgAAAEDXWf8DAADAi8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7bd3DpbhYRi6cGG1upvxrrS5oZ0G156gSAZHpSJwAk05s6ASAZa3wg22J8oO3Iro7nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCz69CBpbtZRCyeGmxspf5qrC9pZkC35akTAJLpSZ0AkExv6gSAZKzxgWyL8YG2I7s6ngsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz66hxpbltYjIG+08r9Ui9kbESPRlk1NF/WhE/C8ifh/u21X2x1InDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfNzi9MjxdFfUZDQ0NjrZH6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBRm5xemx4uiPjObOhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgtdn5henxoqjPdLGRukYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANL5LwAA//8fWAg1") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r0, 0x0, 0xfffffffffffffffb, 0x0) fcntl$setpipe(r3, 0x407, 0x100004) socket$nl_audit(0x10, 0x3, 0x9) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x4, 0x1}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1e, 0x1b, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="18150000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="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"], 0x1318}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.390918043s ago: executing program 0 (id=5023): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002ce3d3e32e9a0012800e00010069703665727370616e0000001800028008001500a8bc0dff99a1600fe6dd0caada46b8acd6c4f91acd4620c2d7e7e7e59963914b6b1353ff1878fc1b95214d5c86cac1255bb8b8c2671d524e1ffc4ab823ef008d61dc6a7ed7fcf7c62e4f8d0cceee9c891e0e70834744939ade52307ff0fca18f103057cf414fc5468a8cb393bae6be5a4ac33691f95f768c294635fb43568418f3f77ea4cf25bbb66f0ed12a7ca6987649e5ce68fc451d44a2c2d2fcb1a9666da2c22d461a0aab76dc2e04"], 0x4c}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000186e6c002cbd7000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.325852764s ago: executing program 0 (id=5024): bpf$PROG_LOAD(0x5, 0x0, 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="020702060700090029bd7000fddbdf2505001700332000000a004e2100000003fe8800000000000000001c0000848442170000010f00000000000000c10300000070f4b3b27978b27467b082c309c6e7"], 0x38}}, 0x800) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x8, 0x9eea, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x80, 0x17fc8, 0x3, 0x10}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.251291635s ago: executing program 1 (id=5025): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) 2.183660446s ago: executing program 1 (id=5026): r0 = socket(0x8, 0x80000, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x4c, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x8}, {}, {0x5, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xe25f}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xa, 0xfffffffffffffffe}, 0x26) sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x99102, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x1}, 0x15cd0, 0xffff, 0x0, 0x1, 0x80008, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x2) socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r9], 0xbc}}, 0x48004) 2.174085976s ago: executing program 1 (id=5027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='skb_copy_datagram_iovec\x00', r2, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000007c0)={0xc, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f00000006c0)=""/223, 0xdf}, {&(0x7f0000000500)=""/46, 0x2e}], &(0x7f0000000640)=[0x100000001], 0x5}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.132103337s ago: executing program 8 (id=5028): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 2.042662538s ago: executing program 1 (id=5029): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) write$char_usb(r1, &(0x7f00000002c0)='AS', 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 1.89948318s ago: executing program 5 (id=5030): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0x2, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x400000002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1.860042201s ago: executing program 5 (id=5031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x60, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd3}, 0x94) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 1.844156411s ago: executing program 5 (id=5032): listen(0xffffffffffffffff, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x0) 1.742774243s ago: executing program 1 (id=5033): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000c4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.448495198s ago: executing program 0 (id=5035): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="c47c0f00f69b290bba2304f56a0397adc0946acdd580ee082a87b469f40869d207381a6caf14ca660b092d84064661e785503d29089a66f95b547f79893957c208c52d14", @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="63d57b8fb11a15d4f2c2061eb493c840817ede081e99099e7b977341147a3e8e9e6980cee7000f23cc228889f63c1d7f198a951ae11e53"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a30"], 0xbc}}, 0x48004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0x40a) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r14], 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.25963972s ago: executing program 0 (id=5036): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002ce3d3e32e9a0012800e00010069703665727370616e0000001800028008001500a8bc0dff99a1600fe6dd0caada46b8acd6c4f91acd4620c2d7e7e7e59963914b6b1353ff1878fc1b95214d5c86cac1255bb8b8c2671d524e1ffc4ab823ef008d61dc6a7ed7fcf7c62e4f8d0cceee9c891e0e70834744939ade52307ff0fca18f103057cf414fc5468a8cb393bae6be5a4ac33691f95f768c294635fb43568418f3f77ea4cf25bbb66f0ed12a7ca6987649e5ce68fc451d44a2c2d2fcb1a9666da2c22d461a0aab76dc2e04"], 0x4c}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000186e6c002cbd7000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0) syz_clone(0xb21e0000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.225364071s ago: executing program 8 (id=5037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e25, @remote}, 0x10) 1.147402552s ago: executing program 8 (id=5038): r0 = socket(0x8, 0x80000, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x4c, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x8}, {}, {0x5, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xe25f}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xa, 0xfffffffffffffffe}, 0x26) sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x99102, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x1}, 0x15cd0, 0xffff, 0x0, 0x1, 0x80008, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x2) socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r9], 0xbc}}, 0x48004) 1.118651583s ago: executing program 0 (id=5039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x13, 0xa, 0x9, 0xab8, 0x40000, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @local}, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000440)=""/22, 0x16, 0x0, &(0x7f0000000580)=""/182, 0xb6}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x843d, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x4, 0x2, 0xe, 0xc, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x0, 0xa, 0x6, 0x20, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffe01}, @jmp={0x5, 0x0, 0x5, 0xa, 0x3cb8f63a6620e576, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x19, &(0x7f0000000240)=""/25, 0x40f00, 0x40, '\x00', r4, @fallback=0x22, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xc, 0x8000, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r10], &(0x7f00000006c0)=[{0x4, 0x3, 0x8, 0x9}, {0x2, 0x1, 0x5, 0x3}], 0x10, 0x9}, 0x94) 1.023366274s ago: executing program 8 (id=5040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000600)=0x9) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}]}, 0x1, 0xb7f, &(0x7f0000002080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r0, 0x0, 0xfffffffffffffffb, 0x0) fcntl$setpipe(r3, 0x407, 0x100004) socket$nl_audit(0x10, 0x3, 0x9) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x4, 0x1}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1e, 0x1b, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="18150000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002006e657464657673696d30000000000000600202807800038004000180340001800b000200282d272a212100000400030009000200627364646600000005000200000000000400030008000100000000001400018008000100ff0000000800010001000000280001800b0002002b24265c5d29000004000300090002006273646466000000040003000400030004000100c20004002975fff544edb9a8117d08d303eb671794e49ac93f22f0a8467782ecb2271627aac6102e150c52da5d789135a15fbd70604f8dea953354abd4957235039164ca036f217435653b05f13fb1de01e4a31aadfa5834f0538bf45004e91d63709d31987a9c55063bb59a5fd35ca1368fb7665838d3ebecf35d4f5a6f8ef394775767d3a3ce7a4a6d0fda386f4f48691ca90b2c73fb1c1675327877c0b6e253a1910e523289614e9a6a61c254790b54b813331ebaa2ba9676eb0fd5e536d2f3f3000050000380200001801100020073636865645f7377697463680000000004000300040003002c0001800a0002002e5c287b5b00000008000100040000001100020073636865645f73776974636800000000c00003803400018004000300080001000000000004000300090002006273646466000000040003000800020024264000060002005e0000001800018007000200292e00000400030006000200290000004000018004000300080001009f8200000d0002006e6f62617272696572000000040003000c0002002f265b216a245c0008000100ff010000080001000900000020000180080001003969bb420a000200ffffffffffff0000080001000700000010000180080001000200000004000300040001000800020076000000"], 0x1318}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 985.762134ms ago: executing program 9 (id=5041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (fail_nth: 10) 951.847835ms ago: executing program 0 (id=5042): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x5) fchdir(r3) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r5, &(0x7f0000003000)={&(0x7f0000002e80)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002f00)='.', 0x1}], 0x1, &(0x7f0000000280)=[{0x10, 0x10f, 0x1}], 0x10}, 0x20008080) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) 660.32792ms ago: executing program 9 (id=5043): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) write$char_usb(r1, &(0x7f00000002c0)='AS', 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 659.80355ms ago: executing program 1 (id=5044): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000700)={[{@minixdf}, {}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@dioread_lock}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@inlinecrypt}, {@test_dummy_encryption_v1}], [{@euid_gt}, {@obj_type={'obj_type', 0x3d, '!'}}, {@euid_eq}, {@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\v\xfdR\x88\xc3\xda\x96\xcd,\x81L\xb4\r\xde_tcU\x96#\x8d\x94\x82\xf8\xa4|4nsm\xfbO\xa2\x84\xcc\xb17\'I\x18\b\xec\xa7\x93Q\xcbP\xf0\xbf\'\a\xf2\x04Y\xec\xd8\xb3\x19\x89a]\xbdhL\x0f&\xd6;\x10f\xcf?\x94eq\xa8\x1d\x8a\x91\xc6\xafF\x05`\xb1\xa5v\xae\xdc\x80\xee\x15\x9e\x97\x12\x1d\xe5\xad\x05\t\x00\x00\x00\x00\x00\x00\x00'}}]}, 0xfa, 0x571, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbF76kvbXFEr56UECPVip3TSJLxU81KNosaD3uiTTULLplOymNLFge7AXL1IEEQviH+DdY/Ef8K8oaKFoCXrwEpnNbLpNdvO6Nan7+cBunmdmdp95dub75Pvs7LIB9KyR/K4U8VJEfJVEHGtZ1x/FypGV7Zae3JrMb0ksL3/8exJJsay5fVL8HSoq/4+In7+IOFNa325tYXGmUq2mc0V9tD57fbS2sHj26mxlOp1Or41PTJx/c2L8nbff6lpfX7v017cfPXj//Jenlr758dHxe0lciCPFutZ+7MLt1spIjBSvyUBcWLPhWBca20+Svd4BdqSviPOByMeAY9FXRD3w3/d5RCwDPSoR/9CjmnlAc27fpXnwC+PxeysToPX97195byQONuZGh5eSZ2ZG+Xx3uAvt52389Nv9e/ktuvc+BMCmbt+JiHP9/evHv6QY/3bu3Ba2WdvGNse/5W3uEtDiQZ7/vN4u/8mKLQ427tfmP0NtYncnNo//0qMuNNNRnv+92zb/Xb1oNdxX1I42cr6B5MrVapqPbf+LiNMxcCCvb3Q95/zSw47j1NP8b7CRA+btN3PBYj8e9R949jFTlXplN31u9fhOxMtt899kNf9N2hz//PW4tMU2Tqb3X+m0rjX/bd//52v5h4hXi+N/+5k50dMrWsnG1ydHG+fDaPOsWO/Puyd/6dR+5/4ffQ69XS8//ofbnv+r/R9OWq/X1rbfxvcH/047rdv8+Lc//weTTxrlwWLZzUq9PjcWMZh8uH75+NPHNuvN7fP+nz7VPv43Ov8PRcSnW+z/3RN3O2661+d/3v+pbR3/7RcefvDZd53a39rxf6NROl0s2cr4t9Ud3M1rBwAAAAAAAPtNKSKORFIqr5ZLpXJ55fMdJ+JwqZrV6meuZPPXpqLxXdnhGCg1r3QPtXweYqz4PGyzPr6mPhERxyPi675DjXp5MqtO7XXnAQAAAAAAAAAAAAAAAAAAYJ8Y6vD9/9yvfXu9d8Bz5ye/oXdtGv/d+KUnYF/y/x96l/iH3iX+oXeJf+hd4h96l/iH3iX+oXeJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqSxcv5rflpSe3JvP61I2F+ZnsxtmptDZTnp2fLE9mc9fL01k2XU3Lk9nshk+W/BHVLLs+Nh7zN0fraa0+WltYvDybzV+rX746W5lOL6cD/1bHAAAAAAAAAAAAAAAAAAAA4AVSW1icqVSr6ZyCwo4K/ftjNxRWCs3A3vUT7u24BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt/gkAAP//ys442g==") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x3, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 657.047459ms ago: executing program 5 (id=5045): bpf$PROG_LOAD(0x5, 0x0, 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="020702060700090029bd7000fddbdf2505001700332000000a004e2100000003fe8800000000000000001c0000848442170000010f00000000000000c10300000070f4b3b27978b27467b082c309c6e7"], 0x38}}, 0x800) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x8, 0x9eea, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x80, 0x17fc8, 0x3, 0x10}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 105.993288ms ago: executing program 8 (id=5046): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000030c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0xfffd, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee01}, {0x0, 0xffffffffffff52ab, 0x72, 0x0, 0x0, 0x0, 0x963}, {0x3}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in, 0x0, 0x4, 0x3}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x0, 0x4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) 64.736378ms ago: executing program 9 (id=5047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffe, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x6, 0x2, 0x4, 0xfffffffe, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1bde, 0x0, 0x1, 0x4, 0x0, 0x0, 0xffffff7d, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x40844) 57.369878ms ago: executing program 8 (id=5048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x0) 48.500899ms ago: executing program 9 (id=5049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e25, @remote}, 0x10) 20.534519ms ago: executing program 9 (id=5050): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x36, 0x1, 0x9, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7f, 0x2}, 0xfc2bfbaad827c7f0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xb}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380)="c8f0f8185560b1e0160c376715993acce4910c409033c3ac51cbb11bfde928c2241a7e7576f0c4c3b591faa24e31f3f90169876e06235fd897cab7a199bd16a220112fe3b5a3e01bfb5d3f01edbdf05e64186c0f219cb712cef827cc28d443cb578364ab", &(0x7f0000000240)=@udp6=r2, 0x2}, 0x20) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [{0x20, '\x80r\b\xdb\xc5\xb2fL\xc9\x18\xd1\xb1:_\f\x12\x83\xf7\x0fE\x1fD\x91[\xec\xdd\xf0\xdd\xf3w\xce\xd0\vv\xa2\x1a#\xd1$H\\\x15\x9aty\xe2n\xc5\xd4\xa6\xca\xa9\x10G\xff\x86\xc5\xbf8\x14\xea\xc3tj\x8c\a\xa5\xde\x11\xaf\x05\xe1\x8f\xa9\x1a\xb5\xfb\xc6d\xc9\xfe\xe6\xe5\x83\x17\xfb\xcdFLt\xfe\x1drP);\xe1\x03\x9f1\xfc0x0, 0x7ff, 0x5, [0x5, 0xdd32, 0xff21, 0x4, 0x0]}, &(0x7f00000001c0)=0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @remote}}, 0x3, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000003c0)={0xaa, 0x1, 0x2, 0x4, 0x9, 0x0, [{0x0, 0x1, 0x8001, '\x00', 0x1b09}, {0x0, 0xff, 0x6b, '\x00', 0x100}, {0x5, 0xffffffffffffff70, 0x284a800000000000, '\x00', 0x2c00}, {0x8000000000000001, 0x4, 0x7fffffff, '\x00', 0x1f8a}, {0x2, 0x4, 0x7fffffff, '\x00', 0x3000}, {0x40b, 0x5, 0x6, '\x00', 0x2000}, {0x4, 0x1000, 0x0, '\x00', 0x1800}, {0x9, 0x4, 0x200}, {0xba, 0x3, 0x8, '\x00', 0x1409}]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x100010, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}) r8 = syz_open_dev$sg(&(0x7f0000000640), 0x980, 0x92003) close(r4) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000680), 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000006c0)={r1, 0x3, 0x0, 0x1000, 0x7, 0xd1}, 0x14) timer_create(0x2, &(0x7f0000000840)={0x0, 0x27, 0x1, @thr={&(0x7f0000000700)="8b2916070c53e1e230cc6116589b56bcb3acc31d2445bc24ef1566a53d04d9c5afc3", &(0x7f0000000740)="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"}}, &(0x7f0000000880)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000f00)={'tunl0\x00', &(0x7f0000000e80)={'tunl0\x00', 0x0, 0x37, 0x40, 0x7363, 0x7, {{0xe, 0x4, 0x1, 0xf, 0x38, 0x67, 0x0, 0x6b, 0x4, 0x0, @local, @loopback, {[@noop, @noop, @ssrr={0x89, 0x1b, 0x64, [@empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0xe, 0x6, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0x40, 0x10, 0x200, 0x4}}) sendmmsg$inet(r3, &(0x7f0000001100)=[{{&(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="4acd7f2b52cea257c20f49c450e2f81ab90b5ae0409f676ec797856129d33b44aeacefb46e5c64906e005227df193ee1a5eb3f7df2e215d5ad013ae312f709ad354477332ddcc592b10ed49e1b5f54e1ea2670d85cd6939c79728fa6759df5d62f44904e976a1ea7303f2118cf0b3268553d99b237926329408e3893e05251638d1d7c52de384851118241b56034fb027ba3630d1e3b9f4fee20495f633a99ea56844a", 0xa3}, {&(0x7f00000009c0)="d95c6e244ddec0f25231d5360aae10396721513a7cf3264677c35a68fb64a93b8cea1b17014fd4ea517b", 0x2a}, {&(0x7f0000000a00)="a77674eea312c9a45c3f14e35d8f54e6cfebd437d1696f8c", 0x18}, {&(0x7f0000000a40)="806a877e8562a779b47de682335309099b7688b5caffcca4747bc5e6fae67ac07d68e1f418fc68d59ca975ff9b07f8ca61354adc9783f647acbb50aac751c33f2cd79b6a609c788c81a94c92f0678e855742bb6a9a0318bedda83cdb37074ed80b1a4d890e152113c63f56c43e6cc094f99b0b137463bb7a357993f2441023356c8fd3f966de532b0f2981ab06bd8593c020682c53f2f82557e4e1a1c080678c931181486dfd26927126c048b49398030f1b24e3e3932d071d53292f318f76bc874ba4b527c32abf64d4964d220ea6d90d2048c38df848fe1e011cdff2", 0xdd}], 0x4}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="5a32dd8118b3eefc99252506dce22446634611f1f3a1e84dcd5e3b8e22845d2241bcd18f055476ad3169a7782571b34d0c18a60661d8238a26a88d66773b53a63c0c1ea3a6712fbdf4e281b4f5a50c21dfd68e22c42a806bd42bf19d78b77c1a807130faf4bc2bca952e0e3cd30dc31387d48ea6dcd64c1dc4e5baba94b8ce97967b55e8ccb560e3c36b884e9f888f4eb8aeb3a766f4b50323e9fc1018546de35e791a3bc3add43bb7bb7e2ad3d2e6d7c374650ba7a946d50dfa05e51b84d378703ac956f87b9ad9eb24233595e7cff2ede5f94295bc4069c0a496c5b8d5a72d", 0xe0}, {&(0x7f0000000cc0)="8f3503bf2d49669514b766f219d942625de276c58aac285e905572d2ca8f671442f666e94a227f7da3fdc4a0abdb5dad81e425d22a9ce81445503b465ee04d9c953bb3d013262acd5fdb004450747391089ab464af1453bae2f51898fac4cf730f02c5825e1610c4a567c7103df8b7d69abb4ee7a3ac98f54b5852e421043d65e308941655a3a69560292933599aebf9ae7f5764a47f131490702717ccaefe5d4471dca3f1913faba0b57b328f15ff5c4a00c81e3680", 0xb6}, {&(0x7f0000000d80)="eaa7815ab0eef88f3ee9ebfcafde39a6d86918ad0f3515859b5f2660bc6108111a3b606b2f062fd0a6abc205b2b636e11d23d3ab848b8753640d9daea02b7ae77401a763ec89f00db6f978bb9e3a37880ac8f9dc9afb66aff61357ea3c73e7401a75eb85daf9aa8eb1d56eeae2900a0050d5da5f5ea1e85daff48c7bbb4940c657905da3bbf78290", 0x88}], 0x3, &(0x7f0000001000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x36}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x89, 0x8, "5dcb4f0ea6bb"}, @timestamp_prespec={0x44, 0x24, 0xbd, 0x3, 0x4, [{@local, 0x8}, {@private=0xa010101, 0x2}, {@broadcast, 0xd62}, {@local, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff9ab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010102, @loopback}}}], 0x100}}], 0x2, 0xc091) fcntl$setlease(r3, 0x400, 0x1) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='freezer.state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000001180)='rxrpc_call_reset\x00', r12, 0x0, 0xe}, 0x18) kexec_load(0x8000000000000000, 0x5, &(0x7f0000002440)=[{&(0x7f0000001240)="40ed69ac79de4223baf526bb8d6b3ad289832b0b70aeccb8f7736b7db52a10abfdfafd5c321cc9934957cfd2d6227b5cef76f86ea31bc6f3d7548a6ed479c3f011c560804db566bf9313fba718fb4bb13bad66699ade4c2aee6cfadd790a4ea3733a45ff3a952cf79ae6079587ecf3", 0x6f, 0xa, 0x5}, {&(0x7f00000012c0)="7a4badbc9467fa1bd67a218ecebf76c1a488556769e9e57b04cf9dc1f95e473554a3fd09a7b0ca73305761deeda9379f213de07f1c2550beb5a631a9ec9157b6f15e611c07", 0x45, 0xc2f}, {&(0x7f0000001340)="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", 0x1000, 0x81, 0xd}, {&(0x7f0000002340)="b125edc1e1f30cddc353b7332398cbc984bd77a238ff95d99da79eac7069dbd5a6d19e561b9c06d6cfd2ead4850b2e562ebee10ecf3d3e11446ecf50d664fb161061917c55912730e34569e15910ea293a44b22d4bc29d62bb34e4441e82", 0x5e, 0x2, 0x5}, {&(0x7f00000023c0)="bbc6cd598e00c8f92a49770a9b733cd6a3f5ce1c24ce376d9a5903e71126db95867c1d21c720b18c9ea31aa0092612ed762ef08e579372a80c0f996c0b273ee66093757eaeed59b8133f30a61eeb79386ce3d36a80d9fb91225c0af0ceef8824e2971a6b4a6f4c04b84ccd905aea858751722a03162fbe5774aaa6de", 0x7c, 0x10000, 0x7}], 0x2a0000) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0xf, &(0x7f0000002500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x118}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002580)='syzkaller\x00', 0x7fffffff, 0x94, &(0x7f00000025c0)=""/148, 0x41100, 0x1, '\x00', r10, 0x0, r12, 0x8, &(0x7f0000002680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000026c0)={0x0, 0xa, 0xfff, 0x450}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002700)=[r8], &(0x7f0000002740)=[{0x4, 0x1, 0xc, 0xa}, {0x3, 0x5, 0x3, 0x1}, {0x1, 0x2, 0x3, 0x1}, {0x2, 0x4, 0x2, 0x1}, {0x5, 0x4, 0x2, 0x8}, {0x4, 0x4, 0x6, 0x8}, {0x2, 0x3, 0x4, 0x3}, {0x5, 0x5, 0x0, 0x9}], 0x10, 0x5}, 0x94) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002880), 0x10000, 0x0) ppoll(&(0x7f00000028c0)=[{r9}, {r13, 0x9000}, {r8, 0x400}, {r4, 0x4400}, {r4, 0x48}, {r2, 0x4020}, {r14}, {r4, 0xd000}, {r4, 0x8}], 0x9, &(0x7f0000002940)={0x77359400}, &(0x7f0000002980)={[0x101]}, 0x8) 0s ago: executing program 8 (id=5052): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x13, 0xa, 0x9, 0xab8, 0x40000, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @local}, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000440)=""/22, 0x16, 0x0, &(0x7f0000000580)=""/182, 0xb6}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x843d, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x4, 0x2, 0xe, 0xc, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x0, 0xa, 0x6, 0x20, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffe01}, @jmp={0x5, 0x0, 0x5, 0xa, 0x3cb8f63a6620e576, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x19, &(0x7f0000000240)=""/25, 0x40f00, 0x40, '\x00', r4, @fallback=0x22, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xc, 0x8000, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r10], &(0x7f00000006c0)=[{0x4, 0x3, 0x8, 0x9}, {0x2, 0x1, 0x5, 0x3}], 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): 0000000002e [ 312.762820][T19930] RAX: ffffffffffffffda RBX: 00007f6ec5a75fa0 RCX: 00007f6ec584e9a9 [ 312.762833][T19930] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 312.762844][T19930] RBP: 00007f6ec58d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 312.762856][T19930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.762866][T19930] R13: 0000000000000000 R14: 00007f6ec5a75fa0 R15: 00007ffc2021ac68 [ 312.762885][T19930] [ 313.119292][T19930] memory: usage 307200kB, limit 307200kB, failcnt 8763 [ 313.126333][T19930] memory+swap: usage 307936kB, limit 9007199254740988kB, failcnt 0 [ 313.134409][T19930] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 313.141799][T19930] Memory cgroup stats for /syz7: [ 313.177971][T19930] cache 0 [ 313.186169][T19930] rss 0 [ 313.189018][T19930] shmem 0 [ 313.192732][T19930] mapped_file 0 [ 313.196350][T19930] dirty 0 [ 313.199401][T19930] writeback 4096 [ 313.203051][T19930] workingset_refault_anon 9263 [ 313.207907][T19930] workingset_refault_file 45 [ 313.212876][T19930] swap 753664 [ 313.216154][T19930] swapcached 8192 [ 313.219896][T19930] pgpgin 312688 [ 313.223433][T19930] pgpgout 312686 [ 313.227132][T19930] pgfault 299642 [ 313.230765][T19930] pgmajfault 1826 [ 313.234402][T19930] inactive_anon 8192 [ 313.238311][T19930] active_anon 0 [ 313.241880][T19930] inactive_file 0 [ 313.246312][T19930] active_file 0 [ 313.249818][T19930] unevictable 0 [ 313.253435][T19930] hierarchical_memory_limit 314572800 [ 313.258810][T19930] hierarchical_memsw_limit 9223372036854771712 [ 313.265037][T19930] total_cache 0 [ 313.268578][T19930] total_rss 0 [ 313.271870][T19930] total_shmem 0 [ 313.275310][T19930] total_mapped_file 0 [ 313.279633][T19930] total_dirty 0 [ 313.283131][T19930] total_writeback 4096 [ 313.287680][T19930] total_workingset_refault_anon 9263 [ 313.293152][T19930] total_workingset_refault_file 45 [ 313.298650][T19930] total_swap 753664 [ 313.302508][T19930] total_swapcached 8192 [ 313.306726][T19930] total_pgpgin 312688 [ 313.310809][T19930] total_pgpgout 312686 [ 313.315030][T19930] total_pgfault 299642 [ 313.319206][T19930] total_pgmajfault 1826 [ 313.323398][T19930] total_inactive_anon 8192 [ 313.327824][T19930] total_active_anon 0 [ 313.332931][T19930] total_inactive_file 0 [ 313.337208][T19930] total_active_file 0 [ 313.341571][T19930] total_unevictable 0 [ 313.345633][T19930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4596,pid=19929,uid=0 [ 313.361308][T19930] Memory cgroup out of memory: Killed process 19929 (syz.7.4596) total-vm:95676kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 313.565413][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.602837][T19970] loop1: detected capacity change from 0 to 512 [ 313.619802][T19970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.648944][T19970] EXT4-fs (loop1): 1 truncate cleaned up [ 313.658107][T19970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.729521][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.741591][T19990] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 313.751653][T19990] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 313.763010][T19990] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 313.819014][T19998] loop1: detected capacity change from 0 to 2048 [ 313.856595][T19998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 314.077148][T20022] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 314.101924][T20022] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 968 with error 28 [ 314.114599][T20022] EXT4-fs (loop1): This should not happen!! Data will be lost [ 314.114599][T20022] [ 314.124727][T20022] EXT4-fs (loop1): Total free blocks count 0 [ 314.130837][T20022] EXT4-fs (loop1): Free/Dirty block details [ 314.136916][T20022] EXT4-fs (loop1): free_blocks=2415919104 [ 314.142925][T20022] EXT4-fs (loop1): dirty_blocks=976 [ 314.148145][T20022] EXT4-fs (loop1): Block reservation details [ 314.154615][T20022] EXT4-fs (loop1): i_reserved_data_blocks=61 [ 314.172504][T20032] loop8: detected capacity change from 0 to 512 [ 314.187267][T20032] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 314.211527][T20032] EXT4-fs (loop8): 1 truncate cleaned up [ 314.217694][T19801] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 314.232138][T20032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.267781][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.413157][T20052] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 314.423141][T20052] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 314.434135][T20052] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 314.472070][T20057] FAULT_INJECTION: forcing a failure. [ 314.472070][T20057] name failslab, interval 1, probability 0, space 0, times 0 [ 314.484756][T20057] CPU: 1 UID: 0 PID: 20057 Comm: syz.1.4629 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 314.484811][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.484823][T20057] Call Trace: [ 314.484831][T20057] [ 314.484840][T20057] __dump_stack+0x1d/0x30 [ 314.484861][T20057] dump_stack_lvl+0xe8/0x140 [ 314.484881][T20057] dump_stack+0x15/0x1b [ 314.484947][T20057] should_fail_ex+0x265/0x280 [ 314.484968][T20057] should_failslab+0x8c/0xb0 [ 314.485057][T20057] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 314.485079][T20057] ? __d_alloc+0x3d/0x340 [ 314.485099][T20057] ? obj_cgroup_charge_account+0x122/0x1a0 [ 314.485148][T20057] __d_alloc+0x3d/0x340 [ 314.485216][T20057] ? should_failslab+0x8c/0xb0 [ 314.485378][T20057] d_alloc_pseudo+0x1e/0x80 [ 314.485409][T20057] alloc_file_pseudo+0x71/0x160 [ 314.485431][T20057] ? security_inode_alloc+0x69/0x100 [ 314.485461][T20057] sock_alloc_file+0x9c/0x1e0 [ 314.485503][T20057] do_accept+0x1e4/0x3a0 [ 314.485540][T20057] __sys_accept4+0xbf/0x140 [ 314.485569][T20057] __x64_sys_accept4+0x51/0x60 [ 314.485602][T20057] x64_sys_call+0x2ed3/0x2ff0 [ 314.485622][T20057] do_syscall_64+0xd2/0x200 [ 314.485652][T20057] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 314.485676][T20057] ? clear_bhb_loop+0x40/0x90 [ 314.485718][T20057] ? clear_bhb_loop+0x40/0x90 [ 314.485740][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.485761][T20057] RIP: 0033:0x7f55dcf2e9a9 [ 314.485779][T20057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.485794][T20057] RSP: 002b:00007f55db597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 314.485813][T20057] RAX: ffffffffffffffda RBX: 00007f55dd155fa0 RCX: 00007f55dcf2e9a9 [ 314.485827][T20057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 314.485840][T20057] RBP: 00007f55db597090 R08: 0000000000000000 R09: 0000000000000000 [ 314.485921][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.485931][T20057] R13: 0000000000000000 R14: 00007f55dd155fa0 R15: 00007fff5d8cb3b8 [ 314.485948][T20057] [ 314.816268][ T36] kernel write not supported for file /1039/loginuid (pid: 36 comm: kworker/1:1) [ 315.129407][T20098] blktrace: Concurrent blktraces are not allowed on sg0 [ 315.235184][T20104] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 315.338906][T20106] loop1: detected capacity change from 0 to 128 [ 315.346911][T20106] vfat: Unknown parameter 'Ç3l–®ïOŽœ†j¿VÅ'$|U *}ÉáõÓõŸž' [ 315.417968][T20108] loop8: detected capacity change from 0 to 164 [ 315.425678][T20108] ISOFS: unable to read i-node block [ 315.431317][T20108] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 315.442929][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 315.443021][ T29] audit: type=1326 audit(2000000387.567:28605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.475609][ T29] audit: type=1326 audit(2000000387.597:28606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.499878][ T29] audit: type=1326 audit(2000000387.597:28607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.524251][ T29] audit: type=1326 audit(2000000387.597:28608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.548192][ T29] audit: type=1326 audit(2000000387.597:28609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.571904][ T29] audit: type=1326 audit(2000000387.597:28610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.595962][ T29] audit: type=1326 audit(2000000387.597:28611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.620967][ T29] audit: type=1326 audit(2000000387.597:28612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.644955][ T29] audit: type=1326 audit(2000000387.597:28613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.669392][ T29] audit: type=1326 audit(2000000387.597:28614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.8.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2782f6e9a9 code=0x7ffc0000 [ 315.799461][T11033] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 315.810587][T11033] CPU: 0 UID: 0 PID: 11033 Comm: syz-executor Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 315.810625][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.810637][T11033] Call Trace: [ 315.810645][T11033] [ 315.810657][T11033] __dump_stack+0x1d/0x30 [ 315.810717][T11033] dump_stack_lvl+0xe8/0x140 [ 315.810754][T11033] dump_stack+0x15/0x1b [ 315.810805][T11033] dump_header+0x81/0x220 [ 315.810851][T11033] oom_kill_process+0x334/0x3f0 [ 315.810962][T11033] out_of_memory+0x979/0xb80 [ 315.811016][T11033] try_charge_memcg+0x5e6/0x9e0 [ 315.811057][T11033] charge_memcg+0x51/0xc0 [ 315.811086][T11033] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 315.811188][T11033] __read_swap_cache_async+0x1df/0x350 [ 315.811214][T11033] swap_cluster_readahead+0x376/0x3e0 [ 315.811318][T11033] swapin_readahead+0xde/0x6f0 [ 315.811348][T11033] ? __filemap_get_folio+0x4f7/0x6b0 [ 315.811445][T11033] ? bpf_trace_run4+0x105/0x1d0 [ 315.811466][T11033] ? swap_cache_get_folio+0x77/0x200 [ 315.811531][T11033] do_swap_page+0x301/0x2430 [ 315.811552][T11033] ? finish_task_switch+0xad/0x2b0 [ 315.811641][T11033] ? __pfx_default_wake_function+0x10/0x10 [ 315.811667][T11033] handle_mm_fault+0x9a5/0x2be0 [ 315.811690][T11033] ? mas_walk+0xf2/0x120 [ 315.811715][T11033] do_user_addr_fault+0x636/0x1090 [ 315.811740][T11033] ? fpregs_restore_userregs+0xe2/0x1d0 [ 315.811780][T11033] ? switch_fpu_return+0xe/0x20 [ 315.811801][T11033] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 315.811822][T11033] exc_page_fault+0x62/0xa0 [ 315.811916][T11033] asm_exc_page_fault+0x26/0x30 [ 315.812011][T11033] RIP: 0033:0x7f683c871225 [ 315.812025][T11033] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 315.812040][T11033] RSP: 002b:00007ffdbe533f18 EFLAGS: 00010246 [ 315.812055][T11033] RAX: 0000000000000000 RBX: 000000000000041b RCX: 00007f683c871223 [ 315.812067][T11033] RDX: 00007ffdbe533f30 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.812079][T11033] RBP: 00007ffdbe533f9c R08: 00000000279ea787 R09: 0000000000000000 [ 315.812091][T11033] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 315.812131][T11033] R13: 00000000000927c0 R14: 000000000004ce7a R15: 00007ffdbe533ff0 [ 315.812150][T11033] [ 316.044939][T11033] memory: usage 307200kB, limit 307200kB, failcnt 4129 [ 316.052369][T11033] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 316.060561][T11033] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 316.067982][T11033] Memory cgroup stats for /syz9: [ 316.117872][T20124] lo speed is unknown, defaulting to 1000 [ 316.122977][T11033] cache 0 [ 316.122987][T11033] rss 0 [ 316.122994][T11033] shmem 0 [ 316.123001][T11033] mapped_file 0 [ 316.141331][T11033] dirty 0 [ 316.144336][T11033] writeback 0 [ 316.147859][T11033] workingset_refault_anon 9085 [ 316.152764][T11033] workingset_refault_file 534 [ 316.157539][T11033] swap 299008 [ 316.161092][T11033] swapcached 0 [ 316.165166][T11033] pgpgin 236771 [ 316.169021][T11033] pgpgout 236771 [ 316.172761][T11033] pgfault 264052 [ 316.176569][T11033] pgmajfault 1433 [ 316.180397][T11033] inactive_anon 0 [ 316.184098][T11033] active_anon 0 [ 316.187565][T11033] inactive_file 0 [ 316.191218][T11033] active_file 0 [ 316.194740][T11033] unevictable 0 [ 316.198205][T11033] hierarchical_memory_limit 314572800 [ 316.204127][T11033] hierarchical_memsw_limit 9223372036854771712 [ 316.210451][T11033] total_cache 0 [ 316.214167][T11033] total_rss 0 [ 316.217456][T11033] total_shmem 0 [ 316.220926][T11033] total_mapped_file 0 [ 316.224953][T11033] total_dirty 0 [ 316.228497][T11033] total_writeback 0 [ 316.232564][T11033] total_workingset_refault_anon 9085 [ 316.237866][T11033] total_workingset_refault_file 534 [ 316.243133][T11033] total_swap 299008 [ 316.246990][T11033] total_swapcached 0 [ 316.250965][T11033] total_pgpgin 236771 [ 316.255065][T11033] total_pgpgout 236771 [ 316.259329][T11033] total_pgfault 264052 [ 316.263557][T11033] total_pgmajfault 1433 [ 316.267815][T11033] total_inactive_anon 0 [ 316.272153][T11033] total_active_anon 0 [ 316.276396][T11033] total_inactive_file 0 [ 316.280740][T11033] total_active_file 0 [ 316.284736][T11033] total_unevictable 0 [ 316.288776][T11033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4636,pid=20087,uid=0 [ 316.303720][T11033] Memory cgroup out of memory: Killed process 20087 (syz.9.4636) total-vm:93628kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 316.848388][T20174] SELinux: syz.9.4652 (20174) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 316.905024][T20178] wireguard0: entered promiscuous mode [ 316.910897][T20178] wireguard0: entered allmulticast mode [ 317.054141][T20185] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 317.064479][T20185] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 317.075672][T20185] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 317.137493][T20189] loop1: detected capacity change from 0 to 2048 [ 317.205082][T20209] loop1: detected capacity change from 0 to 512 [ 317.212102][T20209] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.220071][T20209] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.232281][T20209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 317.240397][T20209] System zones: 1-12 [ 317.246224][T20209] EXT4-fs (loop1): 1 truncate cleaned up [ 317.252885][T20209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.293278][T20209] FAULT_INJECTION: forcing a failure. [ 317.293278][T20209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.306903][T20209] CPU: 0 UID: 0 PID: 20209 Comm: syz.1.4661 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 317.306928][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.306940][T20209] Call Trace: [ 317.306949][T20209] [ 317.306958][T20209] __dump_stack+0x1d/0x30 [ 317.307008][T20209] dump_stack_lvl+0xe8/0x140 [ 317.307056][T20209] dump_stack+0x15/0x1b [ 317.307079][T20209] should_fail_ex+0x265/0x280 [ 317.307102][T20209] should_fail+0xb/0x20 [ 317.307164][T20209] should_fail_usercopy+0x1a/0x20 [ 317.307262][T20209] _copy_from_user+0x1c/0xb0 [ 317.307331][T20209] copy_from_sockptr+0x5e/0xa0 [ 317.307357][T20209] packet_setsockopt+0x7c1/0xfd0 [ 317.307379][T20209] ? __pfx_packet_setsockopt+0x10/0x10 [ 317.307471][T20209] __sys_setsockopt+0x181/0x200 [ 317.307494][T20209] __x64_sys_setsockopt+0x64/0x80 [ 317.307516][T20209] x64_sys_call+0x20ec/0x2ff0 [ 317.307602][T20209] do_syscall_64+0xd2/0x200 [ 317.307626][T20209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.307653][T20209] ? clear_bhb_loop+0x40/0x90 [ 317.307674][T20209] ? clear_bhb_loop+0x40/0x90 [ 317.307727][T20209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.307777][T20209] RIP: 0033:0x7f55dcf2e9a9 [ 317.307794][T20209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.307812][T20209] RSP: 002b:00007f55db597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.307833][T20209] RAX: ffffffffffffffda RBX: 00007f55dd155fa0 RCX: 00007f55dcf2e9a9 [ 317.307905][T20209] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 317.307915][T20209] RBP: 00007f55db597090 R08: 000000000000001c R09: 0000000000000000 [ 317.307926][T20209] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 317.307939][T20209] R13: 0000000000000000 R14: 00007f55dd155fa0 R15: 00007fff5d8cb3b8 [ 317.308017][T20209] [ 317.535966][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.827715][T20248] loop1: detected capacity change from 0 to 2048 [ 317.983494][T20248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.141111][T20263] netlink: 'syz.0.4672': attribute type 4 has an invalid length. [ 318.149621][T20259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 318.210738][T20259] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 366 with error 28 [ 318.223974][T20259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 318.223974][T20259] [ 318.233944][T20259] EXT4-fs (loop1): Total free blocks count 0 [ 318.240251][T20259] EXT4-fs (loop1): Free/Dirty block details [ 318.246252][T20259] EXT4-fs (loop1): free_blocks=2415919104 [ 318.252103][T20259] EXT4-fs (loop1): dirty_blocks=368 [ 318.257405][T20259] EXT4-fs (loop1): Block reservation details [ 318.263683][T20259] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 318.347315][T19773] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 318.422678][T20279] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4677'. [ 318.484615][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4678'. [ 318.494992][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 318.512942][T20283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.527279][T20283] 9pnet_fd: Insufficient options for proto=fd [ 318.676472][T20335] loop8: detected capacity change from 0 to 2048 [ 318.702615][T20335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.888533][T20345] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 318.913511][T20345] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1534 with error 28 [ 318.926227][T20345] EXT4-fs (loop8): This should not happen!! Data will be lost [ 318.926227][T20345] [ 318.936208][T20345] EXT4-fs (loop8): Total free blocks count 0 [ 318.942330][T20345] EXT4-fs (loop8): Free/Dirty block details [ 318.948322][T20345] EXT4-fs (loop8): free_blocks=2415919104 [ 318.954220][T20345] EXT4-fs (loop8): dirty_blocks=1536 [ 318.959690][T20345] EXT4-fs (loop8): Block reservation details [ 318.965701][T20345] EXT4-fs (loop8): i_reserved_data_blocks=96 [ 319.187454][T19773] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 319.736641][T20394] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 319.806830][T20394] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 319.830531][T20394] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 319.848100][T20398] loop1: detected capacity change from 0 to 256 [ 319.848528][T20400] loop8: detected capacity change from 0 to 512 [ 319.862272][T20398] vfat: Unknown parameter 'nNnumtail' [ 319.868297][T20400] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 319.895990][T20400] EXT4-fs (loop8): 1 truncate cleaned up [ 319.903771][T20400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.106263][T20416] lo speed is unknown, defaulting to 1000 [ 320.628477][T19781] kworker/u8:30 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 320.642511][T19781] CPU: 1 UID: 0 PID: 19781 Comm: kworker/u8:30 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 320.642539][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.642553][T19781] Workqueue: loop8 loop_rootcg_workfn [ 320.642604][T19781] Call Trace: [ 320.642611][T19781] [ 320.642619][T19781] __dump_stack+0x1d/0x30 [ 320.642638][T19781] dump_stack_lvl+0xe8/0x140 [ 320.642658][T19781] dump_stack+0x15/0x1b [ 320.642673][T19781] dump_header+0x81/0x220 [ 320.642766][T19781] oom_kill_process+0x334/0x3f0 [ 320.642790][T19781] out_of_memory+0x979/0xb80 [ 320.642815][T19781] try_charge_memcg+0x5e6/0x9e0 [ 320.642898][T19781] charge_memcg+0x51/0xc0 [ 320.642924][T19781] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 320.642957][T19781] __read_swap_cache_async+0x1df/0x350 [ 320.643058][T19781] swap_cluster_readahead+0x277/0x3e0 [ 320.643159][T19781] shmem_swapin_folio+0x821/0xf50 [ 320.643187][T19781] ? filemap_get_entry+0x34b/0x390 [ 320.643219][T19781] shmem_get_folio_gfp+0x26c/0xd60 [ 320.643265][T19781] ? bpf_bprintf_prepare+0xc70/0xd90 [ 320.643299][T19781] shmem_write_begin+0xa8/0x190 [ 320.643330][T19781] generic_perform_write+0x181/0x490 [ 320.643368][T19781] shmem_file_write_iter+0xc5/0xf0 [ 320.643386][T19781] lo_rw_aio+0x6a0/0x760 [ 320.643402][T19781] ? __cond_resched+0x4e/0x90 [ 320.643436][T19781] loop_process_work+0x52d/0xa60 [ 320.643460][T19781] ? bpf_trace_run4+0x105/0x1d0 [ 320.643527][T19781] ? __rcu_read_unlock+0x4f/0x70 [ 320.643549][T19781] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 320.643580][T19781] ? __rcu_read_unlock+0x4f/0x70 [ 320.643601][T19781] ? perf_cgroup_switch+0x10c/0x480 [ 320.643685][T19781] ? bpf_trace_run4+0x134/0x1d0 [ 320.643709][T19781] loop_rootcg_workfn+0x22/0x30 [ 320.643730][T19781] process_scheduled_works+0x4cb/0x9d0 [ 320.643787][T19781] worker_thread+0x582/0x770 [ 320.643814][T19781] kthread+0x489/0x510 [ 320.643833][T19781] ? finish_task_switch+0xad/0x2b0 [ 320.643862][T19781] ? __pfx_worker_thread+0x10/0x10 [ 320.643885][T19781] ? __pfx_kthread+0x10/0x10 [ 320.643901][T19781] ret_from_fork+0xdd/0x150 [ 320.643920][T19781] ? __pfx_kthread+0x10/0x10 [ 320.643979][T19781] ret_from_fork_asm+0x1a/0x30 [ 320.644028][T19781] [ 320.644036][T19781] memory: usage 307200kB, limit 307200kB, failcnt 1001 [ 320.876244][T19781] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 320.884430][T19781] kmem: usage 306936kB, limit 9007199254740988kB, failcnt 0 [ 320.891898][T19781] Memory cgroup stats for /syz8: [ 320.892176][T19781] cache 245760 [ 320.900882][T19781] rss 8192 [ 320.904043][T19781] shmem 0 [ 320.907039][T19781] mapped_file 0 [ 320.910819][T19781] dirty 0 [ 320.913884][T19781] writeback 233472 [ 320.917683][T19781] workingset_refault_anon 10715 [ 320.922600][T19781] workingset_refault_file 232 [ 320.927260][T19781] swap 655360 [ 320.930546][T19781] swapcached 12288 [ 320.934284][T19781] pgpgin 246426 [ 320.937936][T19781] pgpgout 246360 [ 320.941488][T19781] pgfault 275316 [ 320.945369][T19781] pgmajfault 1554 [ 320.949375][T19781] inactive_anon 12288 [ 320.953550][T19781] active_anon 0 [ 320.957136][T19781] inactive_file 258048 [ 320.961482][T19781] active_file 0 [ 320.965155][T19781] unevictable 0 [ 320.968676][T19781] hierarchical_memory_limit 314572800 [ 320.974167][T19781] hierarchical_memsw_limit 9223372036854771712 [ 320.981018][T19781] total_cache 245760 [ 320.984983][T19781] total_rss 8192 [ 320.988603][T19781] total_shmem 0 [ 320.992151][T19781] total_mapped_file 0 [ 320.996308][T19781] total_dirty 0 [ 320.999762][T19781] total_writeback 233472 [ 321.004128][T19781] total_workingset_refault_anon 10715 [ 321.009493][T19781] total_workingset_refault_file 232 [ 321.014910][T19781] total_swap 655360 [ 321.018795][T19781] total_swapcached 12288 [ 321.023114][T19781] total_pgpgin 246426 [ 321.027212][T19781] total_pgpgout 246360 [ 321.031349][T19781] total_pgfault 275316 [ 321.035423][T19781] total_pgmajfault 1554 [ 321.039849][T19781] total_inactive_anon 12288 [ 321.044454][T19781] total_active_anon 0 [ 321.048428][T19781] total_inactive_file 258048 [ 321.053337][T19781] total_active_file 0 [ 321.057480][T19781] total_unevictable 0 [ 321.062072][T19781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4700,pid=20399,uid=0 [ 321.076883][T19781] Memory cgroup out of memory: Killed process 20399 (syz.8.4700) total-vm:93760kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 321.298163][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 321.298191][ T29] audit: type=1326 audit(2000000393.417:29234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.328558][ T29] audit: type=1326 audit(2000000393.417:29235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.352934][ T29] audit: type=1326 audit(2000000393.477:29236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.377387][ T29] audit: type=1326 audit(2000000393.477:29237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.401647][ T29] audit: type=1326 audit(2000000393.477:29238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.425958][ T29] audit: type=1326 audit(2000000393.477:29239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.450024][ T29] audit: type=1326 audit(2000000393.477:29240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.474136][ T29] audit: type=1326 audit(2000000393.477:29241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.498094][ T29] audit: type=1326 audit(2000000393.477:29242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20468 comm="syz.0.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c84de9a9 code=0x7ffc0000 [ 321.553544][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.750573][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4714'. [ 321.786890][T20506] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 321.797281][T20506] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 321.808407][T20506] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 321.845842][ T29] audit: type=1326 audit(2000000393.967:29243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.7.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 322.135057][T20520] loop1: detected capacity change from 0 to 8192 [ 322.521708][T20540] FAULT_INJECTION: forcing a failure. [ 322.521708][T20540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.534988][T20540] CPU: 0 UID: 0 PID: 20540 Comm: syz.9.4728 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 322.535018][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.535028][T20540] Call Trace: [ 322.535035][T20540] [ 322.535042][T20540] __dump_stack+0x1d/0x30 [ 322.535062][T20540] dump_stack_lvl+0xe8/0x140 [ 322.535083][T20540] dump_stack+0x15/0x1b [ 322.535101][T20540] should_fail_ex+0x265/0x280 [ 322.535175][T20540] should_fail+0xb/0x20 [ 322.535275][T20540] should_fail_usercopy+0x1a/0x20 [ 322.535301][T20540] _copy_to_user+0x20/0xa0 [ 322.535409][T20540] simple_read_from_buffer+0xb5/0x130 [ 322.535478][T20540] proc_fail_nth_read+0x100/0x140 [ 322.535497][T20540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.535515][T20540] vfs_read+0x19d/0x6f0 [ 322.535565][T20540] ? __rcu_read_unlock+0x4f/0x70 [ 322.535587][T20540] ? __rcu_read_unlock+0x4f/0x70 [ 322.535609][T20540] ? __fget_files+0x184/0x1c0 [ 322.535789][T20540] ksys_read+0xda/0x1a0 [ 322.535868][T20540] __x64_sys_read+0x40/0x50 [ 322.535897][T20540] x64_sys_call+0x27bc/0x2ff0 [ 322.535934][T20540] do_syscall_64+0xd2/0x200 [ 322.535953][T20540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.536035][T20540] ? clear_bhb_loop+0x40/0x90 [ 322.536055][T20540] ? clear_bhb_loop+0x40/0x90 [ 322.536150][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.536195][T20540] RIP: 0033:0x7f683c83d3bc [ 322.536213][T20540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.536231][T20540] RSP: 002b:00007f683aea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.536251][T20540] RAX: ffffffffffffffda RBX: 00007f683ca65fa0 RCX: 00007f683c83d3bc [ 322.536302][T20540] RDX: 000000000000000f RSI: 00007f683aea70a0 RDI: 0000000000000005 [ 322.536313][T20540] RBP: 00007f683aea7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.536346][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.536359][T20540] R13: 0000000000000000 R14: 00007f683ca65fa0 R15: 00007ffdbe533bd8 [ 322.536379][T20540] [ 323.098910][T20573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.150215][T20575] tipc: Started in network mode [ 323.155287][T20575] tipc: Node identity 5ec6707aae98, cluster identity 4711 [ 323.162610][T20575] tipc: Enabled bearer , priority 0 [ 323.302370][T20582] syzkaller0: entered promiscuous mode [ 323.307934][T20582] syzkaller0: entered allmulticast mode [ 323.328074][T20575] tipc: Resetting bearer [ 323.345829][T20575] tipc: Disabling bearer [ 323.603341][T20588] netlink: 280 bytes leftover after parsing attributes in process `syz.7.4741'. [ 323.746802][T20597] loop8: detected capacity change from 0 to 512 [ 323.754829][T20597] EXT4-fs: Ignoring removed oldalloc option [ 323.763087][T20597] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4745: Parent and EA inode have the same ino 15 [ 323.776474][T20597] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4745: Parent and EA inode have the same ino 15 [ 323.791910][T20597] EXT4-fs (loop8): 1 orphan inode deleted [ 323.798080][T20597] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.812738][T20597] 9pnet_fd: Insufficient options for proto=fd [ 323.829091][T20605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4747'. [ 323.839608][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.968833][T20618] loop1: detected capacity change from 0 to 4096 [ 324.056100][T20618] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 324.079885][T20623] syzkaller0: entered promiscuous mode [ 324.085541][T20623] syzkaller0: entered allmulticast mode [ 324.092511][T20618] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.4751: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 324.145710][T20618] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.4751: Bad quota inode: 3, type: 0 [ 324.159611][T20618] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 324.208202][T20618] EXT4-fs (loop1): mount failed [ 324.736104][T20606] syz.0.4749 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 324.747770][T20606] CPU: 1 UID: 0 PID: 20606 Comm: syz.0.4749 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 324.747869][T20606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.747879][T20606] Call Trace: [ 324.747886][T20606] [ 324.747893][T20606] __dump_stack+0x1d/0x30 [ 324.747911][T20606] dump_stack_lvl+0xe8/0x140 [ 324.747928][T20606] dump_stack+0x15/0x1b [ 324.747949][T20606] dump_header+0x81/0x220 [ 324.748009][T20606] oom_kill_process+0x334/0x3f0 [ 324.748056][T20606] out_of_memory+0x979/0xb80 [ 324.748080][T20606] try_charge_memcg+0x5e6/0x9e0 [ 324.748113][T20606] charge_memcg+0x51/0xc0 [ 324.748202][T20606] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 324.748278][T20606] __read_swap_cache_async+0x1df/0x350 [ 324.748383][T20606] swap_cluster_readahead+0x277/0x3e0 [ 324.748410][T20606] swapin_readahead+0xde/0x6f0 [ 324.748510][T20606] ? __filemap_get_folio+0x4f7/0x6b0 [ 324.748551][T20606] ? swap_cache_get_folio+0x77/0x200 [ 324.748598][T20606] do_swap_page+0x301/0x2430 [ 324.748669][T20606] ? css_rstat_updated+0xcd/0x5b0 [ 324.748695][T20606] ? __pfx_default_wake_function+0x10/0x10 [ 324.748752][T20606] handle_mm_fault+0x9a5/0x2be0 [ 324.748770][T20606] ? mas_walk+0xf2/0x120 [ 324.748791][T20606] do_user_addr_fault+0x636/0x1090 [ 324.748852][T20606] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 324.748877][T20606] exc_page_fault+0x62/0xa0 [ 324.748893][T20606] asm_exc_page_fault+0x26/0x30 [ 324.748910][T20606] RIP: 0033:0x7fc0c84de906 [ 324.748923][T20606] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 324.748987][T20606] RSP: 002b:00007ffcf98ec800 EFLAGS: 00010246 [ 324.749001][T20606] RAX: 000000000004f42d RBX: 00007fc0c8705fa0 RCX: 000000000004f1a0 [ 324.749012][T20606] RDX: 000000000000028d RSI: 0000000000000000 RDI: 00000000000003e8 [ 324.749023][T20606] RBP: 00007fc0c8707ba0 R08: 0000000026ec1ce8 R09: 7fffffffffffffff [ 324.749034][T20606] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000004f42f [ 324.749108][T20606] R13: 00007fc0c8706160 R14: ffffffffffffffff R15: 00007ffcf98ec940 [ 324.749124][T20606] [ 324.749130][T20606] memory: usage 307200kB, limit 307200kB, failcnt 16594 [ 324.978375][T20606] memory+swap: usage 324488kB, limit 9007199254740988kB, failcnt 0 [ 324.986408][T20606] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 324.993715][T20606] Memory cgroup stats for /syz0: [ 324.994094][T20606] cache 8192 [ 325.002613][T20606] rss 0 [ 325.005368][T20606] shmem 0 [ 325.008297][T20606] mapped_file 0 [ 325.011776][T20606] dirty 0 [ 325.014907][T20606] writeback 0 [ 325.018187][T20606] workingset_refault_anon 11166 [ 325.023065][T20606] workingset_refault_file 175 [ 325.027850][T20606] swap 17702912 [ 325.031376][T20606] swapcached 4096 [ 325.035094][T20606] pgpgin 365037 [ 325.038722][T20606] pgpgout 365034 [ 325.042340][T20606] pgfault 333796 [ 325.046022][T20606] pgmajfault 1900 [ 325.049839][T20606] inactive_anon 4096 [ 325.054123][T20606] active_anon 0 [ 325.057655][T20606] inactive_file 4096 [ 325.061657][T20606] active_file 4096 [ 325.065465][T20606] unevictable 0 [ 325.068959][T20606] hierarchical_memory_limit 314572800 [ 325.074434][T20606] hierarchical_memsw_limit 9223372036854771712 [ 325.080790][T20606] total_cache 8192 [ 325.084505][T20606] total_rss 0 [ 325.087931][T20606] total_shmem 0 [ 325.091583][T20606] total_mapped_file 0 [ 325.095711][T20606] total_dirty 0 [ 325.099354][T20606] total_writeback 0 [ 325.103294][T20606] total_workingset_refault_anon 11166 [ 325.109099][T20606] total_workingset_refault_file 175 [ 325.114762][T20606] total_swap 17702912 [ 325.118936][T20606] total_swapcached 4096 [ 325.123255][T20606] total_pgpgin 365037 [ 325.127259][T20606] total_pgpgout 365034 [ 325.131455][T20606] total_pgfault 333796 [ 325.135787][T20606] total_pgmajfault 1900 [ 325.140017][T20606] total_inactive_anon 4096 [ 325.144506][T20606] total_active_anon 0 [ 325.148836][T20606] total_inactive_file 4096 [ 325.153562][T20606] total_active_file 4096 [ 325.157969][T20606] total_unevictable 0 [ 325.162148][T20606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4749,pid=20606,uid=0 [ 325.177816][T20606] Memory cgroup out of memory: Killed process 20606 (syz.0.4749) total-vm:93892kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 325.244531][T20657] loop1: detected capacity change from 0 to 2048 [ 325.256587][T20659] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 325.274946][T20659] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 325.291237][T20659] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 325.301936][T20657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 325.472628][T20671] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 325.487909][T20671] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1216 with error 28 [ 325.500772][T20671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.500772][T20671] [ 325.510585][T20671] EXT4-fs (loop1): Total free blocks count 0 [ 325.516652][T20671] EXT4-fs (loop1): Free/Dirty block details [ 325.522700][T20671] EXT4-fs (loop1): free_blocks=2415919104 [ 325.528604][T20671] EXT4-fs (loop1): dirty_blocks=1232 [ 325.534012][T20671] EXT4-fs (loop1): Block reservation details [ 325.540090][T20671] EXT4-fs (loop1): i_reserved_data_blocks=77 [ 325.547006][T20668] netlink: 'syz.8.4762': attribute type 13 has an invalid length. [ 325.600813][T20668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.620313][T20668] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.647863][T20668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.693045][T19773] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 325.760432][T20694] loop8: detected capacity change from 0 to 2048 [ 325.782163][T20694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 325.933504][T20699] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 325.949277][T20699] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 310 with max blocks 1440 with error 28 [ 325.962490][T20699] EXT4-fs (loop8): This should not happen!! Data will be lost [ 325.962490][T20699] [ 325.972487][T20699] EXT4-fs (loop8): Total free blocks count 0 [ 325.978745][T20699] EXT4-fs (loop8): Free/Dirty block details [ 325.984843][T20699] EXT4-fs (loop8): free_blocks=2415919104 [ 325.990694][T20699] EXT4-fs (loop8): dirty_blocks=1760 [ 325.996029][T20699] EXT4-fs (loop8): Block reservation details [ 326.002112][T20699] EXT4-fs (loop8): i_reserved_data_blocks=110 [ 326.042478][T19768] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 326.101459][T20707] FAULT_INJECTION: forcing a failure. [ 326.101459][T20707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.114650][T20707] CPU: 1 UID: 0 PID: 20707 Comm: syz.8.4767 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 326.114719][T20707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.114729][T20707] Call Trace: [ 326.114735][T20707] [ 326.114742][T20707] __dump_stack+0x1d/0x30 [ 326.114763][T20707] dump_stack_lvl+0xe8/0x140 [ 326.114783][T20707] dump_stack+0x15/0x1b [ 326.114800][T20707] should_fail_ex+0x265/0x280 [ 326.114832][T20707] should_fail+0xb/0x20 [ 326.114873][T20707] should_fail_usercopy+0x1a/0x20 [ 326.114894][T20707] _copy_from_user+0x1c/0xb0 [ 326.114945][T20707] ___sys_sendmsg+0xc1/0x1d0 [ 326.114975][T20707] __sys_sendmmsg+0x178/0x300 [ 326.115008][T20707] __x64_sys_sendmmsg+0x57/0x70 [ 326.115031][T20707] x64_sys_call+0x1c4a/0x2ff0 [ 326.115117][T20707] do_syscall_64+0xd2/0x200 [ 326.115135][T20707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.115157][T20707] ? clear_bhb_loop+0x40/0x90 [ 326.115257][T20707] ? clear_bhb_loop+0x40/0x90 [ 326.115279][T20707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.115314][T20707] RIP: 0033:0x7f2782f6e9a9 [ 326.115330][T20707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.115346][T20707] RSP: 002b:00007f27815cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.115363][T20707] RAX: ffffffffffffffda RBX: 00007f2783195fa0 RCX: 00007f2782f6e9a9 [ 326.115386][T20707] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 326.115397][T20707] RBP: 00007f27815cf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.115407][T20707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.115417][T20707] R13: 0000000000000000 R14: 00007f2783195fa0 R15: 00007ffe781fdb98 [ 326.115437][T20707] [ 326.320850][T10778] IPVS: starting estimator thread 0... [ 326.340361][T20698] loop1: detected capacity change from 0 to 512 [ 326.359193][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 326.359207][ T29] audit: type=1400 audit(2000000398.477:29862): avc: denied { mounton } for pid=20686 comm="syz.1.4764" path="/file2" dev="ramfs" ino=51665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 326.359457][T20698] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.421204][T20711] loop8: detected capacity change from 0 to 4096 [ 326.422059][T20698] EXT4-fs (loop1): 1 truncate cleaned up [ 326.434573][T20698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.450744][T20708] IPVS: using max 2640 ests per chain, 132000 per kthread [ 326.465392][T20711] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 326.474804][T20698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.500958][T20711] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.4768: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 326.520809][T20711] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.4768: Bad quota inode: 3, type: 0 [ 326.533675][T20711] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 326.549794][T20711] EXT4-fs (loop8): mount failed [ 326.623586][T20729] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 326.634941][T20729] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 326.652005][T20729] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 326.705314][T20740] loop1: detected capacity change from 0 to 2048 [ 326.725377][T20740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 326.917435][T20744] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 326.933026][T20744] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 326.945845][T20744] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.945845][T20744] [ 326.955596][T20744] EXT4-fs (loop1): Total free blocks count 0 [ 326.961895][T20744] EXT4-fs (loop1): Free/Dirty block details [ 326.968113][T20744] EXT4-fs (loop1): free_blocks=2415919104 [ 326.974071][T20744] EXT4-fs (loop1): dirty_blocks=3248 [ 326.979485][T20744] EXT4-fs (loop1): Block reservation details [ 326.985622][T20744] EXT4-fs (loop1): i_reserved_data_blocks=203 [ 327.059636][ T29] audit: type=1400 audit(2000000399.177:29863): avc: denied { bind } for pid=20748 comm="syz.9.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.224768][T20730] syz.7.4770 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 327.236748][T20730] CPU: 1 UID: 0 PID: 20730 Comm: syz.7.4770 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 327.236774][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.236784][T20730] Call Trace: [ 327.236791][T20730] [ 327.236798][T20730] __dump_stack+0x1d/0x30 [ 327.236862][T20730] dump_stack_lvl+0xe8/0x140 [ 327.236882][T20730] dump_stack+0x15/0x1b [ 327.236959][T20730] dump_header+0x81/0x220 [ 327.237056][T20730] oom_kill_process+0x334/0x3f0 [ 327.237080][T20730] out_of_memory+0x979/0xb80 [ 327.237106][T20730] try_charge_memcg+0x5e6/0x9e0 [ 327.237217][T20730] charge_memcg+0x51/0xc0 [ 327.237285][T20730] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 327.237322][T20730] __read_swap_cache_async+0x1df/0x350 [ 327.237348][T20730] swap_cluster_readahead+0x277/0x3e0 [ 327.237376][T20730] swapin_readahead+0xde/0x6f0 [ 327.237482][T20730] ? __filemap_get_folio+0x4f7/0x6b0 [ 327.237513][T20730] ? swap_cache_get_folio+0x77/0x200 [ 327.237536][T20730] do_swap_page+0x301/0x2430 [ 327.237553][T20730] ? css_rstat_updated+0xcd/0x5b0 [ 327.237620][T20730] ? __pfx_default_wake_function+0x10/0x10 [ 327.237643][T20730] handle_mm_fault+0x9a5/0x2be0 [ 327.237673][T20730] ? mas_walk+0xf2/0x120 [ 327.237713][T20730] do_user_addr_fault+0x636/0x1090 [ 327.237741][T20730] exc_page_fault+0x62/0xa0 [ 327.237757][T20730] asm_exc_page_fault+0x26/0x30 [ 327.237776][T20730] RIP: 0033:0x7f6ec58767d0 [ 327.237791][T20730] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 327.237828][T20730] RSP: 002b:00007ffc2021ad58 EFLAGS: 00010246 [ 327.237844][T20730] RAX: 0000000000000000 RBX: 00007f6ec5a75fa0 RCX: 00007f6ec5881265 [ 327.237902][T20730] RDX: 00007ffc2021ada0 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.237916][T20730] RBP: 00007f6ec5a77ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 327.237929][T20730] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004feff [ 327.237941][T20730] R13: 00007ffc2021aec0 R14: ffffffffffffffff R15: 00007ffc2021aee0 [ 327.237957][T20730] [ 327.238014][T20730] memory: usage 307200kB, limit 307200kB, failcnt 9018 [ 327.356801][ T3374] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 327.357263][T20730] memory+swap: usage 307940kB, limit 9007199254740988kB, failcnt 0 [ 327.357276][T20730] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 327.357286][T20730] Memory cgroup stats for /syz7: [ 327.357467][T20730] cache 0 [ 327.362614][ T3374] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.366867][T20730] rss 0 [ 327.366877][T20730] shmem 0 [ 327.366883][T20730] mapped_file 0 [ 327.366889][T20730] dirty 0 [ 327.366896][T20730] writeback 4096 [ 327.378705][T20754] loop8: detected capacity change from 0 to 1024 [ 327.380642][T20730] workingset_refault_anon 11015 [ 327.402379][T19773] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 327.407070][T20730] workingset_refault_file 45 [ 327.407081][T20730] swap 757760 [ 327.407088][T20730] swapcached 4096 [ 327.407095][T20730] pgpgin 339557 [ 327.468234][T20754] loop8: detected capacity change from 0 to 2048 [ 327.473123][T20730] pgpgout 339556 [ 327.473133][T20730] pgfault 328815 [ 327.502812][T20760] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.504224][T20730] pgmajfault 2139 [ 327.504233][T20730] inactive_anon 4096 [ 327.524222][ T29] audit: type=1400 audit(2000000399.477:29864): avc: denied { read write } for pid=20753 comm="syz.8.4777" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 327.525663][T20730] active_anon 0 [ 327.525672][T20730] inactive_file 0 [ 327.525679][T20730] active_file 0 [ 327.525709][T20730] unevictable 0 [ 327.538030][ T29] audit: type=1400 audit(2000000399.477:29865): avc: denied { open } for pid=20753 comm="syz.8.4777" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 327.542818][T20730] hierarchical_memory_limit 314572800 [ 327.546179][ T29] audit: type=1400 audit(2000000399.647:29866): avc: denied { bind } for pid=20761 comm="syz.8.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 327.549788][T20730] hierarchical_memsw_limit 9223372036854771712 [ 327.549799][T20730] total_cache 0 [ 327.558993][ T29] audit: type=1326 audit(2000000399.677:29867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20750 comm="syz.9.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 327.559668][T20730] total_rss 0 [ 327.559677][T20730] total_shmem 0 [ 327.563248][ T29] audit: type=1326 audit(2000000399.677:29868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20750 comm="syz.9.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 327.566855][T20730] total_mapped_file 0 [ 327.566863][T20730] total_dirty 0 [ 327.566870][T20730] total_writeback 4096 [ 327.566878][T20730] total_workingset_refault_anon 11015 [ 327.573747][ T29] audit: type=1326 audit(2000000399.677:29869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20750 comm="syz.9.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 327.577437][T20730] total_workingset_refault_file 45 [ 327.581520][ T29] audit: type=1326 audit(2000000399.677:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20750 comm="syz.9.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 327.605581][T20730] total_swap 757760 [ 327.605593][T20730] total_swapcached 4096 [ 327.609222][ T29] audit: type=1326 audit(2000000399.677:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20750 comm="syz.9.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 327.613031][T20730] total_pgpgin 339557 [ 327.628326][T20764] loop8: detected capacity change from 0 to 2048 [ 327.644108][T20730] total_pgpgout 339556 [ 327.644121][T20730] total_pgfault 328815 [ 327.644129][T20730] total_pgmajfault 2139 [ 327.644135][T20730] total_inactive_anon 4096 [ 327.691489][T20778] loop1: detected capacity change from 0 to 2048 [ 327.704457][T20730] total_active_anon 0 [ 327.704475][T20730] total_inactive_file 0 [ 327.704481][T20730] total_active_file 0 [ 327.704487][T20730] total_unevictable 0 [ 327.704496][T20730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 327.722263][T20778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 327.735338][T20730] ,cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4770,pid=20730,uid=0 [ 327.917805][T20730] Memory cgroup out of memory: Killed process 20730 (syz.7.4770) total-vm:93628kB, anon-rss:944kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 327.961421][T20782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 327.972394][T20764] loop8: p4 < > [ 327.977074][T20782] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 327.993325][T20782] EXT4-fs (loop1): This should not happen!! Data will be lost [ 327.993325][T20782] [ 328.003086][T20782] EXT4-fs (loop1): Total free blocks count 0 [ 328.009229][T20782] EXT4-fs (loop1): Free/Dirty block details [ 328.015289][T20782] EXT4-fs (loop1): free_blocks=2415919104 [ 328.021121][T20782] EXT4-fs (loop1): dirty_blocks=5328 [ 328.026500][T20782] EXT4-fs (loop1): Block reservation details [ 328.032553][T20782] EXT4-fs (loop1): i_reserved_data_blocks=333 [ 328.173001][T20802] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 328.211164][T20802] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 328.256121][T20802] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 328.279767][T20806] lo speed is unknown, defaulting to 1000 [ 328.302575][T19773] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 328.322193][T20806] lo speed is unknown, defaulting to 1000 [ 328.330021][T20806] lo speed is unknown, defaulting to 1000 [ 328.346285][T20806] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 328.358093][T20806] lo speed is unknown, defaulting to 1000 [ 328.365010][T20806] lo speed is unknown, defaulting to 1000 [ 328.375075][T20806] lo speed is unknown, defaulting to 1000 [ 328.382253][T20806] lo speed is unknown, defaulting to 1000 [ 328.389181][T20806] lo speed is unknown, defaulting to 1000 [ 328.415625][T20806] lo speed is unknown, defaulting to 1000 [ 328.436245][T20829] loop1: detected capacity change from 0 to 2048 [ 328.459972][T20832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=20832 comm=syz.0.4793 [ 328.475942][T20829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 328.516930][T20840] loop8: detected capacity change from 0 to 1024 [ 328.645724][T20847] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.661939][T20847] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1548 with error 28 [ 328.674791][T20847] EXT4-fs (loop1): This should not happen!! Data will be lost [ 328.674791][T20847] [ 328.685071][T20847] EXT4-fs (loop1): Total free blocks count 0 [ 328.691659][T20847] EXT4-fs (loop1): Free/Dirty block details [ 328.697666][T20847] EXT4-fs (loop1): free_blocks=2415919104 [ 328.703521][T20847] EXT4-fs (loop1): dirty_blocks=1552 [ 328.708986][T20847] EXT4-fs (loop1): Block reservation details [ 328.715163][T20847] EXT4-fs (loop1): i_reserved_data_blocks=97 [ 328.826564][T19768] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 328.840780][T20859] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 328.853281][T20859] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 328.866187][T20859] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 328.878472][T20865] loop1: detected capacity change from 0 to 512 [ 328.885772][T20865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.897182][T20865] EXT4-fs (loop1): 1 truncate cleaned up [ 328.903239][T20865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.905294][T20869] loop8: detected capacity change from 0 to 2048 [ 329.044902][T20879] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4804'. [ 329.438809][T20865] syz.1.4801 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 329.453634][T20865] CPU: 1 UID: 0 PID: 20865 Comm: syz.1.4801 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 329.453661][T20865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.453671][T20865] Call Trace: [ 329.453678][T20865] [ 329.453685][T20865] __dump_stack+0x1d/0x30 [ 329.453705][T20865] dump_stack_lvl+0xe8/0x140 [ 329.453732][T20865] dump_stack+0x15/0x1b [ 329.453850][T20865] dump_header+0x81/0x220 [ 329.453881][T20865] oom_kill_process+0x334/0x3f0 [ 329.453913][T20865] out_of_memory+0x979/0xb80 [ 329.453945][T20865] try_charge_memcg+0x5e6/0x9e0 [ 329.454066][T20865] obj_cgroup_charge_pages+0xa6/0x150 [ 329.454093][T20865] __memcg_kmem_charge_page+0x9f/0x170 [ 329.454118][T20865] __alloc_frozen_pages_noprof+0x188/0x360 [ 329.454166][T20865] alloc_pages_mpol+0xb3/0x250 [ 329.454193][T20865] alloc_pages_noprof+0x90/0x130 [ 329.454247][T20865] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 329.454292][T20865] __kvmalloc_node_noprof+0x30f/0x4e0 [ 329.454332][T20865] ? ip_set_alloc+0x1f/0x30 [ 329.454352][T20865] ? ip_set_alloc+0x1f/0x30 [ 329.454372][T20865] ? __kmalloc_cache_noprof+0x189/0x320 [ 329.454396][T20865] ip_set_alloc+0x1f/0x30 [ 329.454469][T20865] hash_netiface_create+0x282/0x740 [ 329.454490][T20865] ? __pfx_hash_netiface_create+0x10/0x10 [ 329.454508][T20865] ip_set_create+0x3cc/0x960 [ 329.454557][T20865] ? __nla_parse+0x40/0x60 [ 329.454591][T20865] nfnetlink_rcv_msg+0x4c3/0x590 [ 329.454642][T20865] netlink_rcv_skb+0x120/0x220 [ 329.454682][T20865] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 329.454728][T20865] nfnetlink_rcv+0x16b/0x1690 [ 329.454770][T20865] ? __kfree_skb+0x109/0x150 [ 329.454802][T20865] ? nlmon_xmit+0x4f/0x60 [ 329.454828][T20865] ? consume_skb+0x49/0x150 [ 329.454845][T20865] ? nlmon_xmit+0x4f/0x60 [ 329.454865][T20865] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 329.455019][T20865] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 329.455043][T20865] ? __dev_queue_xmit+0x182/0x1fb0 [ 329.455067][T20865] ? ref_tracker_free+0x37d/0x3e0 [ 329.455097][T20865] ? __netlink_deliver_tap+0x4dc/0x500 [ 329.455148][T20865] netlink_unicast+0x5a5/0x680 [ 329.455172][T20865] netlink_sendmsg+0x58b/0x6b0 [ 329.455200][T20865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.455227][T20865] __sock_sendmsg+0x142/0x180 [ 329.455279][T20865] ____sys_sendmsg+0x31e/0x4e0 [ 329.455305][T20865] ___sys_sendmsg+0x17b/0x1d0 [ 329.455337][T20865] __x64_sys_sendmsg+0xd4/0x160 [ 329.455360][T20865] x64_sys_call+0x191e/0x2ff0 [ 329.455445][T20865] do_syscall_64+0xd2/0x200 [ 329.455466][T20865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.455521][T20865] ? clear_bhb_loop+0x40/0x90 [ 329.455543][T20865] ? clear_bhb_loop+0x40/0x90 [ 329.455561][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.455644][T20865] RIP: 0033:0x7f55dcf2e9a9 [ 329.455661][T20865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.455681][T20865] RSP: 002b:00007f55db597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.455702][T20865] RAX: ffffffffffffffda RBX: 00007f55dd155fa0 RCX: 00007f55dcf2e9a9 [ 329.455732][T20865] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 329.455743][T20865] RBP: 00007f55dcfb0d69 R08: 0000000000000000 R09: 0000000000000000 [ 329.455765][T20865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.455778][T20865] R13: 0000000000000000 R14: 00007f55dd155fa0 R15: 00007fff5d8cb3b8 [ 329.455796][T20865] [ 329.455852][T20865] memory: usage 307200kB, limit 307200kB, failcnt 19858 [ 329.814439][T20865] memory+swap: usage 307820kB, limit 9007199254740988kB, failcnt 0 [ 329.822527][T20865] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 329.830359][T20865] Memory cgroup stats for /syz1: [ 329.830732][T20865] cache 12288 [ 329.839433][T20865] rss 0 [ 329.842496][T20865] shmem 0 [ 329.845519][T20865] mapped_file 0 [ 329.848981][T20865] dirty 0 [ 329.852128][T20865] writeback 0 [ 329.855958][T20865] workingset_refault_anon 34246 [ 329.861141][T20865] workingset_refault_file 4466 [ 329.866228][T20865] swap 634880 [ 329.869540][T20865] swapcached 4096 [ 329.873410][T20865] pgpgin 693459 [ 329.877055][T20865] pgpgout 693450 [ 329.880935][T20865] pgfault 616421 [ 329.884570][T20865] pgmajfault 5269 [ 329.888208][T20865] inactive_anon 4096 [ 329.892255][T20865] active_anon 0 [ 329.895759][T20865] inactive_file 24576 [ 329.899776][T20865] active_file 8192 [ 329.903528][T20865] unevictable 0 [ 329.907032][T20865] hierarchical_memory_limit 314572800 [ 329.912684][T20865] hierarchical_memsw_limit 9223372036854771712 [ 329.918857][T20865] total_cache 12288 [ 329.922931][T20865] total_rss 0 [ 329.926302][T20865] total_shmem 0 [ 329.929845][T20865] total_mapped_file 0 [ 329.933970][T20865] total_dirty 0 [ 329.937437][T20865] total_writeback 0 [ 329.941332][T20865] total_workingset_refault_anon 34246 [ 329.946882][T20865] total_workingset_refault_file 4466 [ 329.952342][T20865] total_swap 634880 [ 329.956204][T20865] total_swapcached 4096 [ 329.960406][T20865] total_pgpgin 693459 [ 329.964404][T20865] total_pgpgout 693450 [ 329.968483][T20865] total_pgfault 616421 [ 329.972693][T20865] total_pgmajfault 5269 [ 329.976843][T20865] total_inactive_anon 4096 [ 329.981285][T20865] total_active_anon 0 [ 329.985435][T20865] total_inactive_file 24576 [ 329.989936][T20865] total_active_file 8192 [ 329.994392][T20865] total_unevictable 0 [ 329.998568][T20865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4801,pid=20864,uid=0 [ 330.013870][T20865] Memory cgroup out of memory: Killed process 20864 (syz.1.4801) total-vm:93628kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 330.220016][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.247354][T20928] netlink: 280 bytes leftover after parsing attributes in process `syz.9.4821'. [ 330.785940][T20953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4827'. [ 330.799685][T20953] loop1: detected capacity change from 0 to 128 [ 330.807853][T20953] msdos: Bad value for 'fmask' [ 331.043426][T20963] tipc: Started in network mode [ 331.048392][T20963] tipc: Node identity ac14140f, cluster identity 4711 [ 331.056102][T20963] FAULT_INJECTION: forcing a failure. [ 331.056102][T20963] name failslab, interval 1, probability 0, space 0, times 0 [ 331.068997][T20963] CPU: 1 UID: 0 PID: 20963 Comm: syz.7.4829 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 331.069095][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.069108][T20963] Call Trace: [ 331.069116][T20963] [ 331.069125][T20963] __dump_stack+0x1d/0x30 [ 331.069147][T20963] dump_stack_lvl+0xe8/0x140 [ 331.069168][T20963] dump_stack+0x15/0x1b [ 331.069183][T20963] should_fail_ex+0x265/0x280 [ 331.069238][T20963] should_failslab+0x8c/0xb0 [ 331.069310][T20963] kmem_cache_alloc_noprof+0x50/0x310 [ 331.069331][T20963] ? sk_prot_alloc+0x3f/0x190 [ 331.069351][T20963] ? should_failslab+0x8c/0xb0 [ 331.069374][T20963] sk_prot_alloc+0x3f/0x190 [ 331.069453][T20963] sk_alloc+0x34/0x360 [ 331.069473][T20963] inet_create+0x3c0/0x780 [ 331.069578][T20963] __sock_create+0x2e9/0x5b0 [ 331.069610][T20963] sock_create_kern+0x38/0x50 [ 331.069639][T20963] udp_sock_create4+0x66/0x2a0 [ 331.069739][T20963] udp_sock_create+0x64/0x80 [ 331.069756][T20963] tipc_udp_enable+0x943/0xb10 [ 331.069863][T20963] __tipc_nl_bearer_enable+0x942/0xda0 [ 331.069951][T20963] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 331.069993][T20963] tipc_nl_bearer_enable+0x22/0x40 [ 331.070024][T20963] genl_family_rcv_msg_doit+0x140/0x1b0 [ 331.070053][T20963] genl_rcv_msg+0x422/0x460 [ 331.070123][T20963] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 331.070220][T20963] netlink_rcv_skb+0x120/0x220 [ 331.070242][T20963] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.070277][T20963] genl_rcv+0x28/0x40 [ 331.070376][T20963] netlink_unicast+0x5a5/0x680 [ 331.070400][T20963] netlink_sendmsg+0x58b/0x6b0 [ 331.070427][T20963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.070463][T20963] __sock_sendmsg+0x142/0x180 [ 331.070485][T20963] ____sys_sendmsg+0x31e/0x4e0 [ 331.070508][T20963] ___sys_sendmsg+0x17b/0x1d0 [ 331.070614][T20963] __x64_sys_sendmsg+0xd4/0x160 [ 331.070641][T20963] x64_sys_call+0x191e/0x2ff0 [ 331.070665][T20963] do_syscall_64+0xd2/0x200 [ 331.070687][T20963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.070794][T20963] ? clear_bhb_loop+0x40/0x90 [ 331.070812][T20963] ? clear_bhb_loop+0x40/0x90 [ 331.070830][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.070899][T20963] RIP: 0033:0x7f6ec584e9a9 [ 331.070956][T20963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.070974][T20963] RSP: 002b:00007f6ec3eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.070995][T20963] RAX: ffffffffffffffda RBX: 00007f6ec5a75fa0 RCX: 00007f6ec584e9a9 [ 331.071009][T20963] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 331.071021][T20963] RBP: 00007f6ec3eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 331.071034][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.071108][T20963] R13: 0000000000000000 R14: 00007f6ec5a75fa0 R15: 00007ffc2021ac68 [ 331.071127][T20963] [ 331.367429][T20963] tipc: Enabling of bearer rejected, failed to enable media [ 331.421891][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 331.421905][ T29] audit: type=1326 audit(2000000403.537:30159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.451903][ T29] audit: type=1326 audit(2000000403.537:30160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.475953][ T29] audit: type=1326 audit(2000000403.537:30161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.500305][ T29] audit: type=1326 audit(2000000403.537:30162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.524734][ T29] audit: type=1326 audit(2000000403.537:30163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.548490][ T29] audit: type=1326 audit(2000000403.537:30164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.572460][ T29] audit: type=1326 audit(2000000403.537:30165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.597283][ T29] audit: type=1326 audit(2000000403.537:30166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.621666][ T29] audit: type=1326 audit(2000000403.537:30167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.646190][ T29] audit: type=1326 audit(2000000403.537:30168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20966 comm="syz.7.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec584e9a9 code=0x7ffc0000 [ 331.871077][T20990] loop1: detected capacity change from 0 to 2048 [ 331.932915][T20999] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4842'. [ 331.951161][T20990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 332.053115][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 332.120533][T20982] futex_wake_op: syz.7.4837 tries to shift op by -1; fix this program [ 332.207334][T20968] syz.9.4831 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 332.218621][T20968] CPU: 1 UID: 0 PID: 20968 Comm: syz.9.4831 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 332.218650][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.218662][T20968] Call Trace: [ 332.218668][T20968] [ 332.218677][T20968] __dump_stack+0x1d/0x30 [ 332.218699][T20968] dump_stack_lvl+0xe8/0x140 [ 332.218730][T20968] dump_stack+0x15/0x1b [ 332.218746][T20968] dump_header+0x81/0x220 [ 332.218778][T20968] oom_kill_process+0x334/0x3f0 [ 332.218809][T20968] out_of_memory+0x979/0xb80 [ 332.218836][T20968] try_charge_memcg+0x5e6/0x9e0 [ 332.218878][T20968] charge_memcg+0x51/0xc0 [ 332.218930][T20968] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 332.218957][T20968] __read_swap_cache_async+0x1df/0x350 [ 332.219075][T20968] swap_cluster_readahead+0x277/0x3e0 [ 332.219170][T20968] swapin_readahead+0xde/0x6f0 [ 332.219198][T20968] ? __filemap_get_folio+0x4f7/0x6b0 [ 332.219229][T20968] ? swap_cache_get_folio+0x77/0x200 [ 332.219327][T20968] do_swap_page+0x301/0x2430 [ 332.219347][T20968] ? css_rstat_updated+0xcd/0x5b0 [ 332.219374][T20968] ? __pfx_default_wake_function+0x10/0x10 [ 332.219401][T20968] handle_mm_fault+0x9a5/0x2be0 [ 332.219451][T20968] ? mas_walk+0xf2/0x120 [ 332.219476][T20968] do_user_addr_fault+0x636/0x1090 [ 332.219506][T20968] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 332.219625][T20968] exc_page_fault+0x62/0xa0 [ 332.219673][T20968] asm_exc_page_fault+0x26/0x30 [ 332.219694][T20968] RIP: 0033:0x7f683c871213 [ 332.219711][T20968] Code: e7 08 00 48 8d 3d 76 e7 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 332.219746][T20968] RSP: 002b:00007ffdbe533cf8 EFLAGS: 00010293 [ 332.219763][T20968] RAX: 00000000fffffffa RBX: 00007f683ca65fa0 RCX: 0000000000000000 [ 332.219776][T20968] RDX: 00007ffdbe533d10 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.219798][T20968] RBP: 00007f683ca67ba0 R08: 000000000785feae R09: 7fffffffffffffff [ 332.219811][T20968] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000511b7 [ 332.219824][T20968] R13: 00007ffdbe533e30 R14: ffffffffffffffff R15: 00007ffdbe533e50 [ 332.219844][T20968] [ 332.219851][T20968] memory: usage 307200kB, limit 307200kB, failcnt 4346 [ 332.446798][T20968] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 332.455071][T20968] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 332.462524][T20968] Memory cgroup stats for /syz9: [ 332.462978][T20968] cache 0 [ 332.470944][T20968] rss 0 [ 332.473722][T20968] shmem 0 [ 332.476692][T20968] mapped_file 0 [ 332.480140][T20968] dirty 0 [ 332.483125][T20968] writeback 0 [ 332.486503][T20968] workingset_refault_anon 9133 [ 332.491374][T20968] workingset_refault_file 600 [ 332.496126][T20968] swap 290816 [ 332.499405][T20968] swapcached 8192 [ 332.503292][T20968] pgpgin 255613 [ 332.506738][T20968] pgpgout 255611 [ 332.510426][T20968] pgfault 284342 [ 332.514085][T20968] pgmajfault 1457 [ 332.517706][T20968] inactive_anon 8192 [ 332.521878][T20968] active_anon 0 [ 332.525411][T20968] inactive_file 0 [ 332.529095][T20968] active_file 0 [ 332.532565][T20968] unevictable 0 [ 332.536161][T20968] hierarchical_memory_limit 314572800 [ 332.542074][T20968] hierarchical_memsw_limit 9223372036854771712 [ 332.548414][T20968] total_cache 0 [ 332.551987][T20968] total_rss 0 [ 332.555336][T20968] total_shmem 0 [ 332.558842][T20968] total_mapped_file 0 [ 332.562830][T20968] total_dirty 0 [ 332.566426][T20968] total_writeback 0 [ 332.570382][T20968] total_workingset_refault_anon 9133 [ 332.576128][T20968] total_workingset_refault_file 600 [ 332.581478][T20968] total_swap 290816 [ 332.585488][T20968] total_swapcached 8192 [ 332.589729][T20968] total_pgpgin 255613 [ 332.593850][T20968] total_pgpgout 255611 [ 332.597962][T20968] total_pgfault 284342 [ 332.602224][T20968] total_pgmajfault 1457 [ 332.606407][T20968] total_inactive_anon 8192 [ 332.610922][T20968] total_active_anon 0 [ 332.614923][T20968] total_inactive_file 0 [ 332.619202][T20968] total_active_file 0 [ 332.623205][T20968] total_unevictable 0 [ 332.627173][T20968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4831,pid=20968,uid=0 [ 332.641865][T20968] Memory cgroup out of memory: Killed process 20968 (syz.9.4831) total-vm:93628kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 332.699577][T21031] loop8: detected capacity change from 0 to 512 [ 332.706831][T21031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 332.725134][T21031] EXT4-fs (loop8): 1 truncate cleaned up [ 332.747437][T21031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.936501][T21046] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 333.358285][T21031] syz.8.4853 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 333.374369][T21031] CPU: 1 UID: 0 PID: 21031 Comm: syz.8.4853 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 333.374400][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.374414][T21031] Call Trace: [ 333.374422][T21031] [ 333.374431][T21031] __dump_stack+0x1d/0x30 [ 333.374505][T21031] dump_stack_lvl+0xe8/0x140 [ 333.374527][T21031] dump_stack+0x15/0x1b [ 333.374552][T21031] dump_header+0x81/0x220 [ 333.374586][T21031] oom_kill_process+0x334/0x3f0 [ 333.374673][T21031] out_of_memory+0x979/0xb80 [ 333.374702][T21031] try_charge_memcg+0x5e6/0x9e0 [ 333.374746][T21031] obj_cgroup_charge_pages+0xa6/0x150 [ 333.374841][T21031] __memcg_kmem_charge_page+0x9f/0x170 [ 333.374868][T21031] __alloc_frozen_pages_noprof+0x188/0x360 [ 333.374930][T21031] alloc_pages_mpol+0xb3/0x250 [ 333.374962][T21031] alloc_pages_noprof+0x90/0x130 [ 333.374992][T21031] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 333.375111][T21031] __kvmalloc_node_noprof+0x30f/0x4e0 [ 333.375161][T21031] ? ip_set_alloc+0x1f/0x30 [ 333.375181][T21031] ? ip_set_alloc+0x1f/0x30 [ 333.375242][T21031] ? __kmalloc_cache_noprof+0x189/0x320 [ 333.375268][T21031] ip_set_alloc+0x1f/0x30 [ 333.375287][T21031] hash_netiface_create+0x282/0x740 [ 333.375318][T21031] ? __pfx_hash_netiface_create+0x10/0x10 [ 333.375360][T21031] ip_set_create+0x3cc/0x960 [ 333.375396][T21031] ? __nla_parse+0x40/0x60 [ 333.375427][T21031] nfnetlink_rcv_msg+0x4c3/0x590 [ 333.375524][T21031] netlink_rcv_skb+0x120/0x220 [ 333.375553][T21031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.375636][T21031] nfnetlink_rcv+0x16b/0x1690 [ 333.375662][T21031] ? __kfree_skb+0x109/0x150 [ 333.375727][T21031] ? nlmon_xmit+0x4f/0x60 [ 333.375845][T21031] ? consume_skb+0x49/0x150 [ 333.375862][T21031] ? nlmon_xmit+0x4f/0x60 [ 333.375887][T21031] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 333.375938][T21031] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 333.375957][T21031] ? __dev_queue_xmit+0x182/0x1fb0 [ 333.375978][T21031] ? ref_tracker_free+0x37d/0x3e0 [ 333.376060][T21031] ? __netlink_deliver_tap+0x4dc/0x500 [ 333.376084][T21031] netlink_unicast+0x5a5/0x680 [ 333.376103][T21031] netlink_sendmsg+0x58b/0x6b0 [ 333.376130][T21031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.376154][T21031] __sock_sendmsg+0x142/0x180 [ 333.376180][T21031] ____sys_sendmsg+0x31e/0x4e0 [ 333.376253][T21031] ___sys_sendmsg+0x17b/0x1d0 [ 333.376409][T21031] __x64_sys_sendmsg+0xd4/0x160 [ 333.376521][T21031] x64_sys_call+0x191e/0x2ff0 [ 333.376585][T21031] do_syscall_64+0xd2/0x200 [ 333.376606][T21031] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.376655][T21031] ? clear_bhb_loop+0x40/0x90 [ 333.376677][T21031] ? clear_bhb_loop+0x40/0x90 [ 333.376697][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.376785][T21031] RIP: 0033:0x7f2782f6e9a9 [ 333.376802][T21031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.376818][T21031] RSP: 002b:00007f27815cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.376836][T21031] RAX: ffffffffffffffda RBX: 00007f2783195fa0 RCX: 00007f2782f6e9a9 [ 333.376882][T21031] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000006 [ 333.376894][T21031] RBP: 00007f2782ff0d69 R08: 0000000000000000 R09: 0000000000000000 [ 333.376905][T21031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.376931][T21031] R13: 0000000000000000 R14: 00007f2783195fa0 R15: 00007ffe781fdb98 [ 333.376952][T21031] [ 333.376959][T21031] memory: usage 307200kB, limit 307200kB, failcnt 1433 [ 333.730004][T21031] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0 [ 333.737990][T21031] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 333.745363][T21031] Memory cgroup stats for /syz8: [ 333.745611][T21031] cache 36864 [ 333.754270][T21031] rss 0 [ 333.757094][T21031] shmem 0 [ 333.760284][T21031] mapped_file 0 [ 333.763839][T21031] dirty 0 [ 333.766879][T21031] writeback 16384 [ 333.770507][T21031] workingset_refault_anon 10950 [ 333.775461][T21031] workingset_refault_file 240 [ 333.780148][T21031] swap 684032 [ 333.783563][T21031] swapcached 0 [ 333.786919][T21031] pgpgin 253579 [ 333.790359][T21031] pgpgout 253566 [ 333.794044][T21031] pgfault 284334 [ 333.797669][T21031] pgmajfault 1578 [ 333.801335][T21031] inactive_anon 0 [ 333.805211][T21031] active_anon 0 [ 333.808678][T21031] inactive_file 36864 [ 333.812687][T21031] active_file 16384 [ 333.816566][T21031] unevictable 0 [ 333.820227][T21031] hierarchical_memory_limit 314572800 [ 333.825602][T21031] hierarchical_memsw_limit 9223372036854771712 [ 333.831885][T21031] total_cache 36864 [ 333.835761][T21031] total_rss 0 [ 333.839112][T21031] total_shmem 0 [ 333.842895][T21031] total_mapped_file 0 [ 333.846945][T21031] total_dirty 0 [ 333.850491][T21031] total_writeback 16384 [ 333.854762][T21031] total_workingset_refault_anon 10950 [ 333.860256][T21031] total_workingset_refault_file 240 [ 333.865868][T21031] total_swap 684032 [ 333.869778][T21031] total_swapcached 0 [ 333.873770][T21031] total_pgpgin 253579 [ 333.877891][T21031] total_pgpgout 253566 [ 333.882030][T21031] total_pgfault 284334 [ 333.886076][T21031] total_pgmajfault 1578 [ 333.890306][T21031] total_inactive_anon 0 [ 333.894669][T21031] total_active_anon 0 [ 333.898649][T21031] total_inactive_file 36864 [ 333.903516][T21031] total_active_file 16384 [ 333.907976][T21031] total_unevictable 0 [ 333.912067][T21031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4853,pid=21030,uid=0 [ 333.927863][T21031] Memory cgroup out of memory: Killed process 21030 (syz.8.4853) total-vm:93892kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 334.017099][T21082] loop1: detected capacity change from 0 to 512 [ 334.024201][T21082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 334.060858][T21082] EXT4-fs (loop1): 1 truncate cleaned up [ 334.067229][T21082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.150774][T21081] lo speed is unknown, defaulting to 1000 [ 334.216876][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.280920][T21100] netlink: 280 bytes leftover after parsing attributes in process `syz.8.4872'. [ 334.386478][T21102] netlink: 'syz.0.4873': attribute type 21 has an invalid length. [ 334.394386][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4873'. [ 334.622299][T21102] lo speed is unknown, defaulting to 1000 [ 334.677162][T21102] lo speed is unknown, defaulting to 1000 [ 334.811899][T21081] lo speed is unknown, defaulting to 1000 [ 335.440953][T13064] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.479110][T21144] loop8: detected capacity change from 0 to 2048 [ 335.532189][T21144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 335.757696][T21161] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 335.796048][T21167] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 335.825257][T21161] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1132 with error 28 [ 335.838071][T21161] EXT4-fs (loop8): This should not happen!! Data will be lost [ 335.838071][T21161] [ 335.847995][T21161] EXT4-fs (loop8): Total free blocks count 0 [ 335.854238][T21161] EXT4-fs (loop8): Free/Dirty block details [ 335.860378][T21161] EXT4-fs (loop8): free_blocks=2415919104 [ 335.866153][T21161] EXT4-fs (loop8): dirty_blocks=1312 [ 335.871644][T21161] EXT4-fs (loop8): Block reservation details [ 335.877640][T21161] EXT4-fs (loop8): i_reserved_data_blocks=82 [ 335.886609][T21167] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 335.907725][T21167] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 335.956842][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 335.964379][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 335.971795][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 335.979176][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 335.980848][T21155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4877'. [ 335.986671][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.003179][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.010710][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.018364][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.026081][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.033567][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.041030][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.046980][T21155] loop1: detected capacity change from 0 to 128 [ 336.048484][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.048508][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.058798][T21155] msdos: Bad value for 'fmask' [ 336.062204][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.062226][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.062256][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.096885][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.104749][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.112610][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.120073][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.128030][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.135619][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.143127][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.150713][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.158287][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.165774][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.173256][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.181087][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.188583][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.196196][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.204144][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.211692][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.219424][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.224361][T21183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4884'. [ 336.226865][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.240761][T21183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21183 comm=syz.1.4884 [ 336.243766][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.257843][T21183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21183 comm=syz.1.4884 [ 336.264521][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.264544][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.278464][T21183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4884'. [ 336.285246][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.309639][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.317424][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.325051][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.332634][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.340306][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.348005][ T1040] hid-generic 0000:0000:0008.0005: unknown main item tag 0x0 [ 336.355864][ T1040] hid-generic 0000:0000:0008.0005: hidraw0: HID vc.87 Device [syz0] on syz1 [ 336.356079][T19773] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 336.476598][T21200] loop8: detected capacity change from 0 to 512 [ 336.491367][T21183] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 336.515733][T21200] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 336.571983][T21200] EXT4-fs (loop8): 1 truncate cleaned up [ 336.580522][T21200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.071494][T21193] syz.0.4886 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 337.082862][T21193] CPU: 0 UID: 0 PID: 21193 Comm: syz.0.4886 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 337.082956][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.082969][T21193] Call Trace: [ 337.082976][T21193] [ 337.082983][T21193] __dump_stack+0x1d/0x30 [ 337.083005][T21193] dump_stack_lvl+0xe8/0x140 [ 337.083104][T21193] dump_stack+0x15/0x1b [ 337.083120][T21193] dump_header+0x81/0x220 [ 337.083196][T21193] oom_kill_process+0x334/0x3f0 [ 337.083227][T21193] out_of_memory+0x979/0xb80 [ 337.083257][T21193] try_charge_memcg+0x5e6/0x9e0 [ 337.083395][T21193] charge_memcg+0x51/0xc0 [ 337.083425][T21193] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 337.083459][T21193] __read_swap_cache_async+0x1df/0x350 [ 337.083550][T21193] swap_cluster_readahead+0x277/0x3e0 [ 337.083603][T21193] swapin_readahead+0xde/0x6f0 [ 337.083631][T21193] ? __filemap_get_folio+0x4f7/0x6b0 [ 337.083693][T21193] ? __rcu_read_unlock+0x34/0x70 [ 337.083716][T21193] ? swap_cache_get_folio+0x77/0x200 [ 337.083746][T21193] do_swap_page+0x301/0x2430 [ 337.083766][T21193] ? css_rstat_updated+0xcd/0x5b0 [ 337.083862][T21193] ? __pfx_default_wake_function+0x10/0x10 [ 337.083887][T21193] handle_mm_fault+0x9a5/0x2be0 [ 337.083953][T21193] ? mas_walk+0xf2/0x120 [ 337.083977][T21193] do_user_addr_fault+0x636/0x1090 [ 337.084052][T21193] exc_page_fault+0x62/0xa0 [ 337.084071][T21193] asm_exc_page_fault+0x26/0x30 [ 337.084092][T21193] RIP: 0033:0x7fc0c8511213 [ 337.084180][T21193] Code: e7 08 00 48 8d 3d 76 e7 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 337.084199][T21193] RSP: 002b:00007ffcf98ec7e8 EFLAGS: 00010293 [ 337.084214][T21193] RAX: 00000000fffffffa RBX: 00007fc0c8705fa0 RCX: 0000000000000000 [ 337.084225][T21193] RDX: 00007ffcf98ec800 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.084236][T21193] RBP: 00007fc0c8707ba0 R08: 00000000011b1dfb R09: 7fffffffffffffff [ 337.084255][T21193] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005252d [ 337.084289][T21193] R13: 00007ffcf98ec920 R14: ffffffffffffffff R15: 00007ffcf98ec940 [ 337.084308][T21193] [ 337.084366][T21193] memory: usage 307200kB, limit 307200kB, failcnt 16725 [ 337.143399][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 337.143414][ T29] audit: type=1326 audit(2000000409.267:30738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.146456][T21193] memory+swap: usage 308076kB, limit 9007199254740988kB, failcnt 0 [ 337.146474][T21193] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 337.146487][T21193] Memory cgroup stats for /syz0 [ 337.154308][ T29] audit: type=1326 audit(2000000409.277:30739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.157030][T21193] : [ 337.174849][ T29] audit: type=1326 audit(2000000409.287:30740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.212792][T21193] cache 8192 [ 337.216888][ T29] audit: type=1326 audit(2000000409.287:30741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.216910][ T29] audit: type=1326 audit(2000000409.287:30742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.216930][ T29] audit: type=1326 audit(2000000409.287:30743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.216953][ T29] audit: type=1326 audit(2000000409.287:30744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.222343][T21193] rss 4096 [ 337.226951][ T29] audit: type=1326 audit(2000000409.287:30745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.232121][T21193] shmem 0 [ 337.236614][ T29] audit: type=1326 audit(2000000409.287:30746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.236638][ T29] audit: type=1326 audit(2000000409.287:30747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.9.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 337.256508][T21193] mapped_file 0 [ 337.256518][T21193] dirty 0 [ 337.256524][T21193] writeback 4096 [ 337.256530][T21193] workingset_refault_anon 11193 [ 337.256537][T21193] workingset_refault_file 175 [ 337.256545][T21193] swap 897024 [ 337.256552][T21193] swapcached 4096 [ 337.256565][T21193] pgpgin 389369 [ 337.468283][T21238] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 337.489535][T21193] pgpgout 389366 [ 337.489547][T21193] pgfault 356177 [ 337.636733][T21193] pgmajfault 1915 [ 337.640458][T21193] inactive_anon 4096 [ 337.644464][T21193] active_anon 0 [ 337.648088][T21193] inactive_file 8192 [ 337.652050][T21193] active_file 0 [ 337.655590][T21193] unevictable 0 [ 337.659146][T21193] hierarchical_memory_limit 314572800 [ 337.664660][T21193] hierarchical_memsw_limit 9223372036854771712 [ 337.670910][T21193] total_cache 8192 [ 337.674664][T21193] total_rss 4096 [ 337.678203][T21193] total_shmem 0 [ 337.681676][T21193] total_mapped_file 0 [ 337.686004][T21193] total_dirty 0 [ 337.689554][T21193] total_writeback 4096 [ 337.693727][T21193] total_workingset_refault_anon 11193 [ 337.699095][T21193] total_workingset_refault_file 175 [ 337.704319][T21193] total_swap 897024 [ 337.708127][T21193] total_swapcached 4096 [ 337.712399][T21193] total_pgpgin 389369 [ 337.716386][T21193] total_pgpgout 389366 [ 337.720589][T21193] total_pgfault 356177 [ 337.724934][T21193] total_pgmajfault 1915 [ 337.729272][T21193] total_inactive_anon 4096 [ 337.733781][T21193] total_active_anon 0 [ 337.737891][T21193] total_inactive_file 8192 [ 337.742348][T21193] total_active_file 0 [ 337.746338][T21193] total_unevictable 0 [ 337.750373][T21193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4886,pid=21193,uid=0 [ 337.765481][T21193] Memory cgroup out of memory: Killed process 21193 (syz.0.4886) total-vm:93628kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 337.867816][T21246] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4895'. [ 338.092719][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.939769][T21303] netlink: 280 bytes leftover after parsing attributes in process `syz.9.4914'. [ 339.493969][T21335] loop8: detected capacity change from 0 to 1024 [ 339.501332][T21335] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.517766][T21335] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4925: Invalid block bitmap block 0 in block_group 0 [ 339.531551][T21335] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4925: Failed to acquire dquot type 0 [ 339.543801][T21335] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.4925: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.557689][T21335] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4925: Invalid inode bitmap blk 0 in block_group 0 [ 339.570742][T19801] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 0 [ 339.583111][T21335] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 339.591844][T21335] EXT4-fs (loop8): 1 orphan inode deleted [ 339.598206][T21335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.632279][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.641956][T19816] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 340.142874][T21361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4933'. [ 340.287057][T21386] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 340.698059][T21392] lo speed is unknown, defaulting to 1000 [ 340.756654][T21392] lo speed is unknown, defaulting to 1000 [ 340.882997][T21392] chnl_net:caif_netlink_parms(): no params data found [ 340.984085][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.992102][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.007301][T21392] bridge_slave_0: entered allmulticast mode [ 341.022088][T21392] bridge_slave_0: entered promiscuous mode [ 341.049557][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.056800][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.087524][T21392] bridge_slave_1: entered allmulticast mode [ 341.102011][T21392] bridge_slave_1: entered promiscuous mode [ 341.153031][T21392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.164443][T21392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.201596][T21392] team0: Port device team_slave_0 added [ 341.219141][T21392] team0: Port device team_slave_1 added [ 341.241611][T21392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.249162][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.275517][T21392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.287034][T21648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4951'. [ 341.329996][T21392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.337257][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.364045][T21392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.440485][T21392] hsr_slave_0: entered promiscuous mode [ 341.475745][T21392] hsr_slave_1: entered promiscuous mode [ 341.525546][T21392] debugfs: 'hsr0' already exists in 'hsr' [ 341.531372][T21392] Cannot create hsr debugfs directory [ 341.969948][T21686] futex_wake_op: syz.0.4953 tries to shift op by -1; fix this program [ 342.029577][T21770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4956'. [ 342.041444][T21770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21770 comm=syz.0.4956 [ 342.055503][T21770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21770 comm=syz.0.4956 [ 342.070764][T21770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4956'. [ 342.086159][T21771] futex_wake_op: syz.1.4955 tries to shift op by -1; fix this program [ 342.128065][T21392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.143869][T21392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.197020][T21392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.221136][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 342.221205][ T29] audit: type=1326 audit(2000000414.347:31037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f683c835967 code=0x7ffc0000 [ 342.255231][T21392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.264065][ T29] audit: type=1326 audit(2000000414.377:31038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f683c7dab89 code=0x7ffc0000 [ 342.287927][ T29] audit: type=1326 audit(2000000414.377:31039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f683c835967 code=0x7ffc0000 [ 342.312430][ T29] audit: type=1326 audit(2000000414.377:31040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f683c7dab89 code=0x7ffc0000 [ 342.336452][ T29] audit: type=1326 audit(2000000414.377:31041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f683c835967 code=0x7ffc0000 [ 342.360181][ T29] audit: type=1326 audit(2000000414.377:31042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f683c7dab89 code=0x7ffc0000 [ 342.384023][ T29] audit: type=1326 audit(2000000414.377:31043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f683c835967 code=0x7ffc0000 [ 342.408129][ T29] audit: type=1326 audit(2000000414.377:31044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f683c7dab89 code=0x7ffc0000 [ 342.431804][ T29] audit: type=1326 audit(2000000414.377:31045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 342.455630][ T29] audit: type=1326 audit(2000000414.377:31046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683c83e9a9 code=0x7ffc0000 [ 342.485441][T21797] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 342.546701][T21392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.576851][T21392] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.613103][T19768] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.620408][T19768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.638379][T19801] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.645757][T19801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.664002][T21392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.674793][T21392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.750207][T21392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.869647][T21392] veth0_vlan: entered promiscuous mode [ 342.878047][T21392] veth1_vlan: entered promiscuous mode [ 342.893397][T21392] veth0_macvtap: entered promiscuous mode [ 342.902352][T21392] veth1_macvtap: entered promiscuous mode [ 342.924454][T21392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.936851][T21392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.946770][T21392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.955726][T21392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.964615][T21392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.973476][T21392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.987110][T21845] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 343.031633][T21852] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4945'. [ 343.051971][T21852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.059618][T21852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.068164][T21852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.075840][T21852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.148967][T21864] loop8: detected capacity change from 0 to 2048 [ 343.162680][T21864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.179067][T21864] IPVS: Error connecting to the multicast addr [ 343.293982][T10687] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 343.309895][T10687] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 343.324721][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.351662][T21884] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 343.362414][T21884] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 343.374353][T21884] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 343.552730][T21900] loop8: detected capacity change from 0 to 164 [ 343.580451][T21900] isofs: isofs_export_get_parent(): child directory not normalized! [ 344.989065][T21946] loop5: detected capacity change from 0 to 4096 [ 344.996284][T21946] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 345.040799][T21946] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.4998: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 345.059493][T21946] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.4998: Bad quota inode: 3, type: 0 [ 345.071454][T21946] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 345.086748][T21946] EXT4-fs (loop5): mount failed [ 345.151363][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.158619][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.166664][T21958] bridge0: entered allmulticast mode [ 345.175514][T21958] bridge_slave_1: left allmulticast mode [ 345.181336][T21958] bridge_slave_1: left promiscuous mode [ 345.187024][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.195308][T21958] bridge_slave_0: left allmulticast mode [ 345.201066][T21958] bridge_slave_0: left promiscuous mode [ 345.207003][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.584864][T21974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5006'. [ 345.601346][T21974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21974 comm=syz.0.5006 [ 345.630808][T21974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=21974 comm=syz.0.5006 [ 345.642120][T21960] syz.1.5000 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 345.658313][T21960] CPU: 0 UID: 0 PID: 21960 Comm: syz.1.5000 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 345.658339][T21960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.658350][T21960] Call Trace: [ 345.658357][T21960] [ 345.658365][T21960] __dump_stack+0x1d/0x30 [ 345.658443][T21960] dump_stack_lvl+0xe8/0x140 [ 345.658459][T21960] dump_stack+0x15/0x1b [ 345.658476][T21960] dump_header+0x81/0x220 [ 345.658509][T21960] oom_kill_process+0x334/0x3f0 [ 345.658546][T21960] out_of_memory+0x979/0xb80 [ 345.658630][T21960] try_charge_memcg+0x5e6/0x9e0 [ 345.658673][T21960] obj_cgroup_charge_pages+0xa6/0x150 [ 345.658702][T21960] __memcg_kmem_charge_page+0x9f/0x170 [ 345.658813][T21960] __alloc_frozen_pages_noprof+0x188/0x360 [ 345.658926][T21960] alloc_pages_mpol+0xb3/0x250 [ 345.658953][T21960] alloc_pages_noprof+0x90/0x130 [ 345.658978][T21960] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 345.659075][T21960] __kvmalloc_node_noprof+0x30f/0x4e0 [ 345.659105][T21960] ? ip_set_alloc+0x1f/0x30 [ 345.659200][T21960] ? ip_set_alloc+0x1f/0x30 [ 345.659220][T21960] ? __kmalloc_cache_noprof+0x189/0x320 [ 345.659250][T21960] ip_set_alloc+0x1f/0x30 [ 345.659309][T21960] hash_netiface_create+0x282/0x740 [ 345.659329][T21960] ? __pfx_hash_netiface_create+0x10/0x10 [ 345.659347][T21960] ip_set_create+0x3cc/0x960 [ 345.659377][T21960] ? __nla_parse+0x40/0x60 [ 345.659460][T21960] nfnetlink_rcv_msg+0x4c3/0x590 [ 345.659573][T21960] netlink_rcv_skb+0x120/0x220 [ 345.659597][T21960] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 345.659654][T21960] nfnetlink_rcv+0x16b/0x1690 [ 345.659686][T21960] ? __kfree_skb+0x109/0x150 [ 345.659780][T21960] ? nlmon_xmit+0x4f/0x60 [ 345.659819][T21960] ? consume_skb+0x49/0x150 [ 345.659836][T21960] ? nlmon_xmit+0x4f/0x60 [ 345.659856][T21960] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 345.659903][T21960] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 345.659926][T21960] ? __dev_queue_xmit+0x182/0x1fb0 [ 345.659949][T21960] ? ref_tracker_free+0x37d/0x3e0 [ 345.659982][T21960] ? __netlink_deliver_tap+0x4dc/0x500 [ 345.660007][T21960] netlink_unicast+0x5a5/0x680 [ 345.660026][T21960] netlink_sendmsg+0x58b/0x6b0 [ 345.660072][T21960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.660093][T21960] __sock_sendmsg+0x142/0x180 [ 345.660314][T21960] ____sys_sendmsg+0x31e/0x4e0 [ 345.660337][T21960] ___sys_sendmsg+0x17b/0x1d0 [ 345.660368][T21960] __x64_sys_sendmsg+0xd4/0x160 [ 345.660392][T21960] x64_sys_call+0x191e/0x2ff0 [ 345.660416][T21960] do_syscall_64+0xd2/0x200 [ 345.660487][T21960] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 345.660511][T21960] ? clear_bhb_loop+0x40/0x90 [ 345.660530][T21960] ? clear_bhb_loop+0x40/0x90 [ 345.660554][T21960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.660634][T21960] RIP: 0033:0x7f55dcf2e9a9 [ 345.660649][T21960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.660675][T21960] RSP: 002b:00007f55db597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.660766][T21960] RAX: ffffffffffffffda RBX: 00007f55dd155fa0 RCX: 00007f55dcf2e9a9 [ 345.660781][T21960] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000006 [ 345.660795][T21960] RBP: 00007f55dcfb0d69 R08: 0000000000000000 R09: 0000000000000000 [ 345.660809][T21960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.660822][T21960] R13: 0000000000000000 R14: 00007f55dd155fa0 R15: 00007fff5d8cb3b8 [ 345.660838][T21960] [ 345.681089][T21974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5006'. [ 345.683175][T21960] memory: usage 307200kB, limit 307200kB, failcnt 20141 [ 346.020474][T21960] memory+swap: usage 374644kB, limit 9007199254740988kB, failcnt 0 [ 346.028494][T21960] kmem: usage 290508kB, limit 9007199254740988kB, failcnt 0 [ 346.035814][T21960] Memory cgroup stats for /syz1: [ 346.036060][T21960] cache 16777216 [ 346.044593][T21960] rss 225280 [ 346.047796][T21960] shmem 16777216 [ 346.051363][T21960] mapped_file 0 [ 346.054918][T21960] dirty 0 [ 346.057948][T21960] writeback 0 [ 346.061621][T21960] workingset_refault_anon 34357 [ 346.066653][T21960] workingset_refault_file 6404 [ 346.071482][T21960] swap 69062656 [ 346.075062][T21960] swapcached 32768 [ 346.079024][T21960] pgpgin 746902 [ 346.082494][T21960] pgpgout 742738 [ 346.086209][T21960] pgfault 647052 [ 346.089758][T21960] pgmajfault 5307 [ 346.093597][T21960] inactive_anon 159744 [ 346.097748][T21960] active_anon 16875520 [ 346.101858][T21960] inactive_file 20480 [ 346.105838][T21960] active_file 0 [ 346.109371][T21960] unevictable 0 [ 346.112928][T21960] hierarchical_memory_limit 314572800 [ 346.118390][T21960] hierarchical_memsw_limit 9223372036854771712 [ 346.124647][T21960] total_cache 16777216 [ 346.128801][T21960] total_rss 225280 [ 346.132612][T21960] total_shmem 16777216 [ 346.136778][T21960] total_mapped_file 0 [ 346.140917][T21960] total_dirty 0 [ 346.144429][T21960] total_writeback 0 [ 346.148408][T21960] total_workingset_refault_anon 34357 [ 346.153818][T21960] total_workingset_refault_file 6404 [ 346.159124][T21960] total_swap 69062656 [ 346.163236][T21960] total_swapcached 32768 [ 346.167475][T21960] total_pgpgin 746902 [ 346.171780][T21960] total_pgpgout 742738 [ 346.175853][T21960] total_pgfault 647052 [ 346.180194][T21960] total_pgmajfault 5307 [ 346.184391][T21960] total_inactive_anon 159744 [ 346.188976][T21960] total_active_anon 16875520 [ 346.193670][T21960] total_inactive_file 20480 [ 346.198248][T21960] total_active_file 0 [ 346.202539][T21960] total_unevictable 0 [ 346.206636][T21960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4349,pid=18904,uid=0 [ 346.221475][T21960] Memory cgroup out of memory: Killed process 18904 (syz.1.4349) total-vm:95676kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 346.320172][T21985] futex_wake_op: syz.0.5007 tries to shift op by -1; fix this program [ 346.718107][T22003] loop8: detected capacity change from 0 to 1024 [ 346.762395][T22003] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 346.773357][T22003] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 346.892618][T22003] EXT4-fs (loop8): invalid journal inode [ 346.911620][T22003] EXT4-fs (loop8): can't get journal size [ 346.920879][T22003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.963781][T10687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.991891][T22015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.274582][T22032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5023'. [ 347.285210][T22032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=22032 comm=syz.0.5023 [ 347.298350][T22032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=22032 comm=syz.0.5023 [ 347.311913][T22032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5023'. [ 347.463893][T22042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5026'. [ 347.493410][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 347.493426][ T29] audit: type=1400 audit(2000000419.617:31206): avc: denied { accept } for pid=22046 comm="syz.1.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 347.544060][ T29] audit: type=1326 audit(2000000419.667:31207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.567833][ T29] audit: type=1326 audit(2000000419.667:31208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.592244][ T29] audit: type=1326 audit(2000000419.667:31209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.616101][ T29] audit: type=1326 audit(2000000419.667:31210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.640055][ T29] audit: type=1326 audit(2000000419.667:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.664237][ T29] audit: type=1326 audit(2000000419.667:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.687847][ T29] audit: type=1326 audit(2000000419.667:31213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.711619][ T29] audit: type=1326 audit(2000000419.667:31214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.735445][ T29] audit: type=1326 audit(2000000419.667:31215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55dcf2e9a9 code=0x7ffc0000 [ 347.738357][T22054] netlink: 'syz.5.5030': attribute type 3 has an invalid length. [ 347.766910][T22054] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.5030'. [ 348.248649][T22071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5035'. [ 348.282465][T22068] lo speed is unknown, defaulting to 1000 [ 348.490049][T22083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5036'. [ 348.526002][T22068] lo speed is unknown, defaulting to 1000 [ 348.550440][T22087] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5038'. [ 348.612817][T22112] loop8: detected capacity change from 0 to 4096 [ 348.640973][T22112] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 348.653976][T22112] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.5040: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 348.678085][T22112] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.5040: Bad quota inode: 3, type: 0 [ 348.691167][T22116] FAULT_INJECTION: forcing a failure. [ 348.691167][T22116] name failslab, interval 1, probability 0, space 0, times 0 [ 348.704228][T22116] CPU: 0 UID: 0 PID: 22116 Comm: syz.9.5041 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 348.704255][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.704335][T22116] Call Trace: [ 348.704343][T22116] [ 348.704351][T22116] __dump_stack+0x1d/0x30 [ 348.704373][T22116] dump_stack_lvl+0xe8/0x140 [ 348.704393][T22116] dump_stack+0x15/0x1b [ 348.704409][T22116] should_fail_ex+0x265/0x280 [ 348.704465][T22116] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 348.704487][T22116] should_failslab+0x8c/0xb0 [ 348.704570][T22116] __kmalloc_cache_noprof+0x4c/0x320 [ 348.704597][T22116] ? __sock_create+0x2e9/0x5b0 [ 348.704629][T22116] selinux_netlbl_sock_genattr+0x88/0x260 [ 348.704651][T22116] selinux_netlbl_socket_post_create+0x68/0x100 [ 348.704689][T22116] selinux_socket_post_create+0x214/0x2a0 [ 348.704724][T22116] security_socket_post_create+0x5d/0xb0 [ 348.704836][T22116] __sock_create+0x362/0x5b0 [ 348.704865][T22116] sock_create_kern+0x38/0x50 [ 348.704894][T22116] udp_sock_create4+0x66/0x2a0 [ 348.704967][T22116] rxrpc_lookup_local+0x824/0xc70 [ 348.704999][T22116] rxrpc_sendmsg+0x2f3/0x590 [ 348.705020][T22116] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 348.705043][T22116] __sock_sendmsg+0x142/0x180 [ 348.705091][T22116] ____sys_sendmsg+0x31e/0x4e0 [ 348.705183][T22116] ___sys_sendmsg+0x17b/0x1d0 [ 348.705213][T22116] __x64_sys_sendmsg+0xd4/0x160 [ 348.705293][T22116] x64_sys_call+0x191e/0x2ff0 [ 348.705312][T22116] do_syscall_64+0xd2/0x200 [ 348.705383][T22116] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 348.705408][T22116] ? clear_bhb_loop+0x40/0x90 [ 348.705460][T22116] ? clear_bhb_loop+0x40/0x90 [ 348.705509][T22116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.705528][T22116] RIP: 0033:0x7f683c83e9a9 [ 348.705544][T22116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.705603][T22116] RSP: 002b:00007f683aea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.705620][T22116] RAX: ffffffffffffffda RBX: 00007f683ca65fa0 RCX: 00007f683c83e9a9 [ 348.705642][T22116] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 348.705656][T22116] RBP: 00007f683aea7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.705668][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.705681][T22116] R13: 0000000000000000 R14: 00007f683ca65fa0 R15: 00007ffdbe533bd8 [ 348.705769][T22116] [ 349.000220][T22112] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 349.028506][T22112] EXT4-fs (loop8): mount failed [ 349.037424][T22122] loop5: detected capacity change from 0 to 2048 [ 349.122098][T22122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 349.259083][T22136] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.280296][T22141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5042'. [ 349.403173][T22136] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 470 with error 28 [ 349.416023][T22136] EXT4-fs (loop5): This should not happen!! Data will be lost [ 349.416023][T22136] [ 349.425942][T22136] EXT4-fs (loop5): Total free blocks count 0 [ 349.432131][T22136] EXT4-fs (loop5): Free/Dirty block details [ 349.438191][T22136] EXT4-fs (loop5): free_blocks=2415919104 [ 349.443964][T22136] EXT4-fs (loop5): dirty_blocks=480 [ 349.449438][T22136] EXT4-fs (loop5): Block reservation details [ 349.455539][T22136] EXT4-fs (loop5): i_reserved_data_blocks=30 [ 349.665293][T22160] sctp: [Deprecated]: syz.9.5051 (pid 22160) Use of int in maxseg socket option. [ 349.665293][T22160] Use struct sctp_assoc_value instead [ 349.689373][T22162] ================================================================== [ 349.697975][T22162] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 349.705247][T22162] [ 349.707737][T22162] write to 0xffff888237d1b830 of 8 bytes by task 0 on cpu 1: [ 349.715114][T22162] tick_nohz_idle_enter+0x89/0xe0 [ 349.720304][T22162] do_idle+0x3d/0x240 [ 349.724290][T22162] cpu_startup_entry+0x25/0x30 [ 349.729238][T22162] start_secondary+0x95/0xa0 [ 349.734104][T22162] common_startup_64+0x13e/0x147 [ 349.739162][T22162] [ 349.741485][T22162] read to 0xffff888237d1b830 of 8 bytes by task 22162 on cpu 0: [ 349.749202][T22162] print_cpu+0x502/0x680 [ 349.753580][T22162] timer_list_show+0x107/0x170 [ 349.758425][T22162] seq_read_iter+0x319/0x940 [ 349.763009][T22162] proc_reg_read_iter+0x110/0x180 [ 349.768124][T22162] copy_splice_read+0x3c4/0x5f0 [ 349.772981][T22162] splice_direct_to_actor+0x26f/0x680 [ 349.778368][T22162] do_splice_direct+0xda/0x150 [ 349.783133][T22162] do_sendfile+0x380/0x650 [ 349.787638][T22162] __x64_sys_sendfile64+0x105/0x150 [ 349.792928][T22162] x64_sys_call+0x2bb0/0x2ff0 [ 349.797711][T22162] do_syscall_64+0xd2/0x200 [ 349.802377][T22162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.808505][T22162] [ 349.810907][T22162] value changed: 0x00000051694748e8 -> 0x0000005169479a28 [ 349.818196][T22162] [ 349.820702][T22162] Reported by Kernel Concurrency Sanitizer on: [ 349.827124][T22162] CPU: 0 UID: 0 PID: 22162 Comm: syz.8.5052 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 349.839755][T22162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.850417][T22162] ================================================================== [ 349.897011][T21392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.