last executing test programs: 1m44.184298256s ago: executing program 1 (id=179): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sysinfo(&(0x7f0000000580)=""/84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m44.058819173s ago: executing program 1 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x20101, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002140)=0x19) ioctl$TCGETA(r1, 0x40085500, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) sysinfo(&(0x7f0000000580)=""/84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r3, 0xffffffffffffffff) 1m43.962632019s ago: executing program 1 (id=186): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1m43.303909347s ago: executing program 1 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x2003, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x9, 0x0, 0x0, 0x0, 0x6, 0x40200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x7fffffff}, 0x5b10, 0xffffffff, 0x3, 0x9, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x405}, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x20080e, &(0x7f0000000580), 0x3, 0x443, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000002c0)="1b59a7ba9233e6253f18", 0xa, 0x80c0c5d) fallocate(r5, 0x3, 0x80007, 0x8000c62) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b80)='G6\xa4\x95\x00\f\xf3oh\xd7W\xfa\xe1\xcf\x86\xc1%6\x19kr\xef\xb0\x81\xa2M\xb0\x11\x89T\xce\xacT\xb0\xf5V3x=\xbc\xac\xca\xee\x91}?\xfa!\xff\x17\xbe\xb5\r1-\x00\x00\x00\x00\x00\x00\x00\a\x98\xf8\x1b\x06\xe3m\a\xe5\x00#xx\xfc\xa6\x7f', &(0x7f0000000c00)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r6) close(r6) fchmodat(0xffffffffffffffff, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c5, &(0x7f0000000f00)="$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") lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@random={'security.', '@),!&-\x00'}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2e02000007000000060000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 1m43.182616044s ago: executing program 1 (id=194): r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0xb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000005c01a8cedfcc5e0357287e00000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000ac0)=""/143, 0x8f}], 0x6, &(0x7f00000000c0)=""/100, 0x64}, 0x4}, {{&(0x7f0000000c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001840)=""/2, 0x2}, 0x3}, {{&(0x7f0000001880)=@isdn, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001900)=""/223, 0xdf}, {0x0}], 0x2}, 0xca}, {{&(0x7f0000001ec0)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x1000}], 0x5, 0x0, &(0x7f00000026c0)) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c060000) (fail_nth: 3) 1m42.598580868s ago: executing program 1 (id=205): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000c86100000000000000008ec93fe15f9bd9fb03c54e10ca91664803ec300693ea981a28c2e9a0c5bcad31f1ba96bf8b89ee040c85680100ce27f1d627e5d15433", @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x569, &(0x7f0000002480)="$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") r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 1m42.598272238s ago: executing program 32 (id=205): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000c86100000000000000008ec93fe15f9bd9fb03c54e10ca91664803ec300693ea981a28c2e9a0c5bcad31f1ba96bf8b89ee040c85680100ce27f1d627e5d15433", @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x569, &(0x7f0000002480)="$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") r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 1m21.280938551s ago: executing program 3 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') readv(r3, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m20.96023671s ago: executing program 3 (id=619): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000100002800c0001800800a4b50300000004000180e7"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xec0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000100)=0xc) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) setuid(0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r14, @ANYRES8=r12], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x7f, 0x7, {{0x22, 0x4, 0x2, 0x2, 0x88, 0x65, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local, {[@generic={0x7, 0x11, "00198a39df8c0ce4790c048b5b8845"}, @ssrr={0x89, 0x23, 0x40, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x0, [0x400]}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x5, [0x5, 0x7ff, 0x1c0]}, @lsrr={0x83, 0xb, 0xd6, [@private=0xa010101, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0x4, [{@multicast1, 0x200}, {@rand_addr=0x64010102, 0x7bbe3c51}, {@private=0xa010102, 0xb4}]}, @noop]}}}}}) r16 = socket$can_j1939(0x1d, 0x2, 0x7) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r16, &(0x7f0000000240)={0x1d, r18, 0x2, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x4008040) 1m20.858601106s ago: executing program 3 (id=621): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r5, r4, 0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r3}, 0x10) 1m20.768388851s ago: executing program 3 (id=624): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x80, @tick=0x1, 0x1, {0xe, 0x8}, 0xbb, 0x0, 0xb7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0xa, 0x0, @val=@iter={0x0}}, 0x20) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x58040}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184100000300000000000000000000008510000002000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000001812000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x54, '\x00', r6, 0x25, r3, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0x9, 0xc}], 0x10, 0xfffff0df, @void, @value}, 0x94) r7 = openat(r3, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1be) ioperm(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x200000000000019f, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) timer_delete(0x0) sendfile(r7, r7, 0x0, 0xfffe80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1m20.543888834s ago: executing program 3 (id=627): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000100000000000000001be90067d1d3ea0006000000024908000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0xc, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) 1m19.496583675s ago: executing program 3 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.465580877s ago: executing program 33 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 54.181095851s ago: executing program 6 (id=1087): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r2 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000600)) memfd_secret(0x80000) 53.922552576s ago: executing program 6 (id=1090): msgget$private(0x0, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0x1, 0xf}, {0xffe0, 0xfff2}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1300000004000000040000000700000002100000", @ANYRES32=r7, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000000000000000000000000000000000000000000000007d01cfa4b0ded9b187b5b3cd22a07e497d50f2d7ca52c6d330a598145e51a5bc1e262a2ead58286f4a49fd87fe90053498fbcde6b6840f04e4647089c6d0141e3cc550561197f1ceb543a64294ea0be69f7cf75823ff311f8ac5eb1739012989719388cef14687fe121a1e12a4a7affbe1df"], 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) tkill(0x0, 0x1) r9 = perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x482a8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000500), 0x1}, 0x104, 0xb, 0x8, 0x1, 0xfffffffffffff001, 0x2, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r2, 0x6) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x8f, 0x66, 0xf6, 0x4, 0x0, 0x0, 0x8a100, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa6, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x2000, 0x8, 0xfffffffc, 0x8, 0x4, 0x10, 0x5, 0x0, 0x2, 0x0, 0xd}, 0x0, 0xc, r9, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xb, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000340)={{0x2, 0x4e03, @broadcast}, {0x306, @local}, 0xc, {0x2, 0x4e23, @private=0xa010102}, 'lo\x00'}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 53.750870276s ago: executing program 6 (id=1094): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0xb1, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 53.646079862s ago: executing program 6 (id=1096): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvebNmaNGmXrZn5fOC259x70nNP7v2enpOTkACG1mT2oxDxakR8m0Qcajk2GvnByY1y6w+uzWVbEvX6Z38lkeT7muWT/Pd4nnklIn77OuJEYXO91dW1xVK5nC7n+ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dvbX3z3D8/fHrno9PfHFv//pd7h28lcSYO5sda2/EUrrdmJmMyf07G4swTBaf7UNkgSXb7BNiRkTzOxyLrAw7FSB71wP/fVxFRB4ZUIv5hSDXHAc25fZ/mwS+M+x9uTIA2tz/ZeG0k9jXmRgfWk8dmRtl8d6IP9Wd1/Prn7VvZFv17HQKgq+s3IuLU6Gjn/m/nTvVQ5sk69H/w/NzJxj9vtRv/FB6Of6LN+Ge8TezuRPf4L9zrQzUdZeO/D9qOfx8uWk2M5LmXGmO+seTCxXKa9W0vR8TxGNub5bdazzm9frfe6Vjr+C/bsvqbY8H8PO6N7n38MfOlWulp2tzq/o2I17qMf5M21z97Ps71WMfR9PbrnY51b/+zVf854o221//Rilay9frkVON+mGreFZv9ffPo753q3+32Z9f/wNbtn0ha12ur26/jp33/pp2OTSb5ouk27/89yeeN9J5839VSrbY8HbEn+WTz/plHj23mm+Wz9h8/tnX/1+7+3x8RX/TY/ptHbnYsOgjXf35b13/7ibsff/ljp/p76//ebqSO53t66f96PcGnee4AAAAAAABg0BQi4mAkheLDdKFQLG68v+NIHCiUK9XaiQuVlUvz0fis7ESMFZor3eMt74eYzt8P28zPPJGfjYjDEfHdyP5GvjhXKc/vduMBAAAAAAAAAAAAAAAAAABgQIx3+Px/5o+R3T474Jnzld8wvLrGfz++6QkYSP7/w/AS/zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXXu7Nlsq68/uDaX5eevrK4sVq6cnE+ri8WllbniXGX5cnGhUlkop8W5ylK3v1euVC5Pz8TK1alaWq1NVVfXzi9VVi7Vzl9cKi2k59Ox59IqAAAAAAAAAAAAAAAAAAAAeLFUV9cWS+VyuiwhsaPE6GCchkSfE7vdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8FAAD//wZvNao=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x6, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000001280)={'sit0\x00', 0x0, 0x8000, 0x700, 0x7ff, 0x2c8, {{0x3d, 0x4, 0x0, 0x7, 0xf4, 0x68, 0x0, 0xc, 0x4, 0x0, @private=0xa010101, @broadcast, {[@generic={0x7, 0xf, "7413705243a262325fd42aeaf6"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x7, [{@remote, 0x200}]}, @generic={0x88, 0xc, "613ac019894b7fd1948b"}, @timestamp_prespec={0x44, 0x24, 0x27, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}, {@local, 0x4}]}, @rr={0x7, 0x17, 0x32, [@local, @broadcast, @multicast1, @local, @loopback]}, @timestamp_prespec={0x44, 0x44, 0x3f, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x101}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80000000}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0xe5}, {@local}, {@broadcast, 0x9}, {@loopback, 0x1000}, {@loopback, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x9, [{@multicast2, 0x3ff}]}, @cipso={0x86, 0x28, 0x3, [{0x0, 0x5, "3339ef"}, {0x2, 0xb, "0268d8364d5b056032"}, {0x1, 0x10, "d445e607b2c611ebcf0c849acc91"}, {0x0, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000013c0)={'tunl0\x00', r5, 0x20, 0x7, 0xfc0, 0x8, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x4, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}}}}}) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x63d, &(0x7f0000001280)="$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") r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020000002c00128009000100626f6e64000000001c0002800800030004000400050006000000000008000f0000000000e56d09089c1298d2a8e9e53ebb5563f48015b578575b3583cd7954515f5600106c7b81529d1d265993e5975d776c2d3ea82876285324fc249ac8f74e53d3b4756ba4a9"], 0x4c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a", 0x23}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 53.270581584s ago: executing program 6 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x2005000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x9) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x3f6, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x138, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x81}, @NFTA_SET_EXPRESSIONS={0xa8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xd}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) 52.65072495s ago: executing program 6 (id=1114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000006000)) 52.645080501s ago: executing program 34 (id=1114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000006000)) 40.461526151s ago: executing program 4 (id=1285): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet(0x2, 0x800, 0x204) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x2, 0x3, 0x1, 0x2}, 0x14) 40.386706495s ago: executing program 4 (id=1286): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) (fail_nth: 1) 40.162342688s ago: executing program 4 (id=1287): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000002bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r2, 0x1e76, 0x0, 0x6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') r3 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mknod(0x0, 0x10, 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) iopl(0x3) rseq(0x0, 0x0, 0xffffffffffffffff, 0x0) 38.633680907s ago: executing program 4 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x209, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000440)=""/92, 0x5c, 0x58) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) process_madvise(r6, &(0x7f0000000440)=[{&(0x7f0000000340)="3e59e97d460601ec132003e927e9a0c2d4fbb85e21f357827f3c81a876905573f8b0a1e59fd0a927499270b4104345a5196b9b7df953ce68604b7ddd", 0x3c}, {&(0x7f0000000380)="c7aa759394f6d1761d091f5b6964a03f91d5f1baadea1380469b8f5300d750791d98dfec8c8125f88b589aab8c846b1a2c98e4a7677e5f2f2d3d7bc38b8377594b17bab7f4e96254c965cacef1b8ccd30f7a8a71727213936a21cf470a808e2d360ec83f338cc2ea344099b44643b77a0a990115f57135c216f0c35d7130df3ba9116b4e6edd504de65c212a566dad5a90f3028bb256918a2d693600a1055bd1f1bb74cfc0b26ffcb9a1717b8ab936784fe75d01d7", 0xb5}], 0x2, 0x19, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x500, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 37.374045171s ago: executing program 4 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x195, 0x1f00) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r7 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x1b}, 0x8000, 0xffffffff, 0x0, 0x9, 0x0, 0x268, 0xfff9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r5], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='.wftno=', @ANYRESHEX=r9]) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 36.453151265s ago: executing program 4 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) 21.371316484s ago: executing program 35 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) 3.556583052s ago: executing program 7 (id=1794): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 3.498549666s ago: executing program 7 (id=1795): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x6, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x81, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x6c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.454304038s ago: executing program 0 (id=1798): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) 3.300440137s ago: executing program 7 (id=1801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d542bdfb7cec880a02de9e1d7300", "aa01954b50e1a7d200008f5a3995fa1e7569d25aed9768cf0c2def7d5500", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515c054b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x3ffffff, 0x120000, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="5553034359e6cbee5c33b5da9735609b22b6cca195c4799ef1a25a3cc28b0ff9778720898e72bd3d60bb1c865067ab14d2939e44af83659e5c712d1d5e95d2dd39f9129fc482ea0162c1a1edb7e6856238f3467144b90bae2a962fad469fb32fb6d194c293b82538e4e411371346add399c9405c9956e0e9ee99ac1b63b9720aba90eba5cae74355de7d60e694b8b9cf4d623b55aec5f5d51827adb5020403a1b87d74e255485d590f96fa227f47c7724df46b670cf9f5ddf3b874f2e376fc90b5666e2e1048067c96fb32944480d3fb213d22670182224ea46ab563616b8cdcc4420fd99b92d919259c25b98c558e6342e276d164e6"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r7, @ANYBLOB="30002f80"], 0x4c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x22200, 0x1d7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 3.237966771s ago: executing program 0 (id=1802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 3.237522021s ago: executing program 0 (id=1803): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000002bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r2, 0x1e76, 0x0, 0x6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') r3 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mknod(0x0, 0x10, 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) iopl(0x3) rseq(0x0, 0x0, 0xffffffffffffffff, 0x0) 2.772749438s ago: executing program 2 (id=1812): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x6, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x81, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x6c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.272684987s ago: executing program 2 (id=1813): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) 2.042498561s ago: executing program 2 (id=1815): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cc88eceaf6d2be4f62e196f71f153ee47a66549", 0x7, 0xffffffff, 0x7fff, 0x7ff}, 0x41) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095", @ANYRES64=r2, @ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8806, 0x203, 0x634e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfc00000000000001, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodiscard}, {@dax_never}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2129c5b, 0x0, 0x9, 0x0, &(0x7f00000007c0)) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet(0x2, 0x6, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.999346833s ago: executing program 0 (id=1816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) syz_io_uring_setup(0x7b58, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100, 0x2}, &(0x7f0000000000), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 1.894553949s ago: executing program 0 (id=1818): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2, 0x2, 0x8, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x11, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0000000900000003000000060000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000000000007000000000000000000000000000000a207c4ea550c5291688d7769ed7d443e9406d5237c56f274e4c52105cae8ac18"], 0x50) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x8804) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r11 = fcntl$dupfd(r10, 0x0, r10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) recvmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40018002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000a40)={0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0, r3, 0x4000, r1}, 0x18) 1.867403151s ago: executing program 5 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c020000190005090000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000100000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x0) 1.820465144s ago: executing program 5 (id=1821): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) 1.750589167s ago: executing program 2 (id=1822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e21, @multicast2}, {0x6, @random="ca1ac36dc3ef"}, 0x2c, {0x2, 0x4e22, @broadcast}, 'dummy0\x00'}) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() kcmp(r2, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='ext4_writepages\x00', r0, 0x0, 0x6}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7ca, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x3a, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44880) ptrace$setsig(0x4203, r3, 0x400, &(0x7f0000000140)={0x3a, 0x8, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x5, 0xa8, 0x0, 0x0, 0xc7, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x94, 0x2}, @timestamp={0x44, 0x28, 0xf5, 0x0, 0x0, [0x5, 0xff, 0xeaad, 0x1, 0x2, 0x9, 0x0, 0xfff, 0x10000]}]}}, {{0x0, 0x6, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x48, 0xe, 0x0, "42e4d8d6c091d011474a169e84a26f2970174d459e000415b8ebe37caae6457c65f4ac8080d57c8677ece2246e2e2bc76a0b15892dc3074d25c60fe5f42b28919d2c50a740"}, @exp_fastopen={0xfe, 0x9, 0xf989, "25bd4f4c32"}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) sendfile(r6, r6, 0x0, 0x80000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x31, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 1.661320563s ago: executing program 5 (id=1823): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1}, 0x8002, 0x0, 0x101, 0x8, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1bbd6dfb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48ee, 0x80, 0x1, 0x347, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r7, 0x3516, 0x8000544c, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a00000008000740000000003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400ffd74ba6ee2486e3812c0100000000000000000000000000013c0001802c00018014000000000000000000100000000000000014000400fe8000000000000000000000000000bb0c0002800500010000000000100005800b000100616d616e646100000000"], 0xa4}}, 0x0) getpid() r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0003000000000000000000002000000000000002896349d203d7805f600eeff0048a9466b133821cabac677a2f5da057dd34c97a113b36fa255455872895f00506d7f7e58629124431415ef2f269ce149ee846c55a621e41e48ee27940861e38bcd8f0f9d5e81cfcf7b8217fb3471db64cdc9e9109298529ace62f3f73272fb7bb2a125819d5c3647c15553ec962de33e892dfc082f894616208052d0310df8d33ef15107a79a7d80163", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="5a9bf740881d2f7cd9cdac156372a69d5c70de3ce6fc300b7f8935963c3172e9c181ba575b6bac6f64c3d88954fbbd35021ab53e26b17e1772d3c5913762dbe01517d9819ab47606e19f354483de066ac0c0c1bd6b7fe5670533e3fd3eaf60ba3e25e7d0ce1ddb817e9e10876c2d08aaf75175d25a1640234eb64e", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000000008000000000024c6f8ff00000000bfa200000000000007020000f8ffffffb7030000080f0000000000000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff0000000200000009000000010000", @ANYRES32=0x0, @ANYRES32], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r11, &(0x7f0000000800)="d6214ba216440822b52d622b7c073335cc9dd3d9ba28682189e4a342510911e60a909dfa0c582136b3925397ff9266707e3d5f519ab21238ae1f49153b8b47632ccb2b82bed8eb816d4fe680c07b36211a58e6f0e0047d14a1f71e6939efa64c51bd623077eb39bf960ce9e56eb50a2ffa761b35372625038ca10768c6f2acab5124a47f3355e122d2e93b890489fbaf01830c43fbf9af2b8b248bda873dd08534f21a66dbaff7bec97781945e5f35ac789552a435b9c3dc4643711a409d43563f8ca7ec2049317a8b8f5cc03a56c84112cf8d235ef09f4d5a23b66dc210", &(0x7f0000000400)=""/58}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x10) 1.584903477s ago: executing program 5 (id=1824): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x6, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x81, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x6c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.36766412s ago: executing program 5 (id=1827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x6b}}}}}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x3b, 0x0, 0x80001, 0x4, 0x0, @void, @value}, 0x28) 1.064496227s ago: executing program 2 (id=1828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 821.450162ms ago: executing program 2 (id=1829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d542bdfb7cec880a02de9e1d7300", "aa01954b50e1a7d200008f5a3995fa1e7569d25aed9768cf0c2def7d5500", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515c054b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x3ffffff, 0x120000, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="5553034359e6cbee5c33b5da9735609b22b6cca195c4799ef1a25a3cc28b0ff9778720898e72bd3d60bb1c865067ab14d2939e44af83659e5c712d1d5e95d2dd39f9129fc482ea0162c1a1edb7e6856238f3467144b90bae2a962fad469fb32fb6d194c293b82538e4e411371346add399c9405c9956e0e9ee99ac1b63b9720aba90eba5cae74355de7d60e694b8b9cf4d623b55aec5f5d51827adb5020403a1b87d74e255485d590f96fa227f47c7724df46b670cf9f5ddf3b874f2e376fc90b5666e2e1048067c96fb32944480d3fb213d22670182224ea46ab563616b8cdcc4420fd99b92d919259c25b98c558e6342e276d164e6"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r7, @ANYBLOB="30002f80"], 0x4c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 728.586148ms ago: executing program 7 (id=1830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 562.532607ms ago: executing program 8 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c020000190005090000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000100000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x0) 562.039477ms ago: executing program 8 (id=1833): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) readlink(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x42) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000004000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000003000000180000000000000000004c00000000009500000000000900950085ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 534.017238ms ago: executing program 8 (id=1834): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) 469.423833ms ago: executing program 5 (id=1835): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000002bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0x0, 0x6, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) iopl(0x3) rseq(0x0, 0x0, 0xffffffffffffffff, 0x0) 457.271813ms ago: executing program 7 (id=1836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100001000018c2200000001000000ac1414aa000000000000000000000000fc0100000000000000000000000000000000000000000a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414bb000000006c000000ff0200000000000000000000000000010000000000000000000000000000000000c514000000000000e2ed805042455ec60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000002200000000000000480003006465666c617465"], 0x180}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000005c0)) 374.693818ms ago: executing program 8 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (fail_nth: 13) 127.309082ms ago: executing program 7 (id=1838): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) (async) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) (async) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8000) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getrandom(&(0x7f0000000000)=""/48, 0x30, 0x1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008"], 0xe0}}, 0x0) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401e4aab41d00000000000900020073797a30000083070800410073697700140033006c6f00"/56], 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0)) 127.026522ms ago: executing program 8 (id=1839): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.16931ms ago: executing program 0 (id=1840): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000240)={[{@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@data_writeback}]}, 0x21, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvndM557lNn54zZ86ZCWDPGsy+pBEHIuJaElGsKytEXjhY/bn7f9w8n92SKJff+j2Jmx8nc/V1Jfn3/vzB/xQj+SmN2N+xtN3p2RuXx0ulyev5+fDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTV1fHtPf2Zczt977oPjp2Xe++ephMvLtL2eTOB2P8tiy62p8bPemWs5+Z4NRrnqwqCCNOLnJuneKP4u1v5OK7uwPIim0MyLWI42IUxHRGRFPRzE64nGyFuOTN9oaHNBS5SQqfdRgGdh7kmhadKkn/yexVE9LYwK2Q20cUHtuv9zz4KXSVg5JgG1yb6w6V1fN/c6IqOV/oTo3GD2VuYG++0n9PE9lXm1zM3NVWRs//nD2VnaLJvNwQGvMzddmuRv7/6SSmwNRfQ7Qdz9dlP9j+SggzV8neLOx4jVOng82nMt/2D5z8xHxTN7/d8Wa8z/Nc7eW/+9usH35DwAAAAAAAFvnzlhEvLzc+r90Yf1P1zLrf/oj4vQWtL/663/p3fwg2YLmgDr3xiJeW3b978Ia34GO/Oy/lfUAncmFS6XJoxHxv4g4HJ3d2flIQ731K4SPfLb/y2bt16//y25Z+7W1gHlNdwsNa4kmxmfGN3vdQMS9+YhnK+t/D+b3LF7/k/X/yTL9f5bf19bYxv4Xb59rVrZ6/gOtUv464tCy/f/j4Xay8vtzDFfGA8O1UcFSz330+XfN2pf/0D5Z/9+3cv53J/Xv1zO9vvq7IuLYbKHcrHyj4/+u5O2OWv2ZD8dnZq6PRHQlZ5beP7q+mGG3quVDLV+y/D/8wsrzfwvj/7o87I2IuTW2+dSj/l+blen/oX2y/J9Yuf8vLu7/138wenvg+2btn1tT/3+80qcfzu8x/wf1lr4fx1oTtC3hAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATLo2I/0SSDi0cp+nQUER/RPw/+tLS1PTMSxem3r86kZVVPv8/rX3Sb7F6ntQ+/3+g7ny04fxYROyLiC86eivnQ+enShPtvngAAAAAAAAAAAAAAAAAAADYIfore/7L3Y37/zO/dbQ7OqDlCvl3+Q57T2HDjyx3b2kgwLbbeP4DT7L5deV/Z0tjAbZf8/x/8LBc0XD368+3PCZgexj/w961wfz3cgHsAvp/2KvWOKfX0+o4gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOVlvW2NDGi1tN0BAG1jDS/sXYWpdkcAtIsN/UCycPRX42b/iuar/5PWBAQAAAAAAAAAAAAALHHoQPP9//YGwO628v5/a/thN1th//9yye/tAmAXaf7RH/p+2O08xwdW6+3t/wcAAAAAAAAAAACAHaDnxuXxUmny+vTsk3dwameEsb6DufHN1VPu3glXsfjgUWtq7oyInXGBW3CQJVupNFkuR6z+w7W34GhjzO39twQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz2bwAAAP///UcgJw==") r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000500)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025c63000000000000006088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0xee00) keyctl$chown(0x4, r5, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000) chdir(&(0x7f0000000200)='./file0\x00') 0s ago: executing program 8 (id=1841): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.240210][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.252257][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.320719][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.363188][ T7069] FAULT_INJECTION: forcing a failure. [ 99.363188][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.376438][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.5.1159 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 99.376508][ T7069] Tainted: [W]=WARN [ 99.376516][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.376579][ T7069] Call Trace: [ 99.376587][ T7069] [ 99.376595][ T7069] dump_stack_lvl+0xf2/0x150 [ 99.376624][ T7069] dump_stack+0x15/0x1a [ 99.376646][ T7069] should_fail_ex+0x24a/0x260 [ 99.376688][ T7069] should_fail+0xb/0x10 [ 99.376715][ T7069] should_fail_usercopy+0x1a/0x20 [ 99.376747][ T7069] _copy_to_user+0x20/0xa0 [ 99.376782][ T7069] simple_read_from_buffer+0xa0/0x110 [ 99.376891][ T7069] proc_fail_nth_read+0xf9/0x140 [ 99.376925][ T7069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.376955][ T7069] vfs_read+0x19b/0x6f0 [ 99.376976][ T7069] ? __rcu_read_unlock+0x4e/0x70 [ 99.377025][ T7069] ? __fget_files+0x17c/0x1c0 [ 99.377138][ T7069] ksys_read+0xe8/0x1b0 [ 99.377163][ T7069] __x64_sys_read+0x42/0x50 [ 99.377258][ T7069] x64_sys_call+0x2874/0x2dc0 [ 99.377291][ T7069] do_syscall_64+0xc9/0x1c0 [ 99.377326][ T7069] ? clear_bhb_loop+0x55/0xb0 [ 99.377357][ T7069] ? clear_bhb_loop+0x55/0xb0 [ 99.377382][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.377411][ T7069] RIP: 0033:0x7f79acd0babc [ 99.377425][ T7069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.377459][ T7069] RSP: 002b:00007f79ab377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.377481][ T7069] RAX: ffffffffffffffda RBX: 00007f79acf25fa0 RCX: 00007f79acd0babc [ 99.377494][ T7069] RDX: 000000000000000f RSI: 00007f79ab3770a0 RDI: 0000000000000005 [ 99.377508][ T7069] RBP: 00007f79ab377090 R08: 0000000000000000 R09: 0000000000000000 [ 99.377521][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.377534][ T7069] R13: 0000000000000000 R14: 00007f79acf25fa0 R15: 00007ffc637f0248 [ 99.377656][ T7069] [ 99.596965][ T29] audit: type=1400 audit(1740119766.438:4565): avc: denied { connect } for pid=7073 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.617071][ T29] audit: type=1400 audit(1740119766.458:4566): avc: denied { ioctl } for pid=7075 comm="syz.5.1162" path="socket:[18655]" dev="sockfs" ino=18655 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.691237][ T29] audit: type=1400 audit(1740119766.538:4567): avc: denied { bind } for pid=7087 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.693750][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 99.739802][ T29] audit: type=1326 audit(1740119766.588:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.763422][ T29] audit: type=1326 audit(1740119766.588:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.788498][ T29] audit: type=1326 audit(1740119766.638:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.812099][ T29] audit: type=1326 audit(1740119766.638:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.835584][ T29] audit: type=1326 audit(1740119766.638:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.871910][ T29] audit: type=1326 audit(1740119766.638:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 99.916488][ T6937] veth0_vlan: entered promiscuous mode [ 99.936220][ T6937] veth1_vlan: entered promiscuous mode [ 99.959825][ T7088] loop2: detected capacity change from 0 to 2048 [ 99.973912][ T7098] binfmt_misc: register: failed to install interpreter file ./file2 [ 99.994690][ T6937] veth0_macvtap: entered promiscuous mode [ 100.002918][ T6937] veth1_macvtap: entered promiscuous mode [ 100.014330][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.024828][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.034646][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.045208][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.055787][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.064133][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.074855][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.084700][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.095432][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.109836][ T7088] loop2: p1 < > p4 [ 100.116014][ T7088] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.133636][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.152821][ T6937] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.161687][ T6937] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.170515][ T6937] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.179276][ T6937] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.566447][ T7149] FAULT_INJECTION: forcing a failure. [ 100.566447][ T7149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.579591][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.7.1185 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 100.579643][ T7149] Tainted: [W]=WARN [ 100.579652][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.579664][ T7149] Call Trace: [ 100.579670][ T7149] [ 100.579676][ T7149] dump_stack_lvl+0xf2/0x150 [ 100.579758][ T7149] dump_stack+0x15/0x1a [ 100.579783][ T7149] should_fail_ex+0x24a/0x260 [ 100.579874][ T7149] should_fail+0xb/0x10 [ 100.579898][ T7149] should_fail_usercopy+0x1a/0x20 [ 100.579928][ T7149] _copy_from_user+0x1c/0xa0 [ 100.579969][ T7149] tls_setsockopt+0x3fb/0xf20 [ 100.580128][ T7149] sock_common_setsockopt+0x64/0x80 [ 100.580159][ T7149] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 100.580221][ T7149] __sys_setsockopt+0x187/0x200 [ 100.580244][ T7149] __x64_sys_setsockopt+0x66/0x80 [ 100.580266][ T7149] x64_sys_call+0x282e/0x2dc0 [ 100.580290][ T7149] do_syscall_64+0xc9/0x1c0 [ 100.580341][ T7149] ? clear_bhb_loop+0x55/0xb0 [ 100.580382][ T7149] ? clear_bhb_loop+0x55/0xb0 [ 100.580415][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.580443][ T7149] RIP: 0033:0x7f99e5d5d0a9 [ 100.580459][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.580519][ T7149] RSP: 002b:00007f99e43c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.580536][ T7149] RAX: ffffffffffffffda RBX: 00007f99e5f75fa0 RCX: 00007f99e5d5d0a9 [ 100.580548][ T7149] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 100.580561][ T7149] RBP: 00007f99e43c1090 R08: 0000000000000028 R09: 0000000000000000 [ 100.580575][ T7149] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 100.580589][ T7149] R13: 0000000000000000 R14: 00007f99e5f75fa0 R15: 00007ffefd8abec8 [ 100.580608][ T7149] [ 100.795201][ T7146] netlink: 'syz.5.1184': attribute type 13 has an invalid length. [ 100.925772][ T7162] loop2: detected capacity change from 0 to 512 [ 100.967266][ T7146] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.976404][ T7146] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.985456][ T7146] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.994383][ T7146] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.086647][ T7181] 9pnet_virtio: no channels available for device ./file0 [ 101.109498][ T7176] netlink: 'syz.7.1192': attribute type 1 has an invalid length. [ 101.126013][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1195'. [ 101.156219][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1196'. [ 101.283880][ T7196] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1199'. [ 101.343221][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 101.357622][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 101.763579][ T7217] vlan2: entered allmulticast mode [ 101.960400][ T7224] loop7: detected capacity change from 0 to 128 [ 101.968271][ T7224] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.660772][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1228'. [ 103.671898][ T7279] (unnamed net_device) (uninitialized): peer notification delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 103.700498][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 103.793350][ T7290] loop5: detected capacity change from 0 to 2048 [ 103.822775][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1234'. [ 103.841206][ T7290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.869234][ T7290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.871425][ T7299] loop7: detected capacity change from 0 to 1024 [ 103.885008][ T7299] EXT4-fs: Ignoring removed bh option [ 103.898777][ T7290] loop5: detected capacity change from 0 to 512 [ 103.905552][ T7290] EXT4-fs: inline encryption not supported [ 103.912315][ T7290] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 103.926943][ T7299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.948548][ T7299] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.970266][ T7290] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1232: corrupted in-inode xattr: e_value size too large [ 103.990057][ T7290] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1232: couldn't read orphan inode 15 (err -117) [ 104.003062][ T7290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.004872][ T7299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 104.024743][ T7299] System zones: 0-1, 3-12 [ 104.031009][ T7299] EXT4-fs error (device loop7): ext4_map_blocks:705: inode #3: block 1: comm syz.7.1235: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.046535][ T7299] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1235: Failed to acquire dquot type 0 [ 104.102541][ T7299] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.1235: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.118947][ T7299] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1235: Invalid inode bitmap blk 0 in block_group 0 [ 104.132845][ T7299] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 104.141565][ T37] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.159240][ T7299] EXT4-fs (loop7): 1 orphan inode deleted [ 104.166044][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 104.179277][ T7299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.261631][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.273490][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.509785][ T7319] loop5: detected capacity change from 0 to 512 [ 104.516193][ T7323] loop7: detected capacity change from 0 to 2048 [ 104.528035][ T7323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.543896][ T7319] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.567310][ T7319] EXT4-fs (loop5): mount failed [ 104.670172][ T7319] unsupported nla_type 60633 [ 104.786908][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.795339][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.112211][ T7336] loop5: detected capacity change from 0 to 2048 [ 105.123794][ T7331] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.178183][ T7331] bond0: (slave lo): Enslaving as an active interface with an up link [ 105.186605][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1246'. [ 105.198944][ T7336] loop5: p1 < > p4 [ 105.206613][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 105.206631][ T29] audit: type=1400 audit(1740119772.058:4704): avc: denied { ioctl } for pid=7335 comm="syz.5.1246" path="socket:[19247]" dev="sockfs" ino=19247 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.256373][ T7336] loop5: p4 size 8388608 extends beyond EOD, truncated [ 105.633184][ T7358] 9pnet_fd: Insufficient options for proto=fd [ 105.751938][ T29] audit: type=1326 audit(1740119772.598:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.826754][ T7334] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.838716][ T7334] bond0: (slave lo): Error: Device can not be enslaved while up [ 105.868991][ T29] audit: type=1326 audit(1740119772.628:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.892451][ T29] audit: type=1326 audit(1740119772.628:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.915960][ T29] audit: type=1326 audit(1740119772.628:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.939370][ T29] audit: type=1326 audit(1740119772.638:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.962798][ T29] audit: type=1326 audit(1740119772.638:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.986629][ T29] audit: type=1326 audit(1740119772.638:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 105.993733][ T7352] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.010153][ T29] audit: type=1326 audit(1740119772.638:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 106.021974][ T7352] bond0: (slave lo): Error: Device can not be enslaved while up [ 106.053034][ T29] audit: type=1326 audit(1740119772.638:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 106.117319][ T7364] loop2: detected capacity change from 0 to 512 [ 106.195014][ T7364] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1253: bad orphan inode 13 [ 106.237085][ T7364] ext4_test_bit(bit=12, block=4) = 1 [ 106.242441][ T7364] is_bad_inode(inode)=0 [ 106.246707][ T7364] NEXT_ORPHAN(inode)=0 [ 106.250844][ T7364] max_ino=32 [ 106.254045][ T7364] i_nlink=1 [ 106.296489][ T7364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.350668][ T7364] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1253: Unrecognised inode hash code 20 [ 106.362159][ T7364] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1253: Corrupt directory, running e2fsck is recommended [ 106.388166][ T7364] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1253: Unrecognised inode hash code 20 [ 106.399602][ T7364] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1253: Corrupt directory, running e2fsck is recommended [ 106.414811][ T7364] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 13: comm syz.2.1253: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 106.475479][ T7377] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1253: corrupted in-inode xattr: e_value out of bounds [ 106.537868][ T7384] loop4: detected capacity change from 0 to 164 [ 106.562528][ T7384] FAULT_INJECTION: forcing a failure. [ 106.562528][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 106.575260][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.4.1258 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 106.575367][ T7384] Tainted: [W]=WARN [ 106.575375][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.575389][ T7384] Call Trace: [ 106.575397][ T7384] [ 106.575405][ T7384] dump_stack_lvl+0xf2/0x150 [ 106.575435][ T7384] dump_stack+0x15/0x1a [ 106.575518][ T7384] should_fail_ex+0x24a/0x260 [ 106.575549][ T7384] should_failslab+0x8f/0xb0 [ 106.575588][ T7384] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 106.575783][ T7384] ? shmem_alloc_inode+0x34/0x50 [ 106.575813][ T7384] shmem_alloc_inode+0x34/0x50 [ 106.575838][ T7384] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 106.575898][ T7384] alloc_inode+0x3c/0x160 [ 106.575936][ T7384] new_inode+0x1e/0x100 [ 106.575995][ T7384] shmem_get_inode+0x24e/0x730 [ 106.576017][ T7384] shmem_mknod+0x44/0x180 [ 106.576096][ T7384] ? __pfx_shmem_create+0x10/0x10 [ 106.576120][ T7384] shmem_create+0x34/0x40 [ 106.576148][ T7384] path_openat+0xea3/0x1fc0 [ 106.576179][ T7384] do_filp_open+0x107/0x230 [ 106.576281][ T7384] ? __pfx_page_put_link+0x10/0x10 [ 106.576353][ T7384] do_sys_openat2+0xab/0x120 [ 106.576379][ T7384] __x64_sys_openat+0xf3/0x120 [ 106.576420][ T7384] x64_sys_call+0x2b30/0x2dc0 [ 106.576446][ T7384] do_syscall_64+0xc9/0x1c0 [ 106.576503][ T7384] ? clear_bhb_loop+0x55/0xb0 [ 106.576639][ T7384] ? clear_bhb_loop+0x55/0xb0 [ 106.576666][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.576757][ T7384] RIP: 0033:0x7f023ce3d0a9 [ 106.576773][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.576794][ T7384] RSP: 002b:00007f023b4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.576915][ T7384] RAX: ffffffffffffffda RBX: 00007f023d055fa0 RCX: 00007f023ce3d0a9 [ 106.576930][ T7384] RDX: 0000000000000042 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 106.576944][ T7384] RBP: 00007f023b4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.576959][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.576973][ T7384] R13: 0000000000000000 R14: 00007f023d055fa0 R15: 00007ffc4e603988 [ 106.576993][ T7384] [ 106.597927][ T7386] loop5: detected capacity change from 0 to 1024 [ 106.603291][ T7384] rock: directory entry would overflow storage [ 106.636748][ T7386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.641094][ T7384] rock: sig=0x4f50, size=4, remaining=3 [ 106.641113][ T7384] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 106.725645][ T7297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 106.916327][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.996361][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.026849][ T7400] IPv6: syztnl0: Disabled Multicast RS [ 107.076888][ T7406] 9pnet_fd: Insufficient options for proto=fd [ 107.113739][ T7410] loop4: detected capacity change from 0 to 1024 [ 107.120731][ T7410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.147330][ T7410] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.180584][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 107.223426][ T7424] FAULT_INJECTION: forcing a failure. [ 107.223426][ T7424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.236802][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.5.1274 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 107.236867][ T7424] Tainted: [W]=WARN [ 107.236874][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.236885][ T7424] Call Trace: [ 107.236890][ T7424] [ 107.236898][ T7424] dump_stack_lvl+0xf2/0x150 [ 107.236973][ T7424] dump_stack+0x15/0x1a [ 107.236992][ T7424] should_fail_ex+0x24a/0x260 [ 107.237080][ T7424] should_fail_alloc_page+0xfd/0x110 [ 107.237176][ T7424] __alloc_frozen_pages_noprof+0x109/0x340 [ 107.237215][ T7424] alloc_pages_mpol+0xb4/0x260 [ 107.237243][ T7424] vma_alloc_folio_noprof+0x1a0/0x310 [ 107.237274][ T7424] handle_mm_fault+0xdd7/0x2ac0 [ 107.237344][ T7424] exc_page_fault+0x3b9/0x650 [ 107.237376][ T7424] asm_exc_page_fault+0x26/0x30 [ 107.237413][ T7424] RIP: 0033:0x7f79accba6cb [ 107.237429][ T7424] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 107.237446][ T7424] RSP: 002b:00007f79ab374e10 EFLAGS: 00010246 [ 107.237497][ T7424] RAX: 00007f79ab376f30 RBX: 00007f79acefc620 RCX: 0000000000000000 [ 107.237511][ T7424] RDX: 00007f79ab376f78 RSI: 00007f79acd6cbd8 RDI: 00007f79ab374e30 [ 107.237525][ T7424] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 107.237539][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.237551][ T7424] R13: 0000000000000000 R14: 00007f79acf25fa0 R15: 00007ffc637f0248 [ 107.237568][ T7424] [ 107.237576][ T7424] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 107.442598][ T7428] loop5: detected capacity change from 0 to 1024 [ 107.449523][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.466065][ T7426] 9pnet_fd: Insufficient options for proto=fd [ 107.484363][ T7428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.583108][ T7397] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 107.592503][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.006891][ T7446] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1278'. [ 108.077971][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 108.234631][ T7457] loop2: detected capacity change from 0 to 129 [ 108.398697][ T7463] FAULT_INJECTION: forcing a failure. [ 108.398697][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 108.411362][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.4.1286 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 108.411469][ T7463] Tainted: [W]=WARN [ 108.411476][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.411489][ T7463] Call Trace: [ 108.411497][ T7463] [ 108.411505][ T7463] dump_stack_lvl+0xf2/0x150 [ 108.411605][ T7463] dump_stack+0x15/0x1a [ 108.411629][ T7463] should_fail_ex+0x24a/0x260 [ 108.411662][ T7463] ? alloc_pipe_info+0xb0/0x360 [ 108.411701][ T7463] should_failslab+0x8f/0xb0 [ 108.411793][ T7463] __kmalloc_cache_noprof+0x4e/0x320 [ 108.411814][ T7463] alloc_pipe_info+0xb0/0x360 [ 108.411896][ T7463] splice_direct_to_actor+0x60f/0x670 [ 108.411969][ T7463] ? __pfx_direct_splice_actor+0x10/0x10 [ 108.412044][ T7463] ? 0xffffffff81000000 [ 108.412113][ T7463] ? selinux_file_permission+0x22a/0x360 [ 108.412141][ T7463] ? __rcu_read_unlock+0x4e/0x70 [ 108.412168][ T7463] ? avc_policy_seqno+0x15/0x20 [ 108.412237][ T7463] ? selinux_file_permission+0x22a/0x360 [ 108.412310][ T7463] do_splice_direct+0xd7/0x150 [ 108.412382][ T7463] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 108.412447][ T7463] do_sendfile+0x398/0x660 [ 108.412474][ T7463] __x64_sys_sendfile64+0x110/0x150 [ 108.412517][ T7463] x64_sys_call+0xfbd/0x2dc0 [ 108.412544][ T7463] do_syscall_64+0xc9/0x1c0 [ 108.412650][ T7463] ? clear_bhb_loop+0x55/0xb0 [ 108.412682][ T7463] ? clear_bhb_loop+0x55/0xb0 [ 108.412715][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.412838][ T7463] RIP: 0033:0x7f023ce3d0a9 [ 108.412909][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.412928][ T7463] RSP: 002b:00007f023b4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 108.412946][ T7463] RAX: ffffffffffffffda RBX: 00007f023d055fa0 RCX: 00007f023ce3d0a9 [ 108.412960][ T7463] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 108.412972][ T7463] RBP: 00007f023b4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.412983][ T7463] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 108.412994][ T7463] R13: 0000000000000000 R14: 00007f023d055fa0 R15: 00007ffc4e603988 [ 108.413012][ T7463] [ 108.757309][ T7470] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1289'. [ 108.836310][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.961518][ T7479] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7479 comm=syz.5.1293 [ 108.974123][ T7479] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7479 comm=syz.5.1293 [ 109.273127][ T7488] 9pnet_fd: Insufficient options for proto=fd [ 109.303610][ T7491] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.315711][ T7491] bond0: (slave lo): Error: Device can not be enslaved while up [ 109.362708][ T7490] 9pnet_fd: Insufficient options for proto=fd [ 109.416815][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1296'. [ 109.455592][ T7494] IPVS: Error joining to the multicast group [ 109.549181][ T7496] FAULT_INJECTION: forcing a failure. [ 109.549181][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.562326][ T7496] CPU: 1 UID: 0 PID: 7496 Comm: syz.5.1297 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 109.562397][ T7496] Tainted: [W]=WARN [ 109.562406][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.562443][ T7496] Call Trace: [ 109.562451][ T7496] [ 109.562461][ T7496] dump_stack_lvl+0xf2/0x150 [ 109.562489][ T7496] dump_stack+0x15/0x1a [ 109.562509][ T7496] should_fail_ex+0x24a/0x260 [ 109.562545][ T7496] should_fail+0xb/0x10 [ 109.562598][ T7496] should_fail_usercopy+0x1a/0x20 [ 109.562782][ T7496] _copy_from_user+0x1c/0xa0 [ 109.562824][ T7496] __sys_bpf+0x14e/0x7a0 [ 109.562913][ T7496] __x64_sys_bpf+0x43/0x50 [ 109.562945][ T7496] x64_sys_call+0x2914/0x2dc0 [ 109.562973][ T7496] do_syscall_64+0xc9/0x1c0 [ 109.563046][ T7496] ? clear_bhb_loop+0x55/0xb0 [ 109.563073][ T7496] ? clear_bhb_loop+0x55/0xb0 [ 109.563179][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.563212][ T7496] RIP: 0033:0x7f79acd0d0a9 [ 109.563231][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.563249][ T7496] RSP: 002b:00007f79ab377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.563283][ T7496] RAX: ffffffffffffffda RBX: 00007f79acf25fa0 RCX: 00007f79acd0d0a9 [ 109.563355][ T7496] RDX: 0000000000000020 RSI: 0000400000000640 RDI: 0000000000000015 [ 109.563425][ T7496] RBP: 00007f79ab377090 R08: 0000000000000000 R09: 0000000000000000 [ 109.563508][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.563523][ T7496] R13: 0000000000000000 R14: 00007f79acf25fa0 R15: 00007ffc637f0248 [ 109.563551][ T7496] [ 109.996120][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1304'. [ 110.005196][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1304'. [ 110.166717][ T7526] 9pnet_fd: Insufficient options for proto=fd [ 110.214202][ T7528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1310'. [ 110.304926][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 110.304942][ T29] audit: type=1400 audit(1740119777.078:4849): avc: denied { execmem } for pid=7529 comm="syz.0.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.390915][ T29] audit: type=1400 audit(1740119777.228:4850): avc: denied { prog_run } for pid=7537 comm="syz.7.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.410061][ T29] audit: type=1400 audit(1740119777.228:4851): avc: denied { create } for pid=7536 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.430591][ T29] audit: type=1400 audit(1740119777.228:4852): avc: denied { write } for pid=7536 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.451097][ T29] audit: type=1400 audit(1740119777.228:4853): avc: denied { nlmsg_read } for pid=7536 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.471953][ T29] audit: type=1400 audit(1740119777.228:4854): avc: denied { module_request } for pid=7536 comm="syz.2.1300" kmod="net-pf-16-proto-4-type-2-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 110.495048][ T29] audit: type=1400 audit(1740119777.228:4855): avc: denied { create } for pid=7537 comm="syz.7.1313" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.516310][ T29] audit: type=1400 audit(1740119777.228:4856): avc: denied { map } for pid=7537 comm="syz.7.1313" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.540564][ T29] audit: type=1400 audit(1740119777.228:4857): avc: denied { read write } for pid=7537 comm="syz.7.1313" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.871530][ T7552] loop5: detected capacity change from 0 to 2048 [ 110.907127][ T7552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.940432][ T7552] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.356457][ T29] audit: type=1400 audit(1740119777.418:4858): avc: denied { create } for pid=7529 comm="syz.0.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.419274][ T1824] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 111.474028][ T1824] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1748 with error 117 [ 111.486699][ T1824] EXT4-fs (loop5): This should not happen!! Data will be lost [ 111.486699][ T1824] [ 111.576691][ T7575] 9pnet_fd: Insufficient options for proto=fd [ 111.579788][ T7572] loop2: detected capacity change from 0 to 1024 [ 111.622584][ T7578] program syz.7.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.641600][ T7578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.653103][ T7572] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.705305][ T7572] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.711736][ T7583] loop7: detected capacity change from 0 to 2048 [ 111.713323][ T7572] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.779776][ T7572] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 111.795837][ T7572] EXT4-fs (loop2): Remounting filesystem read-only [ 111.810095][ T7572] EXT4-fs (loop2): 1 orphan inode deleted [ 111.822956][ T7583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.825348][ T7572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.844945][ T7583] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.905877][ T7572] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 111.932866][ T7572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.156886][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 112.156975][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.275498][ T7595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1330'. [ 112.321782][ T557] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 112.368440][ T557] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 112.381164][ T557] EXT4-fs (loop7): This should not happen!! Data will be lost [ 112.381164][ T557] [ 112.599737][ T7604] loop2: detected capacity change from 0 to 1024 [ 112.606563][ T7604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.616769][ T7604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.791821][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.886655][ T7611] loop2: detected capacity change from 0 to 164 [ 112.894182][ T7611] iso9660: Unknown parameter 'manormal' [ 112.933736][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.946313][ T7611] loop2: detected capacity change from 0 to 2048 [ 112.972105][ T7616] FAULT_INJECTION: forcing a failure. [ 112.972105][ T7616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.973934][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.985326][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.7.1337 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 112.985368][ T7616] Tainted: [W]=WARN [ 112.985378][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 112.985393][ T7616] Call Trace: [ 112.985400][ T7616] [ 112.985409][ T7616] dump_stack_lvl+0xf2/0x150 [ 112.985460][ T7616] dump_stack+0x15/0x1a [ 112.985487][ T7616] should_fail_ex+0x24a/0x260 [ 112.985525][ T7616] should_fail+0xb/0x10 [ 112.985558][ T7616] should_fail_usercopy+0x1a/0x20 [ 112.985596][ T7616] _copy_from_user+0x1c/0xa0 [ 112.985740][ T7616] __sys_bpf+0x14e/0x7a0 [ 112.985842][ T7616] __x64_sys_bpf+0x43/0x50 [ 112.985875][ T7616] x64_sys_call+0x2914/0x2dc0 [ 112.985905][ T7616] do_syscall_64+0xc9/0x1c0 [ 112.986010][ T7616] ? clear_bhb_loop+0x55/0xb0 [ 112.986052][ T7616] ? clear_bhb_loop+0x55/0xb0 [ 112.986086][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.986174][ T7616] RIP: 0033:0x7f99e5d5d0a9 [ 112.986193][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.986279][ T7616] RSP: 002b:00007f99e43c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.986302][ T7616] RAX: ffffffffffffffda RBX: 00007f99e5f75fa0 RCX: 00007f99e5d5d0a9 [ 112.986318][ T7616] RDX: 000000000000003c RSI: 00004000000012c0 RDI: 000000000000001c [ 112.986334][ T7616] RBP: 00007f99e43c1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.986349][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.986364][ T7616] R13: 0000000000000000 R14: 00007f99e5f75fa0 R15: 00007ffefd8abec8 [ 112.986388][ T7616] [ 113.219529][ T7622] loop5: detected capacity change from 0 to 2048 [ 113.220228][ T7625] loop7: detected capacity change from 0 to 2048 [ 113.239592][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.255321][ T7622] loop5: p3 p4 < > [ 113.298091][ T7628] loop2: detected capacity change from 0 to 2048 [ 113.314895][ T7628] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.321431][ T7628] EXT4-fs: Ignoring removed i_version option [ 113.349496][ T7628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.383424][ T7266] hid-generic 0001:0009:0004.0002: unknown main item tag 0x2 [ 113.391061][ T7266] hid-generic 0001:0009:0004.0002: unknown main item tag 0x2 [ 113.398631][ T7266] hid-generic 0001:0009:0004.0002: unknown main item tag 0x2 [ 113.406247][ T7266] hid-generic 0001:0009:0004.0002: unknown main item tag 0x5 [ 113.413693][ T7266] hid-generic 0001:0009:0004.0002: item fetching failed at offset 21/61 [ 113.469582][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.487484][ T7266] hid-generic 0001:0009:0004.0002: probe with driver hid-generic failed with error -22 [ 113.624058][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'. [ 113.658705][ T7647] loop2: detected capacity change from 0 to 512 [ 113.689761][ T7647] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.706187][ T7647] EXT4-fs (loop2): mount failed [ 113.761515][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 113.772813][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 113.865587][ T7671] loop2: detected capacity change from 0 to 128 [ 114.442339][ T7695] syz.5.1366: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 114.457030][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.5.1366 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 114.457068][ T7695] Tainted: [W]=WARN [ 114.457075][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.457088][ T7695] Call Trace: [ 114.457094][ T7695] [ 114.457101][ T7695] dump_stack_lvl+0xf2/0x150 [ 114.457216][ T7695] dump_stack+0x15/0x1a [ 114.457237][ T7695] warn_alloc+0x145/0x1b0 [ 114.457304][ T7695] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 114.457343][ T7695] ? common_lsm_audit+0x91f/0x10c0 [ 114.457376][ T7695] __vmalloc_node_range_noprof+0xaa/0xe70 [ 114.457410][ T7695] ? slow_avc_audit+0xf9/0x140 [ 114.457515][ T7695] ? should_fail_ex+0x31/0x260 [ 114.457602][ T7695] ? xskq_create+0x36/0xd0 [ 114.457637][ T7695] ? should_failslab+0x8f/0xb0 [ 114.457685][ T7695] vmalloc_user_noprof+0x59/0x70 [ 114.457730][ T7695] ? xskq_create+0x79/0xd0 [ 114.457837][ T7695] xskq_create+0x79/0xd0 [ 114.457867][ T7695] xsk_init_queue+0x82/0xd0 [ 114.457894][ T7695] xsk_setsockopt+0x388/0x520 [ 114.457924][ T7695] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.457963][ T7695] __sys_setsockopt+0x187/0x200 [ 114.457989][ T7695] __x64_sys_setsockopt+0x66/0x80 [ 114.458017][ T7695] x64_sys_call+0x282e/0x2dc0 [ 114.458049][ T7695] do_syscall_64+0xc9/0x1c0 [ 114.458076][ T7695] ? clear_bhb_loop+0x55/0xb0 [ 114.458122][ T7695] ? clear_bhb_loop+0x55/0xb0 [ 114.458162][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.458192][ T7695] RIP: 0033:0x7f79acd0d0a9 [ 114.458206][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.458224][ T7695] RSP: 002b:00007f79ab377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.458267][ T7695] RAX: ffffffffffffffda RBX: 00007f79acf25fa0 RCX: 00007f79acd0d0a9 [ 114.458279][ T7695] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 114.458291][ T7695] RBP: 00007f79acd8e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 114.458302][ T7695] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.458316][ T7695] R13: 0000000000000000 R14: 00007f79acf25fa0 R15: 00007ffc637f0248 [ 114.458346][ T7695] [ 114.458353][ T7695] Mem-Info: [ 114.681236][ T7695] active_anon:35224 inactive_anon:24 isolated_anon:0 [ 114.681236][ T7695] active_file:11144 inactive_file:14762 isolated_file:0 [ 114.681236][ T7695] unevictable:0 dirty:41 writeback:0 [ 114.681236][ T7695] slab_reclaimable:3123 slab_unreclaimable:61308 [ 114.681236][ T7695] mapped:28245 shmem:32384 pagetables:847 [ 114.681236][ T7695] sec_pagetables:0 bounce:0 [ 114.681236][ T7695] kernel_misc_reclaimable:0 [ 114.681236][ T7695] free:1509056 free_pcp:34789 free_cma:0 [ 114.726437][ T7695] Node 0 active_anon:140896kB inactive_anon:96kB active_file:44576kB inactive_file:59048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112980kB dirty:164kB writeback:0kB shmem:129536kB writeback_tmp:0kB kernel_stack:2928kB pagetables:3504kB sec_pagetables:0kB all_unreclaimable? no [ 114.754691][ T7695] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.781794][ T7695] lowmem_reserve[]: 0 2885 7863 0 [ 114.786915][ T7695] Node 0 DMA32 free:2950748kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 114.815863][ T7695] lowmem_reserve[]: 0 0 4978 0 [ 114.820690][ T7695] Node 0 Normal free:3070116kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:141012kB inactive_anon:96kB active_file:44576kB inactive_file:59048kB unevictable:0kB writepending:164kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:135544kB local_pcp:35384kB free_cma:0kB [ 114.851228][ T7695] lowmem_reserve[]: 0 0 0 0 [ 114.855921][ T7695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.868907][ T7695] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950748kB [ 114.885409][ T7695] Node 0 Normal: 367*4kB (UM) 555*8kB (UME) 496*16kB (UME) 469*32kB (UME) 341*64kB (UME) 232*128kB (UME) 131*256kB (UM) 138*512kB (UM) 104*1024kB (UME) 47*2048kB (UM) 655*4096kB (UM) = 3070196kB [ 114.904778][ T7695] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 114.914085][ T7695] 58321 total pagecache pages [ 114.918808][ T7695] 32 pages in swap cache [ 114.923143][ T7695] Free swap = 124332kB [ 114.927326][ T7695] Total swap = 124996kB [ 114.931481][ T7695] 2097051 pages RAM [ 114.935305][ T7695] 0 pages HighMem/MovableOnly [ 114.939983][ T7695] 80064 pages reserved [ 114.986257][ T7702] FAULT_INJECTION: forcing a failure. [ 114.986257][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.999429][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.2.1368 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 114.999466][ T7702] Tainted: [W]=WARN [ 114.999475][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.999490][ T7702] Call Trace: [ 114.999497][ T7702] [ 114.999506][ T7702] dump_stack_lvl+0xf2/0x150 [ 114.999615][ T7702] dump_stack+0x15/0x1a [ 114.999687][ T7702] should_fail_ex+0x24a/0x260 [ 114.999775][ T7702] should_fail+0xb/0x10 [ 114.999803][ T7702] should_fail_usercopy+0x1a/0x20 [ 114.999936][ T7702] _copy_from_user+0x1c/0xa0 [ 114.999968][ T7702] copy_msghdr_from_user+0x54/0x2a0 [ 115.000006][ T7702] ? __fget_files+0x17c/0x1c0 [ 115.000049][ T7702] __sys_sendmsg+0x13e/0x230 [ 115.000102][ T7702] __x64_sys_sendmsg+0x46/0x50 [ 115.000126][ T7702] x64_sys_call+0x2734/0x2dc0 [ 115.000169][ T7702] do_syscall_64+0xc9/0x1c0 [ 115.000202][ T7702] ? clear_bhb_loop+0x55/0xb0 [ 115.000236][ T7702] ? clear_bhb_loop+0x55/0xb0 [ 115.000270][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.000366][ T7702] RIP: 0033:0x7faa57bcd0a9 [ 115.000384][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.000406][ T7702] RSP: 002b:00007faa56237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.000504][ T7702] RAX: ffffffffffffffda RBX: 00007faa57de5fa0 RCX: 00007faa57bcd0a9 [ 115.000515][ T7702] RDX: 0000000000000000 RSI: 000040000000c2c0 RDI: 0000000000000007 [ 115.000526][ T7702] RBP: 00007faa56237090 R08: 0000000000000000 R09: 0000000000000000 [ 115.000539][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.000554][ T7702] R13: 0000000000000000 R14: 00007faa57de5fa0 R15: 00007ffd66264bc8 [ 115.000576][ T7702] [ 115.227626][ T7715] netlink: 'syz.5.1374': attribute type 4 has an invalid length. [ 115.235444][ T7715] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1374'. [ 115.336314][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 115.350446][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 115.350463][ T29] audit: type=1400 audit(1740119782.198:5711): avc: denied { create } for pid=7714 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.495158][ T29] audit: type=1400 audit(1740119782.338:5712): avc: denied { bind } for pid=7726 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.514685][ T29] audit: type=1400 audit(1740119782.348:5713): avc: denied { name_bind } for pid=7726 comm="syz.2.1376" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.536627][ T29] audit: type=1400 audit(1740119782.348:5714): avc: denied { node_bind } for pid=7726 comm="syz.2.1376" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 115.599731][ T7727] loop2: detected capacity change from 0 to 1024 [ 115.617610][ T7727] journal_path: not usable as path [ 115.622863][ T7727] EXT4-fs: error: could not find journal device path [ 115.663231][ T29] audit: type=1400 audit(1740119782.388:5715): avc: denied { shutdown } for pid=7726 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.682995][ T29] audit: type=1400 audit(1740119782.408:5716): avc: denied { read } for pid=7726 comm="syz.2.1376" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.706170][ T29] audit: type=1400 audit(1740119782.408:5717): avc: denied { open } for pid=7726 comm="syz.2.1376" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.708800][ T7732] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.729823][ T29] audit: type=1400 audit(1740119782.408:5718): avc: denied { ioctl } for pid=7726 comm="syz.2.1376" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.741737][ T7732] bond0: (slave lo): Error: Device can not be enslaved while up [ 115.774623][ T29] audit: type=1400 audit(1740119782.408:5719): avc: denied { setopt } for pid=7726 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.794240][ T29] audit: type=1400 audit(1740119782.438:5720): avc: denied { unmount } for pid=4101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.097117][ T7742] loop2: detected capacity change from 0 to 1024 [ 116.114139][ T7742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.155684][ T7742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.214829][ T7747] loop7: detected capacity change from 0 to 512 [ 116.222428][ T7747] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 116.271635][ T7751] FAULT_INJECTION: forcing a failure. [ 116.271635][ T7751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.284842][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.7.1383 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 116.284939][ T7751] Tainted: [W]=WARN [ 116.284946][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.284960][ T7751] Call Trace: [ 116.284966][ T7751] [ 116.284980][ T7751] dump_stack_lvl+0xf2/0x150 [ 116.285131][ T7751] dump_stack+0x15/0x1a [ 116.285152][ T7751] should_fail_ex+0x24a/0x260 [ 116.285179][ T7751] should_fail+0xb/0x10 [ 116.285281][ T7751] should_fail_usercopy+0x1a/0x20 [ 116.285320][ T7751] strncpy_from_user+0x25/0x210 [ 116.285344][ T7751] ? __kmalloc_cache_noprof+0x186/0x320 [ 116.285375][ T7751] __se_sys_memfd_create+0x218/0x5a0 [ 116.285432][ T7751] __x64_sys_memfd_create+0x31/0x40 [ 116.285457][ T7751] x64_sys_call+0x2d4c/0x2dc0 [ 116.285481][ T7751] do_syscall_64+0xc9/0x1c0 [ 116.285549][ T7751] ? clear_bhb_loop+0x55/0xb0 [ 116.285584][ T7751] ? clear_bhb_loop+0x55/0xb0 [ 116.285617][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.285662][ T7751] RIP: 0033:0x7f99e5d5d0a9 [ 116.285676][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.285697][ T7751] RSP: 002b:00007f99e43c0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 116.285720][ T7751] RAX: ffffffffffffffda RBX: 0000000000000a2c RCX: 00007f99e5d5d0a9 [ 116.285798][ T7751] RDX: 00007f99e43c0ef0 RSI: 0000000000000000 RDI: 00007f99e5ddec51 [ 116.285891][ T7751] RBP: 0000400000001fc0 R08: 00007f99e43c0bb7 R09: 00007f99e43c0e40 [ 116.285903][ T7751] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000040 [ 116.285915][ T7751] R13: 00007f99e43c0ef0 R14: 00007f99e43c0eb0 R15: 0000400000000640 [ 116.285932][ T7751] [ 116.495926][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.553215][ T7763] loop7: detected capacity change from 0 to 128 [ 116.601783][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1390'. [ 116.703552][ T7770] tipc: Started in network mode [ 116.708768][ T7770] tipc: Node identity ac14140f, cluster identity 4711 [ 116.729872][ T7770] tipc: New replicast peer: 255.255.255.255 [ 116.736092][ T7770] tipc: Enabled bearer , priority 10 [ 116.805464][ T7772] loop2: detected capacity change from 0 to 2048 [ 116.830503][ T7772] EXT4-fs: Ignoring removed bh option [ 116.846597][ T7772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.106637][ T7767] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.136953][ T7767] bond0: (slave lo): Enslaving as an active interface with an up link [ 117.205539][ T7798] 9pnet: Could not find request transport: fd0x0000000000000006 [ 117.240064][ T7790] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.266054][ T7790] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 117.278383][ T7790] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.278383][ T7790] [ 117.288059][ T7790] EXT4-fs (loop2): Total free blocks count 0 [ 117.294119][ T7790] EXT4-fs (loop2): Free/Dirty block details [ 117.300177][ T7790] EXT4-fs (loop2): free_blocks=2415919104 [ 117.306047][ T7790] EXT4-fs (loop2): dirty_blocks=8224 [ 117.311424][ T7790] EXT4-fs (loop2): Block reservation details [ 117.317501][ T7790] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 117.394094][ T7801] netlink: 'syz.0.1402': attribute type 13 has an invalid length. [ 117.414739][ T557] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 117.449936][ T7802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=7802 comm=syz.0.1402 [ 117.561606][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.582756][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.616862][ T7808] loop2: detected capacity change from 0 to 128 [ 117.631596][ T7801] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.640063][ T7801] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.648530][ T7801] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.657038][ T7801] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.933017][ T3375] tipc: Node number set to 2886997007 [ 118.215322][ T7842] hub 6-0:1.0: USB hub found [ 118.234257][ T7842] hub 6-0:1.0: 8 ports detected [ 118.412502][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1419'. [ 118.437445][ T7852] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 118.445331][ T7852] netlink: 'syz.0.1418': attribute type 19 has an invalid length. [ 118.453154][ T7852] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1418'. [ 118.560840][ T7856] 9pnet_fd: Insufficient options for proto=fd [ 118.950313][ T7833] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.962337][ T7833] bond0: (slave lo): Error: Device can not be enslaved while up [ 119.368328][ T7875] 9pnet_fd: Insufficient options for proto=fd [ 119.423350][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1430'. [ 119.463340][ T7885] xt_connbytes: Forcing CT accounting to be enabled [ 119.478735][ T7885] Cannot find add_set index 0 as target [ 119.637078][ T7894] Cannot find add_set index 0 as target [ 119.671269][ T7896] loop7: detected capacity change from 0 to 164 [ 119.678644][ T7896] iso9660: Unknown parameter 'manormal' [ 119.694087][ T7896] team0: Device macsec1 is already an upper device of the team interface [ 120.496032][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1441'. [ 120.544258][ T7913] loop7: detected capacity change from 0 to 128 [ 120.663650][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 120.663667][ T29] audit: type=1400 audit(1740119787.508:5836): avc: denied { append } for pid=7914 comm="syz.7.1443" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.914695][ T7923] Cannot find add_set index 0 as target [ 121.111746][ T29] audit: type=1400 audit(1740119787.958:5837): avc: denied { create } for pid=7925 comm="syz.7.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.150427][ T7933] usb usb1: check_ctrlrecip: process 7933 (syz.2.1440) requesting ep 01 but needs 81 [ 121.160068][ T7933] usb usb1: usbfs: process 7933 (syz.2.1440) did not claim interface 0 before use [ 121.185447][ T29] audit: type=1400 audit(1740119787.978:5838): avc: denied { getopt } for pid=7925 comm="syz.7.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.205061][ T29] audit: type=1400 audit(1740119787.978:5839): avc: denied { create } for pid=7925 comm="syz.7.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.293205][ T7941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1450'. [ 121.349126][ T29] audit: type=1400 audit(1740119788.198:5840): avc: denied { setopt } for pid=7939 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.371543][ T7908] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 121.421844][ T7944] loop2: detected capacity change from 0 to 2048 [ 121.431813][ T29] audit: type=1400 audit(1740119788.238:5841): avc: denied { connect } for pid=7939 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.444375][ T7944] EXT4-fs: Ignoring removed bh option [ 121.525252][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.614750][ T29] audit: type=1326 audit(1740119788.448:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.7.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e5d5d0a9 code=0x7ffc0000 [ 121.638342][ T29] audit: type=1326 audit(1740119788.448:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.7.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e5d5d0a9 code=0x7ffc0000 [ 121.661813][ T29] audit: type=1326 audit(1740119788.448:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.7.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f99e5d5d0a9 code=0x7ffc0000 [ 121.685222][ T29] audit: type=1326 audit(1740119788.448:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.7.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e5d5d0a9 code=0x7ffc0000 [ 121.878753][ T7962] netlink: 'syz.7.1455': attribute type 1 has an invalid length. [ 121.901036][ T7958] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.928974][ T7958] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 121.941364][ T7958] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.941364][ T7958] [ 121.951068][ T7958] EXT4-fs (loop2): Total free blocks count 0 [ 121.957118][ T7958] EXT4-fs (loop2): Free/Dirty block details [ 121.963025][ T7958] EXT4-fs (loop2): free_blocks=2415919104 [ 121.968770][ T7958] EXT4-fs (loop2): dirty_blocks=8224 [ 121.974065][ T7958] EXT4-fs (loop2): Block reservation details [ 121.980211][ T7958] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 122.073864][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 122.180879][ T7975] hub 6-0:1.0: USB hub found [ 122.255071][ T7975] hub 6-0:1.0: 8 ports detected [ 122.282378][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 122.335565][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 123.088718][ T8018] loop7: detected capacity change from 0 to 1024 [ 123.128663][ T8018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.234610][ T8026] netlink: 'GPL': attribute type 31 has an invalid length. [ 123.297773][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.305273][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.312667][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.320104][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.327531][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.334955][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.342348][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.350003][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.357515][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.365161][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.372610][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.380056][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.387595][ T3380] hid-generic 0000:0005:0000.0003: unknown main item tag 0x0 [ 123.404520][ T3380] hid-generic 0000:0005:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 123.453611][ T8018] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.503166][ T8018] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 123.515664][ T8018] EXT4-fs (loop7): This should not happen!! Data will be lost [ 123.515664][ T8018] [ 123.525365][ T8018] EXT4-fs (loop7): Total free blocks count 0 [ 123.531375][ T8018] EXT4-fs (loop7): Free/Dirty block details [ 123.537300][ T8018] EXT4-fs (loop7): free_blocks=68451041280 [ 123.543174][ T8018] EXT4-fs (loop7): dirty_blocks=64 [ 123.548329][ T8018] EXT4-fs (loop7): Block reservation details [ 123.554403][ T8018] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 123.683510][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 123.805400][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 123.929465][ T8063] hub 6-0:1.0: USB hub found [ 123.939659][ T8063] hub 6-0:1.0: 8 ports detected [ 124.929226][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 125.011935][ T8094] net_ratelimit: 11 callbacks suppressed [ 125.011951][ T8094] bond_slave_1: mtu less than device minimum [ 125.077828][ T8096] infiniband syz2: set down [ 125.082398][ T8096] infiniband syz2: added veth0_to_bond [ 125.120020][ T8096] RDS/IB: syz2: added [ 125.127536][ T8096] smc: adding ib device syz2 with port count 1 [ 125.141362][ T8096] smc: ib device syz2 port 1 has pnetid [ 125.575644][ T8109] loop7: detected capacity change from 0 to 128 [ 125.789907][ T8118] loop2: detected capacity change from 0 to 2048 [ 125.797636][ T8118] EXT4-fs: Ignoring removed bh option [ 125.825172][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.843056][ T8116] hub 6-0:1.0: USB hub found [ 125.847781][ T8116] hub 6-0:1.0: 8 ports detected [ 126.094035][ T8128] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.134443][ T8128] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 126.146826][ T8128] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.146826][ T8128] [ 126.156512][ T8128] EXT4-fs (loop2): Total free blocks count 0 [ 126.162509][ T8128] EXT4-fs (loop2): Free/Dirty block details [ 126.168430][ T8128] EXT4-fs (loop2): free_blocks=2415919104 [ 126.174163][ T8128] EXT4-fs (loop2): dirty_blocks=8224 [ 126.179544][ T8128] EXT4-fs (loop2): Block reservation details [ 126.185564][ T8128] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 126.286336][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 126.478624][ T8140] FAULT_INJECTION: forcing a failure. [ 126.478624][ T8140] name failslab, interval 1, probability 0, space 0, times 0 [ 126.491381][ T8140] CPU: 1 UID: 0 PID: 8140 Comm: syz.5.1516 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 126.491417][ T8140] Tainted: [W]=WARN [ 126.491425][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.491439][ T8140] Call Trace: [ 126.491446][ T8140] [ 126.491454][ T8140] dump_stack_lvl+0xf2/0x150 [ 126.491564][ T8140] dump_stack+0x15/0x1a [ 126.491663][ T8140] should_fail_ex+0x24a/0x260 [ 126.491689][ T8140] ? sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 126.491719][ T8140] should_failslab+0x8f/0xb0 [ 126.491815][ T8140] __kmalloc_cache_noprof+0x4e/0x320 [ 126.491841][ T8140] sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 126.491881][ T8140] sctp_association_new+0xe78/0x1280 [ 126.491987][ T8140] sctp_connect_new_asoc+0x1b0/0x3b0 [ 126.492018][ T8140] sctp_sendmsg+0xefb/0x18f0 [ 126.492042][ T8140] ? __pfx_sctp_sendmsg+0x10/0x10 [ 126.492061][ T8140] inet_sendmsg+0xc5/0xd0 [ 126.492087][ T8140] __sock_sendmsg+0x102/0x180 [ 126.492147][ T8140] __sys_sendto+0x1a8/0x230 [ 126.492181][ T8140] __x64_sys_sendto+0x78/0x90 [ 126.492203][ T8140] x64_sys_call+0x29fa/0x2dc0 [ 126.492322][ T8140] do_syscall_64+0xc9/0x1c0 [ 126.492358][ T8140] ? clear_bhb_loop+0x55/0xb0 [ 126.492392][ T8140] ? clear_bhb_loop+0x55/0xb0 [ 126.492426][ T8140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.492526][ T8140] RIP: 0033:0x7f79acd0d0a9 [ 126.492564][ T8140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.492586][ T8140] RSP: 002b:00007f79ab377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.492609][ T8140] RAX: ffffffffffffffda RBX: 00007f79acf25fa0 RCX: 00007f79acd0d0a9 [ 126.492624][ T8140] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000006 [ 126.492639][ T8140] RBP: 00007f79ab377090 R08: 0000400000000100 R09: 000000000000001c [ 126.492654][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.492668][ T8140] R13: 0000000000000000 R14: 00007f79acf25fa0 R15: 00007ffc637f0248 [ 126.492688][ T8140] [ 126.875801][ T8123] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.887809][ T8123] bond0: (slave lo): Error: Device type is different from other slaves [ 126.981676][ T8146] loop2: detected capacity change from 0 to 4096 [ 127.006025][ T8146] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 127.066903][ T8150] loop5: detected capacity change from 0 to 128 [ 127.086219][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 127.086240][ T29] audit: type=1400 audit(1740119793.938:6112): avc: denied { write } for pid=8149 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 127.117371][ T29] audit: type=1400 audit(1740119793.968:6113): avc: denied { read write } for pid=8149 comm="GPL" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.140403][ T29] audit: type=1400 audit(1740119793.968:6114): avc: denied { open } for pid=8149 comm="GPL" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.233115][ T8160] loop2: detected capacity change from 0 to 128 [ 127.249479][ T8161] loop5: detected capacity change from 0 to 2048 [ 127.265700][ T8161] EXT4-fs: Ignoring removed bh option [ 127.322474][ T8161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.358903][ T8167] loop7: detected capacity change from 0 to 2048 [ 127.365622][ T8167] EXT4-fs: Ignoring removed bh option [ 127.393665][ T1824] kworker/u8:6: attempt to access beyond end of device [ 127.393665][ T1824] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 127.430450][ T8167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.509511][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.533918][ T8173] hub 6-0:1.0: USB hub found [ 127.551780][ T8173] hub 6-0:1.0: 8 ports detected [ 127.598684][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.619197][ T29] audit: type=1400 audit(1740119794.468:6115): avc: denied { mounton } for pid=8181 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.652307][ T8174] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.679834][ T8174] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 127.692238][ T8174] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.692238][ T8174] [ 127.701958][ T8174] EXT4-fs (loop5): Total free blocks count 0 [ 127.708022][ T8174] EXT4-fs (loop5): Free/Dirty block details [ 127.713940][ T8174] EXT4-fs (loop5): free_blocks=2415919104 [ 127.719689][ T8174] EXT4-fs (loop5): dirty_blocks=8224 [ 127.725021][ T8174] EXT4-fs (loop5): Block reservation details [ 127.731087][ T8174] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 127.757365][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.795285][ T1824] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 127.830779][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.886345][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 127.944631][ T37] bridge_slave_1: left allmulticast mode [ 127.950354][ T37] bridge_slave_1: left promiscuous mode [ 127.956083][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.984184][ T8204] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1531'. [ 127.984814][ T29] audit: type=1400 audit(1740119794.818:6116): avc: denied { write } for pid=8202 comm="syz.2.1531" path="socket:[21576]" dev="sockfs" ino=21576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.016797][ T29] audit: type=1326 audit(1740119794.818:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa57bcd0a9 code=0x7ffc0000 [ 128.040212][ T29] audit: type=1326 audit(1740119794.818:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa57bcd0a9 code=0x7ffc0000 [ 128.063568][ T29] audit: type=1326 audit(1740119794.818:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa57bcd0a9 code=0x7ffc0000 [ 128.086969][ T29] audit: type=1326 audit(1740119794.818:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7faa57bcd0a9 code=0x7ffc0000 [ 128.110369][ T29] audit: type=1326 audit(1740119794.818:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.2.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa57bcd0a9 code=0x7ffc0000 [ 128.148515][ T37] bridge_slave_0: left allmulticast mode [ 128.154295][ T37] bridge_slave_0: left promiscuous mode [ 128.160207][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.190465][ T8186] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.206776][ T8186] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 128.219076][ T8186] EXT4-fs (loop7): This should not happen!! Data will be lost [ 128.219076][ T8186] [ 128.228772][ T8186] EXT4-fs (loop7): Total free blocks count 0 [ 128.234959][ T8186] EXT4-fs (loop7): Free/Dirty block details [ 128.241060][ T8186] EXT4-fs (loop7): free_blocks=2415919104 [ 128.246813][ T8186] EXT4-fs (loop7): dirty_blocks=8224 [ 128.252106][ T8186] EXT4-fs (loop7): Block reservation details [ 128.258127][ T8186] EXT4-fs (loop7): i_reserved_data_blocks=514 [ 128.297934][ T557] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 128.318347][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.328126][ T37] bond0 (unregistering): (slave bond1): Releasing backup interface [ 128.336662][ T37] bond0 (unregistering): Released all slaves [ 128.355520][ T37] bond1 (unregistering): Released all slaves [ 128.416633][ T37] tipc: Disabling bearer [ 128.421688][ T37] tipc: Left network mode [ 128.431561][ T8224] loop2: detected capacity change from 0 to 2048 [ 128.446402][ T8224] EXT4-fs: Ignoring removed bh option [ 128.457204][ T8181] chnl_net:caif_netlink_parms(): no params data found [ 128.497295][ T37] hsr_slave_0: left promiscuous mode [ 128.502923][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.510425][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.519916][ T8224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.555629][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.563064][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.589217][ T37] veth1_macvtap: left promiscuous mode [ 128.596934][ T37] veth0_macvtap: left promiscuous mode [ 128.604518][ T37] veth1_vlan: left promiscuous mode [ 128.612031][ T37] veth0_vlan: left promiscuous mode [ 128.779196][ T37] team0 (unregistering): Port device team_slave_1 removed [ 128.795060][ T1824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.819747][ T37] team0 (unregistering): Port device team_slave_0 removed [ 128.833786][ T1824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.846115][ T1824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.846115][ T1824] [ 128.855834][ T1824] EXT4-fs (loop2): Total free blocks count 0 [ 128.861826][ T1824] EXT4-fs (loop2): Free/Dirty block details [ 128.867755][ T1824] EXT4-fs (loop2): free_blocks=2415919104 [ 128.873481][ T1824] EXT4-fs (loop2): dirty_blocks=8224 [ 128.878953][ T1824] EXT4-fs (loop2): Block reservation details [ 128.885052][ T1824] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 128.953901][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1540'. [ 128.968154][ T1824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 129.001153][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.008556][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.019610][ T8181] bridge_slave_0: entered allmulticast mode [ 129.026892][ T8181] bridge_slave_0: entered promiscuous mode [ 129.034052][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.041169][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.048386][ T8181] bridge_slave_1: entered allmulticast mode [ 129.054982][ T8181] bridge_slave_1: entered promiscuous mode [ 129.087181][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.106166][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.155638][ T8181] team0: Port device team_slave_0 added [ 129.162441][ T8181] team0: Port device team_slave_1 added [ 129.198512][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.205976][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.232083][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.259638][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.266714][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.292811][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.330378][ T8181] hsr_slave_0: entered promiscuous mode [ 129.336808][ T8181] hsr_slave_1: entered promiscuous mode [ 129.342705][ T8181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.351039][ T8181] Cannot create hsr debugfs directory [ 129.366683][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'. [ 129.405682][ T8262] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.468543][ T8181] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 129.478427][ T8181] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 129.488476][ T8181] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 129.498478][ T8181] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 129.514181][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.521310][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.528634][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.535810][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.577190][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.588966][ T8268] loop7: detected capacity change from 0 to 128 [ 129.598469][ T1824] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.615588][ T1824] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.639373][ T8181] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.655305][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.662542][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.692089][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.699194][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.787124][ T8275] loop5: detected capacity change from 0 to 128 [ 129.817847][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.831481][ T8233] syz.0.1537 (8233) used greatest stack depth: 6128 bytes left [ 129.846279][ T8278] loop7: detected capacity change from 0 to 1024 [ 129.854643][ T8278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.874078][ T37] kworker/u8:2: attempt to access beyond end of device [ 129.874078][ T37] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 129.908564][ T8278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.019790][ T8181] veth0_vlan: entered promiscuous mode [ 130.030938][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.043639][ T8181] veth1_vlan: entered promiscuous mode [ 130.058285][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1558'. [ 130.073860][ T8181] veth0_macvtap: entered promiscuous mode [ 130.085149][ T8181] veth1_macvtap: entered promiscuous mode [ 130.109832][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.120465][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.133754][ T8315] loop7: detected capacity change from 0 to 512 [ 130.140966][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.151586][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.158235][ T8316] hub 6-0:1.0: USB hub found [ 130.162095][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.167168][ T8316] hub 6-0:1.0: 8 ports detected [ 130.185941][ T8315] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 130.205459][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.219365][ T8181] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.224134][ T8315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 130.228446][ T8181] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.238076][ T8315] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1557: corrupted in-inode xattr: e_value size too large [ 130.245055][ T8181] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.245215][ T8181] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.278362][ T8315] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1557: couldn't read orphan inode 15 (err -117) [ 130.291690][ T8315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.401796][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.469400][ T8332] loop7: detected capacity change from 0 to 512 [ 130.498376][ T8338] loop8: detected capacity change from 0 to 1024 [ 130.505199][ T8338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.520661][ T8332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.538186][ T8340] loop2: detected capacity change from 0 to 2048 [ 130.546839][ T8340] EXT4-fs: Ignoring removed bh option [ 130.546884][ T8338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.566457][ T8332] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.578689][ T8340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.745154][ T8181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.816062][ T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.839096][ T8352] hub 6-0:1.0: USB hub found [ 130.843937][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 130.856253][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.856253][ T37] [ 130.866258][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 130.872538][ T37] EXT4-fs (loop2): Free/Dirty block details [ 130.878497][ T37] EXT4-fs (loop2): free_blocks=2415919104 [ 130.884245][ T37] EXT4-fs (loop2): dirty_blocks=8224 [ 130.889637][ T37] EXT4-fs (loop2): Block reservation details [ 130.895663][ T37] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 130.917740][ T8352] hub 6-0:1.0: 8 ports detected [ 130.928627][ T3422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 131.039172][ T8362] x_tables: unsorted underflow at hook 2 [ 131.132744][ T8371] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 131.144070][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.242611][ T8380] loop7: detected capacity change from 0 to 1024 [ 131.249961][ T8380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.277047][ T8380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.429148][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.488509][ T8389] 9pnet_fd: Insufficient options for proto=fd [ 131.572285][ T8391] loop7: detected capacity change from 0 to 128 [ 131.713178][ T8406] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1591'. [ 131.751162][ T8409] loop5: detected capacity change from 0 to 1024 [ 131.757844][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.782408][ T8409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.799528][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 131.837900][ T8422] loop8: detected capacity change from 0 to 128 [ 131.896208][ T8426] loop8: detected capacity change from 0 to 128 [ 131.904024][ T8426] EXT4-fs: Ignoring removed nobh option [ 131.923717][ T8426] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.936400][ T8426] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.000860][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.113392][ T8432] loop2: detected capacity change from 0 to 4096 [ 132.133693][ T8437] SET target dimension over the limit! [ 132.139791][ T8432] ext4: Unknown parameter 'fsname' [ 132.211312][ T8452] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1602'. [ 132.220796][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 132.220812][ T29] audit: type=1400 audit(1740119799.068:6162): avc: denied { remove_name } for pid=8425 comm="syz.8.1598" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.249570][ T29] audit: type=1400 audit(1740119799.068:6163): avc: denied { unlink } for pid=8425 comm="syz.8.1598" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.272663][ T8455] 9pnet_fd: Insufficient options for proto=fd [ 132.279168][ T8432] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1602'. [ 132.290659][ T29] audit: type=1400 audit(1740119799.138:6164): avc: denied { execute } for pid=8425 comm="syz.8.1598" name="file1" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.312917][ T29] audit: type=1400 audit(1740119799.138:6165): avc: denied { execute_no_trans } for pid=8425 comm="syz.8.1598" path="/10/mnt/file1" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.381645][ T29] audit: type=1400 audit(1740119799.138:6166): avc: denied { create } for pid=8425 comm="syz.8.1598" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 132.402417][ T29] audit: type=1400 audit(1740119799.138:6167): avc: denied { read } for pid=8425 comm="syz.8.1598" name="file0" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 132.424562][ T29] audit: type=1326 audit(1740119799.188:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 132.425763][ T8458] loop7: detected capacity change from 0 to 128 [ 132.447954][ T29] audit: type=1326 audit(1740119799.188:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 132.447989][ T29] audit: type=1326 audit(1740119799.188:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 132.514304][ T29] audit: type=1326 audit(1740119799.228:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337226d0a9 code=0x7ffc0000 [ 132.550525][ T8181] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.594072][ T8466] loop8: detected capacity change from 0 to 2048 [ 132.610364][ T8466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.624038][ T8466] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.654693][ T8181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.666084][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.674563][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.704687][ T8477] loop8: detected capacity change from 0 to 2048 [ 132.776757][ T8480] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.799714][ T8477] loop8: unable to read partition table [ 132.805554][ T8477] loop8: partition table beyond EOD, truncated [ 132.811780][ T8477] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 133.018173][ T8485] loop7: detected capacity change from 0 to 512 [ 133.024870][ T8485] EXT4-fs: Ignoring removed bh option [ 133.033608][ T8485] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 133.045825][ T8485] EXT4-fs (loop7): 1 truncate cleaned up [ 133.052468][ T8485] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.067864][ T8487] 9pnet_fd: Insufficient options for proto=fd [ 133.357175][ T8501] loop8: detected capacity change from 0 to 2048 [ 133.402731][ T8501] EXT4-fs: Ignoring removed bh option [ 133.429132][ T8501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.843213][ T8522] tipc: Enabling of bearer rejected, already enabled [ 133.928804][ T8525] 9pnet_fd: Insufficient options for proto=fd [ 133.978923][ T8515] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.008100][ T8494] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 134.027844][ T8515] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 134.040306][ T8515] EXT4-fs (loop8): This should not happen!! Data will be lost [ 134.040306][ T8515] [ 134.050032][ T8515] EXT4-fs (loop8): Total free blocks count 0 [ 134.056110][ T8515] EXT4-fs (loop8): Free/Dirty block details [ 134.062209][ T8515] EXT4-fs (loop8): free_blocks=2415919104 [ 134.068069][ T8515] EXT4-fs (loop8): dirty_blocks=8224 [ 134.073372][ T8515] EXT4-fs (loop8): Block reservation details [ 134.079455][ T8515] EXT4-fs (loop8): i_reserved_data_blocks=514 [ 134.197672][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 134.231811][ T8517] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 134.542516][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 134.576411][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 134.587950][ T8546] tipc: Enabling of bearer rejected, already enabled [ 134.661880][ T8551] loop2: detected capacity change from 0 to 2048 [ 134.674405][ T8551] EXT4-fs: Ignoring removed bh option [ 134.706913][ T8551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.787780][ T8563] loop5: detected capacity change from 0 to 1024 [ 134.801758][ T8563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.839326][ T8563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.953092][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.979407][ T8567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.009715][ T8567] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 135.022131][ T8567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.022131][ T8567] [ 135.031983][ T8567] EXT4-fs (loop2): Total free blocks count 0 [ 135.038060][ T8567] EXT4-fs (loop2): Free/Dirty block details [ 135.043978][ T8567] EXT4-fs (loop2): free_blocks=2415919104 [ 135.049730][ T8567] EXT4-fs (loop2): dirty_blocks=8224 [ 135.055119][ T8567] EXT4-fs (loop2): Block reservation details [ 135.061154][ T8567] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 135.093113][ T8580] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.105118][ T8580] bond0: (slave lo): Error: Device type is different from other slaves [ 135.165973][ T3422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 135.304378][ T8583] tipc: Started in network mode [ 135.309313][ T8583] tipc: Node identity ac14140f, cluster identity 4711 [ 135.340872][ T8583] tipc: New replicast peer: 255.255.255.255 [ 135.347244][ T8583] tipc: Enabled bearer , priority 10 [ 135.369787][ T8585] loop5: detected capacity change from 0 to 2048 [ 135.381999][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 135.384317][ T8585] EXT4-fs: Ignoring removed bh option [ 135.436889][ T8585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.660804][ T8596] loop2: detected capacity change from 0 to 128 [ 135.669940][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 135.729247][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.809766][ T8603] IPv6: syztnl0: Disabled Multicast RS [ 135.874229][ T8594] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.905816][ T8594] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 135.918244][ T8594] EXT4-fs (loop5): This should not happen!! Data will be lost [ 135.918244][ T8594] [ 135.928056][ T8594] EXT4-fs (loop5): Total free blocks count 0 [ 135.934077][ T8594] EXT4-fs (loop5): Free/Dirty block details [ 135.940056][ T8594] EXT4-fs (loop5): free_blocks=2415919104 [ 135.945820][ T8594] EXT4-fs (loop5): dirty_blocks=8224 [ 135.951154][ T8594] EXT4-fs (loop5): Block reservation details [ 135.957241][ T8594] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 135.997701][ T8589] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.009791][ T8589] bond0: (slave lo): Error: Device can not be enslaved while up [ 136.096338][ T5886] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 136.286103][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 136.367057][ T8628] loop2: detected capacity change from 0 to 2048 [ 136.402621][ T8628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.434832][ T8628] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.464861][ T7266] tipc: Node number set to 2886997007 [ 136.673436][ T8624] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 136.843414][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 136.900900][ T8648] loop8: detected capacity change from 0 to 2048 [ 136.909386][ T8648] EXT4-fs: Ignoring removed bh option [ 136.923071][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117 [ 136.935761][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.935761][ T37] [ 136.993209][ T8648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.064579][ T8181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.096810][ T8637] loop7: detected capacity change from 0 to 8192 [ 137.308840][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 137.308856][ T29] audit: type=1400 audit(1740119804.158:6206): avc: denied { write } for pid=8657 comm="syz.7.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.337926][ T8656] hub 6-0:1.0: USB hub found [ 137.343139][ T8656] hub 6-0:1.0: 8 ports detected [ 137.360137][ T8658] loop7: detected capacity change from 0 to 256 [ 137.365808][ T29] audit: type=1326 audit(1740119804.188:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.389982][ T29] audit: type=1326 audit(1740119804.188:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.413560][ T29] audit: type=1326 audit(1740119804.198:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.437166][ T29] audit: type=1326 audit(1740119804.198:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.460593][ T29] audit: type=1326 audit(1740119804.198:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.484086][ T29] audit: type=1326 audit(1740119804.198:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.490091][ T8658] FAT-fs (loop7): Directory bread(block 64) failed [ 137.507449][ T29] audit: type=1326 audit(1740119804.198:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.507484][ T29] audit: type=1326 audit(1740119804.198:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.507525][ T29] audit: type=1326 audit(1740119804.198:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.5.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79acd0d0a9 code=0x7ffc0000 [ 137.587703][ T8658] FAT-fs (loop7): Directory bread(block 65) failed [ 137.595717][ T8654] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.608249][ T8658] FAT-fs (loop7): Directory bread(block 66) failed [ 137.615170][ T8658] FAT-fs (loop7): Directory bread(block 67) failed [ 137.636665][ T8658] FAT-fs (loop7): Directory bread(block 68) failed [ 137.643550][ T8658] FAT-fs (loop7): Directory bread(block 69) failed [ 137.650384][ T8658] FAT-fs (loop7): Directory bread(block 70) failed [ 137.679515][ T8658] FAT-fs (loop7): Directory bread(block 71) failed [ 137.686369][ T8658] FAT-fs (loop7): Directory bread(block 72) failed [ 137.687311][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.692950][ T8658] FAT-fs (loop7): Directory bread(block 73) failed [ 137.760393][ T8678] loop5: detected capacity change from 0 to 2048 [ 137.767091][ T8678] EXT4-fs: Ignoring removed bh option [ 137.784532][ T8682] loop7: detected capacity change from 0 to 764 [ 137.787464][ T8678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.819683][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.829465][ T8682] rock: directory entry would overflow storage [ 137.835761][ T8682] rock: sig=0x4f50, size=4, remaining=3 [ 137.846679][ T8682] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.860955][ T8682] block device autoloading is deprecated and will be removed. [ 137.945981][ T8682] syz.7.1684: attempt to access beyond end of device [ 137.945981][ T8682] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.980115][ T8690] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 138.030663][ T8693] tipc: Enabling of bearer rejected, already enabled [ 138.164197][ T8699] loop2: detected capacity change from 0 to 128 [ 138.418439][ T8714] loop7: detected capacity change from 0 to 2048 [ 138.425149][ T8714] EXT4-fs: Ignoring removed bh option [ 138.451624][ T8716] loop2: detected capacity change from 0 to 1024 [ 138.459100][ T8714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.461318][ T8716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.496432][ T8716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.509704][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.583505][ T8730] Cannot find del_set index 0 as target [ 138.623771][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1703'. [ 138.690560][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.731013][ T8740] loop2: detected capacity change from 0 to 1024 [ 138.740577][ T8740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.770985][ T8740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.938091][ T8756] loop7: detected capacity change from 0 to 512 [ 138.967890][ T8756] journal_path: Non-blockdev passed as './bus' [ 138.974100][ T8756] EXT4-fs: error: could not find journal device path [ 139.001415][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.382681][ T8749] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.394826][ T8749] bond0: (slave lo): Error: Device can not be enslaved while up [ 139.408849][ T8776] loop7: detected capacity change from 0 to 1024 [ 139.440880][ T8774] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 139.524534][ T8776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.644384][ T8776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.870332][ T8798] Cannot find add_set index 0 as target [ 140.195167][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.209027][ T8816] loop2: detected capacity change from 0 to 764 [ 140.215517][ T8816] iso9660: Unknown parameter '/dev/net/tun' [ 140.223350][ T8816] syz.2.1730: attempt to access beyond end of device [ 140.223350][ T8816] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.250802][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 140.288699][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 140.412824][ T8827] hub 6-0:1.0: USB hub found [ 140.433557][ T8827] hub 6-0:1.0: 8 ports detected [ 140.662076][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 141.045108][ T8832] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 141.175395][ T8848] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.187484][ T8848] bond0: (slave lo): Error: Device can not be enslaved while up [ 141.346256][ T8869] 9pnet_fd: Insufficient options for proto=fd [ 141.418741][ T8870] loop2: detected capacity change from 0 to 2048 [ 141.449013][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 141.464779][ T8870] netlink: 'syz.2.1749': attribute type 2 has an invalid length. [ 141.793476][ T8891] loop8: detected capacity change from 0 to 2048 [ 141.805083][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1756'. [ 141.831664][ T8891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.854015][ T8891] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.882225][ T8899] loop5: detected capacity change from 0 to 2048 [ 141.890073][ T8899] EXT4-fs: Ignoring removed bh option [ 141.930080][ T8899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.004156][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.038743][ T8909] tipc: Enabling of bearer rejected, already enabled [ 142.170770][ T37] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 142.177959][ T8919] pim6reg: entered allmulticast mode [ 142.237903][ T8900] loop7: detected capacity change from 0 to 2048 [ 142.237952][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1400 with error 117 [ 142.255225][ T8918] pim6reg: left allmulticast mode [ 142.257082][ T37] EXT4-fs (loop8): This should not happen!! Data will be lost [ 142.257082][ T37] [ 142.317717][ T8922] hub 6-0:1.0: USB hub found [ 142.342784][ T8922] hub 6-0:1.0: 8 ports detected [ 142.463863][ T8900] EXT4-fs: Ignoring removed bh option [ 142.542208][ T8930] loop2: detected capacity change from 0 to 128 [ 142.616442][ T8900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.698299][ T5886] kworker/u8:8: attempt to access beyond end of device [ 142.698299][ T5886] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 142.831077][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 142.920928][ T8942] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 143.157350][ T8928] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.169384][ T8928] bond0: (slave lo): Error: Device type is different from other slaves [ 143.292488][ T5886] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.330671][ T8181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.342735][ T5886] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.355052][ T5886] EXT4-fs (loop7): This should not happen!! Data will be lost [ 143.355052][ T5886] [ 143.364693][ T5886] EXT4-fs (loop7): Total free blocks count 0 [ 143.370839][ T5886] EXT4-fs (loop7): Free/Dirty block details [ 143.377388][ T5886] EXT4-fs (loop7): free_blocks=2415919104 [ 143.383125][ T5886] EXT4-fs (loop7): dirty_blocks=1952 [ 143.388527][ T5886] EXT4-fs (loop7): Block reservation details [ 143.394552][ T5886] EXT4-fs (loop7): i_reserved_data_blocks=122 [ 143.480145][ T8951] tipc: Enabling of bearer rejected, already enabled [ 143.504694][ T1824] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1920 with error 28 [ 143.553560][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 143.553610][ T29] audit: type=1400 audit(1740119810.398:6297): avc: denied { bind } for pid=8954 comm="syz.8.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.569225][ T8958] loop5: detected capacity change from 0 to 1024 [ 143.580118][ T8955] rdma_op ffff888117bd3d80 conn xmit_rdma 0000000000000000 [ 143.612976][ T29] audit: type=1400 audit(1740119810.428:6298): avc: denied { write } for pid=8954 comm="syz.8.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.632444][ T29] audit: type=1400 audit(1740119810.458:6299): avc: denied { map } for pid=8957 comm="syz.5.1776" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.726352][ T8963] tipc: Can't bind to reserved service type 2 [ 143.737207][ T29] audit: type=1400 audit(1740119810.588:6300): avc: denied { ioctl } for pid=8962 comm="syz.0.1777" path="socket:[23891]" dev="sockfs" ino=23891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.820790][ T29] audit: type=1326 audit(1740119810.628:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.8.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc622fdd0a9 code=0x7ffc0000 [ 143.844339][ T29] audit: type=1326 audit(1740119810.628:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.8.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc622fdd0a9 code=0x7ffc0000 [ 143.885348][ T8964] loop5: detected capacity change from 0 to 4096 [ 143.894944][ T8964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.960598][ T8971] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1771'. [ 144.013810][ T8977] loop8: detected capacity change from 0 to 2048 [ 144.030619][ T8977] EXT4-fs: Ignoring removed bh option [ 144.047615][ T8977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.096854][ T8983] loop7: detected capacity change from 0 to 2048 [ 144.145431][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'. [ 144.183743][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.225525][ T8983] EXT4-fs: Ignoring removed bh option [ 144.267809][ T8983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.465224][ T8991] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.508062][ T8991] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 144.520420][ T8991] EXT4-fs (loop8): This should not happen!! Data will be lost [ 144.520420][ T8991] [ 144.530093][ T8991] EXT4-fs (loop8): Total free blocks count 0 [ 144.536099][ T8991] EXT4-fs (loop8): Free/Dirty block details [ 144.542013][ T8991] EXT4-fs (loop8): free_blocks=2415919104 [ 144.547794][ T8991] EXT4-fs (loop8): dirty_blocks=8224 [ 144.553135][ T8991] EXT4-fs (loop8): Block reservation details [ 144.559238][ T8991] EXT4-fs (loop8): i_reserved_data_blocks=514 [ 144.565641][ T8987] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 144.639874][ T6937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.669437][ T29] audit: type=1400 audit(1740119811.508:6303): avc: denied { bind } for pid=9005 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.719287][ T5886] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 144.999335][ T9000] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 145.076759][ T9017] loop7: detected capacity change from 0 to 512 [ 145.107050][ T9017] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 145.119548][ T9017] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.140404][ T9017] EXT4-fs (loop7): mount failed [ 145.140982][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.153935][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.177712][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 145.181569][ T29] audit: type=1400 audit(1740119812.028:6304): avc: denied { map } for pid=9020 comm="syz.2.1793" path="socket:[23970]" dev="sockfs" ino=23970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.195109][ T9021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.209996][ T29] audit: type=1400 audit(1740119812.028:6305): avc: denied { read } for pid=9020 comm="syz.2.1793" path="socket:[23970]" dev="sockfs" ino=23970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.402405][ T9033] loop5: detected capacity change from 0 to 2048 [ 145.409188][ T9033] EXT4-fs: Ignoring removed bh option [ 145.426899][ T9033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.452805][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.496436][ T9038] loop5: detected capacity change from 0 to 2048 [ 145.503142][ T9038] EXT4-fs: Ignoring removed bh option [ 145.524777][ T9038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.537368][ T9045] loop7: detected capacity change from 0 to 2048 [ 145.574676][ T9045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.597888][ T9045] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.890374][ T9054] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.932321][ T9054] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 145.944668][ T9054] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.944668][ T9054] [ 145.954341][ T9054] EXT4-fs (loop5): Total free blocks count 0 [ 145.960367][ T9054] EXT4-fs (loop5): Free/Dirty block details [ 145.966311][ T9054] EXT4-fs (loop5): free_blocks=2415919104 [ 145.972049][ T9054] EXT4-fs (loop5): dirty_blocks=8224 [ 145.977449][ T9054] EXT4-fs (loop5): Block reservation details [ 145.983444][ T9054] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 146.043412][ T1824] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 146.057022][ T9051] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.069042][ T9051] bond0: (slave lo): Error: Device type is different from other slaves [ 146.319783][ T9080] loop5: detected capacity change from 0 to 2048 [ 146.336006][ T9080] EXT4-fs: Ignoring removed bh option [ 146.379399][ T9080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.561101][ T9084] loop2: detected capacity change from 0 to 128 [ 146.630140][ T1824] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 146.641547][ T9086] hub 6-0:1.0: USB hub found [ 146.656701][ T9086] hub 6-0:1.0: 8 ports detected [ 146.676246][ T557] kworker/u8:5: attempt to access beyond end of device [ 146.676246][ T557] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 146.692527][ T1824] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 146.705262][ T1824] EXT4-fs (loop7): This should not happen!! Data will be lost [ 146.705262][ T1824] [ 146.820095][ T9091] futex_wake_op: syz.2.1815 tries to shift op by -1; fix this program [ 146.856208][ T9091] loop2: detected capacity change from 0 to 164 [ 146.890953][ T9070] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.903164][ T9070] bond0: (slave lo): Error: Device can not be enslaved while up [ 146.925265][ T9091] rock: directory entry would overflow storage [ 146.931471][ T9091] rock: sig=0x4f50, size=4, remaining=3 [ 146.937148][ T9091] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.954062][ T9102] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1820'. [ 147.006833][ T9106] loop5: detected capacity change from 0 to 128 [ 147.085446][ T9108] loop2: detected capacity change from 0 to 2048 [ 147.116255][ T9108] EXT4-fs: Ignoring removed bh option [ 147.187475][ T9115] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1823'. [ 147.328195][ T9123] loop8: detected capacity change from 0 to 128 [ 147.557748][ T9120] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.595116][ T9120] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 147.607429][ T9120] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.607429][ T9120] [ 147.617088][ T9120] EXT4-fs (loop2): Total free blocks count 0 [ 147.623083][ T9120] EXT4-fs (loop2): Free/Dirty block details [ 147.629022][ T9120] EXT4-fs (loop2): free_blocks=2415919104 [ 147.634742][ T9120] EXT4-fs (loop2): dirty_blocks=8224 [ 147.640070][ T9120] EXT4-fs (loop2): Block reservation details [ 147.646110][ T9120] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 147.649120][ T9130] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.754132][ T3422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 147.766879][ T3422] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.766879][ T3422] [ 147.915841][ T9125] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.927884][ T9125] bond0: (slave lo): Error: Device can not be enslaved while up [ 148.018102][ T9135] loop2: detected capacity change from 0 to 2048 [ 148.057141][ T9135] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.230230][ T9145] netlink: 388 bytes leftover after parsing attributes in process `syz.8.1832'. [ 148.259885][ T9147] tipc: Enabling of bearer rejected, already enabled [ 148.286193][ T9149] loop8: detected capacity change from 0 to 128 [ 148.315947][ T3422] kworker/u8:7: attempt to access beyond end of device [ 148.315947][ T3422] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 148.342945][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 148.362455][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117 [ 148.375240][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.375240][ T37] [ 148.396939][ T9153] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1836'. [ 148.410390][ T9155] FAULT_INJECTION: forcing a failure. [ 148.410390][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 148.423132][ T9155] CPU: 0 UID: 0 PID: 9155 Comm: syz.8.1837 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 148.423205][ T9155] Tainted: [W]=WARN [ 148.423212][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.423224][ T9155] Call Trace: [ 148.423231][ T9155] [ 148.423238][ T9155] dump_stack_lvl+0xf2/0x150 [ 148.423282][ T9155] dump_stack+0x15/0x1a [ 148.423303][ T9155] should_fail_ex+0x24a/0x260 [ 148.423338][ T9155] should_failslab+0x8f/0xb0 [ 148.423451][ T9155] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 148.423477][ T9155] ? alloc_inode+0x6a/0x160 [ 148.423588][ T9155] ? __rcu_read_unlock+0x4e/0x70 [ 148.423671][ T9155] alloc_inode+0x6a/0x160 [ 148.423700][ T9155] iget_locked+0xf2/0x5d0 [ 148.423803][ T9155] ? __list_add_valid_or_report+0x38/0xe0 [ 148.423837][ T9155] ? down_read+0x171/0x4b0 [ 148.423928][ T9155] ? shrinker_register+0x106/0x130 [ 148.424001][ T9155] kernfs_get_inode+0x2e/0x350 [ 148.424027][ T9155] kernfs_get_tree+0x2de/0x470 [ 148.424056][ T9155] sysfs_get_tree+0x25/0xa0 [ 148.424097][ T9155] vfs_get_tree+0x56/0x1e0 [ 148.424173][ T9155] do_new_mount+0x227/0x690 [ 148.424212][ T9155] path_mount+0x49b/0xb30 [ 148.424246][ T9155] __se_sys_mount+0x27f/0x2d0 [ 148.424316][ T9155] ? fput+0x1c4/0x200 [ 148.424342][ T9155] __x64_sys_mount+0x67/0x80 [ 148.424485][ T9155] x64_sys_call+0x2c84/0x2dc0 [ 148.424510][ T9155] do_syscall_64+0xc9/0x1c0 [ 148.424538][ T9155] ? clear_bhb_loop+0x55/0xb0 [ 148.424571][ T9155] ? clear_bhb_loop+0x55/0xb0 [ 148.424668][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.424699][ T9155] RIP: 0033:0x7fc622fdd0a9 [ 148.424713][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.424753][ T9155] RSP: 002b:00007fc621647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.424775][ T9155] RAX: ffffffffffffffda RBX: 00007fc6231f5fa0 RCX: 00007fc622fdd0a9 [ 148.424869][ T9155] RDX: 0000400000000040 RSI: 0000400000000080 RDI: 0000000000000000 [ 148.424894][ T9155] RBP: 00007fc621647090 R08: 0000000000000000 R09: 0000000000000000 [ 148.424907][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.424934][ T9155] R13: 0000000000000000 R14: 00007fc6231f5fa0 R15: 00007ffd38039fb8 [ 148.425015][ T9155] [ 148.737772][ T1824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1032 with max blocks 888 with error 28 [ 148.750441][ T1824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.750441][ T1824] [ 148.760191][ T1824] EXT4-fs (loop2): Total free blocks count 0 [ 148.766213][ T1824] EXT4-fs (loop2): Free/Dirty block details [ 148.772119][ T1824] EXT4-fs (loop2): free_blocks=0 [ 148.777084][ T1824] EXT4-fs (loop2): dirty_blocks=896 [ 148.782309][ T1824] EXT4-fs (loop2): Block reservation details [ 148.788417][ T1824] EXT4-fs (loop2): i_reserved_data_blocks=56 [ 148.844589][ T9167] loop8: detected capacity change from 0 to 128 [ 148.863406][ T9162] ================================================================== [ 148.871521][ T9162] BUG: KCSAN: data-race in getrusage / try_to_migrate_one [ 148.878649][ T9162] [ 148.880974][ T9162] write to 0xffff8881385deef8 of 8 bytes by task 9151 on cpu 1: [ 148.888606][ T9162] try_to_migrate_one+0x795/0x12e0 [ 148.893724][ T9162] rmap_walk_anon+0x28f/0x440 [ 148.898405][ T9162] try_to_migrate+0x11f/0x150 [ 148.903089][ T9162] migrate_pages_batch+0x786/0x1930 [ 148.908313][ T9162] migrate_pages+0xf02/0x1840 [ 148.913004][ T9162] __se_sys_mbind+0xfd1/0x11c0 [ 148.917773][ T9162] __x64_sys_mbind+0x78/0x90 [ 148.922369][ T9162] x64_sys_call+0x2662/0x2dc0 [ 148.927058][ T9162] do_syscall_64+0xc9/0x1c0 [ 148.931741][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.937751][ T9162] [ 148.940084][ T9162] read to 0xffff8881385deef8 of 8 bytes by task 9162 on cpu 0: [ 148.947636][ T9162] getrusage+0xa15/0xb70 [ 148.951920][ T9162] io_sq_thread+0x5f9/0x1100 [ 148.956526][ T9162] ret_from_fork+0x4b/0x60 [ 148.960950][ T9162] ret_from_fork_asm+0x1a/0x30 [ 148.965727][ T9162] [ 148.968050][ T9162] value changed: 0x00000000000025dc -> 0x000000000000265c [ 148.975186][ T9162] [ 148.977505][ T9162] Reported by Kernel Concurrency Sanitizer on: [ 148.983655][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: iou-sqp-9151 Tainted: G W 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 148.996073][ T9162] Tainted: [W]=WARN [ 148.999876][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 149.009936][ T9162] ================================================================== [ 149.030937][ T9169] bond0: (slave lo): Error: Device is in use and cannot be enslaved