last executing test programs: 2m22.705705452s ago: executing program 32 (id=911): r0 = eventfd2(0x4, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, 0x0, 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f000086b000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0xf2116000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m20.823952115s ago: executing program 33 (id=936): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000ffffffdd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x24040400) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000002c0)=0x40, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x2e400}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 2m13.741202589s ago: executing program 34 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 2m13.385189128s ago: executing program 6 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_gettime(0xe20c6c34a41ee90b, 0x0) 2m13.380893268s ago: executing program 6 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7366e88ec0b96c3d, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="300600000301010600001980080002002c080000100002800c000280050000008d26145430d3f7f14211379a9105a008558e20739d745a72cf58a0cfe51ba766a1a0fe07f3e84c76f59ec4f710e5dd31ec17118c05689b7a4fa2070b1316267cde8fe0c7d9e308aca050a217a1aaba25b1578756e8ad111e78a2c3"], 0x30}}, 0x24000800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xa3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000230e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xeee, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x5, 0x3}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x5, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() 2m12.506998669s ago: executing program 6 (id=1053): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 2m11.738460142s ago: executing program 6 (id=1065): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 2m11.688548875s ago: executing program 6 (id=1068): socket$l2tp(0x2, 0x2, 0x73) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x40800) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380)=0x7, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0001}]}) alarm(0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) 2m11.01988494s ago: executing program 7 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e9000088ad521c000000000018120000b8f5d67698a36e4a5c6e1f1d6b35e143bef661cbdd9ae337d6d4cff35474ec00e14fdc455e18629a0fa6b0c24ca21ea57dc6bd32e376d4e7f9e76f868df9ebd42c5dea828327f0e9424ef233c3392e78ba678eadbec6fc8ffb69c4bff66b274b04ae7c1c73d739de31e02e7180bdf9c975a68e598f0a83c8", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x447}, 0x18) r7 = dup(r5) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000540)={0x23, 0x1, 0x2, 0x2001, 0x0, 0xffffffff, 0x0}) 2m10.949230376s ago: executing program 7 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) 2m10.868663282s ago: executing program 7 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 2m10.868286982s ago: executing program 7 (id=1079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 2m10.76741047s ago: executing program 7 (id=1080): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/96, 0x60}], 0x1, 0x5e, 0xfffffffd) 2m9.569007207s ago: executing program 7 (id=1098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7366e88ec0b96c3d, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="300600000301010600001980080002002c080000100002800c000280050000008d26145430d3f7f14211379a9105a008558e20739d745a72cf58a0cfe51ba766a1a0fe07f3e84c76f59ec4f710e5dd31ec17118c05689b7a4fa2070b1316267cde8fe0c7d9e308aca050a217a1aaba25b1578756e8ad111e78a2c3"], 0x30}}, 0x24000800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xa3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000230e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xeee, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x5, 0x3}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x5, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() 2m9.568576987s ago: executing program 35 (id=1098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7366e88ec0b96c3d, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="300600000301010600001980080002002c080000100002800c000280050000008d26145430d3f7f14211379a9105a008558e20739d745a72cf58a0cfe51ba766a1a0fe07f3e84c76f59ec4f710e5dd31ec17118c05689b7a4fa2070b1316267cde8fe0c7d9e308aca050a217a1aaba25b1578756e8ad111e78a2c3"], 0x30}}, 0x24000800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xa3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000230e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xeee, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x5, 0x3}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x5, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() 2m8.589009686s ago: executing program 6 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7366e88ec0b96c3d, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gretap0\x00', 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="300600000301010600001980080002002c080000100002800c000280050000008d26145430d3f7f14211379a9105a008558e20739d745a72cf58a0cfe51ba766a1a0fe07f3e84c76f59ec4f710e5dd31ec17118c05689b7a4fa2070b1316267cde8fe0c7d9e308aca050a217a1aaba25b1578756e8ad111e78a2c3"], 0x30}}, 0x24000800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xa3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000230e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xeee, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x5, 0x3}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x5, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() 2m8.588835006s ago: executing program 36 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7366e88ec0b96c3d, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$eJzs3V9rW+UfAPDvSdv9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IEDnpSZe1SZp2qanN5wNne56ckzznyXO+T57nnKQngIF1Mv0nF/FyRHyVRIw1rRuObOXJte1Wn96eSZckarWPf0/iwobXSrL/R7PMSxHx8xcRZ3Kby60sr8wXSqXiYpafqC7cmKgsr5y9tlCYK84Vr09NT59/c3rqnbff6lldX7/857cfPXz//JenVr/58fGx+0lcjKPZurRePSjiTnPmZOHvLDUSFzdsONmDwvaSpN87wI4MZXE+EmkfMBZDWdQD+9/nEVEDBlQi/mFANcYBjbl9j+bB/xlP3lubAG2u//DauZE4VJ8bHVlNnpsZpfPd8R6Un5bx028P7qdLdD4PcXiLPMC23LkbEeeGhzf3f0nW/+3cufrJ4842ljFonz/QTw/T8U9yJ2JT/OfWxz/RYvwz2iJ2d2Lr+M897kExbaXjv3dbjn/Xu67xoSz3v/qYbyS5eq1UPBcR/4+I0zFyMM13up5zfvVRrd265vFfuqTlN8aC2X48Hj74/HNmC9XCi9S52ZO7Ea+0HP8m6+2ftGj/9P243GUZJ4oPXm23buv6767aDxGvtWz/Z1e0ks7XJyfqx8NE46jY7I97J35pV36/65+2/5HO9R9Pmq/XVrZfxveH/iq2W7fT4/9A8kk9fSB77FahWl2cjDiQfDg8uvHxqWfPbeQb26f1P32qdfx3Ov7TydenXdb/3vF7bTfdC+0/27H9D8fz7b/9xKMPPvuuXfndtf8b9dTp7JFu+r9ud/CF3jwAAAAAAADYY3IRcTSSXH49ncvl82vf7zgeR3KlcqV65mp56fps1H8rOx4jucaV7rGm70NMZt+HbeSnNuSnI+JYRHw9dLiez8+US7P9rjwAAAAAAAAAAAAAAAAAAADsEaNtfv+f+nWo33sH7Lr6jQ0OdretG73D/rLlLf97cacnYE/aMv6BfWv78e/MAOwXPv9hcIl/GFziHwZXt/E/MrbLOwL863z+w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBTly9dSpfa6tPbM2l+9uby0nz55tnZYmU+v7A0k58pL97Iz5XLc6Vifqa8sNXrlcrlG5NTsXRrolqsVCcqyytXFspL16tXri0U5opXiiP+2DAAAAAAAAAAAAAAAAAAAABsUllemS+USsVFibaJC7EndqNFolar1dJWfOEKrtnR04f7/SZI7Eqiv/0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT7JwAA///YgzPG") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gretap0\x00', 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="300600000301010600001980080002002c080000100002800c000280050000008d26145430d3f7f14211379a9105a008558e20739d745a72cf58a0cfe51ba766a1a0fe07f3e84c76f59ec4f710e5dd31ec17118c05689b7a4fa2070b1316267cde8fe0c7d9e308aca050a217a1aaba25b1578756e8ad111e78a2c3"], 0x30}}, 0x24000800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xa3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000230e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xeee, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x5, 0x3}, 0x10, r6, 0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{0x5, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x3, 0x8}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() 2m4.419197125s ago: executing program 8 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e9000088ad521c000000000018120000b8f5d67698a36e4a5c6e1f1d6b35e143bef661cbdd9ae337d6d4cff35474ec00e14fdc455e18629a0fa6b0c24ca21ea57dc6bd32e376d4e7f9e76f868df9ebd42c5dea828327f0e9424ef233c3392e78ba678eadbec6fc8ffb69c4bff66b274b04ae7c1c73d739de31e02e7180bdf9c975a68e598f0a83c8", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x447}, 0x18) r3 = dup(r1) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000540)={0x23, 0x1, 0x2, 0x2001, 0x0, 0xffffffff, 0x0}) 2m4.342112691s ago: executing program 8 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 2m4.11016681s ago: executing program 8 (id=1165): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x40004) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x1, &(0x7f00000002c0)={{}, {r0, r1/1000+10000}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, &(0x7f0000001b80), 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000ec0)) r8 = accept4$llc(r6, &(0x7f0000000f00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000f40)=0x10, 0x80400) sendmsg$unix(r6, &(0x7f0000001080)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="12925b824ff8c56eb566c8c238077d2550b2bf21fa57b15a8faeefb38504aa5be2ae1aebe96f6820f4ff863a116e45d53d66865a5f8af32de79f069d36435ccba616ae5bbf05464e2386002ef9c846fdfdd1cde8f3f01b0f8cd95a746c86290b0ba0c1898120d8ae979ee966f784030fd0a8d1d9d06fd96d35b2e6bfcbdd5e4fa665f9ca393041afc7762a69130799c1b959dc41371086d19439186cb3b84b8baab4307a51ccc2a9a67ba341d2452384768d06725883291018234273297ece96a29d033868d8901b6902cf86f4bc8a772c1587c93b4ab4a54420c113e8e01bf3478fc302bf7a5506a1a8f3053d6a9508cd68ff860a", 0xf5}, {&(0x7f0000000780)="ba2e4fd09ca7157dff38b5a0263769bc97c383d5c8965f315d253a3389e55a8421e2cc513e8cf1279ced22b1a6136e5db4eae6ae1a06b60d678fdc5f74d4c8df3c3dcac538299a11b96d7deeffcf977a3ddb8462bd021ea3c39be9737e05e78d989fda0c11972c1bd67ca7240ade231c5a5863c9d381da6dfa56664846cad087", 0x80}, {&(0x7f0000000900)="844afd812755157ce3816a5c990442b90177fef418bb3c17dce7242fd5f1188c0c247c36d311eee41cf8b5475add351b84a0a5278bfbf392f0432bc6d168bf397ae5b1e8011740213fbe088b590e218660b81930068ca5ba753dcbf27dbc1defc11fcb048c9b8d1989984b614ae26d41032a9e0caa4b2bdfc7c6f6e4b6a4614ace1a39e8337bf8efa9e43338bb9cbeedd25d8728f39cf7204e4244aeb49a0184e9765e530a740072b81f733525d9f5de6dd2e01a88d86b155a0f0c7b560ffbdb4404810b74237a3b0e978ef717a0f3410e54014b3f5885c61139312bf9197492983b5ef83135", 0xe6}, {&(0x7f0000000380)="6c43739df4606212148fbc7cce959ea27cbc39b2ca4a0be8ce7ddcbd1c144150b8afeac487e431f7f38fd2bf8ddb6fdb6e749744380ae0ef", 0x38}, {&(0x7f0000000a00)="9a2e6a97d7e12d73535bf14685d46a7934a4ded6d80c14c4d33437aa870ac9b0332bbd7c14111bda5e6f512630ffe9c1b8a9e819f1ae9776c00bf5e0513e1668d66c8670f3a67e7abaf3e78602c9b88cbde678cf519a1e1df683fadaf4bc7529b75f7ba6319389a08b3147a31c143ebd5ec1816b482d0e4450dedf3117502c1dca909f308926d25f18b6698878a601d67f1ffbcaad02d3197a459a09c64deed461189c6dd5d464121dff020019af9a8ad9dc230045db6b0fb245f0c3ddb5697f4a770e26ed48a2edc2bd", 0xca}], 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="000000160679008f0fa2c9a9319b3e89af06540e1c6bda62b811e6af"], 0xf8, 0x10}, 0x44) connect$inet(r6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x18) io_setup(0x490, &(0x7f0000000000)=0x0) r12 = io_uring_setup(0x6001, &(0x7f00000003c0)={0x0, 0xeec1, 0x800, 0x2, 0x249}) close_range(r12, r12, 0x0) io_pgetevents(r11, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r13 = eventfd2(0x3ff, 0x800) io_submit(r11, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r12, 0x0, 0x0, 0x2, 0x0, 0x1, r13}]) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 2m4.035091366s ago: executing program 8 (id=1171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000540)='./file1\x00', 0x400100, 0x3a) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000300), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xffc0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r9}, 0x18) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 2m3.913147346s ago: executing program 8 (id=1174): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0xffff, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x6b}, 0x2c044004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='f2fs_iostat\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x27, 0x3}, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="040100001a00070025bd700000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r4 = syz_open_pts(r3, 0x141601) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") 2m3.637477338s ago: executing program 8 (id=1184): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf253b0000000600cd0007000000eb534e9420fc15e7d14c173dbed88a4e96bdb6f74c2899c619c51608d8f6520cdf9168afa6a41079adddcf4097d7d676bb309d8ccab7b7a5ba1e4465957dd2ea224d05118f3b7e8e3274281eda7490d0d58ee3094a290f450b69a659a08ecf5a1c501053e1cad00d3e3915f5b14d4b26b1f4cbcc247fa193b70f2c37786f4c6030278822614c541ba1f49b26"], 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0xc0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) pipe(0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r9, 0x0, 0x0, 0x8000c62) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xffffffffffffff2c) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, r11, &(0x7f0000000480)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f0000000a00)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@acl}], [{@pcr={'pcr', 0x3d, 0x34}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt}, {@appraise_type}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) 2m3.570845974s ago: executing program 37 (id=1184): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf253b0000000600cd0007000000eb534e9420fc15e7d14c173dbed88a4e96bdb6f74c2899c619c51608d8f6520cdf9168afa6a41079adddcf4097d7d676bb309d8ccab7b7a5ba1e4465957dd2ea224d05118f3b7e8e3274281eda7490d0d58ee3094a290f450b69a659a08ecf5a1c501053e1cad00d3e3915f5b14d4b26b1f4cbcc247fa193b70f2c37786f4c6030278822614c541ba1f49b26"], 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0xc0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) pipe(0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r9, 0x0, 0x0, 0x8000c62) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xffffffffffffff2c) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, r11, &(0x7f0000000480)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f0000000a00)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@acl}], [{@pcr={'pcr', 0x3d, 0x34}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt}, {@appraise_type}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) 1m55.735761179s ago: executing program 3 (id=1294): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m55.72054641s ago: executing program 3 (id=1295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newlinkprop={0x28, 0x6c, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x50, 0x14}, [@IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000804) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1078"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) 1m54.811211523s ago: executing program 3 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000800)='\x00.-&]\xe1\x19\t\xe88\xces`Z1\\\x98\x8b1\xb9\xc9\xe6\xf1\x94\x1e[\x8bs\x94\x80\x96\xf2\x02\x98+vv\x8a\xf7D\x19\x8cd\xa6\a\xe0S\xda2\b\xf1\xb5\x17V\x04\fm\xe4?0\x0fL\xc5\xba\xbb\x1di+Q~\xfa\x9a}m;\xe1\xcef8\xa0\x04\f\x15\x82!-\x91\x81\xac\xa3::\xc6\x9b\xa2\x13\xde&\xc4\x80\x8c\x15\x01\n\x81\xbf1\x96$\xeeQ\xe7\' RI\x1f\x00'/133, 0x0) close(r2) 1m54.805277194s ago: executing program 3 (id=1303): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000540)='./file1\x00', 0x400100, 0x3a) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000300), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xffc0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1m54.691195243s ago: executing program 3 (id=1306): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f0110000", @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf258900000008000300", @ANYRES32=r3, @ANYBLOB="c8031d809c01008005000700b900000005000700450000000c00020008000000000000006c010d806000018023000100301b240918606c120024160c6001046c0b04042405241830010006041b035a00300002002a1a322a0529112c010c2b0e39302a423a2006054631173c2c2153521b4f0b56405341232f48373c3b36161805000600000000000c00028005000700010000002c0003801400050002000f000900ff070100f4e88183090014000500090008005000ed120600020001000000240000800500070002000000050007000000000005000600000000000500070000000000ac00018016000100060148030c1b6c6c6c486c386c60164860040000170001000b1202053005301b05121b2860060b59011802001200010001011b183602623606060f090516000005000600000000001400050003000100a1080800070003000400050005000600010000003e000200485157150043490f2a3f090014245311014b571751053b4045090c1c4a1a110020323110304a301155064c044f0f09080349544129544b2042540000050009000100000005000a00010000001400008005000c0002000000050008008e000000c801008005000800f100000005000b0000000000050009000100000005000b000100000006000500e2000000050008005c00000094010d808800018014000500000000026dfb090040000900000001014f000200201b434651033c0209520944064043394a240b011111182d3920dc4f4f452e44060d3a2b0e1d0b0004322e304730571e1a0c210c323248414a1d1624532237124d350f1f0301504f260816000500040002000000180002002532104e363326380243373a41264f072c53293f88000180100001001648060f124803010204031805000700000000001400030058f60900440400000700feff0000000014000300b30805000000020008000800ffff510005000400010000003c000200123040182001101e35474e1b4c38114f56371d2e160133200230241330212817322eba032e1c031957363d08311e3f211f352119203624350c000380050007000000000020000280050007000000000005000400020000000b00010016160916160c18002c0002801400030000000200cb60ff0fff0f05000400ff7f05000700000000000b0001000c0b180400366000280000801100010036553060060506016001062436000000050004000000000005000600020000001800008005000b00000000000c00020007000000000000001400008006000500f90000000500070043000000200000800c000200ff070000000000000500060001000000060005008a000000c8001d80180000800c000200040000000000000005000700f9000000380000800500080092000000060005000300000005000b0000000000060005009d000000050008000b00000005000b00000000000400040014000080050009000000000005000600010000004c00008006000500790000000c0002000400000000000000050008000d000000050007001b00000005000700dc0000000400040005000a0000000000050008007800000005000800a800000014000080050009000000000005000c000200000078041d804c000080060005003f00000005000600010000000c0003001000000000000000050007000100000006000500aa00000005000a00000000000c000200300100000000000005000c0000000000cc03008070010d80b80002801d000100060018480309241b09010b4836050b1b1b046c0924241612030000000e0001003602300c06036c093618000031000200490834171d163f34494c16421815184d003951204230575002384b21023951114a211d220415564e0956164d3b0000005000020040423a30244d391b501652450f394b01181e31421f0c1946301245013738174c132d272e151e20010c2e4e0b35400004314e4f281a3e08574a4043393a4f1f46491755324d53220c49100c2a4000008017000200164a3e09464a37180a2a303024be4f4b189411c83111c13d47feeec490282a401b160100050007000100000014000300ff03ff0305000a00070007001e0eff0105000600000000000c0002800500060002000000500001800b000100300900161b30040005000400010000000500070000000000050006000200000005000600010000000500060002000000050004000100000007000200441a10000500040001000000180001801400050002006e3509000400060002000800030058020d80180000800500040002000000050004000100000004000100200002800500060001000000140005000300fc0027bcdc0000081e00010105008c000280100001003648022401030b041b6c0c6a0500040000000000190001006c2406410124486c00601618040136041b0912306c0000001400030000800e000200040007000900010003000500070000000000140003000100090004000900ff0f0040070002000500070001000000050007000200000014000300b80003000300ea080e001000001004003c0001801400050061479500250696f00100040004000300240001004848180248053503090404180c020c606c30180b030530120630051b364806061400008005000700000000000500040002000000740002801600010018060b000c12300305043030161b483b411600001400050002007c020c00b509050001005e0bf7ff0500060001000000180002003c4b114e21340921430b031d3315381842210d22130001001b240c060b010616091b0616481b03000500040002000000050004000200000050000280050006000200000005000700010000000500040000000000050006000100000005000400000000001400030000000400f8ff0900feff030004000100050004000200000005000400010000002400018020000100010d18121236063016040b04060924240c186018241818481b0c4601580003800500060002000000050006000100000005000600010000001400050003000104000008000700800000800c002700020046415151445644233b43440f4d06392109271a570038092c0729412e18224b32101d51005c000080050007003f00000005000a0000000000050009000000000006000500c80000000c000300810000000000000005000c0000000000050009000100000005000600010000000c0002006504000000000000050006000100000044021d801c0000800500060001000000050008003500000005000600010000001400008005000700a300000005000700320000004000008005000a0000000000050009000000000006000500b3000000050008005b00000005000c000100000005000c00010000000500060000000000040004000c00008005000b0001000000600100800500060001000000bc000d80940000803300020020453255522c1c050b07561d341906124008462b3f2a1902562e533b370b282d2926575645332d4b27204433431a210014000500f00a08000c000f00c00107000600040005000600020000003d0002000a4b182c5232460f51083006051d3e0a534520060b080903284a453311052f1310542050130a510c28342d034a3d1c56540c061a36471a2b41000000240003800e000100161816366c120b30360e0000050007000200000005000400010000006c000d80180002800a000100011824246c6c00000500040000000000500003800500040002000000140005000700ffff0100c4000600040081000400050004000100000014000500f0fff9ff06007880020004000400070009000100056c030230000000050004000100000005000c000200000005000600010000000400040005000c0000000000040004000c0002000000000000000000640000800c000200f50000000000000005000a000100000010000d800c000180050007000200000005000600000000000400040005000c0056000000050008008300000005000600010000000c00020004000000000000000c000200080000000000000048001d802800008006000500c4000000050007002c0000000c000200ff0300000000000005000600000000001c00008005000b000100000005000b0000000000050006000100000040061d805c00008044000d801800028014000300030025080200bc9c10000004656706002800008012000100600960161b0104015c04487b043000000500060000000000050004000100000005000800a80000000c000200f6030000000000000c0000800500090001000000d40500800500060000000000c8050d80e800018005000700010000001400030006002a950300050003007f000100040010000100e806058b60606c09306c0c163a00020000501c1b2b1850014b30494e2f1a322b4b4201564d3f013f4e4d051700435357483a1949350f204a3c3c3c374d404706534f501e183000001400030001000700040007000000030000000800510002001b371502162b110f44034147201401510900304418521a13152e4120062d1a5701433c164b1b38d53f405451413f28030c57233f090e393f48151140064d3e044e1a06264d03330b0b0a403d430000001400030040004100060003000600040008000100980001801400030008000e00abf6ff010500080004000700180001000b1b48366c316c363612180c040430300b09241b4d000200101c1e3b543338122c1d18440856111b37440e093719182d554805520e0449423e48191f481453400a192010481b3836413648404a312e4111330248571d0607491c342e400957490f000000050004000100000005000700020000000500060002000000a40001800500060000000000050007000000000005000100000000003e000200570f312c11343c510f30081c3d2f38320f39332253401940223f351047413b254901544854463f20130d0b450d38550428072c5633081d56114200000500060001000000140005000500db000000006080ffb600040006000500070002000000050006000100000005000600020000001400050008000600000000040300030005000900840000800500060000000000050006000000000005000700000000001f00010004600c48121b1b060b36300006040916042403020b050200027e00003d0002001f4d4728531210563d10282b1111100b3a33520f283805180608152010284c472a2c285223054c411a2c48253146361c46170b2d414d3b493800000005000600010000006400038014000300ff0002000c00ff01a8fa050000080000210001000101240b046060123048060b04031b0009166c761602300401090104030000001e0001000b0303160518010106040109063603012909161b240c0b061b6000000500070000000000d4000280490002000d251e313a3605043109564221083d0102241b4b2d18031c112c0330574d3713502b24381535552840440405342f060b471c103a4508253426454d110d3849183614210a20000000050007000200000014000500080000000700f502ffff040000000000310002003a1239110e1b1c10010756470019204f1d431a3a5050010a013d10193b500e4e1a05410850380e17081f032d2e00000005000700020000002c000200442b0709320914363542161b4f00440016152c2d035731264a232250400233042600413950393c1f94000280140003000c0000000400fefffcfffaff04000400170001001244036c0605241816481201040b6c1b363612001400050009000180080001000c0000004000ff0750000200521d4e014323301c0d481756064a365353224b17345529214f1801350808080c201d183c57204c3512334e0e2529324f4946193a332710071a061a4b23264f35501001460b351f2d484b21369800028005000400020000000500070000000000400002003d1212550b294d1c3823454634192b20092e46264d09191f51355110541b20571320113e383447fb17083a074d05183d4e4d24110e3120503a133e4c05000400020000001b0001000c010b6c603003241b01030524242430301609050c48360005000600020000001700010006181b244830603002060b05040b1b4802020300b800038035000200540a541804533138534e464855471e5232181c3548013b54353e1a474516214009020f10160726313043105114002547390000001300020012474f3037242b29402d40403d10410005000700020000000e0001000b0424121b0501600b0b00001f000200263b432e2249c5313940280e092f3e053a1b38224d151152101c01000900020042461a432a000000140005000010070004006d0afcff000002008308"], 0x11f0}, 0x1, 0x0, 0x0, 0x24000003}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xb10, 0x7}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000ff77c32071cc0000000061114800010000a9b35c4f846f9f120000002008000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) chmod(&(0x7f0000000340)='./file1\x00', 0x0) epoll_create(0xaf2) 1m54.559414274s ago: executing program 3 (id=1308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 1m54.547033855s ago: executing program 38 (id=1308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 1m52.606938902s ago: executing program 9 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) fcntl$setlease(r2, 0x400, 0x1) socket$nl_route(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)="b5087fec0c8a34feeff6ec1c732be40167fd3b6b2288873e8ef2bd0f0d70d71e7f096f4c7c659828f03bb258151faec59d77b390587482f6f64ddede594c", 0x3e}], 0x1, 0x200, 0xff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x2) syz_clone(0x402c1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x97ff) close_range(r8, r9, 0x0) 1m52.442929185s ago: executing program 9 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@empty, @multicast1}, &(0x7f0000000300)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb3, 0x8, 0xfffffffffffffe8b, &(0x7f0000000500)}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=@gettaction={0x1d8, 0x32, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbbe5}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0b}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5326}]}, 0x1d8}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0xc, 0xab, 0x55, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x80, 0x6, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000780)=ANY=[], 0x498}, 0x1, 0x0, 0x0, 0x24008840}, 0x4855) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x54a96028aca04fc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={0x0, 0x7}, 0x210, 0x2, 0x0, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lstat(0x0, 0x0) keyctl$reject(0x13, 0x0, 0x10, 0x960c, 0x0) lchown(0x0, 0x0, 0x0) 1m52.415448377s ago: executing program 9 (id=1336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 1m52.383652101s ago: executing program 9 (id=1337): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000540)='./file1\x00', 0x400100, 0x3a) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000300), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r8}, 0x18) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1m52.329563105s ago: executing program 9 (id=1339): eventfd2(0x4, 0x80800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2c, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000085e048e0000000000000109022400010000800f0904000004030000000921"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m52.036223478s ago: executing program 9 (id=1343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000540)='./file1\x00', 0x400100, 0x3a) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000300), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r8}, 0x18) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1m52.035310809s ago: executing program 39 (id=1343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000540)='./file1\x00', 0x400100, 0x3a) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000300), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r8}, 0x18) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 4.123966156s ago: executing program 5 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x40) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 4.062333141s ago: executing program 5 (id=3429): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a80)={0x0, @broadcast, @broadcast}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x6, &(0x7f0000000bc0)={@loopback, 0x0}, &(0x7f0000000c00)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18d}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001cc0)={0x5e0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x454b04ec228a18b2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "284ecd1ad0c86c5c69e9b6f608934ce476fde2632800d7e3cdad12801f1925c47f39edfb27305a133a6984de82ac8347e2259f92115ad589845318e0d1b20d87fc1339880335e3c6e4999083121172407022ba7eb3c562a943f27c8ade2a7153b64c1b467fa82a9ca32bdf8f13540086afd386b409b31ca173445d941ac6726553a60843d2bfab8c7b20932fa40275f2b7de2e1ee9e1161ce45348c5f60ebb07c23c9ee4ec0de57f183116fcc619cd28111cca1bb68474c891b6bff6b66a0acb06fe8248584dc788c33905d631f52a985a57d45a627eb1b9ce107b5683dfb8b1908867c1f179ea759123fcd1b2af4e7f84861b"}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "10875f7f2ebc1023bf32a8c99566112a9ecaaeac2c1eb32516772055f08f9f3d7bcd287cd818969aa85d2515ba04c0fd268b709343e169421470f0df6c3da8d3fce48d1edbeb2f1196e45ddddb1f655d5300351a2878ffea4682bb5217a3d6d8ca4654214f23e4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "a6917715001df76041230a3dbd03f6093e6809d64bee715b3f14bb97fb8502cf061e7ad7a2728c18fb6249c4c913e52f3872acf7af0a214c9915701cea2f0a34ec3ccab6010aa4ba1ea988a95f1d7eb5eb1397e7cf92ad5c50af82fd36c29c7f152800714a13e74fb5f5cf70ee128c334d9af8da48fe45b2135a2f8b05f743e6b9ee5cff76fc1e9a83220a6b747f933cc25f46b10382446d467f030e3304db9b84ca52d598236eabdf510db6e109811c010d675614a58afd269fd934f30585190fbdfea276ee"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x640c}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\x00'/11}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'seclabel'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'audit'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\x00'/12}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9329}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff40367}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe972}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'journal_path'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$}:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'obj_role'}]}, {0xac, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, 'err=remount4ro\x00\x00\x00K.v\xde\x00\xcb1\xc8\x9b\x0f\xaf\xdbV\xb4\xdd\x8e\x1a\x8e\x11*v\xc1\xfb\xc1F\xe2U\\%\xf7\xa1x\xe3\xce\xb1.\xbd\xe6\xaeBYc\x99u\x0e5\xa6@\xf3\x16\xd2G\x8aM\xe4\xbaL\xb4\x89\xef0\xd3\xb6q\xc3kn\x84\x9cay\xf2\"\xc7Z\xca\xdcc\xf1z{\xa7y\x8d\xe6\xa7\xfaBp\xef\x04\x1d\xb6\x8f\xa9?R\xd6\bf\xe8&\xc80?\x82\xd4\xca\xeeQ'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "462bd1b39850ff78570ced6f102018"}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "979cba5b9a7bb1e8b62ac316cec66a68bcd3f411c47207916020c63ebb437a0d316ad36b"}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "f927c71eaca25be4abeceef743b9758935bdb2fbd1534f6a4befb137f6ee0026cb756f036851e118642dc635b110587d581a960931ee28533b1fc633e112e37185cf844ab5315f43b29104e81959de5e1223c8447e943702e4450d4dbfc27a0840593eaccab3bebe4ac9c58fd3cead1d3a56c6f1624a6f82c9146df212e6adc49d3d12720daf508a72717fff23243e973bc86605c14ad0dc1ac17ae0a11ad81679"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\v\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000ffdbdf253100000008000200", @ANYBLOB="08000200", @ANYRES32=r13, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$selinux_load(r14, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x43) 3.779639924s ago: executing program 5 (id=3438): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r3}, 0x18) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 3.545543313s ago: executing program 5 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) pwrite64(r2, &(0x7f0000000f80)="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", 0x1000, 0x80000001) 3.404356834s ago: executing program 5 (id=3448): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0xfffffdfa, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000010000000000a000000000000030000000008001e0001"], 0x24}}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 2.892776856s ago: executing program 2 (id=3457): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@local, @in=@private=0xa010100, 0x4e23, 0x4, 0x4e22, 0x6, 0x2, 0x140, 0x80, 0xc}, {0x2, 0x5, 0x3f1b, 0x1, 0xfff, 0x0, 0x800, 0xc}, {0xa, 0x493, 0x4, 0xffffffffffffffff}, 0x1, 0x6e6bb4, 0x2, 0x2c632a63dc2cc236, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x70, 0x400, 0xffffff01}}, 0xe8) 2.784574315s ago: executing program 0 (id=3459): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) creat(&(0x7f0000000c00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1dc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000b466f7108ea142f8cc89bca3611fb791643a5ee4b116027ba10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd68493e4edef3d93452a92307f00000e970300000000", 0xd8}], 0x1}, 0x48002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.642298226s ago: executing program 2 (id=3460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0xfd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x92, 0x1, 0xc, 0x2, 0x6, 0x80, 0xa0, 0x4, 0x4, 0x0, 0x3, 0x6, 0x1}, 0xe) socket(0x2, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000f4ff030000000000140000004500003800660000000190780a020100ac1414aa05009078e0000002450b0f6c0065002f05060001ac1414bb64010101fdf0325a930e2fbc"], 0x46) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 2.262400447s ago: executing program 2 (id=3463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f0110000", @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf258900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x11f0}, 0x1, 0x0, 0x0, 0x24000003}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xb10, 0x7}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000ff77c32071cc0000000061114800010000a9b35c4f846f9f120000002008000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) chmod(&(0x7f0000000340)='./file1\x00', 0x0) epoll_create(0xaf2) 2.072132442s ago: executing program 4 (id=3467): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000b00)="0938abbbd81be50ee010aa94519a2d68ae3c76534022ad27670410ca7053e951f9c900a439ee3769ea335b8f4d6e78b162f8aa0271aa217c81359f5185f701160876e44362f98726ca5cc2d5ce950a9adeaee8e17a9d5e7a129fb03f70e6c4392122687db972027dc337f19670f94e7f6f7f294397152c505b032decd13cbc06aee1c124556ed9a99ce589fdc85e2f80e8d8dde68f3c2f469a50038760e64cdbd800465edd2932d9f980d9d15c6bb66f56b518af9af5623122edefa1c048818213e7b585ff66ee29e91c53a3", &(0x7f0000000380)=""/37}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x4808, &(0x7f0000000140), 0x1, 0x52c, &(0x7f0000000e80)="$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") rmdir(&(0x7f0000000180)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@local, @in=@private=0xa010100, 0x4e23, 0x4, 0x4e22, 0x6, 0x2, 0x140, 0x80, 0xc}, {0x2, 0x5, 0x3f1b, 0x1, 0xfff, 0x0, 0x800, 0xc}, {0xa, 0x493, 0x4, 0xffffffffffffffff}, 0x1, 0x6e6bb4, 0x2, 0x2c632a63dc2cc236, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x70, 0x400, 0xffffff01}}, 0xe8) 1.788347295s ago: executing program 0 (id=3471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYBLOB="0cdd1ff972dae5673cd32332499f8308206b12d757a0100de9a05d853d394c55f771dd47353d1a26ea217f9db6566a7309379d2004378832befed5202e2097f4e3fbbd9fd5b3f47a67b632b2a2bf27d1cf803c66c5d16c1e1a894153ded1b71918500319e2df27f1d681ed144ac3e00cc21ab1a79d5cfa72ffb2656ab80e7819f2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000300)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, 'system_u:object_r:groupadd_exec_t:s0', 0x20, 0x2, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x8a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 1.658289646s ago: executing program 4 (id=3472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.594358901s ago: executing program 4 (id=3473): eventfd2(0x4, 0x80800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2c, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r3, 0x8182) close_range(r2, 0xffffffffffffffff, 0x0) 1.593232161s ago: executing program 2 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), 0x0}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 1.400513327s ago: executing program 2 (id=3476): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r1}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25120000000800060007000000680001801400020073797a6b616c6c6572300000000000001400020065727370616e300000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000005c00018008000100", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="08000300021700b35c000300020000001400020076657468305f746f5f7465616d0000000800010038277e0be4617b406b08ff16bee18d8d39164418ab07ba1370e3be0ba8c7af0f05e27b6db95559517a3d69167ca377df74e2272fb663", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020070696d3672656730000000000000000008000700090000000c0001800800030001000000080006000700000034000180140002007465616d5f736c6176655f3100000000", @ANYRES32=r7, @ANYBLOB="140002007069"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="7bd6b5a9cba0821721db661f9d3f68cc4811741438faa3b6a7852913b56291e126a27de35476dc70fc88a23cbcab", 0x2e}, {&(0x7f0000000740)="3733286b4c3123a65b9132bd899e0e0821ad0e4d54214d950210d2de08321d87e76ca61bd00fa9e487365dbef4a3bf3a780ac333b7fa0eea8e1f0265e973e1b39f3ec38d2f49b04fa74ca10fbb7b3b5f17f85ced1dc474ce37ff93dd0428a09dabc6046638575662fcc7c626ac86625a793b23c2ed0884859eb2cbb02759966cfe4d08786192b44361719f90", 0x8c}, {&(0x7f0000000800)}, {&(0x7f0000000a00)="43efec5b1e8fe840525d43fc68566b2d65c1e74a39241177e8c371a98bfbba9810af1e27b1277a7d3e7f761bdcd42483c8238f77f367608395916a2a3ab960a2e0b049", 0x43}, {&(0x7f0000000a80)="482fc8159da017a9220d098780e430aecb484e327ee4ecb3ce909816e9a297c762062cd9dd22e4bd4c66a2e9cd1ec9fb8de5c437be72ea0cb87877e9e23ecd6bae6d612aca66", 0x46}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000000000001000000040000000000000014000000000000000000000001000000b2de0000000000005000000000000000000000000700000001443c296164010102fffffffa7f000001000000020a01010200000007ac1414bb000000087f000001000004f4640101010000000864010100000000090000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ffffffff6401010290000000"], 0xa0}}], 0x2, 0x2400c042) 1.307938854s ago: executing program 2 (id=3477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getrlimit(0x1, 0x0) setreuid(0xee00, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, 0x0, 0x0) unshare(0x64000600) 1.298529425s ago: executing program 1 (id=3478): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a80)={0x0, @broadcast, @broadcast}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x6, &(0x7f0000000bc0)={@loopback, 0x0}, &(0x7f0000000c00)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18d}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001cc0)={0x5e0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x454b04ec228a18b2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "284ecd1ad0c86c5c69e9b6f608934ce476fde2632800d7e3cdad12801f1925c47f39edfb27305a133a6984de82ac8347e2259f92115ad589845318e0d1b20d87fc1339880335e3c6e4999083121172407022ba7eb3c562a943f27c8ade2a7153b64c1b467fa82a9ca32bdf8f13540086afd386b409b31ca173445d941ac6726553a60843d2bfab8c7b20932fa40275f2b7de2e1ee9e1161ce45348c5f60ebb07c23c9ee4ec0de57f183116fcc619cd28111cca1bb68474c891b6bff6b66a0acb06fe8248584dc788c33905d631f52a985a57d45a627eb1b9ce107b5683dfb8b1908867c1f179ea759123fcd1b2af4e7f84861b"}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "10875f7f2ebc1023bf32a8c99566112a9ecaaeac2c1eb32516772055f08f9f3d7bcd287cd818969aa85d2515ba04c0fd268b709343e169421470f0df6c3da8d3fce48d1edbeb2f1196e45ddddb1f655d5300351a2878ffea4682bb5217a3d6d8ca4654214f23e4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "a6917715001df76041230a3dbd03f6093e6809d64bee715b3f14bb97fb8502cf061e7ad7a2728c18fb6249c4c913e52f3872acf7af0a214c9915701cea2f0a34ec3ccab6010aa4ba1ea988a95f1d7eb5eb1397e7cf92ad5c50af82fd36c29c7f152800714a13e74fb5f5cf70ee128c334d9af8da48fe45b2135a2f8b05f743e6b9ee5cff76fc1e9a83220a6b747f933cc25f46b10382446d467f030e3304db9b84ca52d598236eabdf510db6e109811c010d675614a58afd269fd934f30585190fbdfea276ee"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x640c}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\x00'/11}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'seclabel'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'audit'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\x00'/12}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9329}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff40367}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe972}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'journal_path'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$}:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'obj_role'}]}, {0xac, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, 'err=remount4ro\x00\x00\x00K.v\xde\x00\xcb1\xc8\x9b\x0f\xaf\xdbV\xb4\xdd\x8e\x1a\x8e\x11*v\xc1\xfb\xc1F\xe2U\\%\xf7\xa1x\xe3\xce\xb1.\xbd\xe6\xaeBYc\x99u\x0e5\xa6@\xf3\x16\xd2G\x8aM\xe4\xbaL\xb4\x89\xef0\xd3\xb6q\xc3kn\x84\x9cay\xf2\"\xc7Z\xca\xdcc\xf1z{\xa7y\x8d\xe6\xa7\xfaBp\xef\x04\x1d\xb6\x8f\xa9?R\xd6\bf\xe8&\xc80?\x82\xd4\xca\xeeQ'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "462bd1b39850ff78570ced6f102018"}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "979cba5b9a7bb1e8b62ac316cec66a68bcd3f411c47207916020c63ebb437a0d316ad36b"}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "f927c71eaca25be4abeceef743b9758935bdb2fbd1534f6a4befb137f6ee0026cb756f036851e118642dc635b110587d581a960931ee28533b1fc633e112e37185cf844ab5315f43b29104e81959de5e1223c8447e943702e4450d4dbfc27a0840593eaccab3bebe4ac9c58fd3cead1d3a56c6f1624a6f82c9146df212e6adc49d3d12720daf508a72717fff23243e973bc86605c14ad0dc1ac17ae0a11ad81679"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\v\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000ffdbdf253100000008000200", @ANYBLOB="08000200", @ANYRES32=r13, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$selinux_load(r14, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x43) 1.136908478s ago: executing program 1 (id=3481): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r1}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25120000000800060007000000680001801400020073797a6b616c6c6572300000000000001400020065727370616e300000000000000000001400020076657468305f6d6163", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000005c00018008000100", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="08000300021700b35c000300020000001400020076657468305f746f5f7465616d0000000800010038277e0be4617b406b08ff16bee18d8d39164418ab07ba1370e3be0ba8c7af0f05e27b6db95559517a3d69167ca377df74e2272fb663", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020070696d3672656730000000000000000008000700090000000c0001800800030001000000080006000700000034000180140002007465616d5f736c6176655f3100000000", @ANYRES32=r7, @ANYBLOB="140002007069"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="7bd6b5a9cba0821721db661f9d3f68cc4811741438faa3b6a7852913b56291e126a27de35476dc70fc88a23cbcab", 0x2e}, {&(0x7f0000000740)="3733286b4c3123a65b9132bd899e0e0821ad0e4d54214d950210d2de08321d87e76ca61bd00fa9e487365dbef4a3bf3a780ac333b7fa0eea8e1f0265e973e1b39f3ec38d2f49b04fa74ca10fbb7b3b5f17f85ced1dc474ce37ff93dd0428a09dabc6046638575662fcc7c626ac86625a793b23c2ed0884859eb2cbb02759966cfe4d08786192b44361719f90", 0x8c}, {&(0x7f0000000800)="c88510c5ce458a8885b62fbd90c1040630", 0x11}, {&(0x7f0000000a00)="43efec5b1e8fe840525d43fc68566b2d65c1e74a39241177e8c371a98bfbba9810af1e27b1277a7d3e7f761bdcd42483c8238f77f367608395916a2a3ab960a2e0b049", 0x43}, {&(0x7f0000000a80)="482fc8159da017a9220d098780e430aecb484e327ee4ecb3ce909816e9a297c762062cd9dd22e4bd4c66a2e9cd1ec9fb8de5c437be72ea0cb87877e9e23ecd6bae6d612aca66", 0x46}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000000000001000000040000000000000014000000000000000000000001000000b2de0000000000005000000000000000000000000700000001443c296164010102fffffffa7f000001000000020a01010200000007ac1414bb000000087f000001000004f4640101010000000864010100000000090000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ffffffff6401010290000000"], 0xa0}}], 0x2, 0x2400c042) 924.455475ms ago: executing program 1 (id=3482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e74657200"], 0xc4}}, 0x20050890) 842.706972ms ago: executing program 1 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 779.731187ms ago: executing program 1 (id=3484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 744.25075ms ago: executing program 0 (id=3485): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000b00)="0938abbbd81be50ee010aa94519a2d68ae3c76534022ad27670410ca7053e951f9c900a439ee3769ea335b8f4d6e78b162f8aa0271aa217c81359f5185f701160876e44362f98726ca5cc2d5ce950a9adeaee8e17a9d5e7a129fb03f70e6c4392122687db972027dc337f19670f94e7f6f7f294397152c505b032decd13cbc06aee1c124556ed9a99ce589fdc85e2f80e8d8dde68f3c2f469a50038760e64cdbd800465edd2932d9f980d9d15c6bb66f56b518af9af5623122edefa1c048818213e7b585ff66ee29e91c53a3", &(0x7f0000000380)=""/37}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x4808, &(0x7f0000000140), 0x1, 0x52c, &(0x7f0000000e80)="$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") rmdir(&(0x7f0000000180)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@local, @in=@private=0xa010100, 0x4e23, 0x4, 0x4e22, 0x6, 0x2, 0x140, 0x80, 0xc}, {0x2, 0x5, 0x3f1b, 0x1, 0xfff, 0x0, 0x800, 0xc}, {0xa, 0x493, 0x4, 0xffffffffffffffff}, 0x1, 0x6e6bb4, 0x2, 0x2c632a63dc2cc236, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x70, 0x400, 0xffffff01}}, 0xe8) 674.274416ms ago: executing program 0 (id=3486): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r1}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25120000000800060007000000680001801400020073797a6b616c6c6572300000000000001400020065727370616e300000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000005c00018008000100", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="08000300021700b35c000300020000001400020076657468305f746f5f7465616d0000000800010038277e0be4617b406b08ff16bee18d8d39164418ab07ba1370e3be0ba8c7af0f05e27b6db95559517a3d69167ca377df74e2272fb663", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020070696d3672656730000000000000000008000700090000000c0001800800030001000000080006000700000034000180140002007465616d5f736c6176655f3100000000", @ANYRES32=r7, @ANYBLOB="140002007069"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="7bd6b5a9cba0821721db661f9d3f68cc4811741438faa3b6a7852913b56291e126a27de35476dc70fc88a23cbcab", 0x2e}, {&(0x7f0000000740)="3733286b4c3123a65b9132bd899e0e0821ad0e4d54214d950210d2de08321d87e76ca61bd00fa9e487365dbef4a3bf3a780ac333b7fa0eea8e1f0265e973e1b39f3ec38d2f49b04fa74ca10fbb7b3b5f17f85ced1dc474ce37ff93dd0428a09dabc6046638575662fcc7c626ac86625a793b23c2ed0884859eb2cbb02759966cfe4d08786192b44361719f90", 0x8c}, {&(0x7f0000000800)}, {&(0x7f0000000a00)="43efec5b1e8fe840525d43fc68566b2d65c1e74a39241177e8c371a98bfbba9810af1e27b1277a7d3e7f761bdcd42483c8238f77f367608395916a2a3ab960a2e0b049", 0x43}, {&(0x7f0000000a80)="482fc8159da017a9220d098780e430aecb484e327ee4ecb3ce909816e9a297c762062cd9dd22e4bd4c66a2e9cd1ec9fb8de5c437be72ea0cb87877e9e23ecd6bae6d612aca66", 0x46}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000000000001000000040000000000000014000000000000000000000001000000b2de0000000000005000000000000000000000000700000001443c296164010102fffffffa7f000001000000020a01010200000007ac1414bb000000087f000001000004f4640101010000000864010100000000090000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ffffffff6401010290000000"], 0xa0}}], 0x2, 0x2400c042) 645.918238ms ago: executing program 0 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x44) 512.972659ms ago: executing program 0 (id=3488): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r3}, 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000380)='.\x00', 0x100008c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 317.124405ms ago: executing program 4 (id=3489): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008040) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=3490): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r1}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25120000000800060007000000680001801400020073797a6b616c6c6572300000000000001400020065727370616e300000000000000000001400020076657468305f6d6163767461700000", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000005c00018008000100", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="08000300021700b35c000300020000001400020076657468305f746f5f7465616d0000000800010038277e0be4617b406b08ff16bee18d8d39164418ab07ba1370e3be0ba8c7af0f05e27b6db95559517a3d69167ca377df74e2272fb663", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020070696d3672656730000000000000000008000700090000000c0001800800030001000000080006000700000034000180140002007465616d5f736c6176655f3100000000", @ANYRES32=r7, @ANYBLOB="140002007069"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="7bd6b5a9cba0821721db661f9d3f68cc4811741438faa3b6a7852913b56291e126a27de35476dc70fc88a23cbcab", 0x2e}, {&(0x7f0000000740)="3733286b4c3123a65b9132bd899e0e0821ad0e4d54214d950210d2de08321d87e76ca61bd00fa9e487365dbef4a3bf3a780ac333b7fa0eea8e1f0265e973e1b39f3ec38d2f49b04fa74ca10fbb7b3b5f17f85ced1dc474ce37ff93dd0428a09dabc6046638575662fcc7c626ac86625a793b23c2ed0884859eb2cbb02759966cfe4d08786192b44361719f90", 0x8c}, {&(0x7f0000000800)="c88510c5ce458a8885b62fbd90c1040630", 0x11}, {&(0x7f0000000a00)="43efec5b1e8fe840525d43fc68566b2d65c1e74a39241177e8c371a98bfbba9810af1e27b1277a7d3e7f761bdcd42483c8238f77f367608395916a2a3ab960a2e0b049", 0x43}, {&(0x7f0000000a80)="482fc8159da017a9220d098780e430aecb484e327ee4ecb3ce909816e9a297c762062cd9dd22e4bd4c66a2e9cd1ec9fb8de5c437be72ea0cb87877e9e23ecd6bae6d612aca66", 0x46}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000000000000001000000040000000000000014000000000000000000000001000000b2de0000000000005000000000000000000000000700000001443c296164010102fffffffa7f000001000000020a01010200000007ac1414bb000000087f000001000004f4640101010000000864010100000000090000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ffffffff6401010290000000"], 0xa0}}], 0x2, 0x2400c042) kernel console output (not intermixed with test programs): 5176][T12024] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.985677][T12024] JBD2: no valid journal superblock found [ 201.991540][T12024] EXT4-fs (loop1): Could not load journal inode [ 202.068157][T12030] loop1: detected capacity change from 0 to 1024 [ 202.077676][T12030] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3016: Failed to acquire dquot type 0 [ 202.091151][T12030] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 202.108104][T12030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3016: corrupted inode contents [ 202.140978][T12030] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.3016: mark_inode_dirty error [ 202.174826][T12030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3016: corrupted inode contents [ 202.189694][T12030] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.3016: mark_inode_dirty error [ 202.227600][T12030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3016: corrupted inode contents [ 202.244657][T12030] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 202.253538][T12030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3016: corrupted inode contents [ 202.268728][T12030] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.3016: mark_inode_dirty error [ 202.280393][T12030] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 202.299282][T12030] EXT4-fs (loop1): 1 truncate cleaned up [ 202.305740][T12030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.326960][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 202.326975][ T29] audit: type=1326 audit(1754992985.311:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.393953][ T29] audit: type=1326 audit(1754992985.341:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.417767][ T29] audit: type=1326 audit(1754992985.341:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.441321][ T29] audit: type=1326 audit(1754992985.351:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.464795][ T29] audit: type=1326 audit(1754992985.351:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.488395][ T29] audit: type=1326 audit(1754992985.351:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.511941][ T29] audit: type=1326 audit(1754992985.351:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.535693][ T29] audit: type=1326 audit(1754992985.361:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.559276][ T29] audit: type=1326 audit(1754992985.361:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.582845][ T29] audit: type=1326 audit(1754992985.371:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 202.625949][ T7437] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.668262][T12049] loop2: detected capacity change from 0 to 2048 [ 202.715422][T12049] usb usb7: usbfs: process 12049 (syz.2.3022) did not claim interface 0 before use [ 202.827071][T12071] loop1: detected capacity change from 0 to 1024 [ 203.030812][T12080] sd 0:0:1:0: device reset [ 203.050573][T12081] loop5: detected capacity change from 0 to 128 [ 203.067285][T12081] EXT4-fs: Ignoring removed nobh option [ 203.087255][T12081] ext4 filesystem being mounted at /512/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.266705][T12090] loop2: detected capacity change from 0 to 1024 [ 203.286143][T12090] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.297366][T12090] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.322007][T12090] JBD2: no valid journal superblock found [ 203.327933][T12090] EXT4-fs (loop2): Could not load journal inode [ 203.438655][ T145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.457043][ T145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.473342][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.494872][ T145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.601834][T12108] sd 0:0:1:0: device reset [ 203.695648][T12113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.726979][T12115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12115 comm=syz.4.3050 [ 203.757028][T12117] loop5: detected capacity change from 0 to 1024 [ 203.771878][T12113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.793558][T12117] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.804516][T12117] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.820874][T12117] JBD2: no valid journal superblock found [ 203.826722][T12117] EXT4-fs (loop5): Could not load journal inode [ 203.871935][T12113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.936427][T12140] sd 0:0:1:0: device reset [ 203.967836][T12142] loop4: detected capacity change from 0 to 1024 [ 203.975355][T12113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.128597][T12152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12152 comm=syz.5.3065 [ 204.217193][T12160] loop2: detected capacity change from 0 to 1024 [ 204.240782][T12160] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.251772][T12160] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.279828][T12168] sd 0:0:1:0: device reset [ 204.288749][T12160] JBD2: no valid journal superblock found [ 204.294540][T12160] EXT4-fs (loop2): Could not load journal inode [ 204.309726][T12170] loop5: detected capacity change from 0 to 1024 [ 204.321278][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.337719][T12086] syz.1.3037 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 204.351920][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.1.3037 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 204.351949][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.352039][T12086] Call Trace: [ 204.352045][T12086] [ 204.352053][T12086] __dump_stack+0x1d/0x30 [ 204.352075][T12086] dump_stack_lvl+0xe8/0x140 [ 204.352129][T12086] dump_stack+0x15/0x1b [ 204.352146][T12086] dump_header+0x81/0x220 [ 204.352180][T12086] oom_kill_process+0x342/0x400 [ 204.352215][T12086] out_of_memory+0x979/0xb80 [ 204.352272][T12086] try_charge_memcg+0x5e6/0x9e0 [ 204.352310][T12086] obj_cgroup_charge_pages+0xa6/0x150 [ 204.352422][T12086] __memcg_kmem_charge_page+0x9f/0x170 [ 204.352489][T12086] __alloc_frozen_pages_noprof+0x188/0x360 [ 204.352520][T12086] alloc_pages_mpol+0xb3/0x250 [ 204.352598][T12086] alloc_pages_noprof+0x90/0x130 [ 204.352628][T12086] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 204.352668][T12086] __kvmalloc_node_noprof+0x30f/0x4e0 [ 204.352770][T12086] ? ip_set_alloc+0x1f/0x30 [ 204.352801][T12086] ? ip_set_alloc+0x1f/0x30 [ 204.352826][T12086] ? __kmalloc_cache_noprof+0x189/0x320 [ 204.352910][T12086] ip_set_alloc+0x1f/0x30 [ 204.352940][T12086] hash_netiface_create+0x282/0x740 [ 204.352976][T12086] ? __pfx_hash_netiface_create+0x10/0x10 [ 204.353057][T12086] ip_set_create+0x3cc/0x960 [ 204.353086][T12086] ? __nla_parse+0x40/0x60 [ 204.353108][T12086] nfnetlink_rcv_msg+0x4c6/0x590 [ 204.353148][T12086] netlink_rcv_skb+0x120/0x220 [ 204.353169][T12086] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 204.353212][T12086] nfnetlink_rcv+0x16b/0x1690 [ 204.353298][T12086] ? nlmon_xmit+0x4f/0x60 [ 204.353319][T12086] ? consume_skb+0x49/0x150 [ 204.353352][T12086] ? nlmon_xmit+0x4f/0x60 [ 204.353379][T12086] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 204.353469][T12086] ? __dev_queue_xmit+0x1200/0x2000 [ 204.353488][T12086] ? __dev_queue_xmit+0x182/0x2000 [ 204.353510][T12086] ? ref_tracker_free+0x37d/0x3e0 [ 204.353537][T12086] ? __netlink_deliver_tap+0x4dc/0x500 [ 204.353632][T12086] netlink_unicast+0x5c0/0x690 [ 204.353678][T12086] netlink_sendmsg+0x58b/0x6b0 [ 204.353702][T12086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.353761][T12086] __sock_sendmsg+0x145/0x180 [ 204.353789][T12086] ____sys_sendmsg+0x31e/0x4e0 [ 204.353811][T12086] ___sys_sendmsg+0x17b/0x1d0 [ 204.353841][T12086] __x64_sys_sendmsg+0xd4/0x160 [ 204.353922][T12086] x64_sys_call+0x191e/0x2ff0 [ 204.353945][T12086] do_syscall_64+0xd2/0x200 [ 204.353973][T12086] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.354078][T12086] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 204.354105][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.354125][T12086] RIP: 0033:0x7fe65148ebe9 [ 204.354140][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.354159][T12086] RSP: 002b:00007fe64fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.354186][T12086] RAX: ffffffffffffffda RBX: 00007fe6516b5fa0 RCX: 00007fe65148ebe9 [ 204.354201][T12086] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 204.354216][T12086] RBP: 00007fe651511e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.354227][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.354239][T12086] R13: 00007fe6516b6038 R14: 00007fe6516b5fa0 R15: 00007ffdfff38508 [ 204.354255][T12086] [ 204.354306][T12086] memory: usage 307200kB, limit 307200kB, failcnt 1681 [ 204.453614][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.456918][T12086] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 204.471518][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.476683][T12086] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 204.476696][T12086] Memory cgroup stats for /syz1: [ 204.495792][T12086] cache 0 [ 204.561265][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.565886][T12086] rss 0 [ 204.565895][T12086] shmem 0 [ 204.565901][T12086] mapped_file 0 [ 204.565907][T12086] dirty 0 [ 204.565913][T12086] writeback 0 [ 204.565947][T12086] workingset_refault_anon 272 [ 204.755936][T12182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12182 comm=syz.2.3079 [ 204.757408][T12086] workingset_refault_file 1606 [ 204.757422][T12086] swap 364544 [ 204.782668][T12086] swapcached 0 [ 204.786034][T12086] pgpgin 104072 [ 204.789511][T12086] pgpgout 104070 [ 204.793048][T12086] pgfault 120596 [ 204.796586][T12086] pgmajfault 153 [ 204.800242][T12086] inactive_anon 0 [ 204.803861][T12086] active_anon 0 [ 204.807301][T12086] inactive_file 0 [ 204.811037][T12086] active_file 8192 [ 204.814824][T12086] unevictable 0 [ 204.818267][T12086] hierarchical_memory_limit 314572800 [ 204.823644][T12086] hierarchical_memsw_limit 9223372036854771712 [ 204.830008][T12086] total_cache 0 [ 204.833463][T12086] total_rss 0 [ 204.836794][T12086] total_shmem 0 [ 204.840284][T12086] total_mapped_file 0 [ 204.844255][T12086] total_dirty 0 [ 204.847707][T12086] total_writeback 0 [ 204.851548][T12086] total_workingset_refault_anon 272 [ 204.856735][T12086] total_workingset_refault_file 1606 [ 204.862072][T12086] total_swap 364544 [ 204.865866][T12086] total_swapcached 0 [ 204.869882][T12086] total_pgpgin 104072 [ 204.873848][T12086] total_pgpgout 104070 [ 204.877896][T12086] total_pgfault 120596 [ 204.881983][T12086] total_pgmajfault 153 [ 204.886062][T12086] total_inactive_anon 0 [ 204.890278][T12086] total_active_anon 0 [ 204.894289][T12086] total_inactive_file 0 [ 204.898463][T12086] total_active_file 8192 [ 204.902745][T12086] total_unevictable 0 [ 204.906778][T12086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3037,pid=12085,uid=0 [ 204.921698][T12086] Memory cgroup out of memory: Killed process 12085 (syz.1.3037) total-vm:93896kB, anon-rss:944kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 204.932917][T12170] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3074: Failed to acquire dquot type 0 [ 204.958203][T12186] loop2: detected capacity change from 0 to 1024 [ 204.970006][T12170] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 205.016773][T12170] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3074: corrupted inode contents [ 205.042330][T12170] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.3074: mark_inode_dirty error [ 205.056227][T12170] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3074: corrupted inode contents [ 205.081121][T12196] loop4: detected capacity change from 0 to 1024 [ 205.088279][T12170] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.3074: mark_inode_dirty error [ 205.103029][T12194] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.113333][T12170] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3074: corrupted inode contents [ 205.140812][T12170] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 205.160525][T12194] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.165249][T12170] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3074: corrupted inode contents [ 205.191879][T12170] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.3074: mark_inode_dirty error [ 205.205773][T12170] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 205.217260][T12170] EXT4-fs (loop5): 1 truncate cleaned up [ 205.236388][T12194] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.256649][T12207] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.279257][T12213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12213 comm=syz.2.3092 [ 205.308381][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3091'. [ 205.320725][T12194] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.374233][T12207] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.451485][T12228] loop2: detected capacity change from 0 to 1024 [ 205.461948][T12227] loop5: detected capacity change from 0 to 1024 [ 205.462142][T12207] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.531761][T12207] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.599670][T12245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12245 comm=syz.5.3104 [ 205.638884][T12249] loop5: detected capacity change from 0 to 1024 [ 205.653040][T12249] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3105: Failed to acquire dquot type 0 [ 205.670729][T12249] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 205.697682][T12249] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3105: corrupted inode contents [ 205.710230][T12249] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.3105: mark_inode_dirty error [ 205.741836][T12249] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3105: corrupted inode contents [ 205.765210][T12249] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.3105: mark_inode_dirty error [ 205.778853][T12252] loop2: detected capacity change from 0 to 128 [ 205.788180][T12249] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3105: corrupted inode contents [ 205.802889][T12252] EXT4-fs: Ignoring removed nobh option [ 205.812641][T12249] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 205.831223][T12249] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3105: corrupted inode contents [ 205.866233][T12252] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.876788][T12249] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.3105: mark_inode_dirty error [ 205.934605][T12249] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 205.952934][T12249] EXT4-fs (loop5): 1 truncate cleaned up [ 206.233401][T12265] sd 0:0:1:0: device reset [ 206.327093][T12269] loop5: detected capacity change from 0 to 1024 [ 206.347274][ T7049] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 206.358231][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 206.358262][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.358275][ T7049] Call Trace: [ 206.358281][ T7049] [ 206.358288][ T7049] __dump_stack+0x1d/0x30 [ 206.358307][ T7049] dump_stack_lvl+0xe8/0x140 [ 206.358344][ T7049] dump_stack+0x15/0x1b [ 206.358362][ T7049] dump_header+0x81/0x220 [ 206.358391][ T7049] oom_kill_process+0x342/0x400 [ 206.358418][ T7049] out_of_memory+0x979/0xb80 [ 206.358499][ T7049] try_charge_memcg+0x5e6/0x9e0 [ 206.358524][ T7049] charge_memcg+0x51/0xc0 [ 206.358544][ T7049] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 206.358566][ T7049] __read_swap_cache_async+0x1df/0x350 [ 206.358608][ T7049] swap_cluster_readahead+0x277/0x3e0 [ 206.358718][ T7049] swapin_readahead+0xde/0x6f0 [ 206.358745][ T7049] ? __filemap_get_folio+0x4f7/0x6b0 [ 206.358790][ T7049] ? swap_cache_get_folio+0x77/0x200 [ 206.358889][ T7049] do_swap_page+0x301/0x2430 [ 206.358909][ T7049] ? finish_task_switch+0xad/0x2b0 [ 206.358927][ T7049] ? __pfx_default_wake_function+0x10/0x10 [ 206.359024][ T7049] handle_mm_fault+0x9a5/0x2c20 [ 206.359051][ T7049] do_user_addr_fault+0x636/0x1090 [ 206.359089][ T7049] ? fpregs_restore_userregs+0xe2/0x1d0 [ 206.359131][ T7049] ? switch_fpu_return+0xe/0x20 [ 206.359153][ T7049] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.359176][ T7049] exc_page_fault+0x62/0xa0 [ 206.359220][ T7049] asm_exc_page_fault+0x26/0x30 [ 206.359298][ T7049] RIP: 0033:0x7fe6514c1465 [ 206.359348][ T7049] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 206.359440][ T7049] RSP: 002b:00007ffdfff38848 EFLAGS: 00010246 [ 206.359457][ T7049] RAX: 0000000000000000 RBX: 00000000000002a4 RCX: 00007fe6514c1463 [ 206.359500][ T7049] RDX: 00007ffdfff38860 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.359511][ T7049] RBP: 00007ffdfff388cc R08: 000000000f9d6be5 R09: 0000000000000000 [ 206.359522][ T7049] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 206.359534][ T7049] R13: 00000000000927c0 R14: 00000000000323d5 R15: 00007ffdfff38920 [ 206.359551][ T7049] [ 206.580823][ T7049] memory: usage 307200kB, limit 307200kB, failcnt 2110 [ 206.587927][ T7049] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0 [ 206.595884][ T7049] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 206.603367][ T7049] Memory cgroup stats for /syz1: [ 206.605616][ T7049] cache 0 [ 206.613567][ T7049] rss 8192 [ 206.616581][ T7049] shmem 0 [ 206.619597][ T7049] mapped_file 0 [ 206.623043][ T7049] dirty 0 [ 206.625977][ T7049] writeback 20480 [ 206.629713][ T7049] workingset_refault_anon 345 [ 206.634657][ T7049] workingset_refault_file 1863 [ 206.639452][ T7049] swap 335872 [ 206.642731][ T7049] swapcached 28672 [ 206.646505][ T7049] pgpgin 104551 [ 206.649977][ T7049] pgpgout 104542 [ 206.653508][ T7049] pgfault 121073 [ 206.657082][ T7049] pgmajfault 204 [ 206.660763][ T7049] inactive_anon 28672 [ 206.662015][T12277] loop2: detected capacity change from 0 to 1024 [ 206.664734][ T7049] active_anon 0 [ 206.664743][ T7049] inactive_file 8192 [ 206.674982][T12277] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.678402][ T7049] active_file 0 [ 206.689270][T12277] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.692716][ T7049] unevictable 0 [ 206.692770][ T7049] hierarchical_memory_limit 314572800 [ 206.706476][T12277] JBD2: no valid journal superblock found [ 206.711130][ T7049] hierarchical_memsw_limit 9223372036854771712 [ 206.716879][T12277] EXT4-fs (loop2): Could not load journal inode [ 206.723021][ T7049] total_cache 0 [ 206.723030][ T7049] total_rss 8192 [ 206.736304][ T7049] total_shmem 0 [ 206.739783][ T7049] total_mapped_file 0 [ 206.741241][T12277] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 206.743756][ T7049] total_dirty 0 [ 206.743764][ T7049] total_writeback 20480 [ 206.743772][ T7049] total_workingset_refault_anon 345 [ 206.766166][ T7049] total_workingset_refault_file 1863 [ 206.771503][ T7049] total_swap 335872 [ 206.775304][ T7049] total_swapcached 28672 [ 206.779615][ T7049] total_pgpgin 104551 [ 206.783586][ T7049] total_pgpgout 104542 [ 206.787644][ T7049] total_pgfault 121073 [ 206.791743][ T7049] total_pgmajfault 204 [ 206.795863][ T7049] total_inactive_anon 28672 [ 206.800447][ T7049] total_active_anon 0 [ 206.804416][ T7049] total_inactive_file 8192 [ 206.804944][T12279] loop5: detected capacity change from 0 to 1024 [ 206.808830][ T7049] total_active_file 0 [ 206.808839][ T7049] total_unevictable 0 [ 206.808848][ T7049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3100,pid=12235,uid=0 [ 206.838371][ T7049] Memory cgroup out of memory: Killed process 12235 (syz.1.3100) total-vm:93896kB, anon-rss:1068kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 206.857088][T12281] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.866955][T12281] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.942452][T12281] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.952385][T12281] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.033895][T12281] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.043999][T12281] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.127740][T12281] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.137721][T12281] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.157898][T12299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12299 comm=syz.1.3121 [ 207.211004][T12308] loop5: detected capacity change from 0 to 1024 [ 207.219713][T12308] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3125: Failed to acquire dquot type 0 [ 207.239974][T12312] loop1: detected capacity change from 0 to 1024 [ 207.245697][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.249819][T12308] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, [ 207.254504][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.261391][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.262261][T12308] inode 13: [ 207.270434][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.278477][T12308] block 144: [ 207.286049][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.289893][T12308] freeing already freed block (bit 9); block bitmap corrupt. [ 207.300395][T12308] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3125: corrupted inode contents [ 207.301292][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.328915][T12308] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.3125: mark_inode_dirty error [ 207.332105][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.341261][T12308] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3125: corrupted inode contents [ 207.348591][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.360954][T12308] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.3125: mark_inode_dirty error [ 207.390843][T12316] loop2: detected capacity change from 0 to 2048 [ 207.400176][T12308] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3125: corrupted inode contents [ 207.412192][T12308] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 207.421101][T12308] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3125: corrupted inode contents [ 207.434690][T12308] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.3125: mark_inode_dirty error [ 207.446056][T12308] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 207.455299][T12308] EXT4-fs (loop5): 1 truncate cleaned up [ 207.467148][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 207.467161][ T29] audit: type=1326 audit(1754992990.451:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.497144][ T29] audit: type=1326 audit(1754992990.451:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.520682][ T29] audit: type=1326 audit(1754992990.451:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.544271][ T29] audit: type=1326 audit(1754992990.451:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.567790][ T29] audit: type=1326 audit(1754992990.451:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.598229][ T29] audit: type=1326 audit(1754992990.581:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.621776][ T29] audit: type=1326 audit(1754992990.581:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.5.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 207.649010][T12316] usb usb7: usbfs: process 12316 (syz.2.3128) did not claim interface 0 before use [ 207.704558][T12327] loop1: detected capacity change from 0 to 1024 [ 207.753418][T12336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12336 comm=syz.1.3135 [ 207.814825][T12343] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.851349][T12343] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.865739][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'. [ 207.911773][T12343] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.944867][T12344] syzkaller0: entered promiscuous mode [ 207.950561][T12344] syzkaller0: entered allmulticast mode [ 207.971498][T12343] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.027976][ T379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.038462][ T379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.053119][ T379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.064885][ T379] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.197036][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.208276][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.220931][ T379] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.232833][ T379] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.270622][T12353] loop4: detected capacity change from 0 to 1024 [ 208.279167][T12353] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 208.288262][T12353] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 208.297693][T12353] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3141: Failed to acquire dquot type 0 [ 208.310106][T12353] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 208.324696][T12353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3141: corrupted inode contents [ 208.337261][T12353] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.3141: mark_inode_dirty error [ 208.365851][T12353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3141: corrupted inode contents [ 208.392256][T12353] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3141: mark_inode_dirty error [ 208.408676][T12356] loop2: detected capacity change from 0 to 128 [ 208.416079][T12353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3141: corrupted inode contents [ 208.429884][T12356] EXT4-fs: Ignoring removed nobh option [ 208.439267][T12353] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 208.453785][T12353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.3141: corrupted inode contents [ 208.465869][T12356] ext4 filesystem being mounted at /416/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.476420][T12353] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.3141: mark_inode_dirty error [ 208.489437][T12353] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 208.500941][T12353] EXT4-fs (loop4): 1 truncate cleaned up [ 208.514188][ T29] audit: type=1326 audit(1754992991.501:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5ea0ebe9 code=0x7ffc0000 [ 208.741399][T12370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12370 comm=syz.4.3147 [ 208.837497][T12374] loop4: detected capacity change from 0 to 2048 [ 208.853381][ T379] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.872355][ T379] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.889672][ T379] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.911916][ T379] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.001086][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3151'. [ 209.057335][T12388] loop2: detected capacity change from 0 to 1024 [ 209.064476][T12388] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.075536][T12388] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.087261][T12388] JBD2: no valid journal superblock found [ 209.093109][T12388] EXT4-fs (loop2): Could not load journal inode [ 209.103202][T12388] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 209.114838][T12374] usb usb7: usbfs: process 12374 (syz.4.3149) did not claim interface 0 before use [ 209.179191][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12394 comm=syz.2.3158 [ 209.210546][T12397] sd 0:0:1:0: device reset [ 209.214721][T12398] loop2: detected capacity change from 0 to 1024 [ 209.879214][T12419] loop4: detected capacity change from 0 to 128 [ 209.903207][T12419] EXT4-fs: Ignoring removed nobh option [ 209.910040][T12421] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.931213][T12419] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.981792][T12421] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.041541][T12421] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.101941][T12421] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.124283][T12410] syz.2.3164 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 210.138503][T12410] CPU: 0 UID: 0 PID: 12410 Comm: syz.2.3164 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 210.138566][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.138580][T12410] Call Trace: [ 210.138588][T12410] [ 210.138597][T12410] __dump_stack+0x1d/0x30 [ 210.138623][T12410] dump_stack_lvl+0xe8/0x140 [ 210.138654][T12410] dump_stack+0x15/0x1b [ 210.138671][T12410] dump_header+0x81/0x220 [ 210.138697][T12410] oom_kill_process+0x342/0x400 [ 210.138730][T12410] out_of_memory+0x979/0xb80 [ 210.138876][T12410] try_charge_memcg+0x5e6/0x9e0 [ 210.138907][T12410] obj_cgroup_charge_pages+0xa6/0x150 [ 210.138937][T12410] __memcg_kmem_charge_page+0x9f/0x170 [ 210.138990][T12410] __alloc_frozen_pages_noprof+0x188/0x360 [ 210.139092][T12410] alloc_pages_mpol+0xb3/0x250 [ 210.139121][T12410] alloc_pages_noprof+0x90/0x130 [ 210.139328][T12410] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 210.139375][T12410] __kvmalloc_node_noprof+0x30f/0x4e0 [ 210.139451][T12410] ? ip_set_alloc+0x1f/0x30 [ 210.139486][T12410] ? ip_set_alloc+0x1f/0x30 [ 210.139516][T12410] ? __kmalloc_cache_noprof+0x189/0x320 [ 210.139548][T12410] ip_set_alloc+0x1f/0x30 [ 210.139649][T12410] hash_netiface_create+0x282/0x740 [ 210.139682][T12410] ? __pfx_hash_netiface_create+0x10/0x10 [ 210.139768][T12410] ip_set_create+0x3cc/0x960 [ 210.139860][T12410] ? __nla_parse+0x40/0x60 [ 210.139882][T12410] nfnetlink_rcv_msg+0x4c6/0x590 [ 210.139951][T12410] netlink_rcv_skb+0x120/0x220 [ 210.139970][T12410] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 210.139999][T12410] nfnetlink_rcv+0x16b/0x1690 [ 210.140024][T12410] ? nlmon_xmit+0x4f/0x60 [ 210.140099][T12410] ? consume_skb+0x49/0x150 [ 210.140126][T12410] ? nlmon_xmit+0x4f/0x60 [ 210.140150][T12410] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 210.140176][T12410] ? __dev_queue_xmit+0x1200/0x2000 [ 210.140273][T12410] ? __dev_queue_xmit+0x182/0x2000 [ 210.140298][T12410] ? ref_tracker_free+0x37d/0x3e0 [ 210.140327][T12410] ? __netlink_deliver_tap+0x4dc/0x500 [ 210.140377][T12410] netlink_unicast+0x5c0/0x690 [ 210.140490][T12410] netlink_sendmsg+0x58b/0x6b0 [ 210.140510][T12410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.140529][T12410] __sock_sendmsg+0x145/0x180 [ 210.140628][T12410] ____sys_sendmsg+0x31e/0x4e0 [ 210.140656][T12410] ___sys_sendmsg+0x17b/0x1d0 [ 210.140689][T12410] __x64_sys_sendmsg+0xd4/0x160 [ 210.140713][T12410] x64_sys_call+0x191e/0x2ff0 [ 210.140734][T12410] do_syscall_64+0xd2/0x200 [ 210.140757][T12410] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.140798][T12410] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.140825][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.140848][T12410] RIP: 0033:0x7f6d2f7febe9 [ 210.140863][T12410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.140879][T12410] RSP: 002b:00007f6d2e25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.140979][T12410] RAX: ffffffffffffffda RBX: 00007f6d2fa25fa0 RCX: 00007f6d2f7febe9 [ 210.140995][T12410] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 210.141009][T12410] RBP: 00007f6d2f881e19 R08: 0000000000000000 R09: 0000000000000000 [ 210.141023][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.141038][T12410] R13: 00007f6d2fa26038 R14: 00007f6d2fa25fa0 R15: 00007ffc651e02a8 [ 210.141058][T12410] [ 210.471548][T12410] memory: usage 307196kB, limit 307200kB, failcnt 440 [ 210.478302][T12410] memory+swap: usage 307616kB, limit 9007199254740988kB, failcnt 0 [ 210.486211][T12410] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 210.493621][T12410] Memory cgroup stats for /syz2: [ 210.495274][T12410] cache 0 [ 210.503154][T12410] rss 4096 [ 210.506163][T12410] shmem 0 [ 210.509255][T12410] mapped_file 0 [ 210.512726][T12410] dirty 0 [ 210.515668][T12410] writeback 0 [ 210.518948][T12410] workingset_refault_anon 83 [ 210.523625][T12410] workingset_refault_file 0 [ 210.528284][T12410] swap 430080 [ 210.531630][T12410] swapcached 16384 [ 210.535387][T12410] pgpgin 79757 [ 210.538828][T12410] pgpgout 79751 [ 210.542280][T12410] pgfault 133446 [ 210.545802][T12410] pgmajfault 55 [ 210.549234][T12410] inactive_anon 8192 [ 210.553150][T12410] active_anon 8192 [ 210.556845][T12410] inactive_file 8192 [ 210.560735][T12410] active_file 0 [ 210.564181][T12410] unevictable 0 [ 210.567613][T12410] hierarchical_memory_limit 314572800 [ 210.572984][T12410] hierarchical_memsw_limit 9223372036854771712 [ 210.579159][T12410] total_cache 0 [ 210.582635][T12410] total_rss 4096 [ 210.586155][T12410] total_shmem 0 [ 210.589690][T12410] total_mapped_file 0 [ 210.593653][T12410] total_dirty 0 [ 210.597094][T12410] total_writeback 0 [ 210.600905][T12410] total_workingset_refault_anon 83 [ 210.606044][T12410] total_workingset_refault_file 0 [ 210.611056][T12410] total_swap 430080 [ 210.614837][T12410] total_swapcached 16384 [ 210.619056][T12410] total_pgpgin 79757 [ 210.622970][T12410] total_pgpgout 79751 [ 210.626926][T12410] total_pgfault 133446 [ 210.630995][T12410] total_pgmajfault 55 [ 210.634965][T12410] total_inactive_anon 8192 [ 210.639363][T12410] total_active_anon 8192 [ 210.643614][T12410] total_inactive_file 8192 [ 210.648006][T12410] total_active_file 0 [ 210.652046][T12410] total_unevictable 0 [ 210.656005][T12410] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3164,pid=12409,uid=0 [ 210.670631][T12410] Memory cgroup out of memory: Killed process 12409 (syz.2.3164) total-vm:93896kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 210.788655][T12432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12432 comm=syz.4.3171 [ 210.936004][T12445] loop5: detected capacity change from 0 to 1024 [ 211.104649][T12457] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.139098][T12458] loop2: detected capacity change from 0 to 128 [ 211.158908][T12458] EXT4-fs: Ignoring removed nobh option [ 211.170324][T12461] sd 0:0:1:0: device reset [ 211.181946][T12457] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.194367][T12458] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.231915][T12457] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.275284][T12457] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.797435][T12468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12468 comm=syz.2.3184 [ 211.900996][T12464] syz.5.3183 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 211.915215][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.5.3183 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 211.915293][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.915304][T12464] Call Trace: [ 211.915310][T12464] [ 211.915319][T12464] __dump_stack+0x1d/0x30 [ 211.915342][T12464] dump_stack_lvl+0xe8/0x140 [ 211.915363][T12464] dump_stack+0x15/0x1b [ 211.915420][T12464] dump_header+0x81/0x220 [ 211.915497][T12464] oom_kill_process+0x342/0x400 [ 211.915577][T12464] out_of_memory+0x979/0xb80 [ 211.915610][T12464] try_charge_memcg+0x5e6/0x9e0 [ 211.915662][T12464] obj_cgroup_charge_pages+0xa6/0x150 [ 211.915688][T12464] __memcg_kmem_charge_page+0x9f/0x170 [ 211.915715][T12464] __alloc_frozen_pages_noprof+0x188/0x360 [ 211.915805][T12464] alloc_pages_mpol+0xb3/0x250 [ 211.915866][T12464] alloc_pages_noprof+0x90/0x130 [ 211.915961][T12464] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 211.916025][T12464] __kvmalloc_node_noprof+0x30f/0x4e0 [ 211.916050][T12464] ? ip_set_alloc+0x1f/0x30 [ 211.916129][T12464] ? ip_set_alloc+0x1f/0x30 [ 211.916157][T12464] ? hash_netiface_create+0x21b/0x740 [ 211.916186][T12464] ? __kmalloc_cache_noprof+0x189/0x320 [ 211.916215][T12464] ip_set_alloc+0x1f/0x30 [ 211.916253][T12464] hash_netiface_create+0x282/0x740 [ 211.916284][T12464] ? __pfx_hash_netiface_create+0x10/0x10 [ 211.916318][T12464] ip_set_create+0x3cc/0x960 [ 211.916401][T12464] ? __nla_parse+0x40/0x60 [ 211.916425][T12464] nfnetlink_rcv_msg+0x4c6/0x590 [ 211.916481][T12464] netlink_rcv_skb+0x120/0x220 [ 211.916497][T12464] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 211.916608][T12464] nfnetlink_rcv+0x16b/0x1690 [ 211.916632][T12464] ? cmp_ex_search+0x25/0x40 [ 211.916660][T12464] ? bsearch+0x95/0xc0 [ 211.916689][T12464] ? __pfx_cmp_ex_search+0x10/0x10 [ 211.916713][T12464] ? strncpy_from_user+0x17d/0x230 [ 211.916778][T12464] ? search_extable+0x53/0x80 [ 211.916801][T12464] ? strncpy_from_user+0x17d/0x230 [ 211.916941][T12464] ? strncpy_from_user+0x17d/0x230 [ 211.916972][T12464] ? fixup_exception+0x741/0xd50 [ 211.917114][T12464] ? do_user_addr_fault+0xdaf/0x1090 [ 211.917139][T12464] ? __rcu_read_lock+0x37/0x50 [ 211.917157][T12464] ? do_user_addr_fault+0xdaf/0x1090 [ 211.917266][T12464] ? __schedule+0xa12/0xb30 [ 211.917291][T12464] ? __pte_offset_map_lock+0x1d4/0x230 [ 211.917320][T12464] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 211.917415][T12464] ? exc_page_fault+0x62/0xa0 [ 211.917436][T12464] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 211.917482][T12464] ? should_fail_ex+0x30/0x280 [ 211.917499][T12464] ? selinux_nlmsg_lookup+0x99/0x890 [ 211.917526][T12464] ? __rcu_read_unlock+0x34/0x70 [ 211.917607][T12464] ? __netlink_lookup+0x266/0x2a0 [ 211.917629][T12464] netlink_unicast+0x5c0/0x690 [ 211.917660][T12464] netlink_sendmsg+0x58b/0x6b0 [ 211.917824][T12464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.917910][T12464] __sock_sendmsg+0x145/0x180 [ 211.917939][T12464] ____sys_sendmsg+0x31e/0x4e0 [ 211.917963][T12464] ___sys_sendmsg+0x17b/0x1d0 [ 211.918026][T12464] __x64_sys_sendmsg+0xd4/0x160 [ 211.918101][T12464] x64_sys_call+0x191e/0x2ff0 [ 211.918119][T12464] do_syscall_64+0xd2/0x200 [ 211.918141][T12464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.918163][T12464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.918191][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.918285][T12464] RIP: 0033:0x7f84d09cebe9 [ 211.918301][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.918318][T12464] RSP: 002b:00007f84cf437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.918340][T12464] RAX: ffffffffffffffda RBX: 00007f84d0bf5fa0 RCX: 00007f84d09cebe9 [ 211.918354][T12464] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 211.918365][T12464] RBP: 00007f84d0a51e19 R08: 0000000000000000 R09: 0000000000000000 [ 211.918377][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.918470][T12464] R13: 00007f84d0bf6038 R14: 00007f84d0bf5fa0 R15: 00007fff21e74478 [ 211.918497][T12464] [ 211.918505][T12464] memory: usage 307200kB, limit 307200kB, failcnt 734 [ 211.996190][T12479] IPv6: Can't replace route, no match found [ 212.000940][T12464] memory+swap: usage 308484kB, limit 9007199254740988kB, failcnt 0 [ 212.337011][T12464] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 212.344284][T12464] Memory cgroup stats for /syz5: [ 212.346006][T12464] cache 0 [ 212.353928][T12464] rss 0 [ 212.356740][T12464] shmem 0 [ 212.359728][T12464] mapped_file 0 [ 212.363187][T12464] dirty 0 [ 212.366236][T12464] writeback 0 [ 212.369550][T12464] workingset_refault_anon 88 [ 212.374131][T12464] workingset_refault_file 769 [ 212.378804][T12464] swap 1314816 [ 212.382233][T12464] swapcached 20480 [ 212.386053][T12464] pgpgin 55208 [ 212.389457][T12464] pgpgout 55203 [ 212.392903][T12464] pgfault 105468 [ 212.396473][T12464] pgmajfault 58 [ 212.399948][T12464] inactive_anon 20480 [ 212.403913][T12464] active_anon 0 [ 212.407422][T12464] inactive_file 0 [ 212.411073][T12464] active_file 0 [ 212.414605][T12464] unevictable 0 [ 212.418050][T12464] hierarchical_memory_limit 314572800 [ 212.423526][T12464] hierarchical_memsw_limit 9223372036854771712 [ 212.429689][T12464] total_cache 0 [ 212.433134][T12464] total_rss 0 [ 212.436405][T12464] total_shmem 0 [ 212.439900][T12464] total_mapped_file 0 [ 212.443872][T12464] total_dirty 0 [ 212.447316][T12464] total_writeback 0 [ 212.451161][T12464] total_workingset_refault_anon 88 [ 212.456268][T12464] total_workingset_refault_file 769 [ 212.461493][T12464] total_swap 1314816 [ 212.465467][T12464] total_swapcached 20480 [ 212.469757][T12464] total_pgpgin 55208 [ 212.471993][T12483] loop2: detected capacity change from 0 to 1024 [ 212.473634][T12464] total_pgpgout 55203 [ 212.473644][T12464] total_pgfault 105468 [ 212.473652][T12464] total_pgmajfault 58 [ 212.484120][T12483] journal_path: Non-blockdev passed as './file1' [ 212.488096][T12464] total_inactive_anon 20480 [ 212.492142][T12483] EXT4-fs: error: could not find journal device path [ 212.498402][T12464] total_active_anon 0 [ 212.498410][T12464] total_inactive_file 0 [ 212.498447][T12464] total_active_file 0 [ 212.521731][T12464] total_unevictable 0 [ 212.525722][T12464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3183,pid=12463,uid=0 [ 212.540705][T12464] Memory cgroup out of memory: Killed process 12463 (syz.5.3183) total-vm:93896kB, anon-rss:944kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 212.711836][T12486] loop5: detected capacity change from 0 to 1024 [ 212.722041][T12486] __quota_error: 22 callbacks suppressed [ 212.722055][T12486] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 212.736942][T12486] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 212.746536][T12486] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3192: Failed to acquire dquot type 0 [ 212.758654][T12486] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 212.773678][T12486] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3192: corrupted inode contents [ 212.785952][T12486] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.3192: mark_inode_dirty error [ 212.797536][T12486] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3192: corrupted inode contents [ 212.809828][T12486] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.3192: mark_inode_dirty error [ 212.816193][T12489] loop1: detected capacity change from 0 to 1024 [ 212.825131][T12486] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3192: corrupted inode contents [ 212.843412][T12486] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 212.852800][T12486] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.3192: corrupted inode contents [ 212.865271][T12486] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.3192: mark_inode_dirty error [ 212.876875][T12486] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 212.886227][T12486] EXT4-fs (loop5): 1 truncate cleaned up [ 212.901130][ T29] audit: type=1326 audit(1754992995.891:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 212.927222][ T29] audit: type=1326 audit(1754992995.891:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 212.950887][ T29] audit: type=1326 audit(1754992995.891:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 212.974401][ T29] audit: type=1326 audit(1754992995.891:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 212.998369][ T29] audit: type=1326 audit(1754992995.911:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 213.022119][ T29] audit: type=1326 audit(1754992995.911:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 213.045667][ T29] audit: type=1326 audit(1754992995.911:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 213.069365][ T29] audit: type=1326 audit(1754992995.911:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d09cebe9 code=0x7ffc0000 [ 213.076088][T12495] loop1: detected capacity change from 0 to 128 [ 213.101282][T12495] EXT4-fs: Ignoring removed nobh option [ 213.108737][T12495] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.133874][T12498] loop5: detected capacity change from 0 to 1024 [ 213.144164][T12498] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.155233][T12498] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.170152][T12498] JBD2: no valid journal superblock found [ 213.176124][T12498] EXT4-fs (loop5): Could not load journal inode [ 213.188740][T12504] loop1: detected capacity change from 0 to 1024 [ 213.190760][T12498] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 213.325618][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.346907][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.356832][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.367890][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3202'. [ 213.378700][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.379078][T12523] IPv6: Can't replace route, no match found [ 213.423803][T12529] sd 0:0:1:0: device reset [ 213.444997][T12531] loop1: detected capacity change from 0 to 1024 [ 213.548689][T12546] loop1: detected capacity change from 0 to 1024 [ 213.559956][T12546] journal_path: Non-blockdev passed as './file1' [ 213.566460][T12546] EXT4-fs: error: could not find journal device path [ 213.590879][T12552] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.662113][T12552] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.705794][T12556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12556 comm=syz.5.3218 [ 213.735590][T12552] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.765442][T12562] sd 0:0:1:0: device reset [ 213.784839][T12564] loop5: detected capacity change from 0 to 1024 [ 213.812224][T12552] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.094103][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.116720][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.130416][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.144550][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.159875][T12587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12587 comm=syz.0.3230 [ 214.188579][T12591] sd 0:0:1:0: device reset [ 214.195189][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3229'. [ 214.230445][T12597] loop2: detected capacity change from 0 to 1024 [ 214.461476][T12616] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.471355][T12616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.487187][T12620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12620 comm=syz.0.3243 [ 214.533900][T12616] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.543822][T12616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.550438][T12626] IPv6: Can't replace route, no match found [ 214.591274][T12616] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.601131][T12616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.641813][T12616] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.651635][T12616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.702986][ T145] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.711397][ T145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.726042][ T145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.734290][ T145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.744932][ T145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.753165][ T145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.764817][ T145] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.773085][ T145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.057320][T12651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12651 comm=syz.2.3255 [ 215.122716][T12659] loop2: detected capacity change from 0 to 1024 [ 215.134599][T12659] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3259: Failed to acquire dquot type 0 [ 215.146393][T12659] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 215.160978][T12659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3259: corrupted inode contents [ 215.173020][T12659] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.3259: mark_inode_dirty error [ 215.184928][T12659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3259: corrupted inode contents [ 215.197128][T12659] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3259: mark_inode_dirty error [ 215.208980][T12659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3259: corrupted inode contents [ 215.224733][T12659] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 215.233884][T12659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3259: corrupted inode contents [ 215.248814][T12659] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.3259: mark_inode_dirty error [ 215.263424][T12659] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 215.273113][T12659] EXT4-fs (loop2): 1 truncate cleaned up [ 215.427826][T12680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12680 comm=syz.1.3267 [ 215.501464][T12686] loop2: detected capacity change from 0 to 1024 [ 215.576966][T12696] sd 0:0:1:0: device reset [ 215.675546][T12706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12706 comm=syz.5.3280 [ 215.752364][T12718] loop2: detected capacity change from 0 to 2048 [ 215.766922][T12722] sd 0:0:1:0: device reset [ 215.816321][T12728] loop5: detected capacity change from 0 to 1024 [ 215.906048][T12738] loop1: detected capacity change from 0 to 1024 [ 215.987251][T12743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12743 comm=syz.1.3294 [ 216.011416][T12718] usb usb7: usbfs: process 12718 (syz.2.3285) did not claim interface 0 before use [ 216.057533][T12751] loop1: detected capacity change from 0 to 1024 [ 216.064512][T12751] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.074200][T12755] sd 0:0:1:0: device reset [ 216.075658][T12751] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.093255][T12751] JBD2: no valid journal superblock found [ 216.099007][T12751] EXT4-fs (loop1): Could not load journal inode [ 216.114917][T12751] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 216.186986][T12766] loop1: detected capacity change from 0 to 1024 [ 216.260502][T12773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12773 comm=syz.1.3307 [ 216.519694][T12784] sd 0:0:1:0: device reset [ 216.670056][T12791] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 216.724464][T12796] loop2: detected capacity change from 0 to 1024 [ 216.742874][T12798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12798 comm=syz.0.3319 [ 216.785393][T12800] loop1: detected capacity change from 0 to 1024 [ 216.847167][T12808] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.912057][T12808] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.953291][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3323'. [ 216.974188][T12820] syzkaller1: entered promiscuous mode [ 216.979773][T12820] syzkaller1: entered allmulticast mode [ 217.003072][T12808] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.066338][T12808] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.196985][T12830] tipc: Enabling of bearer rejected, already enabled [ 217.207374][T12830] IPv6: Can't replace route, no match found [ 217.233098][T12832] loop1: detected capacity change from 0 to 1024 [ 217.287737][T12836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12836 comm=syz.1.3333 [ 217.333635][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.349557][ T145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.365476][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.375384][T12840] loop1: detected capacity change from 0 to 1024 [ 217.385628][ T145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.396913][T12840] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3335: Failed to acquire dquot type 0 [ 217.427365][T12840] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 217.472952][T12840] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3335: corrupted inode contents [ 217.513895][T12811] syz.5.3324 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 217.514112][T12840] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.3335: mark_inode_dirty error [ 217.528210][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.5.3324 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 217.528240][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.528253][T12811] Call Trace: [ 217.528260][T12811] [ 217.528269][T12811] __dump_stack+0x1d/0x30 [ 217.528288][T12811] dump_stack_lvl+0xe8/0x140 [ 217.528367][T12811] dump_stack+0x15/0x1b [ 217.528385][T12811] dump_header+0x81/0x220 [ 217.528416][T12811] oom_kill_process+0x342/0x400 [ 217.528449][T12811] out_of_memory+0x979/0xb80 [ 217.528561][T12811] try_charge_memcg+0x5e6/0x9e0 [ 217.528592][T12811] obj_cgroup_charge_pages+0xa6/0x150 [ 217.528668][T12811] __memcg_kmem_charge_page+0x9f/0x170 [ 217.528718][T12811] __alloc_frozen_pages_noprof+0x188/0x360 [ 217.528755][T12811] alloc_pages_mpol+0xb3/0x250 [ 217.528788][T12811] alloc_pages_noprof+0x90/0x130 [ 217.528899][T12811] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 217.528957][T12811] __kvmalloc_node_noprof+0x30f/0x4e0 [ 217.529013][T12811] ? ip_set_alloc+0x1f/0x30 [ 217.529037][T12811] ? ip_set_alloc+0x1f/0x30 [ 217.529089][T12811] ? __kmalloc_cache_noprof+0x189/0x320 [ 217.529195][T12811] ip_set_alloc+0x1f/0x30 [ 217.529298][T12811] hash_netiface_create+0x282/0x740 [ 217.529331][T12811] ? __pfx_hash_netiface_create+0x10/0x10 [ 217.529442][T12811] ip_set_create+0x3cc/0x960 [ 217.529471][T12811] ? __nla_parse+0x40/0x60 [ 217.529496][T12811] nfnetlink_rcv_msg+0x4c6/0x590 [ 217.529546][T12811] netlink_rcv_skb+0x120/0x220 [ 217.529566][T12811] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 217.529600][T12811] nfnetlink_rcv+0x16b/0x1690 [ 217.529661][T12811] ? cmp_ex_search+0x25/0x40 [ 217.529690][T12811] ? bsearch+0x95/0xc0 [ 217.529717][T12811] ? __pfx_cmp_ex_search+0x10/0x10 [ 217.529778][T12811] ? strncpy_from_user+0x17d/0x230 [ 217.529808][T12811] ? search_extable+0x53/0x80 [ 217.529833][T12811] ? strncpy_from_user+0x17d/0x230 [ 217.529922][T12811] ? strncpy_from_user+0x17d/0x230 [ 217.529951][T12811] ? fixup_exception+0x741/0xd50 [ 217.530034][T12811] ? do_user_addr_fault+0xdaf/0x1090 [ 217.530071][T12811] ? __rcu_read_lock+0x37/0x50 [ 217.530117][T12811] ? do_user_addr_fault+0xdaf/0x1090 [ 217.530148][T12811] ? __schedule+0xa12/0xb30 [ 217.530234][T12811] ? __pte_offset_map_lock+0x1d4/0x230 [ 217.530267][T12811] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 217.530300][T12811] ? exc_page_fault+0x62/0xa0 [ 217.530376][T12811] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 217.530409][T12811] ? should_fail_ex+0x30/0x280 [ 217.530430][T12811] ? selinux_nlmsg_lookup+0x99/0x890 [ 217.530465][T12811] ? __rcu_read_unlock+0x34/0x70 [ 217.530486][T12811] ? __netlink_lookup+0x266/0x2a0 [ 217.530510][T12811] netlink_unicast+0x5c0/0x690 [ 217.530612][T12811] netlink_sendmsg+0x58b/0x6b0 [ 217.530635][T12811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.530673][T12811] __sock_sendmsg+0x145/0x180 [ 217.530732][T12811] ____sys_sendmsg+0x31e/0x4e0 [ 217.530756][T12811] ___sys_sendmsg+0x17b/0x1d0 [ 217.530790][T12811] __x64_sys_sendmsg+0xd4/0x160 [ 217.530816][T12811] x64_sys_call+0x191e/0x2ff0 [ 217.530914][T12811] do_syscall_64+0xd2/0x200 [ 217.531072][T12811] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.531168][T12811] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 217.531192][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.531215][T12811] RIP: 0033:0x7f84d09cebe9 [ 217.531232][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.531270][T12811] RSP: 002b:00007f84cf437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.531291][T12811] RAX: ffffffffffffffda RBX: 00007f84d0bf5fa0 RCX: 00007f84d09cebe9 [ 217.531304][T12811] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 217.531317][T12811] RBP: 00007f84d0a51e19 R08: 0000000000000000 R09: 0000000000000000 [ 217.531332][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.531402][T12811] R13: 00007f84d0bf6038 R14: 00007f84d0bf5fa0 R15: 00007fff21e74478 [ 217.531422][T12811] [ 217.531455][T12811] memory: usage 307200kB, limit 307200kB, failcnt 1090 [ 217.576888][T12840] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3335: corrupted inode contents [ 217.577848][T12811] memory+swap: usage 308492kB, limit 9007199254740988kB, failcnt 0 [ 217.577863][T12811] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 217.586461][T12840] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.3335: mark_inode_dirty error [ 217.591169][T12811] Memory cgroup stats for /syz5: [ 217.593467][T12811] cache 0 [ 217.602510][T12851] syzkaller1: entered promiscuous mode [ 217.606048][T12811] rss 0 [ 217.611531][T12851] syzkaller1: entered allmulticast mode [ 217.657257][T12840] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3335: corrupted inode contents [ 217.662462][T12811] shmem 0 [ 217.662471][T12811] mapped_file 0 [ 217.662478][T12811] dirty 0 [ 217.662485][T12811] writeback 8192 [ 217.668721][T12840] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 217.672772][T12811] workingset_refault_anon 155 [ 217.672783][T12811] workingset_refault_file 1281 [ 217.672792][T12811] swap 1323008 [ 217.672799][T12811] swapcached 12288 [ 217.672807][T12811] pgpgin 57510 [ 217.672815][T12811] pgpgout 57507 [ 217.692374][T12840] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.3335: corrupted inode contents [ 217.696975][T12811] pgfault 109842 [ 217.696985][T12811] pgmajfault 104 [ 217.706385][T12840] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.3335: mark_inode_dirty error [ 217.710817][T12811] inactive_anon 12288 [ 217.710826][T12811] active_anon 0 [ 217.710835][T12811] inactive_file 0 [ 217.723712][T12840] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 217.725729][T12811] active_file 0 [ 217.725738][T12811] unevictable 0 [ 217.725745][T12811] hierarchical_memory_limit 314572800 [ 217.725753][T12811] hierarchical_memsw_limit 9223372036854771712 [ 217.733769][T12840] EXT4-fs (loop1): 1 truncate cleaned up [ 217.735784][T12811] total_cache 0 [ 217.809487][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 217.809501][ T29] audit: type=1326 audit(1754993000.791:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.1.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 217.811575][T12811] total_rss 0 [ 217.816221][ T29] audit: type=1326 audit(1754993000.791:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.1.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 217.820942][T12811] total_shmem 0 [ 217.820950][T12811] total_mapped_file 0 [ 217.820957][T12811] total_dirty 0 [ 217.820964][T12811] total_writeback 8192 [ 217.820972][T12811] total_workingset_refault_anon 155 [ 217.820987][T12811] total_workingset_refault_file 1281 [ 217.820995][T12811] total_swap 1323008 [ 217.821002][T12811] total_swapcached 12288 [ 217.821010][T12811] total_pgpgin 57510 [ 217.825669][ T29] audit: type=1326 audit(1754993000.791:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.1.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 217.830495][T12811] total_pgpgout 57507 [ 217.830504][T12811] total_pgfault 109842 [ 217.830513][T12811] total_pgmajfault 104 [ 217.835166][ T29] audit: type=1326 audit(1754993000.791:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.1.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 217.835194][ T29] audit: type=1326 audit(1754993000.791:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.1.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe65148ebe9 code=0x7ffc0000 [ 217.839732][T12811] total_inactive_anon 12288 [ 217.839742][T12811] total_active_anon 0 [ 217.906530][T12855] sd 0:0:1:0: device reset [ 217.914345][T12811] total_inactive_file 0 [ 217.914358][T12811] total_active_file 0 [ 217.914398][T12811] total_unevictable 0 [ 217.971220][T12859] loop2: detected capacity change from 0 to 1024 [ 217.978891][T12811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3324,pid=12809,uid=0 [ 218.357015][T12811] Memory cgroup out of memory: Killed process 12809 (syz.5.3324) total-vm:93896kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 218.516700][T12865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12865 comm=syz.2.3345 [ 218.517485][T12864] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.571177][T12871] loop2: detected capacity change from 0 to 1024 [ 218.578126][T12871] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.589069][T12871] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 218.599384][T12871] JBD2: no valid journal superblock found [ 218.605156][T12871] EXT4-fs (loop2): Could not load journal inode [ 218.613819][T12864] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.616604][T12871] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 218.682781][T12864] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.687699][T12878] loop5: detected capacity change from 0 to 2048 [ 218.699806][T12876] loop2: detected capacity change from 0 to 1024 [ 218.706543][T12876] journal_path: Non-blockdev passed as './file1' [ 218.712963][T12876] EXT4-fs: error: could not find journal device path [ 218.741847][T12864] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.807952][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.819118][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.829883][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.841193][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.903622][T12881] sd 0:0:1:0: device reset [ 218.942948][T12878] usb usb7: usbfs: process 12878 (syz.5.3351) did not claim interface 0 before use [ 218.968417][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.979320][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.990578][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.001403][ T379] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.371475][ T29] audit: type=1326 audit(1754993002.361:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 219.414943][ T29] audit: type=1326 audit(1754993002.381:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 219.438492][ T29] audit: type=1326 audit(1754993002.381:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 219.462058][ T29] audit: type=1326 audit(1754993002.381:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 219.485473][ T29] audit: type=1326 audit(1754993002.381:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 219.572186][T12898] sd 0:0:1:0: device reset [ 219.707560][T12883] syz.1.3354 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 219.721737][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.1.3354 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 219.721837][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.721848][T12883] Call Trace: [ 219.721855][T12883] [ 219.721865][T12883] __dump_stack+0x1d/0x30 [ 219.721934][T12883] dump_stack_lvl+0xe8/0x140 [ 219.721951][T12883] dump_stack+0x15/0x1b [ 219.721966][T12883] dump_header+0x81/0x220 [ 219.721993][T12883] oom_kill_process+0x342/0x400 [ 219.722078][T12883] out_of_memory+0x979/0xb80 [ 219.722108][T12883] try_charge_memcg+0x5e6/0x9e0 [ 219.722140][T12883] obj_cgroup_charge_pages+0xa6/0x150 [ 219.722224][T12883] __memcg_kmem_charge_page+0x9f/0x170 [ 219.722250][T12883] __alloc_frozen_pages_noprof+0x188/0x360 [ 219.722317][T12883] alloc_pages_mpol+0xb3/0x250 [ 219.722352][T12883] alloc_pages_noprof+0x90/0x130 [ 219.722382][T12883] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 219.722499][T12883] __kvmalloc_node_noprof+0x30f/0x4e0 [ 219.722529][T12883] ? ip_set_alloc+0x1f/0x30 [ 219.722556][T12883] ? ip_set_alloc+0x1f/0x30 [ 219.722642][T12883] ? __kmalloc_cache_noprof+0x189/0x320 [ 219.722667][T12883] ip_set_alloc+0x1f/0x30 [ 219.722741][T12883] hash_netiface_create+0x282/0x740 [ 219.722802][T12883] ? __pfx_hash_netiface_create+0x10/0x10 [ 219.722858][T12883] ip_set_create+0x3cc/0x960 [ 219.722886][T12883] ? __nla_parse+0x40/0x60 [ 219.722907][T12883] nfnetlink_rcv_msg+0x4c6/0x590 [ 219.723018][T12883] netlink_rcv_skb+0x120/0x220 [ 219.723036][T12883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 219.723080][T12883] nfnetlink_rcv+0x16b/0x1690 [ 219.723109][T12883] ? nlmon_xmit+0x4f/0x60 [ 219.723155][T12883] ? consume_skb+0x49/0x150 [ 219.723185][T12883] ? nlmon_xmit+0x4f/0x60 [ 219.723207][T12883] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 219.723228][T12883] ? __dev_queue_xmit+0x1200/0x2000 [ 219.723281][T12883] ? __dev_queue_xmit+0x182/0x2000 [ 219.723301][T12883] ? ref_tracker_free+0x37d/0x3e0 [ 219.723393][T12883] ? __netlink_deliver_tap+0x4dc/0x500 [ 219.723419][T12883] netlink_unicast+0x5c0/0x690 [ 219.723452][T12883] netlink_sendmsg+0x58b/0x6b0 [ 219.723552][T12883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.723650][T12883] __sock_sendmsg+0x145/0x180 [ 219.723673][T12883] ____sys_sendmsg+0x31e/0x4e0 [ 219.723710][T12883] ___sys_sendmsg+0x17b/0x1d0 [ 219.723742][T12883] __x64_sys_sendmsg+0xd4/0x160 [ 219.723768][T12883] x64_sys_call+0x191e/0x2ff0 [ 219.723801][T12883] do_syscall_64+0xd2/0x200 [ 219.723828][T12883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.723853][T12883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.723880][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.723939][T12883] RIP: 0033:0x7fe65148ebe9 [ 219.723953][T12883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.723970][T12883] RSP: 002b:00007fe64fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.723991][T12883] RAX: ffffffffffffffda RBX: 00007fe6516b5fa0 RCX: 00007fe65148ebe9 [ 219.724006][T12883] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 219.724021][T12883] RBP: 00007fe651511e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.724055][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.724066][T12883] R13: 00007fe6516b6038 R14: 00007fe6516b5fa0 R15: 00007ffdfff38508 [ 219.724093][T12883] [ 219.724101][T12883] memory: usage 307200kB, limit 307200kB, failcnt 2307 [ 219.804547][T12904] loop5: detected capacity change from 0 to 1024 [ 219.806229][T12883] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0 [ 219.806245][T12883] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 219.816347][T12904] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.817195][T12883] Memory cgroup stats for /syz1: [ 219.822599][T12904] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.867339][T12883] cache 0 [ 219.876910][T12904] JBD2: no valid journal superblock found [ 219.876974][T12883] rss 28672 [ 219.876983][T12883] shmem 0 [ 219.881706][T12904] EXT4-fs (loop5): Could not load journal inode [ 219.886034][T12883] mapped_file 0 [ 219.936010][T12906] loop2: detected capacity change from 0 to 128 [ 219.940562][T12883] dirty 0 [ 219.965946][T12906] EXT4-fs: Ignoring removed nobh option [ 219.970067][T12883] writeback 0 [ 219.970077][T12883] workingset_refault_anon 424 [ 219.970085][T12883] workingset_refault_file 1991 [ 220.057739][T12906] EXT4-fs mount: 77 callbacks suppressed [ 220.057754][T12906] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.063991][T12883] swap 335872 [ 220.064001][T12883] swapcached 28672 [ 220.064008][T12883] pgpgin 109406 [ 220.102490][T12906] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.110924][T12883] pgpgout 109397 [ 220.110934][T12883] pgfault 132276 [ 220.110940][T12883] pgmajfault 245 [ 220.110947][T12883] inactive_anon 4096 [ 220.110953][T12883] active_anon 24576 [ 220.110960][T12883] inactive_file 0 [ 220.110967][T12883] active_file 8192 [ 220.110974][T12883] unevictable 0 [ 220.110982][T12883] hierarchical_memory_limit 314572800 [ 220.235690][T12883] hierarchical_memsw_limit 9223372036854771712 [ 220.241840][T12883] total_cache 0 [ 220.245304][T12883] total_rss 28672 [ 220.249020][T12883] total_shmem 0 [ 220.252481][T12883] total_mapped_file 0 [ 220.256455][T12883] total_dirty 0 [ 220.259907][T12883] total_writeback 0 [ 220.263759][T12883] total_workingset_refault_anon 424 [ 220.268945][T12883] total_workingset_refault_file 1991 [ 220.274236][T12883] total_swap 335872 [ 220.278024][T12883] total_swapcached 28672 [ 220.282264][T12883] total_pgpgin 109406 [ 220.286228][T12883] total_pgpgout 109397 [ 220.290374][T12883] total_pgfault 132276 [ 220.294465][T12883] total_pgmajfault 245 [ 220.298550][T12883] total_inactive_anon 4096 [ 220.302965][T12883] total_active_anon 24576 [ 220.307277][T12883] total_inactive_file 0 [ 220.311435][T12883] total_active_file 8192 [ 220.315660][T12883] total_unevictable 0 [ 220.319637][T12883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3354,pid=12882,uid=0 [ 220.334417][T12883] Memory cgroup out of memory: Killed process 12882 (syz.1.3354) total-vm:93896kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 220.365122][T12904] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 220.420048][ T7437] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.436641][T12915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12915 comm=syz.0.3365 [ 220.545836][T12925] loop2: detected capacity change from 0 to 1024 [ 220.564100][T12925] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3370: Failed to acquire dquot type 0 [ 220.576067][T12925] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 220.594791][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3370: corrupted inode contents [ 220.607438][T12925] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.3370: mark_inode_dirty error [ 220.623380][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3370: corrupted inode contents [ 220.636553][T12925] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3370: mark_inode_dirty error [ 220.686419][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3370: corrupted inode contents [ 220.717195][T12921] usb usb7: usbfs: process 12921 (syz.0.3368) did not claim interface 0 before use [ 220.735250][T12925] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 220.755151][T12925] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3370: corrupted inode contents [ 220.771307][T12925] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.3370: mark_inode_dirty error [ 220.786059][T12925] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 220.800460][T12925] EXT4-fs (loop2): 1 truncate cleaned up [ 220.805741][T12939] loop1: detected capacity change from 0 to 1024 [ 220.807503][T12925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.829445][T12939] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.840413][T12939] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.851696][T12939] JBD2: no valid journal superblock found [ 220.857466][T12939] EXT4-fs (loop1): Could not load journal inode [ 220.881483][T12939] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 220.937816][ T7437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.962798][T12948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12948 comm=syz.1.3379 [ 221.107053][T12957] loop5: detected capacity change from 0 to 128 [ 221.120092][T12957] EXT4-fs: Ignoring removed nobh option [ 221.151340][T12957] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.207184][T12957] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.264754][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.279517][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.304999][T12970] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 221.599470][T12978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12978 comm=syz.0.3392 [ 221.734256][ T6088] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.791290][T12956] syz.2.3383 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 221.805463][T12956] CPU: 0 UID: 0 PID: 12956 Comm: syz.2.3383 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 221.805546][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.805557][T12956] Call Trace: [ 221.805564][T12956] [ 221.805571][T12956] __dump_stack+0x1d/0x30 [ 221.805596][T12956] dump_stack_lvl+0xe8/0x140 [ 221.805617][T12956] dump_stack+0x15/0x1b [ 221.805636][T12956] dump_header+0x81/0x220 [ 221.805746][T12956] oom_kill_process+0x342/0x400 [ 221.805777][T12956] out_of_memory+0x979/0xb80 [ 221.805804][T12956] try_charge_memcg+0x5e6/0x9e0 [ 221.805839][T12956] obj_cgroup_charge_pages+0xa6/0x150 [ 221.805877][T12956] __memcg_kmem_charge_page+0x9f/0x170 [ 221.805984][T12956] __alloc_frozen_pages_noprof+0x188/0x360 [ 221.806054][T12956] alloc_pages_mpol+0xb3/0x250 [ 221.806143][T12956] alloc_pages_noprof+0x90/0x130 [ 221.806176][T12956] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 221.806313][T12956] __kvmalloc_node_noprof+0x30f/0x4e0 [ 221.806473][T12956] ? ip_set_alloc+0x1f/0x30 [ 221.806501][T12956] ? ip_set_alloc+0x1f/0x30 [ 221.806524][T12956] ? __kmalloc_cache_noprof+0x189/0x320 [ 221.806618][T12956] ip_set_alloc+0x1f/0x30 [ 221.806645][T12956] hash_netiface_create+0x282/0x740 [ 221.806679][T12956] ? __pfx_hash_netiface_create+0x10/0x10 [ 221.806770][T12956] ip_set_create+0x3cc/0x960 [ 221.806803][T12956] nfnetlink_rcv_msg+0x4c6/0x590 [ 221.806851][T12956] netlink_rcv_skb+0x120/0x220 [ 221.806869][T12956] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 221.806969][T12956] nfnetlink_rcv+0x16b/0x1690 [ 221.807003][T12956] ? nlmon_xmit+0x4f/0x60 [ 221.807029][T12956] ? consume_skb+0x49/0x150 [ 221.807101][T12956] ? nlmon_xmit+0x4f/0x60 [ 221.807139][T12956] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 221.807163][T12956] ? __dev_queue_xmit+0x1200/0x2000 [ 221.807209][T12956] ? __dev_queue_xmit+0x182/0x2000 [ 221.807233][T12956] ? ref_tracker_free+0x37d/0x3e0 [ 221.807257][T12956] ? __netlink_deliver_tap+0x4dc/0x500 [ 221.807283][T12956] netlink_unicast+0x5c0/0x690 [ 221.807318][T12956] netlink_sendmsg+0x58b/0x6b0 [ 221.807352][T12956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.807370][T12956] __sock_sendmsg+0x145/0x180 [ 221.807393][T12956] ____sys_sendmsg+0x31e/0x4e0 [ 221.807418][T12956] ___sys_sendmsg+0x17b/0x1d0 [ 221.807532][T12956] __x64_sys_sendmsg+0xd4/0x160 [ 221.807560][T12956] x64_sys_call+0x191e/0x2ff0 [ 221.807631][T12956] do_syscall_64+0xd2/0x200 [ 221.807663][T12956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 221.807685][T12956] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 221.807710][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.807734][T12956] RIP: 0033:0x7f6d2f7febe9 [ 221.807808][T12956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.807859][T12956] RSP: 002b:00007f6d2e25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.807879][T12956] RAX: ffffffffffffffda RBX: 00007f6d2fa25fa0 RCX: 00007f6d2f7febe9 [ 221.807894][T12956] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 221.807946][T12956] RBP: 00007f6d2f881e19 R08: 0000000000000000 R09: 0000000000000000 [ 221.808005][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.808019][T12956] R13: 00007f6d2fa26038 R14: 00007f6d2fa25fa0 R15: 00007ffc651e02a8 [ 221.808036][T12956] [ 221.808042][T12956] memory: usage 307200kB, limit 307200kB, failcnt 590 [ 221.842623][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3395'. [ 221.845806][T12956] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 221.845823][T12956] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 221.845836][T12956] Memory cgroup stats for [ 222.098531][T12995] loop1: detected capacity change from 0 to 1024 [ 222.101260][T12956] /syz2: [ 222.101458][T12956] cache 0 [ 222.141057][T12995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.143575][T12956] rss 0 [ 222.199110][T12956] shmem 0 [ 222.202136][T12956] mapped_file 0 [ 222.205582][T12956] dirty 0 [ 222.208520][T12956] writeback 4096 [ 222.212146][T12956] workingset_refault_anon 149 [ 222.216807][T12956] workingset_refault_file 0 [ 222.221317][T12956] swap 430080 [ 222.224577][T12956] swapcached 16384 [ 222.228269][T12956] pgpgin 83601 [ 222.231741][T12956] pgpgout 83595 [ 222.235200][T12956] pgfault 141320 [ 222.238718][T12956] pgmajfault 101 [ 222.242255][T12956] inactive_anon 4096 [ 222.246121][T12956] active_anon 12288 [ 222.249928][T12956] inactive_file 0 [ 222.253540][T12956] active_file 8192 [ 222.257258][T12956] unevictable 0 [ 222.260700][T12956] hierarchical_memory_limit 314572800 [ 222.266042][T12956] hierarchical_memsw_limit 9223372036854771712 [ 222.272237][T12956] total_cache 0 [ 222.275681][T12956] total_rss 0 [ 222.278984][T12956] total_shmem 0 [ 222.282548][T12956] total_mapped_file 0 [ 222.286509][T12956] total_dirty 0 [ 222.290079][T12956] total_writeback 4096 [ 222.294289][T12956] total_workingset_refault_anon 149 [ 222.299492][T12956] total_workingset_refault_file 0 [ 222.304509][T12956] total_swap 430080 [ 222.308494][T12956] total_swapcached 16384 [ 222.312751][T12956] total_pgpgin 83601 [ 222.316616][T12956] total_pgpgout 83595 [ 222.320584][T12956] total_pgfault 141320 [ 222.324668][T12956] total_pgmajfault 101 [ 222.328784][T12956] total_inactive_anon 4096 [ 222.333188][T12956] total_active_anon 12288 [ 222.337498][T12956] total_inactive_file 0 [ 222.341695][T12956] total_active_file 8192 [ 222.345944][T12956] total_unevictable 0 [ 222.349939][T12956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3383,pid=12955,uid=0 [ 222.364751][T12956] Memory cgroup out of memory: Killed process 12955 (syz.2.3383) total-vm:93896kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 222.393849][T12997] syzkaller0: entered promiscuous mode [ 222.399688][T12997] syzkaller0: entered allmulticast mode [ 222.461171][ T7049] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.507125][T13005] sd 0:0:1:0: device reset [ 222.614239][T13017] loop2: detected capacity change from 0 to 512 [ 222.631560][T13017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 222.644119][T13017] ext4 filesystem being mounted at /481/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.658682][T13017] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz.2.3404: directory missing '..' [ 222.703430][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3404'. [ 222.831013][ T7437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.874240][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 222.874254][ T29] audit: type=1326 audit(1754993005.861:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 222.920764][T13026] loop1: detected capacity change from 0 to 128 [ 222.935190][ T29] audit: type=1326 audit(1754993005.891:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 222.940118][T13026] EXT4-fs: Ignoring removed nobh option [ 222.958781][ T29] audit: type=1326 audit(1754993005.891:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 222.987916][ T29] audit: type=1326 audit(1754993005.891:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 223.011521][ T29] audit: type=1326 audit(1754993005.891:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 223.035015][ T29] audit: type=1326 audit(1754993005.891:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 223.058522][ T29] audit: type=1326 audit(1754993005.901:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 223.082087][ T29] audit: type=1326 audit(1754993005.901:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.2.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f7febe9 code=0x7ffc0000 [ 223.145275][T13026] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.157635][ T29] audit: type=1400 audit(1754993006.111:8156): avc: denied { prog_load } for pid=13021 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.161988][T13026] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.176914][ T29] audit: type=1400 audit(1754993006.111:8157): avc: denied { bpf } for pid=13021 comm="syz.0.3406" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.246935][T13039] loop2: detected capacity change from 0 to 1024 [ 223.253988][T13039] journal_path: Non-blockdev passed as './file1' [ 223.260325][T13039] EXT4-fs: error: could not find journal device path [ 223.448780][ T7049] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.467361][T13042] sd 0:0:1:0: device reset [ 223.908735][T13052] loop4: detected capacity change from 0 to 2048 [ 224.130691][T13054] loop2: detected capacity change from 0 to 1024 [ 224.147902][T13054] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 224.158832][T13054] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 224.193957][T13054] JBD2: no valid journal superblock found [ 224.199765][T13054] EXT4-fs (loop2): Could not load journal inode [ 224.228815][T13054] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 224.236824][T13045] syz.1.3414 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 224.249320][T13045] CPU: 1 UID: 0 PID: 13045 Comm: syz.1.3414 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 224.249422][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.249433][T13045] Call Trace: [ 224.249441][T13045] [ 224.249450][T13045] __dump_stack+0x1d/0x30 [ 224.249478][T13045] dump_stack_lvl+0xe8/0x140 [ 224.249497][T13045] dump_stack+0x15/0x1b [ 224.249514][T13045] dump_header+0x81/0x220 [ 224.249543][T13045] oom_kill_process+0x342/0x400 [ 224.249575][T13045] out_of_memory+0x979/0xb80 [ 224.249623][T13045] try_charge_memcg+0x5e6/0x9e0 [ 224.249699][T13045] charge_memcg+0x51/0xc0 [ 224.249718][T13045] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 224.249741][T13045] __read_swap_cache_async+0x1df/0x350 [ 224.249852][T13045] swap_cluster_readahead+0x376/0x3e0 [ 224.249883][T13045] swapin_readahead+0xde/0x6f0 [ 224.250039][T13045] ? __filemap_get_folio+0x4f7/0x6b0 [ 224.250165][T13045] ? swap_cache_get_folio+0x77/0x200 [ 224.250190][T13045] do_swap_page+0x301/0x2430 [ 224.250209][T13045] ? finish_task_switch+0xad/0x2b0 [ 224.250234][T13045] ? __pfx_default_wake_function+0x10/0x10 [ 224.250258][T13045] handle_mm_fault+0x9a5/0x2c20 [ 224.250324][T13045] do_user_addr_fault+0x636/0x1090 [ 224.250356][T13045] ? fpregs_restore_userregs+0xe2/0x1d0 [ 224.250431][T13045] ? switch_fpu_return+0xe/0x20 [ 224.250458][T13045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.250490][T13045] exc_page_fault+0x62/0xa0 [ 224.250525][T13045] asm_exc_page_fault+0x26/0x30 [ 224.250543][T13045] RIP: 0033:0x7fe6514c14a8 [ 224.250558][T13045] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 224.250573][T13045] RSP: 002b:00007ffdfff38600 EFLAGS: 00010293 [ 224.250588][T13045] RAX: 0000000000000000 RBX: 00007fe6516b5fa0 RCX: 00007fe6514c14a5 [ 224.250629][T13045] RDX: 00007ffdfff38640 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.250698][T13045] RBP: 00007fe6516b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 224.250735][T13045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000036c45 [ 224.250746][T13045] R13: 00007ffdfff38760 R14: ffffffffffffffff R15: 00007ffdfff38780 [ 224.250834][T13045] [ 224.263224][T13052] usb usb7: usbfs: process 13052 (syz.4.3416) did not claim interface 0 before use [ 224.263457][T13045] memory: usage 307200kB, limit 307200kB, failcnt 2624 [ 224.279727][T13045] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 224.496722][T13045] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 224.504031][T13045] Memory cgroup stats for /syz1: [ 224.504439][T13045] cache 0 [ 224.512432][T13045] rss 0 [ 224.515221][T13045] shmem 0 [ 224.518146][T13045] mapped_file 0 [ 224.521643][T13045] dirty 0 [ 224.524570][T13045] writeback 0 [ 224.527840][T13045] workingset_refault_anon 537 [ 224.532544][T13045] workingset_refault_file 2503 [ 224.537356][T13045] swap 364544 [ 224.540663][T13045] swapcached 0 [ 224.544076][T13045] pgpgin 111220 [ 224.547522][T13045] pgpgout 111218 [ 224.551084][T13045] pgfault 135716 [ 224.554615][T13045] pgmajfault 309 [ 224.558162][T13045] inactive_anon 0 [ 224.561910][T13045] active_anon 0 [ 224.565434][T13045] inactive_file 0 [ 224.569055][T13045] active_file 8192 [ 224.572814][T13045] unevictable 0 [ 224.576256][T13045] hierarchical_memory_limit 314572800 [ 224.581643][T13045] hierarchical_memsw_limit 9223372036854771712 [ 224.587839][T13045] total_cache 0 [ 224.591404][T13045] total_rss 0 [ 224.594678][T13045] total_shmem 0 [ 224.598125][T13045] total_mapped_file 0 [ 224.602121][T13045] total_dirty 0 [ 224.605574][T13045] total_writeback 0 [ 224.609372][T13045] total_workingset_refault_anon 537 [ 224.614704][T13045] total_workingset_refault_file 2503 [ 224.620027][T13045] total_swap 364544 [ 224.623845][T13045] total_swapcached 0 [ 224.627723][T13045] total_pgpgin 111220 [ 224.631803][T13045] total_pgpgout 111218 [ 224.635863][T13045] total_pgfault 135716 [ 224.639938][T13045] total_pgmajfault 309 [ 224.644025][T13045] total_inactive_anon 0 [ 224.648163][T13045] total_active_anon 0 [ 224.652157][T13045] total_inactive_file 0 [ 224.656307][T13045] total_active_file 8192 [ 224.660559][T13045] total_unevictable 0 [ 224.664527][T13045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3414,pid=13045,uid=0 [ 224.679269][T13045] Memory cgroup out of memory: Killed process 13045 (syz.1.3414) total-vm:93896kB, anon-rss:944kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 224.980895][T13078] sd 0:0:1:0: device reset [ 225.002298][T13080] loop5: detected capacity change from 0 to 1024 [ 225.012805][T13080] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.023756][T13080] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.038694][T13081] loop2: detected capacity change from 0 to 128 [ 225.052070][T13080] JBD2: no valid journal superblock found [ 225.057825][T13080] EXT4-fs (loop5): Could not load journal inode [ 225.083639][T13080] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 225.139939][T13081] EXT4-fs: Ignoring removed nobh option [ 225.212365][T13095] loop5: detected capacity change from 0 to 1024 [ 225.219163][T13095] journal_path: Non-blockdev passed as './file1' [ 225.225664][T13095] EXT4-fs: error: could not find journal device path [ 225.238188][T13081] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.269677][T13081] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.303823][T13102] loop5: detected capacity change from 0 to 1024 [ 225.346829][T13107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13107 comm=syz.0.3441 [ 225.387956][T13102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.472524][T13115] syzkaller1: entered promiscuous mode [ 225.478019][T13115] syzkaller1: entered allmulticast mode [ 225.510420][ T6088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.623671][T13124] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.662347][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 225.662849][ T7437] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.678459][T13126] bond0: left promiscuous mode [ 225.685280][T13126] bond_slave_0: left promiscuous mode [ 225.690872][T13126] bond_slave_1: left promiscuous mode [ 225.706942][T13126] 0·: left allmulticast mode [ 225.711725][T13126] hsr_slave_0: left allmulticast mode [ 225.717138][T13126] hsr_slave_1: left allmulticast mode [ 225.792807][T13126] veth1_macvtap: left allmulticast mode [ 225.823508][T13126] macsec0: left promiscuous mode [ 225.828479][T13126] macsec0: left allmulticast mode [ 225.835819][T13126] macvtap1: left promiscuous mode [ 225.840900][T13126] macvtap1: left allmulticast mode [ 225.868008][T13124] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.010605][T13124] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.031431][T13138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13138 comm=syz.0.3453 [ 226.072508][T13124] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.168411][T13104] syz.1.3440 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 226.179443][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.1.3440 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 226.179541][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.179552][T13104] Call Trace: [ 226.179559][T13104] [ 226.179568][T13104] __dump_stack+0x1d/0x30 [ 226.179589][T13104] dump_stack_lvl+0xe8/0x140 [ 226.179608][T13104] dump_stack+0x15/0x1b [ 226.179624][T13104] dump_header+0x81/0x220 [ 226.179762][T13104] oom_kill_process+0x342/0x400 [ 226.179831][T13104] out_of_memory+0x979/0xb80 [ 226.179861][T13104] try_charge_memcg+0x5e6/0x9e0 [ 226.179890][T13104] charge_memcg+0x51/0xc0 [ 226.179906][T13104] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 226.180002][T13104] __read_swap_cache_async+0x1df/0x350 [ 226.180034][T13104] swap_cluster_readahead+0x277/0x3e0 [ 226.180101][T13104] swapin_readahead+0xde/0x6f0 [ 226.180132][T13104] ? __filemap_get_folio+0x4f7/0x6b0 [ 226.180173][T13104] ? swap_cache_get_folio+0x77/0x200 [ 226.180259][T13104] do_swap_page+0x301/0x2430 [ 226.180282][T13104] ? css_rstat_updated+0xb7/0x240 [ 226.180310][T13104] ? __pfx_default_wake_function+0x10/0x10 [ 226.180379][T13104] handle_mm_fault+0x9a5/0x2c20 [ 226.180407][T13104] do_user_addr_fault+0x636/0x1090 [ 226.180437][T13104] ? fpregs_restore_userregs+0xad/0x1d0 [ 226.180538][T13104] ? switch_fpu_return+0xe/0x20 [ 226.180600][T13104] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 226.180625][T13104] exc_page_fault+0x62/0xa0 [ 226.180645][T13104] asm_exc_page_fault+0x26/0x30 [ 226.180773][T13104] RIP: 0033:0x7fe6514c1453 [ 226.180788][T13104] Code: f6 08 00 48 8d 3d 56 f6 08 00 e8 f8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 226.180805][T13104] RSP: 002b:00007ffdfff38628 EFLAGS: 00010293 [ 226.180823][T13104] RAX: 00000000fffffffa RBX: 00007fe6516b5fa0 RCX: 0000000000000000 [ 226.180835][T13104] RDX: 00007ffdfff38640 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.180846][T13104] RBP: 00007fe6516b7da0 R08: 0000000006461850 R09: 7fffffffffffffff [ 226.180857][T13104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000037341 [ 226.180875][T13104] R13: 00007ffdfff38760 R14: ffffffffffffffff R15: 00007ffdfff38780 [ 226.180970][T13104] [ 226.181141][T13104] memory: usage 307200kB, limit 307200kB, failcnt 2810 [ 226.409678][T13104] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 226.417563][T13104] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 226.424917][T13104] Memory cgroup stats for /syz1: [ 226.434496][ T145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.448504][T13104] cache 0 [ 226.451591][T13104] rss 0 [ 226.454344][T13104] shmem 0 [ 226.457350][T13104] mapped_file 0 [ 226.460828][T13104] dirty 0 [ 226.463886][T13104] writeback 12288 [ 226.467503][T13104] workingset_refault_anon 581 [ 226.472274][T13104] workingset_refault_file 2888 [ 226.477020][T13104] swap 348160 [ 226.480366][T13104] swapcached 16384 [ 226.484120][T13104] pgpgin 111871 [ 226.484781][T13160] IPv6: Can't replace route, no match found [ 226.487555][T13104] pgpgout 111865 [ 226.487563][T13104] pgfault 136331 [ 226.487570][T13104] pgmajfault 333 [ 226.487578][T13104] inactive_anon 16384 [ 226.508079][T13104] active_anon 0 [ 226.511550][T13104] inactive_file 8192 [ 226.515500][T13104] active_file 0 [ 226.518945][T13104] unevictable 0 [ 226.522408][T13104] hierarchical_memory_limit 314572800 [ 226.527767][T13104] hierarchical_memsw_limit 9223372036854771712 [ 226.533988][T13104] total_cache 0 [ 226.537463][T13104] total_rss 0 [ 226.540736][T13104] total_shmem 0 [ 226.544252][T13104] total_mapped_file 0 [ 226.548247][T13104] total_dirty 0 [ 226.551774][T13104] total_writeback 12288 [ 226.555958][T13104] total_workingset_refault_anon 581 [ 226.561194][T13104] total_workingset_refault_file 2888 [ 226.566463][T13104] total_swap 348160 [ 226.570348][T13104] total_swapcached 16384 [ 226.574565][T13104] total_pgpgin 111871 [ 226.578520][T13104] total_pgpgout 111865 [ 226.582584][T13104] total_pgfault 136331 [ 226.586627][T13104] total_pgmajfault 333 [ 226.590677][T13104] total_inactive_anon 16384 [ 226.595197][T13104] total_active_anon 0 [ 226.599174][T13104] total_inactive_file 8192 [ 226.603582][T13104] total_active_file 0 [ 226.607538][T13104] total_unevictable 0 [ 226.611511][T13104] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3440,pid=13104,uid=0 [ 226.626179][T13104] Memory cgroup out of memory: Killed process 13104 (syz.1.3440) total-vm:93896kB, anon-rss:1068kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 226.654592][T13161] syzkaller1: entered promiscuous mode [ 226.660390][T13161] syzkaller1: entered allmulticast mode [ 226.676841][ T379] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.702322][ T379] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.738698][T13168] sd 0:0:1:0: device reset [ 226.742287][ T379] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.814778][T13172] loop2: detected capacity change from 0 to 1024 [ 226.854800][T13178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13178 comm=syz.4.3465 [ 226.877549][T13143] chnl_net:caif_netlink_parms(): no params data found [ 226.900475][T13172] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3463: Failed to acquire dquot type 0 [ 226.935645][T13172] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 226.961093][T13172] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3463: corrupted inode contents [ 226.983175][T13185] loop4: detected capacity change from 0 to 512 [ 226.991642][T13172] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.3463: mark_inode_dirty error [ 227.003443][T13172] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3463: corrupted inode contents [ 227.013533][T13185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.015881][T13172] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3463: mark_inode_dirty error [ 227.032398][T13185] ext4 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.039992][T13172] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3463: corrupted inode contents [ 227.050744][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.068385][T13143] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.074242][T13172] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 227.084437][T13172] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3463: corrupted inode contents [ 227.096794][T13172] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.3463: mark_inode_dirty error [ 227.106453][T13193] loop1: detected capacity change from 0 to 1024 [ 227.108165][T13172] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 227.119620][T13143] bridge_slave_0: entered allmulticast mode [ 227.128440][T13172] EXT4-fs (loop2): 1 truncate cleaned up [ 227.129605][T13143] bridge_slave_0: entered promiscuous mode [ 227.134997][T13172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.163283][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.164900][T13193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.170461][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.189755][T13143] bridge_slave_1: entered allmulticast mode [ 227.196325][T13143] bridge_slave_1: entered promiscuous mode [ 227.209016][T13185] EXT4-fs warning (device loop4): ext4_empty_dir:3103: inode #12: comm syz.4.3467: directory missing '..' [ 227.223704][ T7049] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.262863][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.272894][T13200] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.297794][T13199] loop1: detected capacity change from 0 to 512 [ 227.309402][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.319130][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3467'. [ 227.324732][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3471'. [ 227.339397][T13199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.352277][T13199] ext4 filesystem being mounted at /381/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.370550][T13199] EXT4-fs warning (device loop1): ext4_empty_dir:3103: inode #12: comm syz.1.3470: directory missing '..' [ 227.385532][ T7574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.403316][T13206] sd 0:0:1:0: device reset [ 227.416126][ T145] bridge_slave_1: left allmulticast mode [ 227.421810][ T145] bridge_slave_1: left promiscuous mode [ 227.427491][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.451891][ T7437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.462256][ T145] bridge_slave_0: left allmulticast mode [ 227.467936][ T145] bridge_slave_0: left promiscuous mode [ 227.473704][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.531810][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.546174][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.556328][ T145] bond0 (unregistering): Released all slaves [ 227.569192][ T145] bond1 (unregistering): (slave batadv0): Releasing active interface [ 227.579036][ T145] bond1 (unregistering): Released all slaves [ 227.592831][T13200] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.610946][T13143] team0: Port device team_slave_0 added [ 227.644010][ T7049] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.656287][T13143] team0: Port device team_slave_1 added [ 227.677906][T13200] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.690761][ T145] hsr_slave_0: left promiscuous mode [ 227.696473][T13217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13217 comm=syz.2.3476 [ 227.709706][ T145] hsr_slave_1: left promiscuous mode [ 227.762575][T13223] loop1: detected capacity change from 0 to 1024 [ 227.782452][T13223] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.793411][T13223] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.820007][ T145] team0 (unregistering): Port device team_slave_1 removed [ 227.829359][T13223] JBD2: no valid journal superblock found [ 227.835171][T13223] EXT4-fs (loop1): Could not load journal inode [ 227.845450][ T145] team0 (unregistering): Port device team_slave_0 removed [ 227.856489][T13223] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 227.874326][T13228] loop4: detected capacity change from 0 to 1024 [ 227.887484][T13228] journal_path: Non-blockdev passed as './file1' [ 227.893941][T13228] EXT4-fs: error: could not find journal device path [ 227.916641][T13200] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.927513][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 227.927526][ T29] audit: type=1400 audit(1754993010.901:8372): avc: denied { connect } for pid=13227 comm="syz.4.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.953334][ T29] audit: type=1400 audit(1754993010.901:8373): avc: denied { name_connect } for pid=13227 comm="syz.4.3480" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 227.982516][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.989681][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.992639][ T29] audit: type=1400 audit(1754993010.941:8374): avc: denied { getopt } for pid=13227 comm="syz.4.3480" lport=48471 faddr=10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.015570][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.032005][T13233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13233 comm=syz.1.3481 [ 228.047687][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.068564][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.094569][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.137723][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 228.146721][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 228.184837][T13143] hsr_slave_0: entered promiscuous mode [ 228.192196][T13143] hsr_slave_1: entered promiscuous mode [ 228.198755][T13143] debugfs: 'hsr0' already exists in 'hsr' [ 228.204536][T13143] Cannot create hsr debugfs directory [ 228.223936][T13237] sd 0:0:1:0: device reset [ 228.236836][ T379] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.245404][ T379] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.373170][T13243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13243 comm=syz.0.3486 [ 228.416257][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.424996][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.434957][T13220] syz.2.3477 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 228.445993][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.2.3477 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 228.446077][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.446087][T13220] Call Trace: [ 228.446093][T13220] [ 228.446100][T13220] __dump_stack+0x1d/0x30 [ 228.446154][T13220] dump_stack_lvl+0xe8/0x140 [ 228.446172][T13220] dump_stack+0x15/0x1b [ 228.446207][T13220] dump_header+0x81/0x220 [ 228.446232][T13220] oom_kill_process+0x342/0x400 [ 228.446263][T13220] out_of_memory+0x979/0xb80 [ 228.446294][T13220] try_charge_memcg+0x5e6/0x9e0 [ 228.446401][T13220] charge_memcg+0x51/0xc0 [ 228.446420][T13220] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 228.446441][T13220] __read_swap_cache_async+0x1df/0x350 [ 228.446468][T13220] swap_cluster_readahead+0x277/0x3e0 [ 228.446504][T13220] swapin_readahead+0xde/0x6f0 [ 228.446529][T13220] ? __filemap_get_folio+0x4f7/0x6b0 [ 228.446611][T13220] ? swap_cache_get_folio+0x77/0x200 [ 228.446638][T13220] do_swap_page+0x301/0x2430 [ 228.446659][T13220] ? css_rstat_updated+0xb7/0x240 [ 228.446709][T13220] ? __pfx_default_wake_function+0x10/0x10 [ 228.446731][T13220] handle_mm_fault+0x9a5/0x2c20 [ 228.446806][T13220] do_user_addr_fault+0x636/0x1090 [ 228.446831][T13220] ? fpregs_restore_userregs+0xad/0x1d0 [ 228.446878][T13220] ? switch_fpu_return+0xe/0x20 [ 228.446900][T13220] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 228.446968][T13220] exc_page_fault+0x62/0xa0 [ 228.446986][T13220] asm_exc_page_fault+0x26/0x30 [ 228.447003][T13220] RIP: 0033:0x7f6d2f6d563c [ 228.447019][T13220] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 228.447053][T13220] RSP: 002b:00007ffc651e0410 EFLAGS: 00010202 [ 228.447093][T13220] RAX: 0000000000000000 RBX: 00007f6d2fa25fa0 RCX: 0000000000000000 [ 228.447104][T13220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556124808 [ 228.447115][T13220] RBP: 00007f6d2fa27da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 228.447140][T13220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000037ccb [ 228.447153][T13220] R13: 00007ffc651e0500 R14: ffffffffffffffff R15: 00007ffc651e0520 [ 228.447173][T13220] [ 228.447181][T13220] memory: usage 307200kB, limit 307200kB, failcnt 782 [ 228.675208][T13220] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 228.683167][T13220] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 228.690477][T13220] Memory cgroup stats for /syz2: [ 228.690872][T13220] cache 0 [ 228.698763][T13220] rss 0 [ 228.701547][T13220] shmem 0 [ 228.704469][T13220] mapped_file 0 [ 228.707954][T13220] dirty 0 [ 228.710913][T13220] writeback 8192 [ 228.714439][T13220] workingset_refault_anon 219 [ 228.719123][T13220] workingset_refault_file 0 [ 228.723641][T13220] swap 438272 [ 228.726934][T13220] swapcached 8192 [ 228.730660][T13220] pgpgin 85052 [ 228.734020][T13220] pgpgout 85048 [ 228.737493][T13220] pgfault 144004 [ 228.741051][T13220] pgmajfault 146 [ 228.744578][T13220] inactive_anon 8192 [ 228.748475][T13220] active_anon 0 [ 228.751981][T13220] inactive_file 8192 [ 228.755943][T13220] active_file 0 [ 228.759387][T13220] unevictable 0 [ 228.762866][T13220] hierarchical_memory_limit 314572800 [ 228.768285][T13220] hierarchical_memsw_limit 9223372036854771712 [ 228.775179][T13220] total_cache 0 [ 228.778637][T13220] total_rss 0 [ 228.782108][T13220] total_shmem 0 [ 228.785554][T13220] total_mapped_file 0 [ 228.789541][T13220] total_dirty 0 [ 228.792982][T13220] total_writeback 8192 [ 228.797044][T13220] total_workingset_refault_anon 219 [ 228.802269][T13220] total_workingset_refault_file 0 [ 228.807281][T13220] total_swap 438272 [ 228.811116][T13220] total_swapcached 8192 [ 228.815259][T13220] total_pgpgin 85052 [ 228.819248][T13220] total_pgpgout 85048 [ 228.823276][T13220] total_pgfault 144004 [ 228.827412][T13220] total_pgmajfault 146 [ 228.831506][T13220] total_inactive_anon 8192 [ 228.835910][T13220] total_active_anon 0 [ 228.839968][T13220] total_inactive_file 8192 [ 228.844457][T13220] total_active_file 0 [ 228.848428][T13220] total_unevictable 0 [ 228.852444][T13220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3477,pid=13220,uid=0 [ 228.867295][T13220] Memory cgroup out of memory: Killed process 13220 (syz.2.3477) total-vm:93896kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 228.899462][ T29] audit: type=1400 audit(1754993011.881:8375): avc: denied { create } for pid=13247 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.919194][ T29] audit: type=1400 audit(1754993011.881:8376): avc: denied { connect } for pid=13247 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.939170][ T29] audit: type=1400 audit(1754993011.881:8377): avc: denied { write } for pid=13247 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.958755][ T29] audit: type=1326 audit(1754993011.881:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 228.982412][ T29] audit: type=1326 audit(1754993011.881:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 229.005917][ T29] audit: type=1326 audit(1754993011.881:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 229.029495][ T29] audit: type=1326 audit(1754993011.881:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0897c0ebe9 code=0x7ffc0000 [ 229.089513][T13220] ================================================================== [ 229.097614][T13220] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 229.107437][T13220] [ 229.109752][T13220] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 229.117813][T13220] tick_do_update_jiffies64+0x113/0x1c0 [ 229.123363][T13220] tick_nohz_handler+0x7f/0x2d0 [ 229.128211][T13220] __hrtimer_run_queues+0x20c/0x5a0 [ 229.133405][T13220] hrtimer_interrupt+0x21a/0x460 [ 229.138337][T13220] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 229.144235][T13220] sysvec_apic_timer_interrupt+0x6f/0x80 [ 229.149856][T13220] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.155841][T13220] __tsan_unaligned_write8+0x10c/0x190 [ 229.161336][T13220] folio_referenced+0xb5/0x390 [ 229.166105][T13220] shrink_folio_list+0x8d4/0x2530 [ 229.171120][T13220] evict_folios+0x29d2/0x3520 [ 229.175789][T13220] try_to_shrink_lruvec+0x5b5/0x950 [ 229.180988][T13220] shrink_lruvec+0x22e/0x1b50 [ 229.185654][T13220] shrink_node+0x686/0x2120 [ 229.190200][T13220] do_try_to_free_pages+0x3f6/0xcd0 [ 229.195439][T13220] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 229.201424][T13220] try_charge_memcg+0x358/0x9e0 [ 229.206283][T13220] charge_memcg+0x51/0xc0 [ 229.210626][T13220] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 229.216612][T13220] __read_swap_cache_async+0x1df/0x350 [ 229.222074][T13220] swap_cluster_readahead+0x277/0x3e0 [ 229.227460][T13220] swapin_readahead+0xde/0x6f0 [ 229.232236][T13220] do_swap_page+0x301/0x2430 [ 229.236920][T13220] handle_mm_fault+0x9a5/0x2c20 [ 229.241774][T13220] do_user_addr_fault+0x636/0x1090 [ 229.246892][T13220] exc_page_fault+0x62/0xa0 [ 229.251492][T13220] asm_exc_page_fault+0x26/0x30 [ 229.256343][T13220] [ 229.259008][T13220] read to 0xffffffff868099c0 of 8 bytes by task 13220 on cpu 0: [ 229.266632][T13220] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 229.272967][T13220] count_shadow_nodes+0x6a/0x230 [ 229.277903][T13220] do_shrink_slab+0x63/0x680 [ 229.282601][T13220] shrink_slab+0x448/0x760 [ 229.287108][T13220] shrink_node+0x6c3/0x2120 [ 229.291619][T13220] do_try_to_free_pages+0x3f6/0xcd0 [ 229.296815][T13220] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 229.302882][T13220] try_charge_memcg+0x358/0x9e0 [ 229.307836][T13220] charge_memcg+0x51/0xc0 [ 229.312685][T13220] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 229.318858][T13220] __read_swap_cache_async+0x1df/0x350 [ 229.324891][T13220] swap_cluster_readahead+0x277/0x3e0 [ 229.330262][T13220] swapin_readahead+0xde/0x6f0 [ 229.335023][T13220] do_swap_page+0x301/0x2430 [ 229.339868][T13220] handle_mm_fault+0x9a5/0x2c20 [ 229.340000][T13259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13259 comm=syz.1.3490 [ 229.344715][T13220] do_user_addr_fault+0x636/0x1090 [ 229.362291][T13220] exc_page_fault+0x62/0xa0 [ 229.366785][T13220] asm_exc_page_fault+0x26/0x30 [ 229.371659][T13220] [ 229.374067][T13220] value changed: 0x00000000ffffe41f -> 0x00000000ffffe420 [ 229.381170][T13220] [ 229.383480][T13220] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.389610][T13220] CPU: 0 UID: 0 PID: 13220 Comm: syz.2.3477 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 229.402112][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.412157][T13220] ================================================================== [ 229.971646][ T145] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.981494][ T145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.010840][ T145] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.020848][ T145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.070768][ T145] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.080536][ T145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.131356][ T145] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.141221][ T145] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.202318][ T145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.260913][ T145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.320818][ T145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.370880][ T145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.454726][ T145] bridge_slave_1: left allmulticast mode [ 230.460538][ T145] bridge_slave_1: left promiscuous mode [ 230.466253][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.473874][ T145] bridge_slave_0: left allmulticast mode [ 230.479622][ T145] bridge_slave_0: left promiscuous mode [ 230.485495][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.493990][ T145] bridge_slave_1: left allmulticast mode [ 230.499719][ T145] bridge_slave_1: left promiscuous mode [ 230.505355][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.513033][ T145] bridge_slave_0: left allmulticast mode [ 230.518799][ T145] bridge_slave_0: left promiscuous mode [ 230.524492][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.533421][ T145] bridge_slave_1: left allmulticast mode [ 230.539040][ T145] bridge_slave_1: left promiscuous mode [ 230.544800][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.552444][ T145] bridge_slave_0: left allmulticast mode [ 230.558063][ T145] bridge_slave_0: left promiscuous mode [ 230.563948][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.572729][ T145] tipc: Resetting bearer [ 230.651380][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.661158][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.670157][ T145] bond0 (unregistering): Released all slaves [ 230.685092][ T145] erspan0 (unregistering): left allmulticast mode [ 230.761468][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.771092][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.780702][ T145] bond0 (unregistering): Released all slaves [ 230.796529][ T145] tipc: Disabling bearer [ 230.870992][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.880786][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.890170][ T145] bond0 (unregistering): Released all slaves [ 230.943034][ T145] tipc: Left network mode [ 230.952586][ T145] hsr_slave_0: left promiscuous mode [ 230.958229][ T145] hsr_slave_1: left promiscuous mode [ 230.963876][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.971292][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.982278][ T145] hsr_slave_0: left promiscuous mode [ 230.987867][ T145] hsr_slave_1: left promiscuous mode [ 230.993491][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.000940][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.008548][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.016005][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.024965][ T145] hsr_slave_0: left promiscuous mode [ 231.030611][ T145] hsr_slave_1: left promiscuous mode [ 231.040203][ T145] veth1_macvtap: left promiscuous mode [ 231.045665][ T145] veth0_macvtap: left promiscuous mode [ 231.051235][ T145] veth1_vlan: left promiscuous mode [ 231.056496][ T145] veth0_vlan: left promiscuous mode [ 231.062441][ T145] veth1_macvtap: left promiscuous mode [ 231.067890][ T145] veth0_macvtap: left promiscuous mode [ 231.073664][ T145] veth1_vlan: left promiscuous mode [ 231.078943][ T145] veth0_vlan: left promiscuous mode [ 231.154967][ T145] team0 (unregistering): Port device team_slave_1 removed [ 231.163977][ T145] team0 (unregistering): Port device team_slave_0 removed [ 231.217736][ T145] team0 (unregistering): Port device team_slave_1 removed [ 231.227247][ T145] team0 (unregistering): Port device team_slave_0 removed [ 231.277024][ T145] team0 (unregistering): Port device team_slave_1 removed [ 231.285849][ T145] team0 (unregistering): Port device team_slave_0 removed [ 232.271734][ T145] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.320632][ T145] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.370590][ T145] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.420828][ T145] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.501834][ T145] bridge_slave_1: left allmulticast mode [ 232.507470][ T145] bridge_slave_1: left promiscuous mode [ 232.513205][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.521027][ T145] bridge_slave_0: left allmulticast mode [ 232.526693][ T145] bridge_slave_0: left promiscuous mode [ 232.532618][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.602332][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.612250][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.621766][ T145] bond0 (unregistering): Released all slaves [ 232.663943][ T145] veth1_macvtap: left promiscuous mode [ 232.669472][ T145] veth0_macvtap: left promiscuous mode [ 232.675064][ T145] veth1_vlan: left promiscuous mode [ 232.680515][ T145] veth0_vlan: left promiscuous mode [ 232.735717][ T145] team0 (unregistering): Port device team_slave_1 removed [ 232.745076][ T145] team0 (unregistering): Port device team_slave_0 removed [ 233.112384][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.171133][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.220827][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.270758][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.331763][ T31] bridge_slave_1: left allmulticast mode [ 233.337396][ T31] bridge_slave_1: left promiscuous mode [ 233.343290][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.350952][ T31] bridge_slave_0: left allmulticast mode [ 233.356572][ T31] bridge_slave_0: left promiscuous mode [ 233.362324][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.461892][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.471752][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.481129][ T31] bond0 (unregistering): Released all slaves [ 233.502834][ T31] hsr_slave_0: left promiscuous mode [ 233.508393][ T31] hsr_slave_1: left promiscuous mode [ 233.513879][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.521357][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.528836][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.536303][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.545781][ T31] veth1_macvtap: left promiscuous mode [ 233.551348][ T31] veth0_macvtap: left promiscuous mode [ 233.556951][ T31] veth1_vlan: left promiscuous mode [ 233.562385][ T31] veth0_vlan: left promiscuous mode [ 233.613618][ T31] team0 (unregistering): Port device team_slave_1 removed [ 233.623382][ T31] team0 (unregistering): Port device team_slave_0 removed