last executing test programs: 9m51.182246466s ago: executing program 32 (id=48): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='jbd2_checkpoint_stats\x00', r4, 0x0, 0x401}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0x101, 0x1) getdents64(r8, 0x0, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000000000000b70085000000b7000000005ebc000000b8000000000038000000000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, r8, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x8, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x5, 0xc}, {0x2, 0x4, 0x4, 0x2}, {0x0, 0x4, 0xf, 0xe}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x4, 0x0, 0x7}, {0x5, 0x2, 0x6, 0xb}, {0x3, 0x2, 0xe, 0x4}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 9m26.460393107s ago: executing program 33 (id=273): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0x97, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000bc0)={'gretap0\x00', r2, 0x8000, 0x7800, 0x3, 0x2, {{0x22, 0x4, 0x3, 0x4, 0x88, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x88, 0x12, "d6ec0d8eabd3da8023e8a72f42ba6ad9"}, @end, @rr={0x7, 0x23, 0x3a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @remote, @multicast2, @rand_addr=0x64010100, @broadcast, @broadcast]}, @generic={0x83, 0xf, "55a1c49d930f20cb82e1dce8a1"}, @timestamp_prespec={0x44, 0x2c, 0xf3, 0x3, 0xf, [{@loopback}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x7ff}, {@rand_addr=0x64010100}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = getpid() sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r8}, 0x38) 6m1.12563624s ago: executing program 34 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0xc0010, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24000841) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3, 0x1, {}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x4, {0x0, 0xf0}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x4, 0x0, 0x9, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) memfd_secret(0x80000) 2m22.35163208s ago: executing program 35 (id=8510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x73, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 2m22.288945475s ago: executing program 7 (id=8523): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000018c0)={{r1}, 0x3, &(0x7f0000000780)=[0x8, 0x3, 0xc], 0xfffffffffffffffe, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x8, [@datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2}, {0x5, 0x1ff, 0x2}, {0x5, 0x9, 0x5}, {0x5, 0x80000001, 0x1}, {0x5, 0xcd, 0x5}], 'n'}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xc74}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x1}, {0x10, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x1}, {0x2, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x28, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @volatile={0x8}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x30, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x110, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r13, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) faccessat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2, 0x0) 2m21.334050502s ago: executing program 7 (id=8528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000018c0)={{r1}, 0x3, &(0x7f0000000780)=[0x8, 0x3, 0xc], 0xfffffffffffffffe, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000d041) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x8, [@datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2}, {0x5, 0x1ff, 0x2}, {0x5, 0x9, 0x5}, {0x5, 0x80000001, 0x1}, {0x5, 0xcd, 0x5}], 'n'}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xc74}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x1}, {0x10, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x1}, {0x2, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x28, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @volatile={0x8}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x30, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x110, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r13, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x70, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) faccessat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2, 0x0) 2m20.375847839s ago: executing program 7 (id=8534): r0 = io_uring_setup(0x3c92, &(0x7f0000000240)={0x0, 0x3, 0x0, 0xffffffff, 0x121}) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 2m20.334396953s ago: executing program 36 (id=8536): syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="0f669b539c2f84b2daa35f05ee86503a908708ba7a0d8540be3e9c8333fd84d02289d22e37e012e3ce12e2cd598def69d6e3c50979d8bdde826079fcac5dc071e86c9e9c65430fd088a97e7c05bb28290bbc40a30e88618cf52a8d83c9f2c9c3781a7b264c8ddaa04ab76dd426cac8fcf4f91cfa9bc9") sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m20.275319718s ago: executing program 7 (id=8542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.159597637s ago: executing program 7 (id=8546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000018c0)={{r1}, 0x3, &(0x7f0000000780)=[0x8, 0x3, 0xc], 0xfffffffffffffffe, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000d041) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x8, [@datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2}, {0x5, 0x1ff, 0x2}, {0x5, 0x9, 0x5}, {0x5, 0x80000001, 0x1}, {0x5, 0xcd, 0x5}], 'n'}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xc74}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x1}, {0x10, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x1}, {0x2, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x28, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @volatile={0x8}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x30, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x110, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r13, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x70, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) faccessat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2, 0x0) 2m19.686150725s ago: executing program 7 (id=8550): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xfff9, 0xbf, 0xfe, 0x8}, {0xc, 0x8, 0x20, 0x8001}]}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="faac959ff1a7eccf54f473641f7febd3e232ab61f3606fd895cf8e0076824694accb6733432209cf041064a05f47359cc217ff878df0138c3ed5b01a74f6d5fb668de0416a6a8e2d3cfba05367f3176517ff42e37badc83702ac088d02", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000180)={0x23, 0xa0, 0x8, 0x9}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='((!)') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000240)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x45d, &(0x7f00000014c0)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31832abd7000000000001900a2a8180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 2m19.659509738s ago: executing program 37 (id=8550): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xfff9, 0xbf, 0xfe, 0x8}, {0xc, 0x8, 0x20, 0x8001}]}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="faac959ff1a7eccf54f473641f7febd3e232ab61f3606fd895cf8e0076824694accb6733432209cf041064a05f47359cc217ff878df0138c3ed5b01a74f6d5fb668de0416a6a8e2d3cfba05367f3176517ff42e37badc83702ac088d02", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000180)={0x23, 0xa0, 0x8, 0x9}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='((!)') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000240)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x45d, &(0x7f00000014c0)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31832abd7000000000001900a2a8180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1m17.047536807s ago: executing program 2 (id=10567): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xfff9, 0xbf, 0xfe, 0x8}, {0xc, 0x8, 0x20, 0x8001}]}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="faac959ff1a7eccf54f473641f7febd3e232ab61f3606fd895cf8e0076824694accb6733432209cf041064a05f47359cc217ff878df0138c3ed5b01a74f6d5fb668de0416a6a8e2d3cfba05367f3176517ff42e37badc83702ac088d02", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000180)={0x23, 0xa0, 0x8, 0x9}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='((!)') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000240)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x45d, &(0x7f00000014c0)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31832abd7000000000001900a2a8180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r10}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f0000ffd000/0x2000)=nil, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r11}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000540), 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', r11, 0x40, 0x8, 0x26f0, 0x0, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x64, 0x0, 0x81, 0x29, 0x0, @empty, @private=0xa010101, {[@generic={0x82, 0x2}]}}}}}) 1m16.14852674s ago: executing program 2 (id=10578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1m16.079055885s ago: executing program 2 (id=10579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2ac}}, 0x0) unshare(0x22020600) 1m16.078440935s ago: executing program 2 (id=10580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x1800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m16.072773686s ago: executing program 2 (id=10581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x200) 1m15.827671186s ago: executing program 2 (id=10582): write$nci(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1m15.827436126s ago: executing program 38 (id=10582): write$nci(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 1m11.123202486s ago: executing program 4 (id=10717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@inlinecrypt}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 1m10.107141339s ago: executing program 4 (id=10733): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x10b}, {0xa, 0x4e23, 0x7, @empty, 0x8}, r1, 0x10007}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close(0x3) 1m10.075963001s ago: executing program 4 (id=10735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x47cdc) 1m10.008172257s ago: executing program 4 (id=10736): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m9.96263426s ago: executing program 4 (id=10738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500082c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffc7, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1m9.72107614s ago: executing program 4 (id=10748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 1m9.72084859s ago: executing program 39 (id=10748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 1m3.507493243s ago: executing program 8 (id=10935): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1m3.191706768s ago: executing program 8 (id=10939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m3.170603s ago: executing program 8 (id=10940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 1m3.118974444s ago: executing program 8 (id=10941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m3.081728907s ago: executing program 8 (id=10942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r2}) 1m2.910364921s ago: executing program 8 (id=10955): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m2.851062626s ago: executing program 40 (id=10955): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 52.178486959s ago: executing program 1 (id=11334): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)=r3}, 0x20) write$cgroup_type(r1, &(0x7f0000000340), 0xffffff64) 52.110445865s ago: executing program 1 (id=11335): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x10) 49.331688849s ago: executing program 1 (id=11414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 49.196413s ago: executing program 1 (id=11417): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 48.911760293s ago: executing program 1 (id=11423): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 48.911038063s ago: executing program 1 (id=11433): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r1, 0x0, 0x478) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 48.852627398s ago: executing program 41 (id=11433): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r1, 0x0, 0x478) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 4.931197651s ago: executing program 9 (id=12690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 2.552729074s ago: executing program 9 (id=12695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 2.281148566s ago: executing program 9 (id=12696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x4004801) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2.277602816s ago: executing program 6 (id=12699): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) 1.73611355s ago: executing program 9 (id=12700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r3, r4) 1.73556681s ago: executing program 5 (id=12711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.661462716s ago: executing program 9 (id=12701): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/165, 0x94}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 1.320048094s ago: executing program 6 (id=12706): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 1.252015229s ago: executing program 6 (id=12707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", "c6a71e72e7ff122a782a7f00", "e471e97b", "6168e4a7e349a0d4"}, 0x28) close(r0) 1.114599521s ago: executing program 3 (id=12709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02"], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.111223971s ago: executing program 6 (id=12710): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1.109885691s ago: executing program 5 (id=12721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) syz_io_uring_setup(0x3, 0x0, &(0x7f0000000240), &(0x7f0000000300)) mq_open(&(0x7f00000008c0)='\x00', 0x2, 0x4b, &(0x7f0000000900)={0xfffffffffffffffc, 0xb, 0x6df8, 0x7}) 1.020305228s ago: executing program 3 (id=12712): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 1.018893308s ago: executing program 5 (id=12724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x555) r4 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x2c, 0x1, @tid=r4}, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 947.820824ms ago: executing program 3 (id=12713): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r3, r4) 918.943136ms ago: executing program 6 (id=12715): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000018c0)={{r1}, 0x3, &(0x7f0000000780)=[0x8, 0x3, 0xc], 0xfffffffffffffffe, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x8, [@datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2}, {0x5, 0x1ff, 0x2}, {0x5, 0x9, 0x5}, {0x5, 0x80000001, 0x1}, {0x5, 0xcd, 0x5}], 'n'}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xc74}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x1}, {0x10, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x1}, {0x2, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x28, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @volatile={0x8}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x30, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x110, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r13, 0x7, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x70, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) faccessat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2, 0x0) 845.215942ms ago: executing program 0 (id=12716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 845.051452ms ago: executing program 5 (id=12717): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x3, 0x70, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x7fffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 842.372902ms ago: executing program 3 (id=12730): r0 = socket$inet(0x2, 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0x60000002}) 801.895376ms ago: executing program 0 (id=12718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 761.007379ms ago: executing program 3 (id=12719): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 760.422499ms ago: executing program 0 (id=12720): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 662.733667ms ago: executing program 5 (id=12722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 642.635009ms ago: executing program 9 (id=12725): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 547.425626ms ago: executing program 0 (id=12726): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 546.553837ms ago: executing program 5 (id=12737): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/165, 0x94}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 379.37287ms ago: executing program 0 (id=12727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x3920e, r2, 0x2, 0x0, 0x2}) 1.623751ms ago: executing program 6 (id=12728): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 981.44µs ago: executing program 0 (id=12740): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) move_mount(r0, 0x0, r2, 0x0, 0x14) sendfile(r2, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=12741): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000018c0)={{r1}, 0x3, &(0x7f0000000780)=[0x8, 0x3, 0xc], 0xfffffffffffffffe, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x8, [@datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2}, {0x5, 0x1ff, 0x2}, {0x5, 0x9, 0x5}, {0x5, 0x80000001, 0x1}, {0x5, 0xcd, 0x5}], 'n'}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xc74}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x2, 0x1}, {0x10, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x1}, {0x2, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x28, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @volatile={0x8}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x30, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x110, 0x1000, 0x1, 0x8, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r13, 0x7, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x70, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) faccessat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): batadv_slave_0 [ 567.835099][T32154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.850137][ T2145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.859583][ T2145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.868890][ T2145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.878419][ T2145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.005526][T32320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10808'. [ 568.141866][T32340] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10815'. [ 569.277900][T32393] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10838'. [ 569.426951][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10841'. [ 569.567961][T32404] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 569.576352][T32404] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 569.638870][T32416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10848'. [ 569.648029][T32416] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10848'. [ 569.657071][T32416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10848'. [ 569.674072][T32416] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10848'. [ 570.044001][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 570.044016][ T29] audit: type=1326 audit(814.664:80328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.087846][ T29] audit: type=1326 audit(814.664:80329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.111013][ T29] audit: type=1326 audit(814.673:80330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.134190][ T29] audit: type=1326 audit(814.673:80331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.157312][ T29] audit: type=1326 audit(814.673:80332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.180384][ T29] audit: type=1326 audit(814.673:80333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.203593][ T29] audit: type=1326 audit(814.673:80334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.226751][ T29] audit: type=1326 audit(814.673:80335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.250286][ T29] audit: type=1326 audit(814.673:80336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.273373][ T29] audit: type=1326 audit(814.673:80337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.0.10863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 570.383306][T32473] loop1: detected capacity change from 0 to 128 [ 570.451374][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.451374][ T3882] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 570.465152][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.465152][ T3882] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 570.478487][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.478487][ T3882] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 570.491814][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.491814][ T3882] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 570.505145][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.505145][ T3882] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 570.518550][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.518550][ T3882] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 570.532001][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.532001][ T3882] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 570.545352][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.545352][ T3882] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 570.558826][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.558826][ T3882] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 570.572274][ T3882] kworker/u8:9: attempt to access beyond end of device [ 570.572274][ T3882] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 570.864618][T32511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 571.022311][T32535] loop1: detected capacity change from 0 to 128 [ 571.028939][T32535] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 571.048051][T32535] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 571.105666][T32543] netlink: 'syz.9.10906': attribute type 13 has an invalid length. [ 571.252344][T32562] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 571.261135][T32562] ref_ctr increment failed for inode: 0x32db offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810a1205c0 [ 571.497950][T32543] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.505311][T32543] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.940313][T32543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.963979][T32543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.037820][ T3885] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.046832][ T3885] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.062498][ T3885] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.071572][ T3885] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.080700][ T3885] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.089636][ T3885] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.102712][ T3885] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.111623][ T3885] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.360393][T32658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32658 comm=syz.6.10950 [ 572.378135][T32662] loop1: detected capacity change from 0 to 512 [ 572.386889][T32662] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 572.418103][ T3885] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.428496][ T3885] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.462886][T32670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10957'. [ 572.535634][ T3885] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.545995][ T3885] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.635718][ T3885] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.646161][ T3885] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.710817][ T3885] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.721236][ T3885] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.767350][T32711] netlink: 'syz.0.10973': attribute type 12 has an invalid length. [ 572.793411][T32678] lo speed is unknown, defaulting to 1000 [ 572.809261][ T3885] batadv1: left allmulticast mode [ 572.814519][ T3885] batadv1: left promiscuous mode [ 572.819791][ T3885] bridge0: port 3(batadv1) entered disabled state [ 572.832184][ T3885] bridge_slave_1: left allmulticast mode [ 572.838138][ T3885] bridge_slave_1: left promiscuous mode [ 572.843810][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.854375][ T3885] bridge_slave_0: left allmulticast mode [ 572.860104][ T3885] bridge_slave_0: left promiscuous mode [ 572.865895][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.884353][T32718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10975'. [ 572.974416][T32726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10980'. [ 573.023888][ T3885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.034837][ T3885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.044618][ T3885] bond0 (unregistering): Released all slaves [ 573.124687][ T3885] tipc: Disabling bearer [ 573.130417][ T3885] tipc: Left network mode [ 573.162621][ T3885] IPVS: stopping backup sync thread 27040 ... [ 573.207085][T32678] chnl_net:caif_netlink_parms(): no params data found [ 573.259554][ T3885] hsr_slave_0: left promiscuous mode [ 573.276972][ T3885] hsr_slave_1: left promiscuous mode [ 573.284150][T32747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10986'. [ 573.287611][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.300638][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.325009][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.332444][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.354228][ T3885] veth1_macvtap: left promiscuous mode [ 573.360073][ T3885] veth0_macvtap: left promiscuous mode [ 573.458504][ T3885] team0 (unregistering): Port device team_slave_1 removed [ 573.472921][ T3885] team0 (unregistering): Port device team_slave_0 removed [ 573.557620][T32678] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.565433][T32678] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.578610][T32678] bridge_slave_0: entered allmulticast mode [ 573.588713][T32678] bridge_slave_0: entered promiscuous mode [ 573.595897][T32678] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.603493][T32678] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.610953][T32678] bridge_slave_1: entered allmulticast mode [ 573.617708][T32678] bridge_slave_1: entered promiscuous mode [ 573.647923][T32678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.659176][T32678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.699310][T32678] team0: Port device team_slave_0 added [ 573.712408][T32678] team0: Port device team_slave_1 added [ 573.739480][T32678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.746646][T32678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.772631][T32678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.826420][T32678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.833411][T32678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.859412][T32678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.904697][T32678] hsr_slave_0: entered promiscuous mode [ 573.911340][T32678] hsr_slave_1: entered promiscuous mode [ 573.917280][T32678] debugfs: 'hsr0' already exists in 'hsr' [ 573.923152][T32678] Cannot create hsr debugfs directory [ 574.138047][ T337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11008'. [ 574.185440][T32678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.196762][T32678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.207172][T32678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.217524][T32678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.262698][T32678] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.269899][T32678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.277289][T32678] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.284443][T32678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.293586][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.302810][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.329391][T32678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.341396][T32678] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.350781][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.358024][ T3882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.369480][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.376545][ T3882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.432958][T32678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.528650][T32678] veth0_vlan: entered promiscuous mode [ 574.536369][T32678] veth1_vlan: entered promiscuous mode [ 574.551125][T32678] veth0_macvtap: entered promiscuous mode [ 574.558179][T32678] veth1_macvtap: entered promiscuous mode [ 574.568363][T32678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.579076][T32678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.589279][ T2145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.598718][ T3888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.610827][ T3888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.619843][ T3888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.800457][ T381] syz_tun: entered allmulticast mode [ 574.979340][ T379] syz_tun: left allmulticast mode [ 575.044930][ T404] netlink: 5 bytes leftover after parsing attributes in process `syz.9.11027'. [ 575.055422][ T404] 0ªî{X¹¦: renamed from gretap0 [ 575.062023][ T405] syz.0.11026: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 575.062911][ T404] 0ªî{X¹¦: entered allmulticast mode [ 575.076695][ T405] CPU: 1 UID: 0 PID: 405 Comm: syz.0.11026 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 575.076742][ T405] Tainted: [W]=WARN [ 575.076750][ T405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.076763][ T405] Call Trace: [ 575.076772][ T405] [ 575.076782][ T405] __dump_stack+0x1d/0x30 [ 575.076806][ T405] dump_stack_lvl+0xe8/0x140 [ 575.076849][ T405] dump_stack+0x15/0x1b [ 575.076867][ T405] warn_alloc+0x12b/0x1a0 [ 575.076972][ T405] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 575.077009][ T405] __vmalloc_node_range_noprof+0x9c/0xe00 [ 575.077042][ T405] ? __rcu_read_unlock+0x4f/0x70 [ 575.077067][ T405] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 575.077105][ T405] ? __rcu_read_unlock+0x4f/0x70 [ 575.077127][ T405] ? perf_cgroup_switch+0x10c/0x480 [ 575.077177][ T405] ? bpf_trace_run4+0x134/0x1d0 [ 575.077204][ T405] ? should_fail_ex+0x30/0x280 [ 575.077236][ T405] ? xskq_create+0x36/0xe0 [ 575.077342][ T405] vmalloc_user_noprof+0x7d/0xb0 [ 575.077374][ T405] ? xskq_create+0x80/0xe0 [ 575.077401][ T405] xskq_create+0x80/0xe0 [ 575.077464][ T405] xsk_init_queue+0x95/0xf0 [ 575.077545][ T405] xsk_setsockopt+0x3f5/0x640 [ 575.077572][ T405] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.077598][ T405] __sys_setsockopt+0x181/0x200 [ 575.077684][ T405] __x64_sys_setsockopt+0x64/0x80 [ 575.077716][ T405] x64_sys_call+0x20ec/0x2ff0 [ 575.077739][ T405] do_syscall_64+0xd2/0x200 [ 575.077799][ T405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 575.077824][ T405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.077847][ T405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.077870][ T405] RIP: 0033:0x7fe82003ebe9 [ 575.077937][ T405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.077956][ T405] RSP: 002b:00007fe81e69f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 575.077978][ T405] RAX: ffffffffffffffda RBX: 00007fe820265fa0 RCX: 00007fe82003ebe9 [ 575.077992][ T405] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 575.078006][ T405] RBP: 00007fe8200c1e19 R08: 0000000000000052 R09: 0000000000000000 [ 575.078020][ T405] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.078033][ T405] R13: 00007fe820266038 R14: 00007fe820265fa0 R15: 00007ffc6e22d958 [ 575.078100][ T405] [ 575.078107][ T405] Mem-Info: [ 575.099236][ T404] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 575.099569][ T405] active_anon:12078 inactive_anon:69 isolated_anon:0 [ 575.099569][ T405] active_file:12895 inactive_file:15801 isolated_file:0 [ 575.099569][ T405] unevictable:0 dirty:288 writeback:0 [ 575.099569][ T405] slab_reclaimable:3855 slab_unreclaimable:123569 [ 575.099569][ T405] mapped:28977 shmem:756 pagetables:1519 [ 575.099569][ T405] sec_pagetables:0 bounce:0 [ 575.099569][ T405] kernel_misc_reclaimable:0 [ 575.099569][ T405] free:1720888 free_pcp:19919 free_cma:0 [ 575.099639][ T405] Node 0 active_anon:48312kB inactive_anon:276kB active_file:51580kB inactive_file:63204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115908kB dirty:1152kB writeback:0kB shmem:3024kB kernel_stack:3904kB pagetables:6076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 575.414872][ T405] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 575.443546][ T405] lowmem_reserve[]: 0 2883 7862 7862 [ 575.448942][ T405] Node 0 DMA32 free:2949328kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 575.478991][ T405] lowmem_reserve[]: 0 0 4978 4978 [ 575.484072][ T405] Node 0 Normal free:3918840kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48332kB inactive_anon:276kB active_file:51580kB inactive_file:63212kB unevictable:0kB writepending:148kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:75864kB local_pcp:39780kB free_cma:0kB [ 575.516160][ T405] lowmem_reserve[]: 0 0 0 0 [ 575.520665][ T405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 575.533345][ T405] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949328kB [ 575.549440][ T405] Node 0 Normal: 464*4kB (UM) 127*8kB (UE) 306*16kB (UM) 77*32kB (UME) 64*64kB (UME) 220*128kB (UME) 90*256kB (UME) 82*512kB (UME) 106*1024kB (UME) 58*2048kB (UME) 875*4096kB (UM) = 3918840kB [ 575.568504][ T405] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 575.577873][ T405] 29526 total pagecache pages [ 575.582679][ T405] 99 pages in swap cache [ 575.586906][ T405] Free swap = 124460kB [ 575.591081][ T405] Total swap = 124996kB [ 575.595284][ T405] 2097051 pages RAM [ 575.599177][ T405] 0 pages HighMem/MovableOnly [ 575.603857][ T405] 80436 pages reserved [ 575.728655][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 575.728689][ T29] audit: type=1400 audit(819.919:80644): avc: denied { connect } for pid=435 comm="syz.9.11040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 575.833162][ T448] bridge_slave_0: left allmulticast mode [ 575.839004][ T448] bridge_slave_0: left promiscuous mode [ 575.844777][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.860688][ T448] bridge_slave_1: left allmulticast mode [ 575.866377][ T448] bridge_slave_1: left promiscuous mode [ 575.872357][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.913564][ T448] bond0: (slave bond_slave_0): Releasing backup interface [ 575.921096][ T29] audit: type=1326 audit(820.094:80645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 575.944065][ T29] audit: type=1326 audit(820.094:80646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 575.970632][ T448] bond0: (slave bond_slave_1): Releasing backup interface [ 575.975419][ T29] audit: type=1326 audit(820.122:80647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 576.000945][ T29] audit: type=1326 audit(820.122:80648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 576.023911][ T29] audit: type=1326 audit(820.122:80649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 576.047252][ T29] audit: type=1326 audit(820.122:80650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 576.070296][ T29] audit: type=1326 audit(820.122:80651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=458 comm="syz.9.11050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1486b1ebe9 code=0x7ffc0000 [ 576.093379][ T29] audit: type=1400 audit(820.122:80652): avc: denied { create } for pid=453 comm="syz.1.11048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 576.112645][ T29] audit: type=1400 audit(820.140:80653): avc: denied { sys_admin } for pid=453 comm="syz.1.11048" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 576.140518][ T448] team0: Port device team_slave_0 removed [ 576.152021][ T448] team0: Port device team_slave_1 removed [ 576.158869][ T448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.166526][ T448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.187999][ T448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.195455][ T448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.107684][ T554] IPv4: Oversized IP packet from 127.202.26.0 [ 577.233031][ T570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11094'. [ 577.270287][ T574] loop5: detected capacity change from 0 to 128 [ 577.469144][ T586] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11101'. [ 577.645641][ T609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11111'. [ 577.654647][ T609] tipc: Started in network mode [ 577.659648][ T609] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 577.666888][ T609] tipc: Enabled bearer , priority 10 [ 577.674024][ T604] lo speed is unknown, defaulting to 1000 [ 577.690144][ T609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11111'. [ 577.722680][ T609] tipc: Resetting bearer [ 577.735939][ T609] tipc: Disabling bearer [ 578.271037][ T652] loop5: detected capacity change from 0 to 128 [ 578.814413][ T706] loop1: detected capacity change from 0 to 4096 [ 578.829028][ T706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.918939][ T720] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.991420][ T720] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.046386][ T720] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.086936][ T720] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.160495][ T3883] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.177243][ T3883] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.189389][ T3883] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.209042][ T3883] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.246693][ T733] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11161'. [ 579.699055][T32154] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.779180][ T809] loop5: detected capacity change from 0 to 512 [ 579.789569][ T809] EXT4-fs (loop5): orphan cleanup on readonly fs [ 579.802094][ T809] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.11195: bad orphan inode 13 [ 579.813616][ T809] ext4_test_bit(bit=12, block=18) = 1 [ 579.819166][ T809] is_bad_inode(inode)=0 [ 579.823467][ T809] NEXT_ORPHAN(inode)=2130706432 [ 579.828327][ T809] max_ino=32 [ 579.831530][ T809] i_nlink=1 [ 579.835580][ T809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 579.836362][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11197'. [ 579.869316][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.927728][ T825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11201'. [ 580.026589][ T838] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.080592][ T838] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.132051][ T838] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.178521][ T838] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.244790][ T2375] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.257208][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.268287][ T2375] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.288020][ T2375] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.397026][ T865] netlink: 'syz.6.11218': attribute type 3 has an invalid length. [ 580.487879][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11221'. [ 580.497295][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11221'. [ 580.844543][ T915] ipvlan2: entered promiscuous mode [ 580.850509][ T915] bridge0: port 1(ipvlan2) entered blocking state [ 580.857149][ T915] bridge0: port 1(ipvlan2) entered disabled state [ 580.864685][ T915] ipvlan2: entered allmulticast mode [ 580.870016][ T915] bridge0: entered allmulticast mode [ 580.876096][ T915] ipvlan2: left allmulticast mode [ 580.881144][ T915] bridge0: left allmulticast mode [ 580.975027][ T926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11243'. [ 581.150955][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 581.150982][ T29] audit: type=1400 audit(824.924:81152): avc: denied { create } for pid=950 comm="syz.1.11256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.188553][ T952] loop5: detected capacity change from 0 to 1024 [ 581.195857][ T952] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 581.207798][ T29] audit: type=1400 audit(824.924:81153): avc: denied { write } for pid=950 comm="syz.1.11256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.227848][ T29] audit: type=1400 audit(824.924:81154): avc: denied { nlmsg_write } for pid=950 comm="syz.1.11256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.251774][ T955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=955 comm=syz.9.11255 [ 581.266837][ T958] netlink: zone id is out of range [ 581.272515][ T958] netlink: zone id is out of range [ 581.280589][ T958] netlink: zone id is out of range [ 581.282447][ T952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.285843][ T958] netlink: zone id is out of range [ 581.303754][ T958] netlink: zone id is out of range [ 581.309525][ T958] netlink: zone id is out of range [ 581.314882][ T958] netlink: zone id is out of range [ 581.320280][ T958] netlink: zone id is out of range [ 581.326097][ T958] netlink: zone id is out of range [ 581.327563][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.331916][ T958] netlink: zone id is out of range [ 581.345662][ T29] audit: type=1400 audit(825.072:81155): avc: denied { add_name } for pid=949 comm="syz.5.11254" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 581.366087][ T29] audit: type=1400 audit(825.072:81156): avc: denied { create } for pid=949 comm="syz.5.11254" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 581.385912][ T29] audit: type=1400 audit(825.072:81157): avc: denied { append } for pid=949 comm="syz.5.11254" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 581.407809][ T29] audit: type=1400 audit(825.072:81158): avc: denied { open } for pid=949 comm="syz.5.11254" path="/80/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 581.430306][ T29] audit: type=1400 audit(825.072:81159): avc: denied { write } for pid=949 comm="syz.5.11254" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 581.608802][ T975] lo speed is unknown, defaulting to 1000 [ 581.713605][ T989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11267'. [ 581.767525][ T29] audit: type=1326 audit(825.497:81160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.11273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018424ebe9 code=0x7ffc0000 [ 581.790574][ T29] audit: type=1326 audit(825.497:81161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.11273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018424ebe9 code=0x7ffc0000 [ 581.902219][ T1001] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11274'. [ 581.916606][ T1008] siw: device registration error -23 [ 581.941016][ T1001] hsr_slave_0: left promiscuous mode [ 581.964299][ T1001] hsr_slave_1: left promiscuous mode [ 582.343416][ T1036] vlan1: entered promiscuous mode [ 582.348751][ T1036] bond0: entered promiscuous mode [ 582.355455][ T1036] bond0: (slave vlan1): Opening slave failed [ 582.410664][ T1042] SELinux: failed to load policy [ 582.440725][ T1046] ip6gre1: entered allmulticast mode [ 582.479653][ T1051] netlink: 48 bytes leftover after parsing attributes in process `syz.9.11293'. [ 582.914542][ T1111] netlink: 96 bytes leftover after parsing attributes in process `syz.9.11320'. [ 582.921025][ T1114] loop5: detected capacity change from 0 to 512 [ 582.942613][ T1114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.972438][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.088784][ T1204] netlink: 'syz.0.11354': attribute type 10 has an invalid length. [ 584.620035][ T1316] netlink: 'syz.9.11370': attribute type 39 has an invalid length. [ 584.680873][ T1327] tipc: New replicast peer: 255.255.255.83 [ 584.687031][ T1327] tipc: Enabled bearer , priority 10 [ 584.731182][ T1336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11374'. [ 584.740440][ T1336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11374'. [ 584.749609][ T1336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11374'. [ 584.769469][ T1336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11374'. [ 585.082949][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11379'. [ 585.141681][ T1390] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 585.296523][ T1418] loop5: detected capacity change from 0 to 512 [ 585.305279][ T1418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 585.324129][ T1418] EXT4-fs (loop5): 1 truncate cleaned up [ 585.330370][ T1418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.363855][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.470822][ T1423] lo speed is unknown, defaulting to 1000 [ 586.148056][ T1468] loop1: detected capacity change from 0 to 512 [ 586.169152][ T1468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.202451][ T1468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.287310][ T1468] loop1: detected capacity change from 512 to 64 [ 586.323284][ T1468] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Out of memory [ 586.337076][ T1468] EXT4-fs error (device loop1): ext4_setattr:6020: inode #19: comm syz.1.11417: mark_inode_dirty error [ 586.349711][ T1468] EXT4-fs error (device loop1) in ext4_setattr:6071: Out of memory [ 586.389070][ T697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.584807][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.681683][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.717131][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 586.717150][ T29] audit: type=1400 audit(830.068:81521): avc: denied { mount } for pid=1502 comm="syz.6.11430" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 586.843960][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.866420][ T1487] lo speed is unknown, defaulting to 1000 [ 586.919921][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.000212][ T1501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11429'. [ 587.028036][ T48] bridge_slave_1: left allmulticast mode [ 587.033754][ T48] bridge_slave_1: left promiscuous mode [ 587.039523][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.055511][ T48] bridge_slave_0: left allmulticast mode [ 587.061210][ T48] bridge_slave_0: left promiscuous mode [ 587.067004][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.165622][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.176418][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.186057][ T48] bond0 (unregistering): Released all slaves [ 587.197496][ T1487] chnl_net:caif_netlink_parms(): no params data found [ 587.237645][ T48] tipc: Left network mode [ 587.297167][ T29] audit: type=1326 audit(830.604:81522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.359415][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.366517][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.385222][ T29] audit: type=1326 audit(830.631:81523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.408431][ T29] audit: type=1326 audit(830.631:81524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.431391][ T29] audit: type=1326 audit(830.631:81525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.436252][ T1487] bridge_slave_0: entered allmulticast mode [ 587.454490][ T29] audit: type=1326 audit(830.631:81526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.483551][ T29] audit: type=1326 audit(830.631:81527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.506656][ T29] audit: type=1326 audit(830.631:81528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.508734][ T1487] bridge_slave_0: entered promiscuous mode [ 587.529632][ T29] audit: type=1326 audit(830.631:81529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.529665][ T29] audit: type=1326 audit(830.631:81530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 587.600676][ T48] hsr_slave_0: left promiscuous mode [ 587.607549][ T48] hsr_slave_1: left promiscuous mode [ 587.613314][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.620791][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.632376][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.639800][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.672762][ T48] veth1_macvtap: left promiscuous mode [ 587.678308][ T48] veth0_macvtap: left promiscuous mode [ 587.687489][ T48] veth1_vlan: left promiscuous mode [ 587.692772][ T48] veth0_vlan: left promiscuous mode [ 587.875986][ T48] team0 (unregistering): Port device team_slave_1 removed [ 587.895678][ T48] team0 (unregistering): Port device team_slave_0 removed [ 587.992027][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.999378][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.020430][ T1487] bridge_slave_1: entered allmulticast mode [ 588.027242][ T1487] bridge_slave_1: entered promiscuous mode [ 588.095589][ T1487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.108054][ T1487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.149883][ T1589] tipc: Enabling of bearer rejected, failed to enable media [ 588.159962][ T1487] team0: Port device team_slave_0 added [ 588.178153][ T1487] team0: Port device team_slave_1 added [ 588.224893][ T1487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.231898][ T1487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.258017][ T1487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.291389][ T1487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.298366][ T1487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.324512][ T1487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.357542][ T1487] hsr_slave_0: entered promiscuous mode [ 588.363856][ T1487] hsr_slave_1: entered promiscuous mode [ 588.429838][ T1618] 9pnet: p9_errstr2errno: server reported unknown error [ 588.542971][ T1628] lo speed is unknown, defaulting to 1000 [ 588.807308][ T1487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 588.828562][ T1487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 588.859158][ T1487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 588.884039][ T1487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.012590][ T1487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.053533][ T1487] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.066436][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.073557][ T3882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.090687][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.097935][ T3882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.176273][ T1680] netlink: 'syz.9.11494': attribute type 12 has an invalid length. [ 589.286701][ T1694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11499'. [ 589.311144][ T1487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.390941][ T1706] netlink: 'syz.0.11504': attribute type 39 has an invalid length. [ 589.481905][ T1487] veth0_vlan: entered promiscuous mode [ 589.509201][ T1487] veth1_vlan: entered promiscuous mode [ 589.561681][ T1487] veth0_macvtap: entered promiscuous mode [ 589.590376][ T1487] veth1_macvtap: entered promiscuous mode [ 589.612649][ T1722] ref_ctr increment failed for inode: 0x2ff offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a1261c0 [ 589.625846][ T1721] uprobe: syz.5.11509:1721 failed to unregister, leaking uprobe [ 589.629926][ T1487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.664444][ T1487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.788601][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.803022][ T1723] vlan1: entered allmulticast mode [ 589.808252][ T1723] bridge_slave_0: entered allmulticast mode [ 589.820463][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.837949][ T3885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.861139][ T3885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.106441][ T1775] netlink: 96 bytes leftover after parsing attributes in process `syz.9.11532'. [ 590.340336][ T1813] netlink: 'syz.6.11550': attribute type 30 has an invalid length. [ 590.456187][ T1822] atomic_op ffff88810fc2a528 conn xmit_atomic 0000000000000000 [ 590.515476][ T1826] vlan1: entered allmulticast mode [ 590.919934][ T1863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11572'. [ 590.929697][ T1863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11572'. [ 590.984051][ T1867] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11574'. [ 591.451209][ T1915] dummy0: left allmulticast mode [ 591.469777][ T1915] bridge0: port 1(dummy0) entered disabled state [ 591.499745][ T1915] bond3: (slave bridge4): Releasing active interface [ 591.748627][ T1931] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 592.090303][ T1959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11614'. [ 592.154445][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 592.154465][ T29] audit: type=1326 audit(835.083:81800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.6.11619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.192766][ T29] audit: type=1400 audit(835.101:81801): avc: denied { getopt } for pid=1970 comm="syz.5.11621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 592.211976][ T29] audit: type=1326 audit(835.101:81802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.6.11619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.234991][ T29] audit: type=1326 audit(835.101:81803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.6.11619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.251598][ T1974] sctp: [Deprecated]: syz.5.11621 (pid 1974) Use of int in max_burst socket option. [ 592.251598][ T1974] Use struct sctp_assoc_value instead [ 592.258104][ T29] audit: type=1326 audit(835.119:81804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.6.11619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.324227][ T29] audit: type=1326 audit(835.249:81805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.6.11624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.347411][ T29] audit: type=1326 audit(835.249:81806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.6.11624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.370586][ T29] audit: type=1326 audit(835.249:81807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.6.11624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.393745][ T29] audit: type=1326 audit(835.249:81808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.6.11624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.416925][ T29] audit: type=1326 audit(835.249:81809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.6.11624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 592.747764][ T2026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11646'. [ 592.766876][ T2026] veth1_vlan (unregistering): left allmulticast mode [ 592.791007][ T2030] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11649'. [ 592.801011][ T2024] net_ratelimit: 2 callbacks suppressed [ 592.801039][ T2024] bond_slave_1: mtu less than device minimum [ 594.042567][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11677'. [ 594.051692][ T2101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11677'. [ 594.296883][ T2125] loop5: detected capacity change from 0 to 2048 [ 594.383602][ T2150] loop3: detected capacity change from 0 to 1024 [ 594.387816][ T2125] loop5: unable to read partition table [ 594.393053][ T2150] EXT4-fs: Ignoring removed orlov option [ 594.401614][ T2125] loop5: partition table beyond EOD, truncated [ 594.407896][ T2125] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 594.419743][ T2150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.489874][ T2161] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11704'. [ 594.499138][ T2161] netlink: 212 bytes leftover after parsing attributes in process `syz.9.11704'. [ 594.776345][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.103272][ T2291] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 596.110848][ T2291] 0ªî{X¹¦: entered allmulticast mode [ 596.116699][ T2291] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 596.222252][ T2307] loop5: detected capacity change from 0 to 1024 [ 596.230275][ T2307] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 596.246386][ T2307] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 596.255767][ T2307] EXT4-fs (loop5): orphan cleanup on readonly fs [ 596.262830][ T2307] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.11768: Invalid inode table block 0 in block_group 0 [ 596.277429][ T2307] EXT4-fs (loop5): Remounting filesystem read-only [ 596.284206][ T2307] EXT4-fs (loop5): 1 truncate cleaned up [ 596.293983][ T2307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.321943][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.387434][ T2320] __nla_validate_parse: 3 callbacks suppressed [ 596.387454][ T2320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11772'. [ 596.408504][ T2320] bridge0: entered promiscuous mode [ 596.414747][ T2320] bridge0: port 1(macvlan2) entered blocking state [ 596.421469][ T2320] bridge0: port 1(macvlan2) entered disabled state [ 596.429595][ T2320] macvlan2: entered allmulticast mode [ 596.435200][ T2320] bridge0: entered allmulticast mode [ 596.441423][ T2320] macvlan2: left allmulticast mode [ 596.446633][ T2320] bridge0: left allmulticast mode [ 596.452672][ T2320] bridge0: left promiscuous mode [ 596.517407][ T2324] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11774'. [ 596.940487][ T2377] ipvlan0: entered promiscuous mode [ 596.950036][ T2377] bridge0: port 1(ipvlan0) entered blocking state [ 596.956777][ T2377] bridge0: port 1(ipvlan0) entered disabled state [ 596.966138][ T2377] ipvlan0: entered allmulticast mode [ 596.971478][ T2377] bridge0: entered allmulticast mode [ 596.995476][ T2377] ipvlan0: left allmulticast mode [ 597.000672][ T2377] bridge0: left allmulticast mode [ 597.036512][ T2385] SELinux: failed to load policy [ 597.429486][ T2415] vlan1: entered allmulticast mode [ 597.996735][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 597.996755][ T29] audit: type=1400 audit(840.485:82127): avc: denied { execmod } for pid=2429 comm="syz.9.11821" path="/689/blkio.bfq.io_merged" dev="tmpfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 598.096461][ T2437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11823'. [ 598.116689][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.130516][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.146242][ T2441] wg2: entered promiscuous mode [ 598.151175][ T2441] wg2: entered allmulticast mode [ 598.251009][ T2390] syz.6.11804 (2390) used greatest stack depth: 6216 bytes left [ 598.334591][ T29] audit: type=1400 audit(840.799:82128): avc: denied { bind } for pid=2459 comm="syz.5.11844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 598.356589][ T29] audit: type=1400 audit(840.799:82129): avc: denied { node_bind } for pid=2459 comm="syz.5.11844" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 598.378539][ T29] audit: type=1400 audit(840.836:82130): avc: denied { name_bind } for pid=2459 comm="syz.5.11844" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 598.418144][ T29] audit: type=1326 audit(840.873:82131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.441485][ T29] audit: type=1326 audit(840.873:82132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.465016][ T29] audit: type=1326 audit(840.919:82133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.488139][ T29] audit: type=1326 audit(840.919:82134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.511206][ T29] audit: type=1326 audit(840.919:82135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.552748][ T29] audit: type=1326 audit(840.919:82136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.5.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9830c6ebe9 code=0x7ffc0000 [ 598.802674][ T2496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11839'. [ 598.853122][ T2507] tipc: Enabling of bearer rejected, already enabled [ 599.271464][ T2537] loop3: detected capacity change from 0 to 1024 [ 599.278233][ T2537] EXT4-fs: Ignoring removed orlov option [ 599.286346][ T2537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.522689][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.773174][ T2597] sctp: [Deprecated]: syz.6.11891 (pid 2597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.773174][ T2597] Use struct sctp_sack_info instead [ 599.799404][ T2603] loop3: detected capacity change from 0 to 512 [ 599.816389][ T2597] sctp: [Deprecated]: syz.6.11891 (pid 2597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.816389][ T2597] Use struct sctp_sack_info instead [ 599.889341][ T2603] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.11892: corrupted inode contents [ 599.918798][ T2603] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.11892: mark_inode_dirty error [ 599.958629][ T2603] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.11892: corrupted inode contents [ 599.972999][ T2603] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.11892: mark_inode_dirty error [ 599.985061][ T2603] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.11892: corrupted inode contents [ 599.999743][ T2603] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 600.017325][ T2603] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.11892: corrupted inode contents [ 600.033281][ T2603] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.11892: mark_inode_dirty error [ 600.078462][ T2632] ip6gre1: entered allmulticast mode [ 600.088467][ T2603] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 600.102887][ T2603] EXT4-fs (loop3): 1 truncate cleaned up [ 600.136298][ T2603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.152759][ T3882] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 600.174197][ T2603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11892'. [ 600.286699][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.495579][ T2699] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11931'. [ 600.615988][ T2716] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11938'. [ 600.735603][ T2731] tipc: Bearer : already 2 bearers with priority 10 [ 600.743066][ T2731] tipc: Bearer : trying with adjusted priority [ 600.749862][ T2731] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 600.793763][ T2737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11947'. [ 600.802987][ T2737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11947'. [ 600.812160][ T2737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11947'. [ 601.029894][ T2756] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 601.100751][ T2766] loop5: detected capacity change from 0 to 128 [ 601.345337][ T2781] Set syz1 is full, maxelem 65536 reached [ 601.379546][ T2786] loop5: detected capacity change from 0 to 512 [ 601.394154][ T2786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.419939][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.635854][ T2804] lo speed is unknown, defaulting to 1000 [ 602.216296][ T2850] __nla_validate_parse: 4 callbacks suppressed [ 602.216349][ T2850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11991'. [ 602.681562][ T2869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12010'. [ 602.699388][ T2869] netem: change failed [ 603.141793][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.151582][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.168200][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.268710][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12027'. [ 603.291488][ T2934] syz_tun: entered promiscuous mode [ 603.316371][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.330369][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.342923][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.425004][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 603.484525][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 603.484544][ T29] audit: type=1400 audit(845.555:82390): avc: denied { lock } for pid=2991 comm="syz.6.12031" path="socket:[118822]" dev="sockfs" ino=118822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 603.849296][ T29] audit: type=1326 audit(845.887:82391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3026 comm="syz.5.12041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9830c65ba7 code=0x0 [ 603.936495][ T29] audit: type=1400 audit(845.943:82392): avc: denied { setattr } for pid=3028 comm="syz.6.12043" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 603.995710][ T29] audit: type=1326 audit(846.026:82393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa79d715ba7 code=0x7ffc0000 [ 604.018790][ T29] audit: type=1326 audit(846.026:82394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa79d6badb9 code=0x7ffc0000 [ 604.041701][ T29] audit: type=1326 audit(846.026:82395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa79d715ba7 code=0x7ffc0000 [ 604.064704][ T29] audit: type=1326 audit(846.026:82396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa79d6badb9 code=0x7ffc0000 [ 604.087811][ T29] audit: type=1326 audit(846.026:82397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 604.116815][ T29] audit: type=1326 audit(846.118:82398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 604.140041][ T29] audit: type=1326 audit(846.118:82399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.6.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 604.200790][ T3040] loop3: detected capacity change from 0 to 512 [ 604.231762][ T3040] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 604.273657][ T3040] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 604.296990][ T1487] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 604.377879][ T3061] 9pnet: p9_errstr2errno: server reported unknown error [ 604.552013][ T3071] syzkaller1: entered promiscuous mode [ 604.557640][ T3071] syzkaller1: entered allmulticast mode [ 604.803094][ T3101] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 604.964839][ T3113] netlink: 'syz.5.12075': attribute type 39 has an invalid length. [ 605.083564][ T3116] syzkaller1: entered promiscuous mode [ 605.089257][ T3116] syzkaller1: entered allmulticast mode [ 605.098581][ T3124] 9pnet: p9_errstr2errno: server reported unknown error [ 605.372311][ T3152] netlink: 'syz.3.12090': attribute type 39 has an invalid length. [ 605.851900][ T3199] vlan1: entered allmulticast mode [ 606.380436][ T3218] netlink: 'syz.0.12116': attribute type 30 has an invalid length. [ 607.440560][ T3294] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 607.592796][ T3302] vlan1: entered allmulticast mode [ 607.939825][ T3317] vlan2: entered allmulticast mode [ 607.945042][ T3317] bridge_slave_0: entered allmulticast mode [ 608.217412][ T3339] __nla_validate_parse: 3 callbacks suppressed [ 608.217432][ T3339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12167'. [ 608.274509][ T3345] netlink: 'syz.3.12170': attribute type 3 has an invalid length. [ 608.339311][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12174'. [ 608.402353][ T3372] loop5: detected capacity change from 0 to 512 [ 608.433227][ T3372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.532449][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.617954][ T3401] loop3: detected capacity change from 0 to 1024 [ 608.640805][ T3401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.666185][ T3401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 608.697909][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.961926][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 608.961943][ T29] audit: type=1326 audit(850.616:82728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.023041][ T29] audit: type=1326 audit(850.616:82729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.046264][ T29] audit: type=1326 audit(850.634:82730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.069395][ T29] audit: type=1326 audit(850.634:82731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.092481][ T29] audit: type=1326 audit(850.634:82732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.115657][ T29] audit: type=1326 audit(850.634:82733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.138665][ T29] audit: type=1326 audit(850.634:82734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.161827][ T29] audit: type=1326 audit(850.634:82735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.185018][ T29] audit: type=1326 audit(850.644:82736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.207930][ T29] audit: type=1326 audit(850.662:82737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.6.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 609.691909][T32627] hid_parser_main: 17 callbacks suppressed [ 609.692002][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.705443][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.712964][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.720513][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.728023][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.735711][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.743264][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.750769][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.758275][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.765863][T32627] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 609.790085][T32627] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 610.176145][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12217'. [ 610.185343][ T3541] tipc: Started in network mode [ 610.190261][ T3541] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 610.197446][ T3541] tipc: Enabled bearer , priority 10 [ 610.219092][ T3541] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12217'. [ 610.234336][ T3541] tipc: Resetting bearer [ 610.248906][ T3541] syz_tun (unregistering): left promiscuous mode [ 610.272542][ T3541] tipc: Disabling bearer [ 610.675078][ T3574] lo speed is unknown, defaulting to 1000 [ 611.094463][ T3601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12240'. [ 611.347554][ T3614] lo speed is unknown, defaulting to 1000 [ 611.669807][ T3663] vlan2: entered promiscuous mode [ 611.674877][ T3663] bond0: entered promiscuous mode [ 611.813598][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12269'. [ 611.822663][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12269'. [ 611.914125][ T3690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.971791][ T3690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.062748][ T3690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.141406][ T3690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.190678][ T3719] bridge_slave_0: left promiscuous mode [ 612.196539][ T3719] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.205613][ T3719] bridge_slave_1: left allmulticast mode [ 612.211408][ T3719] bridge_slave_1: left promiscuous mode [ 612.217164][ T3719] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.240169][ T3719] bond0: (slave bond_slave_0): Releasing backup interface [ 612.250614][ T3719] bond0: (slave bond_slave_1): Releasing backup interface [ 612.260649][ T3719] team0: Port device team_slave_0 removed [ 612.271997][ T3719] team0: Port device team_slave_1 removed [ 612.316395][ T2942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.333323][ T2942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.350546][ T2942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.367024][ T2942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.379133][ T3741] lo speed is unknown, defaulting to 1000 [ 613.741562][ T3780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12315'. [ 613.789878][ T3787] loop3: detected capacity change from 0 to 512 [ 613.824128][ T3787] EXT4-fs (loop3): orphan cleanup on readonly fs [ 613.831369][ T3787] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.12319: bad orphan inode 13 [ 613.853715][ T3787] ext4_test_bit(bit=12, block=18) = 1 [ 613.859174][ T3787] is_bad_inode(inode)=0 [ 613.863357][ T3787] NEXT_ORPHAN(inode)=2130706432 [ 613.868310][ T3787] max_ino=32 [ 613.871524][ T3787] i_nlink=1 [ 613.877946][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 613.942785][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.990520][ T3799] vlan1: entered promiscuous mode [ 613.995605][ T3799] bond0: entered promiscuous mode [ 614.020419][ T3799] bond0: (slave vlan1): Opening slave failed [ 614.105847][ T3806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12326'. [ 614.457979][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 614.457995][ T29] audit: type=1326 audit(855.686:83124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.488486][ T3822] vlan0: entered allmulticast mode [ 614.495706][ T29] audit: type=1326 audit(855.686:83125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.518797][ T29] audit: type=1326 audit(855.686:83126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.541801][ T29] audit: type=1326 audit(855.686:83127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.564838][ T29] audit: type=1326 audit(855.686:83128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.588150][ T29] audit: type=1326 audit(855.686:83129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.611256][ T29] audit: type=1326 audit(855.686:83130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.634320][ T29] audit: type=1326 audit(855.686:83131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.657353][ T29] audit: type=1326 audit(855.686:83132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.680329][ T29] audit: type=1326 audit(855.686:83133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.3.12333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 614.804094][ T3833] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12336'. [ 614.814006][ T3833] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 614.832737][ T3833] 0ªî{X¹¦: entered allmulticast mode [ 614.838960][ T3833] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 615.099677][ T3864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12351'. [ 615.254864][ T3877] loop5: detected capacity change from 0 to 1024 [ 615.315355][ T3877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.355024][ T3877] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 615.362317][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12362'. [ 615.379110][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12362'. [ 615.407367][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.558001][ T3914] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.622852][ T3914] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.676680][ T3914] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.751482][ T3914] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.847999][ T2980] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.873668][ T2980] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.897676][ T2980] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.917000][ T2980] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.144521][ T3958] vlan0: entered allmulticast mode [ 616.342765][ T3976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12406'. [ 616.357070][T32627] page_pool_release_retry() stalled pool shutdown: id 113, 1 inflight 60 sec [ 616.516820][ T3992] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12414'. [ 616.597942][ T4011] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.705793][ T4011] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.824897][ T4011] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.943062][ T4011] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.008262][ T2963] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.016582][ T2963] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.028015][ T2963] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.041482][ T2963] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.152536][ T4037] netlink: 14 bytes leftover after parsing attributes in process `syz.9.12422'. [ 617.175398][ T4043] siw: device registration error -23 [ 617.175984][ T4037] hsr_slave_0: left promiscuous mode [ 617.195320][ T4037] hsr_slave_1: left promiscuous mode [ 617.355494][ T4060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4060 comm=syz.0.12440 [ 617.377667][ T4058] netlink: zone id is out of range [ 617.382904][ T4058] netlink: zone id is out of range [ 617.388206][ T4058] netlink: zone id is out of range [ 617.393356][ T4058] netlink: zone id is out of range [ 617.399742][ T4058] netlink: zone id is out of range [ 617.405001][ T4058] netlink: zone id is out of range [ 617.410707][ T4058] netlink: zone id is out of range [ 617.415960][ T4058] netlink: zone id is out of range [ 617.421937][ T4058] netlink: zone id is out of range [ 617.839966][ T4082] siw: device registration error -23 [ 618.151684][ T4112] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.242772][ T4112] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.289110][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12462'. [ 618.300269][ T4112] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.384813][ T4112] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.452528][ T2933] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.464820][ T2942] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.476063][ T2942] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.487702][ T2942] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.024733][ T4197] loop5: detected capacity change from 0 to 512 [ 619.032635][ T4197] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 619.041377][ T4197] EXT4-fs (loop5): failed to open journal device unknown-block(8,3) -6 [ 619.078690][ T4200] sctp: [Deprecated]: syz.0.12490 (pid 4200) Use of int in max_burst socket option. [ 619.078690][ T4200] Use struct sctp_assoc_value instead [ 619.614585][ T4232] loop3: detected capacity change from 0 to 512 [ 619.624637][ T4232] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 619.634763][ T4232] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 619.714234][ T4236] loop3: detected capacity change from 0 to 2048 [ 619.739830][ T4236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.777346][ T1487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 619.792676][ T1487] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 619.806944][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.970096][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 619.970113][ T29] audit: type=1326 audit(860.774:83395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.0.12518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 620.009856][ T29] audit: type=1326 audit(860.811:83396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.0.12518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 620.032975][ T29] audit: type=1326 audit(860.811:83397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.0.12518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82003ebe9 code=0x7ffc0000 [ 620.070353][ T29] audit: type=1326 audit(860.857:83398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.6.12514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 620.093786][ T29] audit: type=1326 audit(860.867:83399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.116923][ T29] audit: type=1326 audit(860.867:83400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.140138][ T29] audit: type=1326 audit(860.867:83401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.163118][ T29] audit: type=1326 audit(860.867:83402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.186141][ T29] audit: type=1326 audit(860.867:83403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.209272][ T29] audit: type=1326 audit(860.867:83404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.3.12520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 620.365183][ T4280] ip6gre2: entered allmulticast mode [ 620.382024][ T4282] __nla_validate_parse: 1 callbacks suppressed [ 620.382043][ T4282] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12526'. [ 620.401604][ T4278] SELinux: failed to load policy [ 620.603694][ T4297] loop3: detected capacity change from 0 to 512 [ 620.625870][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.657943][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.813752][ T4250] syz.9.12513 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 620.827776][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.9.12513 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 620.827814][ T4250] Tainted: [W]=WARN [ 620.827822][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.827861][ T4250] Call Trace: [ 620.827869][ T4250] [ 620.827877][ T4250] __dump_stack+0x1d/0x30 [ 620.827972][ T4250] dump_stack_lvl+0xe8/0x140 [ 620.827996][ T4250] dump_stack+0x15/0x1b [ 620.828053][ T4250] dump_header+0x81/0x220 [ 620.828087][ T4250] oom_kill_process+0x342/0x400 [ 620.828123][ T4250] out_of_memory+0x979/0xb80 [ 620.828161][ T4250] try_charge_memcg+0x5e6/0x9e0 [ 620.828212][ T4250] obj_cgroup_charge_pages+0xa6/0x150 [ 620.828242][ T4250] __memcg_kmem_charge_page+0x9f/0x170 [ 620.828338][ T4250] __alloc_frozen_pages_noprof+0x188/0x360 [ 620.828373][ T4250] alloc_pages_mpol+0xb3/0x250 [ 620.828483][ T4250] alloc_pages_noprof+0x90/0x130 [ 620.828513][ T4250] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 620.828554][ T4250] __kvmalloc_node_noprof+0x30f/0x4e0 [ 620.828685][ T4250] ? ip_set_alloc+0x1f/0x30 [ 620.828710][ T4250] ? ip_set_alloc+0x1f/0x30 [ 620.828735][ T4250] ? __kmalloc_cache_noprof+0x189/0x320 [ 620.828772][ T4250] ip_set_alloc+0x1f/0x30 [ 620.828796][ T4250] hash_netiface_create+0x282/0x740 [ 620.828825][ T4250] ? __pfx_hash_netiface_create+0x10/0x10 [ 620.828894][ T4250] ip_set_create+0x3c9/0x960 [ 620.828932][ T4250] ? __nla_parse+0x40/0x60 [ 620.829010][ T4250] nfnetlink_rcv_msg+0x4c3/0x590 [ 620.829106][ T4250] netlink_rcv_skb+0x123/0x220 [ 620.829134][ T4250] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 620.829196][ T4250] nfnetlink_rcv+0x16b/0x1690 [ 620.829232][ T4250] ? __list_del_entry_valid_or_report+0x65/0x130 [ 620.829257][ T4250] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 620.829290][ T4250] ? __bpf_get_stack+0x5ff/0x630 [ 620.829361][ T4250] ? should_fail_ex+0x30/0x280 [ 620.829391][ T4250] ? selinux_nlmsg_lookup+0x99/0x890 [ 620.829418][ T4250] ? __rcu_read_unlock+0x34/0x70 [ 620.829501][ T4250] ? __netlink_lookup+0x266/0x2a0 [ 620.829524][ T4250] netlink_unicast+0x5bd/0x690 [ 620.829553][ T4250] netlink_sendmsg+0x58b/0x6b0 [ 620.829595][ T4250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.829626][ T4250] __sock_sendmsg+0x142/0x180 [ 620.829690][ T4250] ____sys_sendmsg+0x31e/0x4e0 [ 620.829723][ T4250] ___sys_sendmsg+0x17b/0x1d0 [ 620.829764][ T4250] __x64_sys_sendmsg+0xd4/0x160 [ 620.829820][ T4250] x64_sys_call+0x191e/0x2ff0 [ 620.829840][ T4250] do_syscall_64+0xd2/0x200 [ 620.829863][ T4250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 620.829890][ T4250] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 620.829912][ T4250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.829933][ T4250] RIP: 0033:0x7f1486b1ebe9 [ 620.829949][ T4250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.829985][ T4250] RSP: 002b:00007f1485187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.830005][ T4250] RAX: ffffffffffffffda RBX: 00007f1486d45fa0 RCX: 00007f1486b1ebe9 [ 620.830018][ T4250] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 620.830030][ T4250] RBP: 00007f1486ba1e19 R08: 0000000000000000 R09: 0000000000000000 [ 620.830041][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.830053][ T4250] R13: 00007f1486d46038 R14: 00007f1486d45fa0 R15: 00007ffe36956e78 [ 620.830071][ T4250] [ 621.166196][ T4250] memory: usage 307200kB, limit 307200kB, failcnt 2683 [ 621.173064][ T4250] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 621.181501][ T4250] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 621.189114][ T4250] Memory cgroup stats for /syz9: [ 621.195184][ T4250] cache 0 [ 621.203331][ T4250] rss 4096 [ 621.206366][ T4250] shmem 0 [ 621.209485][ T4250] mapped_file 0 [ 621.212968][ T4250] dirty 0 [ 621.215937][ T4250] writeback 0 [ 621.219267][ T4250] workingset_refault_anon 72 [ 621.223950][ T4250] workingset_refault_file 0 [ 621.228602][ T4250] swap 462848 [ 621.232049][ T4250] swapcached 8192 [ 621.235752][ T4250] pgpgin 173308 [ 621.239287][ T4250] pgpgout 173306 [ 621.242942][ T4250] pgfault 198348 [ 621.246627][ T4250] pgmajfault 18 [ 621.250205][ T4250] inactive_anon 8192 [ 621.254264][ T4250] active_anon 0 [ 621.257760][ T4250] inactive_file 0 [ 621.261406][ T4250] active_file 0 [ 621.264970][ T4250] unevictable 0 [ 621.268463][ T4250] hierarchical_memory_limit 314572800 [ 621.273880][ T4250] hierarchical_memsw_limit 9223372036854771712 [ 621.274557][ T4336] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 621.280151][ T4250] total_cache 0 [ 621.280165][ T4250] total_rss 4096 [ 621.295694][ T4250] total_shmem 0 [ 621.299169][ T4250] total_mapped_file 0 [ 621.303160][ T4250] total_dirty 0 [ 621.306723][ T4250] total_writeback 0 [ 621.310583][ T4250] total_workingset_refault_anon 72 [ 621.315723][ T4250] total_workingset_refault_file 0 [ 621.320824][ T4250] total_swap 462848 [ 621.324644][ T4250] total_swapcached 8192 [ 621.328827][ T4250] total_pgpgin 173308 [ 621.332792][ T4250] total_pgpgout 173306 [ 621.336854][ T4250] total_pgfault 198348 [ 621.340921][ T4250] total_pgmajfault 18 [ 621.344999][ T4250] total_inactive_anon 8192 [ 621.349436][ T4250] total_active_anon 0 [ 621.353407][ T4250] total_inactive_file 0 [ 621.357639][ T4250] total_active_file 0 [ 621.361651][ T4250] total_unevictable 0 [ 621.365606][ T4250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8841,pid=27673,uid=0 [ 621.380459][ T4250] Memory cgroup out of memory: Killed process 27673 (syz.9.8841) total-vm:93632kB, anon-rss:952kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 621.471180][ T4247] syz.9.12513 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 621.482268][ T4247] CPU: 1 UID: 0 PID: 4247 Comm: syz.9.12513 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 621.482338][ T4247] Tainted: [W]=WARN [ 621.482347][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.482361][ T4247] Call Trace: [ 621.482369][ T4247] [ 621.482378][ T4247] __dump_stack+0x1d/0x30 [ 621.482405][ T4247] dump_stack_lvl+0xe8/0x140 [ 621.482487][ T4247] dump_stack+0x15/0x1b [ 621.482508][ T4247] dump_header+0x81/0x220 [ 621.482542][ T4247] oom_kill_process+0x342/0x400 [ 621.482605][ T4247] out_of_memory+0x979/0xb80 [ 621.482645][ T4247] try_charge_memcg+0x5e6/0x9e0 [ 621.482759][ T4247] charge_memcg+0x51/0xc0 [ 621.482782][ T4247] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 621.482808][ T4247] __read_swap_cache_async+0x1df/0x350 [ 621.482848][ T4247] swap_cluster_readahead+0x277/0x3e0 [ 621.482943][ T4247] swapin_readahead+0xde/0x6f0 [ 621.483031][ T4247] ? __filemap_get_folio+0x4f7/0x6b0 [ 621.483074][ T4247] ? swap_cache_get_folio+0x77/0x200 [ 621.483207][ T4247] do_swap_page+0x301/0x2430 [ 621.483234][ T4247] ? sbitmap_queue_clear+0xcf/0xf0 [ 621.483255][ T4247] ? __rcu_read_unlock+0x4f/0x70 [ 621.483283][ T4247] ? __pfx_default_wake_function+0x10/0x10 [ 621.483429][ T4247] handle_mm_fault+0x9a5/0x2c20 [ 621.483524][ T4247] do_user_addr_fault+0x636/0x1090 [ 621.483571][ T4247] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 621.483616][ T4247] exc_page_fault+0x62/0xa0 [ 621.483640][ T4247] asm_exc_page_fault+0x26/0x30 [ 621.483672][ T4247] RIP: 0033:0x7f14869ff445 [ 621.483690][ T4247] Code: 0f 1f 44 00 00 48 8b 70 08 48 39 72 f8 0f 84 1f 03 00 00 48 89 d0 48 8d 52 08 48 39 ea 75 e6 48 8b 04 24 48 29 c5 48 c1 fd 03 <80> 7b 4e 00 8b 53 48 89 e8 0f 85 46 03 00 00 85 d2 0f 85 62 03 00 [ 621.483842][ T4247] RSP: 002b:00007ffe36956f20 EFLAGS: 00010202 [ 621.483863][ T4247] RAX: 00007f148618f008 RBX: 00007f1487875720 RCX: ffffffff8566c64c [ 621.483909][ T4247] RDX: 00007f148658f000 RSI: ffffffff812792fd RDI: 00007f148618f008 [ 621.484026][ T4247] RBP: 000000000000074a R08: 00007f148618f088 R09: 00007f1486d32000 [ 621.484083][ T4247] R10: 00007f148618f008 R11: 0000000000000001 R12: 00007f148658f000 [ 621.484097][ T4247] R13: 00007f1486d46038 R14: ffffffffffffffff R15: 00007f148618f008 [ 621.484116][ T4247] ? xa_load+0xac/0xe0 [ 621.484142][ T4247] ? get_gate_vma+0xd/0x90 [ 621.484226][ T4247] [ 621.484234][ T4247] memory: usage 307200kB, limit 307200kB, failcnt 2877 [ 621.724838][ T4247] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 621.733036][ T4247] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 621.740457][ T4247] Memory cgroup stats for /syz9: [ 621.741875][ T4247] cache 0 [ 621.749907][ T4247] rss 4096 [ 621.753004][ T4247] shmem 0 [ 621.755946][ T4247] mapped_file 0 [ 621.759421][ T4247] dirty 0 [ 621.762424][ T4247] writeback 4096 [ 621.766048][ T4247] workingset_refault_anon 73 [ 621.770690][ T4247] workingset_refault_file 0 [ 621.775236][ T4247] swap 389120 [ 621.778534][ T4247] swapcached 8192 [ 621.782231][ T4247] pgpgin 173309 [ 621.785788][ T4247] pgpgout 173307 [ 621.789350][ T4247] pgfault 198351 [ 621.792960][ T4247] pgmajfault 18 [ 621.796432][ T4247] inactive_anon 8192 [ 621.800335][ T4247] active_anon 0 [ 621.803930][ T4247] inactive_file 0 [ 621.807571][ T4247] active_file 0 [ 621.811053][ T4247] unevictable 0 [ 621.814557][ T4247] hierarchical_memory_limit 314572800 [ 621.819943][ T4247] hierarchical_memsw_limit 9223372036854771712 [ 621.826202][ T4247] total_cache 0 [ 621.829761][ T4247] total_rss 4096 [ 621.833426][ T4247] total_shmem 0 [ 621.837021][ T4247] total_mapped_file 0 [ 621.841027][ T4247] total_dirty 0 [ 621.844515][ T4247] total_writeback 4096 [ 621.848630][ T4247] total_workingset_refault_anon 73 [ 621.853746][ T4247] total_workingset_refault_file 0 [ 621.858841][ T4247] total_swap 389120 [ 621.862657][ T4247] total_swapcached 8192 [ 621.866820][ T4247] total_pgpgin 173309 [ 621.870871][ T4247] total_pgpgout 173307 [ 621.874942][ T4247] total_pgfault 198351 [ 621.879032][ T4247] total_pgmajfault 18 [ 621.883039][ T4247] total_inactive_anon 8192 [ 621.887544][ T4247] total_active_anon 0 [ 621.891611][ T4247] total_inactive_file 0 [ 621.895774][ T4247] total_active_file 0 [ 621.899768][ T4247] total_unevictable 0 [ 621.903880][ T4247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.12513,pid=4247,uid=0 [ 621.915066][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12551'. [ 621.918613][ T4247] Memory cgroup out of memory: Killed process 4247 (syz.9.12513) total-vm:95812kB, anon-rss:944kB, file-rss:22084kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 621.946328][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.953796][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.962043][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.969528][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.158032][ T4359] ip6gre2: entered allmulticast mode [ 622.272419][ T4373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12567'. [ 622.282839][ T4373] hsr_slave_0: left promiscuous mode [ 622.293744][ T4373] hsr_slave_1: left promiscuous mode [ 623.072824][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12568'. [ 624.101595][ T4398] ip6gre1: entered allmulticast mode [ 624.312068][ T4410] lo speed is unknown, defaulting to 1000 [ 624.700426][ T4447] loop5: detected capacity change from 0 to 512 [ 624.731344][ T4447] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.12599: corrupted inode contents [ 624.748745][ T4447] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.12599: mark_inode_dirty error [ 624.761341][ T4447] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.12599: corrupted inode contents [ 624.773875][ T4447] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.12599: mark_inode_dirty error [ 624.785560][ T4447] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.12599: corrupted inode contents [ 624.798030][ T4447] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 624.806813][ T4447] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.12599: corrupted inode contents [ 624.819121][ T4447] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.12599: mark_inode_dirty error [ 624.830660][ T4447] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 624.840338][ T4447] EXT4-fs (loop5): 1 truncate cleaned up [ 624.846630][ T4447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.859426][ T2980] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 1 [ 624.882042][ T4447] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12599'. [ 624.918865][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.043446][ T4478] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12620'. [ 625.448651][ T4510] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 625.853947][ T4529] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 626.231300][ T4568] loop3: detected capacity change from 0 to 512 [ 626.246690][ T4568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 626.258673][ T4568] EXT4-fs (loop3): 1 truncate cleaned up [ 626.265266][ T4568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.295675][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.528943][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 626.528962][ T29] audit: type=1326 audit(866.832:83485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.12646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x0 [ 626.961976][ T4679] loop5: detected capacity change from 0 to 2048 [ 626.992290][ T4679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.026828][T32678] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 627.042171][T32678] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 627.055524][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.532834][ T29] audit: type=1326 audit(867.765:83486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.594697][ T29] audit: type=1326 audit(867.765:83487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.617927][ T29] audit: type=1326 audit(867.765:83488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.641178][ T29] audit: type=1326 audit(867.765:83489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.664448][ T29] audit: type=1326 audit(867.765:83490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.687564][ T29] audit: type=1326 audit(867.793:83491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 627.710751][ T29] audit: type=1326 audit(867.802:83492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f604817adb9 code=0x7ffc0000 [ 627.733797][ T29] audit: type=1326 audit(867.802:83493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.3.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 628.158295][ T4764] vlan2: entered allmulticast mode [ 628.189617][ T4758] SELinux: failed to load policy [ 628.670382][ T4846] wg2: entered promiscuous mode [ 628.675346][ T4846] wg2: entered allmulticast mode [ 628.810903][ T4861] loop5: detected capacity change from 0 to 1024 [ 628.833224][ T4861] EXT4-fs: Ignoring removed orlov option [ 628.852372][ T4853] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.865188][ T4861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.919163][ T4853] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.984197][ T4853] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.027619][ T4853] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.090139][ T2974] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.108926][ T2974] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.117999][ T2974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.136289][ T2974] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.299712][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.350344][ T4869] loop3: detected capacity change from 0 to 4096 [ 629.382183][ T4869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.332518][ T29] audit: type=1326 audit(870.333:83494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.6.12698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79d71ebe9 code=0x7ffc0000 [ 630.373915][ T1487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.403843][ T4977] wg2: entered promiscuous mode [ 630.408762][ T4977] wg2: entered allmulticast mode [ 630.750603][ T4918] syz.0.12683 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 630.761493][ T4918] CPU: 0 UID: 0 PID: 4918 Comm: syz.0.12683 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 630.761578][ T4918] Tainted: [W]=WARN [ 630.761610][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.761625][ T4918] Call Trace: [ 630.761633][ T4918] [ 630.761641][ T4918] __dump_stack+0x1d/0x30 [ 630.761663][ T4918] dump_stack_lvl+0xe8/0x140 [ 630.761713][ T4918] dump_stack+0x15/0x1b [ 630.761729][ T4918] dump_header+0x81/0x220 [ 630.761767][ T4918] oom_kill_process+0x342/0x400 [ 630.761806][ T4918] out_of_memory+0x979/0xb80 [ 630.761846][ T4918] try_charge_memcg+0x5e6/0x9e0 [ 630.761880][ T4918] charge_memcg+0x51/0xc0 [ 630.761910][ T4918] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 630.761932][ T4918] __read_swap_cache_async+0x1df/0x350 [ 630.761988][ T4918] swap_cluster_readahead+0x277/0x3e0 [ 630.762032][ T4918] swapin_readahead+0xde/0x6f0 [ 630.762075][ T4918] ? __filemap_get_folio+0x4f7/0x6b0 [ 630.762183][ T4918] ? ktime_get+0x1eb/0x210 [ 630.762209][ T4918] ? swap_cache_get_folio+0x77/0x200 [ 630.762242][ T4918] do_swap_page+0x301/0x2430 [ 630.762270][ T4918] ? finish_task_switch+0xad/0x2b0 [ 630.762334][ T4918] ? __pfx_default_wake_function+0x10/0x10 [ 630.762358][ T4918] handle_mm_fault+0x9a5/0x2c20 [ 630.762423][ T4918] do_user_addr_fault+0x636/0x1090 [ 630.762455][ T4918] ? fpregs_restore_userregs+0xe2/0x1d0 [ 630.762513][ T4918] ? switch_fpu_return+0xe/0x20 [ 630.762558][ T4918] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 630.762589][ T4918] exc_page_fault+0x62/0xa0 [ 630.762713][ T4918] asm_exc_page_fault+0x26/0x30 [ 630.762739][ T4918] RIP: 0033:0x7fe81ff155f8 [ 630.762759][ T4918] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d ca 27 35 00 00 0f 8e 09 fe ff ff e8 43 9e fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 96 00 e8 00 e8 03 00 00 48 8d 1d 97 09 35 00 e8 32 95 12 00 [ 630.762781][ T4918] RSP: 002b:00007ffc6e22dac0 EFLAGS: 00010202 [ 630.762798][ T4918] RAX: 0000000000096141 RBX: 00007fe820267da0 RCX: 0000000000095e70 [ 630.762811][ T4918] RDX: 00000000000002d1 RSI: 00007ffc6e22daa0 RDI: 0000000000000001 [ 630.762823][ T4918] RBP: 00007fe820267da0 R08: 000000002b027786 R09: 7fffffffffffffff [ 630.762881][ T4918] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000009616d [ 630.762895][ T4918] R13: 00007fe820266090 R14: ffffffffffffffff R15: 00007ffc6e22dbd0 [ 630.762917][ T4918] [ 630.762926][ T4918] memory: usage 307200kB, limit 307200kB, failcnt 208 [ 631.000576][ T4918] memory+swap: usage 325084kB, limit 9007199254740988kB, failcnt 0 [ 631.008471][ T4918] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 631.015740][ T4918] Memory cgroup stats for /syz0: [ 631.015932][ T4918] cache 0 [ 631.023909][ T4918] rss 0 [ 631.026688][ T4918] shmem 0 [ 631.029653][ T4918] mapped_file 0 [ 631.033089][ T4918] dirty 0 [ 631.036007][ T4918] writeback 0 [ 631.039263][ T4918] workingset_refault_anon 1046 [ 631.044023][ T4918] workingset_refault_file 394 [ 631.048726][ T4918] swap 18313216 [ 631.052217][ T4918] swapcached 4096 [ 631.055825][ T4918] pgpgin 828129 [ 631.059278][ T4918] pgpgout 828127 [ 631.062907][ T4918] pgfault 884472 [ 631.066440][ T4918] pgmajfault 174 [ 631.070020][ T4918] inactive_anon 0 [ 631.073687][ T4918] active_anon 4096 [ 631.077387][ T4918] inactive_file 0 [ 631.081016][ T4918] active_file 4096 [ 631.084735][ T4918] unevictable 0 [ 631.088233][ T4918] hierarchical_memory_limit 314572800 [ 631.093589][ T4918] hierarchical_memsw_limit 9223372036854771712 [ 631.099734][ T4918] total_cache 0 [ 631.103170][ T4918] total_rss 0 [ 631.106515][ T4918] total_shmem 0 [ 631.110018][ T4918] total_mapped_file 0 [ 631.113984][ T4918] total_dirty 0 [ 631.117433][ T4918] total_writeback 0 [ 631.121215][ T4918] total_workingset_refault_anon 1046 [ 631.126477][ T4918] total_workingset_refault_file 394 [ 631.131740][ T4918] total_swap 18313216 [ 631.135784][ T4918] total_swapcached 4096 [ 631.140025][ T4918] total_pgpgin 828129 [ 631.144033][ T4918] total_pgpgout 828127 [ 631.148192][ T4918] total_pgfault 884472 [ 631.152279][ T4918] total_pgmajfault 174 [ 631.156326][ T4918] total_inactive_anon 0 [ 631.160550][ T4918] total_active_anon 4096 [ 631.164764][ T4918] total_inactive_file 0 [ 631.168966][ T4918] total_active_file 4096 [ 631.173225][ T4918] total_unevictable 0 [ 631.177182][ T4918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=,pid=7074,uid=0 [ 631.190882][ T4918] Memory cgroup out of memory: Killed process 7074 () total-vm:93632kB, anon-rss:984kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 631.237129][ T4918] syz.0.12683 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 631.248027][ T4918] CPU: 0 UID: 0 PID: 4918 Comm: syz.0.12683 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 631.248069][ T4918] Tainted: [W]=WARN [ 631.248077][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.248109][ T4918] Call Trace: [ 631.248118][ T4918] [ 631.248128][ T4918] __dump_stack+0x1d/0x30 [ 631.248150][ T4918] dump_stack_lvl+0xe8/0x140 [ 631.248274][ T4918] dump_stack+0x15/0x1b [ 631.248305][ T4918] dump_header+0x81/0x220 [ 631.248381][ T4918] oom_kill_process+0x342/0x400 [ 631.248491][ T4918] out_of_memory+0x979/0xb80 [ 631.248571][ T4918] try_charge_memcg+0x5e6/0x9e0 [ 631.248615][ T4918] charge_memcg+0x51/0xc0 [ 631.248720][ T4918] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 631.248793][ T4918] __read_swap_cache_async+0x1df/0x350 [ 631.248876][ T4918] swap_cluster_readahead+0x277/0x3e0 [ 631.248955][ T4918] swapin_readahead+0xde/0x6f0 [ 631.248990][ T4918] ? __filemap_get_folio+0x4f7/0x6b0 [ 631.249064][ T4918] ? swap_cache_get_folio+0x77/0x200 [ 631.249105][ T4918] do_swap_page+0x301/0x2430 [ 631.249134][ T4918] ? css_rstat_updated+0xb7/0x240 [ 631.249293][ T4918] ? __pfx_default_wake_function+0x10/0x10 [ 631.249322][ T4918] handle_mm_fault+0x9a5/0x2c20 [ 631.249387][ T4918] do_user_addr_fault+0x636/0x1090 [ 631.249444][ T4918] ? fpregs_restore_userregs+0xe2/0x1d0 [ 631.249480][ T4918] ? switch_fpu_return+0xe/0x20 [ 631.249513][ T4918] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 631.249620][ T4918] exc_page_fault+0x62/0xa0 [ 631.249709][ T4918] asm_exc_page_fault+0x26/0x30 [ 631.249734][ T4918] RIP: 0033:0x7fe81ff1561c [ 631.249754][ T4918] Code: 66 0f 1f 44 00 00 69 3d 96 00 e8 00 e8 03 00 00 48 8d 1d 97 09 35 00 e8 32 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 631.249776][ T4918] RSP: 002b:00007ffc6e22dac0 EFLAGS: 00010206 [ 631.249797][ T4918] RAX: 0000000000000000 RBX: 00007fe820265fa0 RCX: 0000000000000000 [ 631.249812][ T4918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556114a808 [ 631.249828][ T4918] RBP: 00007fe820267da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 631.249917][ T4918] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009616d [ 631.249933][ T4918] R13: 00007fe820266090 R14: ffffffffffffffff R15: 00007ffc6e22dbd0 [ 631.249955][ T4918] [ 631.249963][ T4918] memory: usage 307200kB, limit 307200kB, failcnt 324 [ 631.485984][ T4918] memory+swap: usage 324924kB, limit 9007199254740988kB, failcnt 0 [ 631.493859][ T4918] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 631.501164][ T4918] Memory cgroup stats for /syz0: [ 631.501563][ T4918] cache 0 [ 631.509423][ T4918] rss 0 [ 631.512210][ T4918] shmem 0 [ 631.515213][ T4918] mapped_file 0 [ 631.518701][ T4918] dirty 0 [ 631.521665][ T4918] writeback 8192 [ 631.525260][ T4918] workingset_refault_anon 1059 [ 631.530091][ T4918] workingset_refault_file 395 [ 631.534749][ T4918] swap 18149376 [ 631.538243][ T4918] swapcached 8192 [ 631.541863][ T4918] pgpgin 828143 [ 631.545398][ T4918] pgpgout 828140 [ 631.549016][ T4918] pgfault 884484 [ 631.552597][ T4918] pgmajfault 184 [ 631.556302][ T4918] inactive_anon 8192 [ 631.560225][ T4918] active_anon 0 [ 631.563701][ T4918] inactive_file 4096 [ 631.567582][ T4918] active_file 0 [ 631.571037][ T4918] unevictable 0 [ 631.574481][ T4918] hierarchical_memory_limit 314572800 [ 631.579905][ T4918] hierarchical_memsw_limit 9223372036854771712 [ 631.586172][ T4918] total_cache 0 [ 631.589609][ T4918] total_rss 0 [ 631.592903][ T4918] total_shmem 0 [ 631.596341][ T4918] total_mapped_file 0 [ 631.600344][ T4918] total_dirty 0 [ 631.603828][ T4918] total_writeback 8192 [ 631.607877][ T4918] total_workingset_refault_anon 1059 [ 631.613143][ T4918] total_workingset_refault_file 395 [ 631.618554][ T4918] total_swap 18149376 [ 631.622523][ T4918] total_swapcached 8192 [ 631.626658][ T4918] total_pgpgin 828143 [ 631.630813][ T4918] total_pgpgout 828140 [ 631.634983][ T4918] total_pgfault 884484 [ 631.639133][ T4918] total_pgmajfault 184 [ 631.643184][ T4918] total_inactive_anon 8192 [ 631.647623][ T4918] total_active_anon 0 [ 631.651672][ T4918] total_inactive_file 4096 [ 631.656057][ T4918] total_active_file 0 [ 631.660034][ T4918] total_unevictable 0 [ 631.663985][ T4918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.80,pid=3980,uid=0 [ 631.678445][ T4918] Memory cgroup out of memory: Killed process 3980 (syz.0.80) total-vm:95672kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 631.720814][ T4918] syz.0.12683 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 631.731755][ T4918] CPU: 0 UID: 0 PID: 4918 Comm: syz.0.12683 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 631.731792][ T4918] Tainted: [W]=WARN [ 631.731801][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.731828][ T4918] Call Trace: [ 631.731837][ T4918] [ 631.731847][ T4918] __dump_stack+0x1d/0x30 [ 631.731909][ T4918] dump_stack_lvl+0xe8/0x140 [ 631.731934][ T4918] dump_stack+0x15/0x1b [ 631.731993][ T4918] dump_header+0x81/0x220 [ 631.732103][ T4918] oom_kill_process+0x342/0x400 [ 631.732134][ T4918] out_of_memory+0x979/0xb80 [ 631.732165][ T4918] try_charge_memcg+0x5e6/0x9e0 [ 631.732235][ T4918] charge_memcg+0x51/0xc0 [ 631.732303][ T4918] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 631.732330][ T4918] __read_swap_cache_async+0x1df/0x350 [ 631.732416][ T4918] swap_cluster_readahead+0x277/0x3e0 [ 631.732527][ T4918] swapin_readahead+0xde/0x6f0 [ 631.732572][ T4918] ? __filemap_get_folio+0x4f7/0x6b0 [ 631.732620][ T4918] ? swap_cache_get_folio+0x77/0x200 [ 631.732660][ T4918] do_swap_page+0x301/0x2430 [ 631.732690][ T4918] ? css_rstat_updated+0xb7/0x240 [ 631.732760][ T4918] ? __pfx_default_wake_function+0x10/0x10 [ 631.732784][ T4918] handle_mm_fault+0x9a5/0x2c20 [ 631.732817][ T4918] do_user_addr_fault+0x636/0x1090 [ 631.732892][ T4918] ? fpregs_restore_userregs+0xe2/0x1d0 [ 631.732922][ T4918] ? switch_fpu_return+0xe/0x20 [ 631.733023][ T4918] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 631.733054][ T4918] exc_page_fault+0x62/0xa0 [ 631.733076][ T4918] asm_exc_page_fault+0x26/0x30 [ 631.733100][ T4918] RIP: 0033:0x7fe81ff1561c [ 631.733119][ T4918] Code: 66 0f 1f 44 00 00 69 3d 96 00 e8 00 e8 03 00 00 48 8d 1d 97 09 35 00 e8 32 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 631.733141][ T4918] RSP: 002b:00007ffc6e22dac0 EFLAGS: 00010206 [ 631.733162][ T4918] RAX: 0000000000000000 RBX: 00007fe820265fa0 RCX: 0000000000000000 [ 631.733177][ T4918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556114a808 [ 631.733234][ T4918] RBP: 00007fe820267da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 631.733256][ T4918] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009616d [ 631.733273][ T4918] R13: 00007fe820266090 R14: ffffffffffffffff R15: 00007ffc6e22dbd0 [ 631.733296][ T4918] [ 631.959057][ T4918] memory: usage 307200kB, limit 307200kB, failcnt 456 [ 631.965810][ T4918] memory+swap: usage 324768kB, limit 9007199254740988kB, failcnt 0 [ 631.973772][ T4918] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 631.981116][ T4918] Memory cgroup stats for /syz0: [ 631.981396][ T4918] cache 0 [ 631.989346][ T4918] rss 0 [ 631.992087][ T4918] shmem 0 [ 631.995022][ T4918] mapped_file 0 [ 631.998522][ T4918] dirty 0 [ 632.001464][ T4918] writeback 8192 [ 632.005084][ T4918] workingset_refault_anon 1060 [ 632.009819][ T4918] workingset_refault_file 395 [ 632.014836][ T4918] swap 17989632 [ 632.018286][ T4918] swapcached 12288 [ 632.022029][ T4918] pgpgin 828144 [ 632.025673][ T4918] pgpgout 828140 [ 632.029228][ T4918] pgfault 884485 [ 632.032772][ T4918] pgmajfault 185 [ 632.036336][ T4918] inactive_anon 12288 [ 632.040373][ T4918] active_anon 0 [ 632.043806][ T4918] inactive_file 4096 [ 632.047760][ T4918] active_file 0 [ 632.051234][ T4918] unevictable 0 [ 632.054710][ T4918] hierarchical_memory_limit 314572800 [ 632.060094][ T4918] hierarchical_memsw_limit 9223372036854771712 [ 632.066232][ T4918] total_cache 0 [ 632.069724][ T4918] total_rss 0 [ 632.073112][ T4918] total_shmem 0 [ 632.076574][ T4918] total_mapped_file 0 [ 632.080710][ T4918] total_dirty 0 [ 632.084246][ T4918] total_writeback 8192 [ 632.088307][ T4918] total_workingset_refault_anon 1060 [ 632.094042][ T4918] total_workingset_refault_file 395 [ 632.099248][ T4918] total_swap 17989632 [ 632.103226][ T4918] total_swapcached 12288 [ 632.107510][ T4918] total_pgpgin 828144 [ 632.111505][ T4918] total_pgpgout 828140 [ 632.115625][ T4918] total_pgfault 884485 [ 632.119788][ T4918] total_pgmajfault 185 [ 632.123854][ T4918] total_inactive_anon 12288 [ 632.128329][ T4918] total_active_anon 0 [ 632.132443][ T4918] total_inactive_file 4096 [ 632.136885][ T4918] total_active_file 0 [ 632.140916][ T4918] total_unevictable 0 [ 632.144916][ T4918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.418,pid=5357,uid=0 [ 632.159391][ T4918] Memory cgroup out of memory: Killed process 5357 (syz.0.418) total-vm:95812kB, anon-rss:988kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 632.194315][ T3307] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 632.205373][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 632.205401][ T3307] Tainted: [W]=WARN [ 632.205407][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.205490][ T3307] Call Trace: [ 632.205497][ T3307] [ 632.205532][ T3307] __dump_stack+0x1d/0x30 [ 632.205553][ T3307] dump_stack_lvl+0xe8/0x140 [ 632.205569][ T3307] dump_stack+0x15/0x1b [ 632.205582][ T3307] dump_header+0x81/0x220 [ 632.205604][ T3307] oom_kill_process+0x342/0x400 [ 632.205649][ T3307] out_of_memory+0x979/0xb80 [ 632.205736][ T3307] try_charge_memcg+0x5e6/0x9e0 [ 632.205770][ T3307] charge_memcg+0x51/0xc0 [ 632.205800][ T3307] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 632.205827][ T3307] __read_swap_cache_async+0x1df/0x350 [ 632.205900][ T3307] swap_cluster_readahead+0x277/0x3e0 [ 632.206013][ T3307] swapin_readahead+0xde/0x6f0 [ 632.206077][ T3307] ? __filemap_get_folio+0x4f7/0x6b0 [ 632.206119][ T3307] ? swap_cache_get_folio+0x77/0x200 [ 632.206159][ T3307] do_swap_page+0x301/0x2430 [ 632.206314][ T3307] ? xfd_validate_state+0x45/0xf0 [ 632.206347][ T3307] ? fpregs_mark_activate+0x66/0x140 [ 632.206407][ T3307] ? fpu__restore_sig+0x2d1/0xaa0 [ 632.206440][ T3307] ? __pfx_default_wake_function+0x10/0x10 [ 632.206463][ T3307] handle_mm_fault+0x9a5/0x2c20 [ 632.206492][ T3307] do_user_addr_fault+0x636/0x1090 [ 632.206575][ T3307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 632.206605][ T3307] exc_page_fault+0x62/0xa0 [ 632.206668][ T3307] asm_exc_page_fault+0x26/0x30 [ 632.206688][ T3307] RIP: 0033:0x7fe82003eb46 [ 632.206707][ T3307] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 632.206727][ T3307] RSP: 002b:00007ffc6e22dcb0 EFLAGS: 00010246 [ 632.206826][ T3307] RAX: 0000000000000bb8 RBX: 0000000000001a75 RCX: 00000000000962fb [ 632.206840][ T3307] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710 [ 632.206852][ T3307] RBP: 00007ffc6e22dd1c R08: 0000000009be1fb8 R09: 0000000000000000 [ 632.206865][ T3307] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 632.206877][ T3307] R13: 00000000000927c0 R14: 0000000000095e74 R15: 00007ffc6e22dd70 [ 632.206895][ T3307] [ 632.206902][ T3307] memory: usage 307200kB, limit 307200kB, failcnt 519 [ 632.441728][ T3307] memory+swap: usage 324608kB, limit 9007199254740988kB, failcnt 0 [ 632.449669][ T3307] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 632.456936][ T3307] Memory cgroup stats for /syz0: [ 632.457201][ T3307] cache 0 [ 632.465108][ T3307] rss 0 [ 632.468031][ T3307] shmem 0 [ 632.471039][ T3307] mapped_file 0 [ 632.474484][ T3307] dirty 0 [ 632.477393][ T3307] writeback 0 [ 632.480676][ T3307] workingset_refault_anon 1061 [ 632.485441][ T3307] workingset_refault_file 395 [ 632.490264][ T3307] swap 17825792 [ 632.493740][ T3307] swapcached 12288 [ 632.497437][ T3307] pgpgin 828145 [ 632.500865][ T3307] pgpgout 828141 [ 632.504394][ T3307] pgfault 884485 [ 632.507912][ T3307] pgmajfault 185 [ 632.511426][ T3307] inactive_anon 12288 [ 632.515416][ T3307] active_anon 0 [ 632.518862][ T3307] inactive_file 4096 [ 632.522726][ T3307] active_file 0 [ 632.526185][ T3307] unevictable 0 [ 632.529767][ T3307] hierarchical_memory_limit 314572800 [ 632.535125][ T3307] hierarchical_memsw_limit 9223372036854771712 [ 632.541279][ T3307] total_cache 0 [ 632.544713][ T3307] total_rss 0 [ 632.548098][ T3307] total_shmem 0 [ 632.551542][ T3307] total_mapped_file 0 [ 632.555512][ T3307] total_dirty 0 [ 632.558964][ T3307] total_writeback 0 [ 632.562829][ T3307] total_workingset_refault_anon 1061 [ 632.568109][ T3307] total_workingset_refault_file 395 [ 632.573535][ T3307] total_swap 17825792 [ 632.577512][ T3307] total_swapcached 12288 [ 632.581787][ T3307] total_pgpgin 828145 [ 632.585750][ T3307] total_pgpgout 828141 [ 632.589815][ T3307] total_pgfault 884485 [ 632.593906][ T3307] total_pgmajfault 185 [ 632.597955][ T3307] total_inactive_anon 12288 [ 632.602481][ T3307] total_active_anon 0 [ 632.606449][ T3307] total_inactive_file 4096 [ 632.610888][ T3307] total_active_file 0 [ 632.614872][ T3307] total_unevictable 0 [ 632.618833][ T3307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12683,pid=4918,uid=0 [ 632.633730][ T3307] Memory cgroup out of memory: Killed process 4918 (syz.0.12683) total-vm:95812kB, anon-rss:924kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 632.779268][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 632.779288][ T29] audit: type=1326 audit(872.604:83507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.808705][ T29] audit: type=1326 audit(872.604:83508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.831907][ T29] audit: type=1326 audit(872.604:83509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.855446][ T29] audit: type=1326 audit(872.604:83510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.878732][ T29] audit: type=1326 audit(872.604:83511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.902087][ T29] audit: type=1326 audit(872.604:83512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.925097][ T29] audit: type=1326 audit(872.604:83513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.948312][ T29] audit: type=1326 audit(872.604:83514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.971258][ T29] audit: type=1326 audit(872.614:83515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 632.994233][ T29] audit: type=1326 audit(872.614:83516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.3.12703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60481debe9 code=0x7ffc0000 [ 634.172889][ T5096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12705'. [ 634.360435][ T5108] lo speed is unknown, defaulting to 1000 [ 634.685756][ T5138] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.697028][ T5141] netem: incorrect gi model size [ 634.702139][ T5141] netem: change failed [ 634.723206][ T5138] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.753289][ T5146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12720'. [ 634.788649][ T5138] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.805326][ T5150] loop5: detected capacity change from 0 to 4096 [ 634.814846][ T5150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.831632][ T5138] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.907195][ T2942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.935799][ T2942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.951935][ T2942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.970856][ T2942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.479877][ T5161] ================================================================== [ 635.488010][ T5161] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 635.495327][ T5161] [ 635.497665][ T5161] write to 0xffff888119e5a3d0 of 4 bytes by task 5164 on cpu 0: [ 635.505306][ T5161] touch_atime+0x1e8/0x340 [ 635.509751][ T5161] shmem_file_read_iter+0x477/0x540 [ 635.514968][ T5161] copy_splice_read+0x3c1/0x5f0 [ 635.519854][ T5161] splice_direct_to_actor+0x290/0x680 [ 635.525671][ T5161] do_splice_direct+0xda/0x150 [ 635.530624][ T5161] do_sendfile+0x380/0x650 [ 635.535070][ T5161] __x64_sys_sendfile64+0x105/0x150 [ 635.540303][ T5161] x64_sys_call+0x2bb0/0x2ff0 [ 635.545006][ T5161] do_syscall_64+0xd2/0x200 [ 635.549541][ T5161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.555455][ T5161] [ 635.557787][ T5161] read to 0xffff888119e5a3d0 of 4 bytes by task 5161 on cpu 1: [ 635.565692][ T5161] atime_needs_update+0x25f/0x3e0 [ 635.570753][ T5161] touch_atime+0x4a/0x340 [ 635.575111][ T5161] shmem_file_read_iter+0x477/0x540 [ 635.580330][ T5161] copy_splice_read+0x3c1/0x5f0 [ 635.585215][ T5161] splice_direct_to_actor+0x290/0x680 [ 635.590610][ T5161] do_splice_direct+0xda/0x150 [ 635.595412][ T5161] do_sendfile+0x380/0x650 [ 635.599852][ T5161] __x64_sys_sendfile64+0x105/0x150 [ 635.605164][ T5161] x64_sys_call+0x2bb0/0x2ff0 [ 635.609869][ T5161] do_syscall_64+0xd2/0x200 [ 635.614397][ T5161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.620308][ T5161] [ 635.622652][ T5161] value changed: 0x05dbeed7 -> 0x0668d90f [ 635.628392][ T5161] [ 635.630713][ T5161] Reported by Kernel Concurrency Sanitizer on: [ 635.636866][ T5161] CPU: 1 UID: 0 PID: 5161 Comm: syz.0.12740 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 635.650605][ T5161] Tainted: [W]=WARN [ 635.654418][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.664564][ T5161] ================================================================== [ 635.722196][T32678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.