last executing test programs: 1m59.641410094s ago: executing program 3 (id=7450): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x275, &(0x7f0000000600)="$eJzs3MFrI1UYAPBv092222U3PYigID70opewW/+CILsgFpS6EfUgzNqpho5JycRKRNy9efXvWDx6E9R/oBdv3sVLEQQvexAjm3RsWgLbSmuq+f0gzJd58+W9mcyEbwby9t/56uPtrbKxlfWjtpyiFvEgHkWsPo4OXJpYXorFmPQgXr72+0/PvfXue68319dvb6R0p3n3lbWU0o3nv/v0869f+KF/7e1vbny7FHur7+//tvbz3tN7z+z/ebf69G4/Zelet9vP7hV52myX242U3izyrMxTu1PmvSPtW0V3Z2eQss7m9ZWdXl6WKesM0nY+SP1u6vcGKfswa3dSo9FI11di3iycOqP1cGMja57LYJiFq9NW9nrNbGFqY+vhvzEoAOBiOU39XzvD+v+jdpnaZeo8qf6vhfr//Kj/58Hj+n/l4Po9Sv0PAAAAAAAAAAAAAAD/BY+Gw/pwOKxXy+q1FBHLEVG9n/U4OR++//k28ce95Yjiy93Wbmu8HLc3t6IdReRx80rEH6Pz4cA4vvPa+u2baWQxvi/uH+Tf320txFKVX1mdnn9rnJ+O5l+Jlcn+16IeT03PX5uavxgvvTiR34h6/PhBdKOIzdF5fZj/xa2UXn1j/Vj+1dF2AAAA8H/QSH9bPX7/PmpvpGrakGPt45WHzwei/oTnA8fury/Hs5dnt98AAAAwT8rBZ9tZUeQ9wekCh+7cg1pEzKj3XyPiYhyEMw1++WR81Z9k41n/MgEAAGftsOif9UgAAAAAAAAAAAAAAAAAAABgfp108rBq+38y99hEdwuz2UsAAAAAAAAAAAAAAAAAAAAAAAC4GP4KAAD//3FlIUA=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mm_page_alloc\x00', r0, 0x0, 0x81}, 0x18) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000894) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) shmget$private(0x0, 0x1000, 0x80, &(0x7f000064c000/0x1000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000"], 0x40}}, 0x4000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) 1m58.627053419s ago: executing program 3 (id=7466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) link(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x1b7e, 0x0, &(0x7f0000000000), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00'}, 0x18) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 1m58.55488614s ago: executing program 3 (id=7467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 1m58.419265093s ago: executing program 3 (id=7470): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x0, 0x30, 0x5f, 0x5cd4c45d0f3b5681, 0x2e, 0x5f]}}, &(0x7f0000000340)=""/117, 0x2e, 0x75, 0x1, 0x9, 0x10000, @value=r3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='napi_poll\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r1}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x210000}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') fchown(r5, 0x0, 0xee01) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x3, 0xc, 0x0, 0x70bd29, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xe0, @empty, 0xfffff000}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}]}, 0x60}}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m58.271888635s ago: executing program 3 (id=7477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1m57.600468865s ago: executing program 3 (id=7483): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1m57.565956476s ago: executing program 32 (id=7483): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3.404994687s ago: executing program 5 (id=9366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x275, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mm_page_alloc\x00', r0, 0x0, 0x81}, 0x18) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000894) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) shmget$private(0x0, 0x1000, 0x80, &(0x7f000064c000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000"], 0x40}}, 0x4000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) 2.816670927s ago: executing program 5 (id=9374): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="6500040000000000006e74696e75652c757466383d302c757365667265652c73798163696d6d757461626c652c757466383d312c756e695f786c6174653d302e73686f72746e616d653d6d697865642c757466383d312c756e695f786c6174653d302c00cfd109124d5f72cb4bb0f03a162954d96f96c148e3d8e6ce50c12b188a912526a9d89572c0a398cf2e1cec83ca308e68ce64a70c63b7358168a94adc225b9c622d129266b7707c9f0589ed8ec0e9842f3b867185b3567fb1740e17e869ee2ffd0d079dfc447cea2c35c65a929c1f438f0934484b549fc3a9317757878595bd9f56648c4328817644803bd9bd305b39f2faf7af15b078187a49968de0775f0b0b6ffe"], 0x0, 0x275, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mm_page_alloc\x00', r0, 0x0, 0x81}, 0x18) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000894) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) shmget$private(0x0, 0x1000, 0x80, &(0x7f000064c000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000"], 0x40}}, 0x4000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) 2.381278473s ago: executing program 0 (id=9377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="6500040000000000006e74696e75652c757466383d302c757365667265652c73798163696d6d757461626c652c757466383d312c756e695f786c6174653d302e73686f72746e616d653d6d697865642c757466383d312c756e695f786c6174653d302c00cfd109124d5f72cb4bb0f03a162954d96f96c148e3d8e6ce50c12b188a912526a9d89572c0a398cf2e1cec83ca308e68ce64a70c63b7358168a94adc225b9c622d129266b7707c9f0589ed8ec0e9842f3b867185b3567fb1740e17e869ee2ffd0d079dfc447cea2c35c65a929c1f438f0934484b549fc3a9317757878595bd9f56648c4328817644803bd9bd305b39f2faf7af15b078187a49968de0775f0b0b6ffe"], 0x0, 0x275, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mm_page_alloc\x00', r0, 0x0, 0x81}, 0x18) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) shmget$private(0x0, 0x1000, 0x80, &(0x7f000064c000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000"], 0x40}}, 0x4000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) 1.856962931s ago: executing program 0 (id=9381): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x4}, 0x2018, 0x40000, 0x0, 0x4, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, '/dev\a\x00\x00\x00p#\x01'}}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x3, 0x2, 0x4, 0x5, 0xb, 0x30, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5b8b97c9}, @generic={0xd, 0x8, 0x1, 0x4, 0x8000}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x0, 0x5, 0xc, 0xc}, {0x1, 0x5, 0xe, 0x5}, {0x0, 0x3, 0xf, 0x4}, {0x3, 0x4, 0xb, 0xa}, {0x2, 0x2, 0xe, 0x8}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0xe263, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000e00)='kfree\x00', r8, 0x0, 0x9}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r9, @ANYBLOB="0107000000000001000100000000000003"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)) getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.856257961s ago: executing program 4 (id=9382): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095", @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r6, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x48, 0x0, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) 1.738983293s ago: executing program 4 (id=9383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x884) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffff7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) close_range(r2, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.682374304s ago: executing program 0 (id=9384): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000010c0)={[{@grpquota}, {@dioread_lock}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mknod$loop(0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f0000000f80)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimensat(r0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)={{r5, r6/1000+10000}, {r7, r8/1000+60000}}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) 1.642997734s ago: executing program 5 (id=9385): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x0, r1}, 0x18) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1.480446017s ago: executing program 4 (id=9388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000000000000702d493f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.478207207s ago: executing program 0 (id=9389): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70ad29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xf1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) keyctl$reject(0x13, 0x0, 0xfffffffffffffff3, 0x201, 0x0) utimes(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x732a) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 1.411033508s ago: executing program 4 (id=9391): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x2, 0x49, 0x75, 0x7fff}, {0x401, 0x3, 0x3, 0x1}, {0x5, 0x78, 0xd4, 0x101}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r1}, 0x38) 1.359199608s ago: executing program 0 (id=9393): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x800000000003}, 0x109944, 0x8, 0x1, 0x8, 0x10000000000002, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffeffffffffffc, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) personality(0x400000d) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="0548f8fff0ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000076f6cabb1aadbc73ec20e8049d21fe6fb50b3f5e8e07e712deebb1f82da4e2b05fce9dba364a4f7c3d9e6c47fd7cd9da177331eff7f026fe0c2c22e0e38c0c5d669347816e73d3d839c936452276380e3994480c24c2396e341897dcf8b52ad6888e03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x15) r6 = dup(r5) syz_read_part_table(0x5e6, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500080000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x10) write$P9_RLERRORu(r6, &(0x7f0000000680)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=r7, @ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYBLOB="40a9c5f9e6089f44af8bb8418698d19540e44122f7d3199903a102ed506d6ab4fde7afa6c098942461c3fe77294be82c66c2f7ce1c6821f6aac644feb02e7b8ae82164a0e5"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16}]}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf250100000018216ded116caafd8a02b7dffeb469818cd228a8e0be56795ff8209444f217805e03f5d5966eda3ab5d08045f31e142af94dffffffff932ff710774aedbdeab7b56421b03edf4da1f89d564a1659cfc9115dbb2c07f3aadf09d528df3a4202474d51f1e731f7cdbcdeab7365f9dbbf615638b0766fecb3d1e7eb862edabe1692ae5fd616033ae249064313319e3e1f2d6200"/172], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.143454812s ago: executing program 4 (id=9396): r0 = epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00\a\a_x\xba\'M8#\xcc\x93t\x02he6\x1e\x00\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000007c0), &(0x7f0000000580)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) set_tid_address(0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90020000060a0b04000000000000000002000000400204803c0201800a0001006d617463680000002c020280080002400000000115020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f146334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f8700000008000100627066000900010073797a30000000000900020073797a32"], 0x2b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) socket(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="01abfd94b8000000000e00000000000070000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f3da98b8bd966481d8067354bb2866633fad8dcb48f003ce3db30d6b53ae2625d1ebeb9a563b47d67092612bdafdeac3bbaaac22655c851a99c55adc446c02b5a62f597f71780157bd69ba806ea3e1549e390a3f97e61d9432c80f639db577d096716", @ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) 998.723834ms ago: executing program 2 (id=9399): r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r6, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x48, 0x0, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) 961.474135ms ago: executing program 0 (id=9400): syz_mount_image$ext4(&(0x7f0000001280)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000001c00), 0x1, 0x525, &(0x7f00000016c0)="$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") getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xf7}, 0x18) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e74657200"], 0xc8}}, 0x20050800) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000841) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000000c0)=@abs={0x1}, 0x6e) unshare(0x22010480) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') 737.279808ms ago: executing program 2 (id=9403): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70ad29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xf1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) keyctl$reject(0x13, 0x0, 0xfffffffffffffff3, 0x201, 0x0) utimes(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x732a) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 683.475689ms ago: executing program 5 (id=9404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getrlimit(0x0, 0x0) 670.081769ms ago: executing program 1 (id=9405): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x4}, 0x2018, 0x40000, 0x0, 0x4, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, '/dev\a\x00\x00\x00p#\x01'}}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x3, 0x2, 0x4, 0x5, 0xb, 0x30, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5b8b97c9}, @generic={0xd, 0x8, 0x1, 0x4, 0x8000}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x0, 0x5, 0xc, 0xc}, {0x1, 0x5, 0xe, 0x5}, {0x0, 0x3, 0xf, 0x4}, {0x3, 0x4, 0xb, 0xa}, {0x2, 0x2, 0xe, 0x8}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0xe263, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000e00)='kfree\x00', r8, 0x0, 0x9}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r9, @ANYBLOB="0107000000000001000100000000000003"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)) getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 637.66509ms ago: executing program 2 (id=9406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xfe, 0x0}, 0x10) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 541.258201ms ago: executing program 5 (id=9407): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r1}, 0x38) 517.460632ms ago: executing program 1 (id=9408): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 431.902313ms ago: executing program 1 (id=9409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r6, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x48, 0x0, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) 424.732863ms ago: executing program 2 (id=9410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) 345.020944ms ago: executing program 2 (id=9411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000340)={[], [{@uid_lt={'uid<', r2}}, {@fowner_lt={'fowner<', r2}}]}, 0xfb, 0x531, &(0x7f0000000640)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x80, 0x1, 0x6, {{0x25, 0x4, 0x3, 0x8, 0x94, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0x44, 0x10, "4ae06d6fd8e161e90c0add64efdf"}, @lsrr={0x83, 0x7, 0xdd, [@local]}, @generic={0x86, 0xc, "e40259be15d808d4b82a"}, @noop, @timestamp_addr={0x44, 0x14, 0x79, 0x1, 0x7, [{@empty, 0xb}, {@multicast1, 0x5}]}, @timestamp={0x44, 0xc, 0x6e, 0x0, 0x1, [0xbbd, 0xae8]}, @ssrr={0x89, 0x27, 0xb4, [@private=0xa010100, @local, @multicast2, @broadcast, @empty, @remote, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x9, [{@local}]}, @generic={0x44, 0x6, "b187119a"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000280)=0x2) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 314.773294ms ago: executing program 5 (id=9412): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 306.853155ms ago: executing program 1 (id=9413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = dup3(r1, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX=r3]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r2, &(0x7f0000000f80)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="b1e4ef1ad9c9196863e097e071cf171b33fe284d24620c005afa2c786187d68d0f406f33e96ebd20bcfbab3487de982fdd60209f7c8ab496fd2ff7865eb6ea15a24ab515412798ce1093d239a6c9feaa79c41904a6b163b30add4df33cda22ac063e49665e327ee702fe27784fde9562b1cc65d1cef73be0de1551f264256413b474", 0x82}], 0x1, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x148, 0x4000040}, 0x4) 252.669456ms ago: executing program 1 (id=9414): r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r6, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x48, 0x0, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) 236.076606ms ago: executing program 4 (id=9415): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x0, r1}, 0x18) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 97.202268ms ago: executing program 2 (id=9416): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="95860000090002002400128009000100626f6e640000000014000280050010007f00003508004e530f0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000c010}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 1 (id=9417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getrlimit(0x0, 0x0) kernel console output (not intermixed with test programs): 9-0:1.0: 8 ports detected [ 651.485892][T30820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.513523][T30824] loop0: detected capacity change from 0 to 2048 [ 651.540709][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.541925][T30824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.642993][T30830] loop1: detected capacity change from 0 to 512 [ 651.658326][T30828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=30828 comm=syz.5.9020 [ 651.688289][T30830] ext4: Unknown parameter 'uid<00000000000000000000' [ 651.714538][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.724500][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.734346][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.744145][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.754195][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.763998][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.773899][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.783679][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.793591][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.803377][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.813530][T30828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.823379][T30828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.858092][T30828] macsec1: entered promiscuous mode [ 651.863438][T30828] dummy0: entered promiscuous mode [ 651.880237][T30828] dummy0: left promiscuous mode [ 651.888567][T30832] netem: change failed [ 651.906803][T30836] netlink: 'syz.4.9023': attribute type 13 has an invalid length. [ 651.938540][T30836] smc: net device bond0 applied user defined pnetid SYZ0 [ 651.947259][T30836] smc: net device bond0 erased user defined pnetid SYZ0 [ 651.955895][ T8507] unregister_netdevice: waiting for batadv0 to become free. Usage count = 4 [ 652.006464][T30838] netlink: 'syz.1.9024': attribute type 13 has an invalid length. [ 652.027672][T30838] smc: net device bond0 applied user defined pnetid SYZ0 [ 652.036548][T30838] smc: net device bond0 erased user defined pnetid SYZ0 [ 652.072409][T30840] loop5: detected capacity change from 0 to 2048 [ 652.116655][T30840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.131285][T30846] netlink: 'syz.1.9027': attribute type 6 has an invalid length. [ 652.342488][T30857] FAULT_INJECTION: forcing a failure. [ 652.342488][T30857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.355764][T30857] CPU: 0 UID: 0 PID: 30857 Comm: syz.4.9029 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 652.355826][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.355840][T30857] Call Trace: [ 652.355848][T30857] [ 652.355872][T30857] dump_stack_lvl+0xf6/0x150 [ 652.355922][T30857] dump_stack+0x15/0x1a [ 652.356085][T30857] should_fail_ex+0x261/0x270 [ 652.356188][T30857] should_fail+0xb/0x10 [ 652.356213][T30857] should_fail_usercopy+0x1a/0x20 [ 652.356244][T30857] strncpy_from_user+0x25/0x230 [ 652.356268][T30857] path_getxattrat+0xb8/0x2a0 [ 652.356306][T30857] __x64_sys_fgetxattr+0x5b/0x70 [ 652.356364][T30857] x64_sys_call+0x26e9/0x2e10 [ 652.356387][T30857] do_syscall_64+0xc9/0x1c0 [ 652.356527][T30857] ? clear_bhb_loop+0x25/0x80 [ 652.356550][T30857] ? clear_bhb_loop+0x25/0x80 [ 652.356572][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.356594][T30857] RIP: 0033:0x7fd67b97d169 [ 652.356634][T30857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.356654][T30857] RSP: 002b:00007fd679fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 652.356674][T30857] RAX: ffffffffffffffda RBX: 00007fd67bb95fa0 RCX: 00007fd67b97d169 [ 652.356686][T30857] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 652.356699][T30857] RBP: 00007fd679fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 652.356760][T30857] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 652.356772][T30857] R13: 0000000000000001 R14: 00007fd67bb95fa0 R15: 00007ffe84c54e98 [ 652.356791][T30857] [ 652.566831][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.587796][T21642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.598528][T30861] loop4: detected capacity change from 0 to 512 [ 652.651395][T30861] EXT4-fs (loop4): orphan cleanup on readonly fs [ 652.694882][T30861] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 652.699322][T30867] hub 9-0:1.0: USB hub found [ 652.716212][T30867] hub 9-0:1.0: 8 ports detected [ 652.719874][T30861] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 652.737226][T30861] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.9031: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 652.773264][T30861] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.9031: couldn't read orphan inode 13 (err -117) [ 652.797796][T30861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.810669][T30849] chnl_net:caif_netlink_parms(): no params data found [ 652.868311][T30873] loop2: detected capacity change from 0 to 512 [ 652.868748][T30849] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.874795][T30873] ext4: Unknown parameter 'uid<00000000000000000000' [ 652.881679][T30849] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.889823][T30849] bridge_slave_0: entered allmulticast mode [ 652.902656][T30849] bridge_slave_0: entered promiscuous mode [ 652.910323][T30849] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.918147][T30849] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.925904][T30849] bridge_slave_1: entered allmulticast mode [ 652.933256][T30849] bridge_slave_1: entered promiscuous mode [ 652.955896][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.993198][T30849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.016237][T30849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.026609][T30883] netem: change failed [ 653.032476][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.092516][T30886] netlink: 'syz.5.9038': attribute type 13 has an invalid length. [ 653.095050][T30849] team0: Port device team_slave_0 added [ 653.125191][T30849] team0: Port device team_slave_1 added [ 653.151119][T30886] smc: net device bond0 applied user defined pnetid SYZ0 [ 653.175889][T30886] smc: net device bond0 erased user defined pnetid SYZ0 [ 653.176503][T30849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.189869][T30849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.215866][T30849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.241409][T30892] syzkaller1: entered promiscuous mode [ 653.247031][T30892] syzkaller1: entered allmulticast mode [ 653.260143][T30892] netlink: 'syz.5.9040': attribute type 1 has an invalid length. [ 653.288028][T30892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.296455][T30849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.303431][T30849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.329436][T30849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.350690][T30899] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 653.352854][T30892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.379217][T30892] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 653.398583][T30892] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 653.416670][T30897] bond0: entered promiscuous mode [ 653.421901][T30897] bond_slave_0: entered promiscuous mode [ 653.426530][T30908] loop2: detected capacity change from 0 to 512 [ 653.428426][T30897] bond_slave_1: entered promiscuous mode [ 653.442751][T30897] batadv0: entered promiscuous mode [ 653.444864][T30908] EXT4-fs (loop2): orphan cleanup on readonly fs [ 653.448887][T30897] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 653.455042][T30908] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 653.464334][T30897] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 653.465856][T30897] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 653.486480][T30908] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 653.503748][T30908] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.9046: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 653.522235][T30897] bond0: left promiscuous mode [ 653.522416][T30908] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.9046: couldn't read orphan inode 13 (err -117) [ 653.527148][T30897] bond_slave_0: left promiscuous mode [ 653.543692][T30908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.544417][T30897] bond_slave_1: left promiscuous mode [ 653.564909][T30897] batadv0: left promiscuous mode [ 653.591755][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.617943][T30849] hsr_slave_0: entered promiscuous mode [ 653.624305][T30849] hsr_slave_1: entered promiscuous mode [ 653.634531][T30849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.644833][T30849] Cannot create hsr debugfs directory [ 653.696906][T30916] siw: device registration error -23 [ 653.715068][T30913] loop4: detected capacity change from 0 to 764 [ 653.736435][T30913] rock: directory entry would overflow storage [ 653.742637][T30913] rock: sig=0x4654, size=5, remaining=4 [ 653.768752][T30920] loop5: detected capacity change from 0 to 512 [ 653.770441][T30923] loop0: detected capacity change from 0 to 512 [ 653.782304][T30920] ext4: Unknown parameter 'uid<00000000000000000000' [ 653.783556][T30923] ext4: Unknown parameter 'uid<00000000000000000000' [ 653.827667][T30926] loop2: detected capacity change from 0 to 512 [ 653.838992][T30926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 653.860570][T30927] netem: change failed [ 653.899329][T30926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.919274][T30926] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 653.960120][T30933] loop4: detected capacity change from 0 to 2048 [ 653.992945][T30935] loop5: detected capacity change from 0 to 512 [ 654.000425][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.015313][T30933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.028376][T30935] EXT4-fs (loop5): orphan cleanup on readonly fs [ 654.039238][T30935] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 654.060148][T30935] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 654.074571][T30935] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.9056: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 654.105732][T30935] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9056: couldn't read orphan inode 13 (err -117) [ 654.124287][T30935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.136946][T30849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.148147][T30849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.174100][T30849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.185127][T30849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.185313][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.405185][T30949] bond4: entered promiscuous mode [ 654.429721][T30949] bond4: entered allmulticast mode [ 654.447997][T30949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.499684][T30959] loop2: detected capacity change from 0 to 512 [ 654.521099][T30959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 654.549411][T30949] bond4 (unregistering): Released all slaves [ 654.561160][T30959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.574516][T30959] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 654.625131][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.695438][T30960] syzkaller1: entered promiscuous mode [ 654.701100][T30960] syzkaller1: entered allmulticast mode [ 654.783324][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.791038][T30849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.817049][T30849] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.831750][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.838964][ T8488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.852154][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.859266][ T8488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.914359][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 654.914377][ T29] audit: type=1326 audit(1744621234.629:64207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 654.919831][T30849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.924902][ T29] audit: type=1326 audit(1744621234.649:64208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 654.944234][T30849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.993635][T30975] loop2: detected capacity change from 0 to 512 [ 654.999612][T30979] loop0: detected capacity change from 0 to 512 [ 655.013694][T30979] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 655.030375][ T29] audit: type=1326 audit(1744621234.719:64209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 655.054740][ T29] audit: type=1326 audit(1744621234.719:64210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d7baed1a3 code=0x7ffc0000 [ 655.079243][ T29] audit: type=1326 audit(1744621234.719:64211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d7baebc1f code=0x7ffc0000 [ 655.091557][T30975] EXT4-fs (loop2): orphan cleanup on readonly fs [ 655.102656][ T29] audit: type=1326 audit(1744621234.719:64212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d7baed1f7 code=0x7ffc0000 [ 655.102694][ T29] audit: type=1326 audit(1744621234.719:64213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d7baebad0 code=0x7ffc0000 [ 655.119615][T30975] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 655.133140][ T29] audit: type=1326 audit(1744621234.719:64214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7baecd6b code=0x7ffc0000 [ 655.133174][ T29] audit: type=1326 audit(1744621234.729:64215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d7baebdca code=0x7ffc0000 [ 655.192582][T30849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.196461][ T29] audit: type=1326 audit(1744621234.729:64216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.2.9068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d7baebdca code=0x7ffc0000 [ 655.252439][T30975] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 655.271112][T30975] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.9068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 655.299101][T30979] EXT4-fs (loop0): 1 truncate cleaned up [ 655.305237][T30979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.333817][T30975] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.9068: couldn't read orphan inode 13 (err -117) [ 655.382890][T30975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.421435][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.431418][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.441365][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.451310][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.461243][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.471036][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.480943][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.490776][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.500645][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.510565][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.520598][T30993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 655.530443][T30993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.562893][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.574706][T30972] loop5: detected capacity change from 0 to 512 [ 655.604558][T30979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.609311][T30849] veth0_vlan: entered promiscuous mode [ 655.613872][T30979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.627921][T31002] loop2: detected capacity change from 0 to 128 [ 655.628869][T30849] veth1_vlan: entered promiscuous mode [ 655.634556][T31002] vfat: Unknown parameter 'e' [ 655.671006][T30849] veth0_macvtap: entered promiscuous mode [ 655.706698][T31002] __nla_validate_parse: 3 callbacks suppressed [ 655.706717][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9074'. [ 655.722103][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9074'. [ 655.732927][T30849] veth1_macvtap: entered promiscuous mode [ 655.746863][T31007] FAULT_INJECTION: forcing a failure. [ 655.746863][T31007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.752183][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.760642][T31007] CPU: 1 UID: 0 PID: 31007 Comm: syz.4.9075 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 655.760704][T31007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 655.760720][T31007] Call Trace: [ 655.760728][T31007] [ 655.760736][T31007] dump_stack_lvl+0xf6/0x150 [ 655.760767][T31007] dump_stack+0x15/0x1a [ 655.760829][T31007] should_fail_ex+0x261/0x270 [ 655.760864][T31007] should_fail+0xb/0x10 [ 655.760894][T31007] should_fail_usercopy+0x1a/0x20 [ 655.760937][T31007] _copy_from_user+0x1c/0xa0 [ 655.761022][T31007] copy_msghdr_from_user+0x54/0x2b0 [ 655.761068][T31007] ? __fget_files+0x186/0x1c0 [ 655.761098][T31007] __sys_sendmsg+0x141/0x240 [ 655.761153][T31007] __x64_sys_sendmsg+0x46/0x50 [ 655.761204][T31007] x64_sys_call+0x26f3/0x2e10 [ 655.761233][T31007] do_syscall_64+0xc9/0x1c0 [ 655.761270][T31007] ? clear_bhb_loop+0x25/0x80 [ 655.761297][T31007] ? clear_bhb_loop+0x25/0x80 [ 655.761325][T31007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.761381][T31007] RIP: 0033:0x7fd67b97d169 [ 655.761401][T31007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.761424][T31007] RSP: 002b:00007fd679fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.761447][T31007] RAX: ffffffffffffffda RBX: 00007fd67bb95fa0 RCX: 00007fd67b97d169 [ 655.761463][T31007] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 655.761480][T31007] RBP: 00007fd679fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 655.761495][T31007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.761510][T31007] R13: 0000000000000000 R14: 00007fd67bb95fa0 R15: 00007ffe84c54e98 [ 655.761547][T31007] [ 655.944631][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.954483][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.964957][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.974831][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.985291][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.995222][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.005852][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.015734][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.026288][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.036310][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.046773][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.056803][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.067276][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.077398][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.087934][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.097843][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.108436][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.118329][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.128869][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.142097][T30849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.144791][T30972] EXT4-fs (loop5): 1 orphan inode deleted [ 656.151042][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.165946][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.176180][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.186956][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.197036][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.207627][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.217477][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.227921][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.237758][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.248288][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.258144][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.268624][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.278520][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.288995][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.298855][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.309325][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.319212][T30849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.322940][T31015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31015 comm=syz.4.9076 [ 656.329677][T30849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.353276][ T8488] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 656.398043][T30972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.416245][T30849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.423936][T31014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9076'. [ 656.447125][T30849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.456032][T30849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.464855][T30849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.473598][T30849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.488166][T30972] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.544847][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.602783][T31022] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 656.704315][T31027] loop4: detected capacity change from 0 to 128 [ 656.719712][T31020] bond4: entered promiscuous mode [ 656.727242][T31020] bond4: entered allmulticast mode [ 656.732865][T31029] loop1: detected capacity change from 0 to 1024 [ 656.736255][T31020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.741683][T31027] vfat: Unknown parameter 'e' [ 656.760944][T31031] loop2: detected capacity change from 0 to 2048 [ 656.771774][T31029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.785883][T31027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9081'. [ 656.794767][T31027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9081'. [ 656.812242][T31020] bond4 (unregistering): Released all slaves [ 656.827316][T31031] Alternate GPT is invalid, using primary GPT. [ 656.833592][T31031] loop2: p1 p2 p3 [ 656.852727][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.889735][T21642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.951255][T31037] loop1: detected capacity change from 0 to 2048 [ 656.962545][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 656.972347][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.982188][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 656.992643][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.002623][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.012372][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.022876][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.032782][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.042638][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.053100][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.063015][T31035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.072865][T31035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.085083][T31035] macsec1: entered promiscuous mode [ 657.090421][T31035] dummy0: entered promiscuous mode [ 657.105770][T31035] dummy0: left promiscuous mode [ 657.110784][T31044] loop0: detected capacity change from 0 to 512 [ 657.117604][T31044] ext4: Unknown parameter 'uid<00000000000000000000' [ 657.119383][T31037] Alternate GPT is invalid, using primary GPT. [ 657.130689][T31037] loop1: p1 p2 p3 [ 657.150994][T31046] loop4: detected capacity change from 0 to 512 [ 657.189867][T31051] FAULT_INJECTION: forcing a failure. [ 657.189867][T31051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.203720][T31051] CPU: 1 UID: 0 PID: 31051 Comm: syz.5.9090 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 657.203790][T31051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.203803][T31051] Call Trace: [ 657.203810][T31051] [ 657.203819][T31051] dump_stack_lvl+0xf6/0x150 [ 657.203853][T31051] dump_stack+0x15/0x1a [ 657.203885][T31051] should_fail_ex+0x261/0x270 [ 657.203919][T31051] should_fail+0xb/0x10 [ 657.203945][T31051] should_fail_usercopy+0x1a/0x20 [ 657.204001][T31051] _copy_to_user+0x20/0xa0 [ 657.204044][T31051] simple_read_from_buffer+0xb2/0x130 [ 657.204075][T31051] proc_fail_nth_read+0x103/0x140 [ 657.204166][T31051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.204188][T31051] vfs_read+0x1b2/0x710 [ 657.204222][T31051] ? __rcu_read_unlock+0x4e/0x70 [ 657.204257][T31051] ? __fget_files+0x186/0x1c0 [ 657.204280][T31051] ksys_read+0xeb/0x1b0 [ 657.204309][T31051] __x64_sys_read+0x42/0x50 [ 657.204447][T31051] x64_sys_call+0x2a3b/0x2e10 [ 657.204469][T31051] do_syscall_64+0xc9/0x1c0 [ 657.204626][T31051] ? clear_bhb_loop+0x25/0x80 [ 657.204721][T31051] ? clear_bhb_loop+0x25/0x80 [ 657.204742][T31051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.204767][T31051] RIP: 0033:0x7fb8f09abb7c [ 657.204784][T31051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 657.204807][T31051] RSP: 002b:00007fb8ef017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 657.204833][T31051] RAX: ffffffffffffffda RBX: 00007fb8f0bc5fa0 RCX: 00007fb8f09abb7c [ 657.204899][T31051] RDX: 000000000000000f RSI: 00007fb8ef0170a0 RDI: 0000000000000004 [ 657.204911][T31051] RBP: 00007fb8ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 657.204922][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.204936][T31051] R13: 0000000000000000 R14: 00007fb8f0bc5fa0 R15: 00007ffc068e4578 [ 657.204959][T31051] [ 657.411419][T31046] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 657.527313][T31064] loop1: detected capacity change from 0 to 1024 [ 657.562987][T31064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.612179][T31068] loop5: detected capacity change from 0 to 2048 [ 657.661164][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.671669][T31068] Alternate GPT is invalid, using primary GPT. [ 657.677994][T31068] loop5: p1 p2 p3 [ 657.704768][T31075] loop2: detected capacity change from 0 to 128 [ 657.754090][T31075] vfat: Unknown parameter 'e' [ 657.792889][T31075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9097'. [ 657.801868][T31075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9097'. [ 657.832586][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.842443][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.853025][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.862809][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.872691][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.883046][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.892925][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.902806][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.913441][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.923228][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.933153][T31078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 657.943842][T31078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.980489][T31078] macsec1: entered promiscuous mode [ 657.985809][T31078] dummy0: entered promiscuous mode [ 658.002985][T31078] dummy0: left promiscuous mode [ 658.038818][T31085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.288180][T31104] loop5: detected capacity change from 0 to 2048 [ 658.320042][T31104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.370649][T31104] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 658.392440][T31103] bond2: entered promiscuous mode [ 658.397927][T31103] bond2: entered allmulticast mode [ 658.404018][T31104] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 658.416461][T31104] EXT4-fs (loop5): This should not happen!! Data will be lost [ 658.416461][T31104] [ 658.426164][T31104] EXT4-fs (loop5): Total free blocks count 0 [ 658.428242][T31103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.432141][T31104] EXT4-fs (loop5): Free/Dirty block details [ 658.432156][T31104] EXT4-fs (loop5): free_blocks=2415919104 [ 658.432173][T31104] EXT4-fs (loop5): dirty_blocks=32 [ 658.432187][T31104] EXT4-fs (loop5): Block reservation details [ 658.432200][T31104] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 658.513671][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.533157][T31103] bond2 (unregistering): Released all slaves [ 658.610647][T31110] loop5: detected capacity change from 0 to 2048 [ 658.640709][T31110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.774081][T31110] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 658.812190][T31110] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 658.824698][T31110] EXT4-fs (loop5): This should not happen!! Data will be lost [ 658.824698][T31110] [ 658.834497][T31110] EXT4-fs (loop5): Total free blocks count 0 [ 658.840615][T31110] EXT4-fs (loop5): Free/Dirty block details [ 658.846668][T31110] EXT4-fs (loop5): free_blocks=2415919104 [ 658.849612][T31119] loop1: detected capacity change from 0 to 1024 [ 658.852599][T31110] EXT4-fs (loop5): dirty_blocks=32 [ 658.864488][T31110] EXT4-fs (loop5): Block reservation details [ 658.870510][T31110] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 658.886279][T31082] chnl_net:caif_netlink_parms(): no params data found [ 658.907351][T31119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.920348][T31123] loop4: detected capacity change from 0 to 2048 [ 658.950233][T31126] loop2: detected capacity change from 0 to 2048 [ 658.967427][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.976932][T31123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.984173][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.991339][T31126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.028819][T31082] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.036020][T31082] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.079074][T31082] bridge_slave_0: entered allmulticast mode [ 659.085973][T31082] bridge_slave_0: entered promiscuous mode [ 659.093062][T31082] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.100301][T31082] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.108443][T31082] bridge_slave_1: entered allmulticast mode [ 659.118951][T31082] bridge_slave_1: entered promiscuous mode [ 659.190384][T31143] loop1: detected capacity change from 0 to 2048 [ 659.206670][T31082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.222082][T31082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.238249][T31143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.271919][T31143] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 659.298924][T31143] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 659.301051][T31082] team0: Port device team_slave_0 added [ 659.311271][T31143] EXT4-fs (loop1): This should not happen!! Data will be lost [ 659.311271][T31143] [ 659.326588][T31143] EXT4-fs (loop1): Total free blocks count 0 [ 659.332594][T31143] EXT4-fs (loop1): Free/Dirty block details [ 659.338549][T31143] EXT4-fs (loop1): free_blocks=2415919104 [ 659.344290][T31143] EXT4-fs (loop1): dirty_blocks=32 [ 659.349466][T31143] EXT4-fs (loop1): Block reservation details [ 659.352540][T31082] team0: Port device team_slave_1 added [ 659.355448][T31143] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 659.400514][T31082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.400823][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.407602][T31082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.442424][T31082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.479199][T31082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.486253][T31082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.512960][T31082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.603228][T31082] hsr_slave_0: entered promiscuous mode [ 659.622842][T31082] hsr_slave_1: entered promiscuous mode [ 659.629308][T31082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.640575][T31082] Cannot create hsr debugfs directory [ 659.704374][T31153] netlink: 'syz.1.9118': attribute type 13 has an invalid length. [ 659.848547][T31153] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.855978][T31153] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.865461][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.882049][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.928518][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 659.928536][ T29] audit: type=1326 audit(1744621239.649:64546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 659.948005][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.972273][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.980104][T31162] loop5: detected capacity change from 0 to 1024 [ 659.991773][T31162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.005647][ T29] audit: type=1326 audit(1744621239.689:64547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.029364][ T29] audit: type=1326 audit(1744621239.689:64548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.053061][ T29] audit: type=1326 audit(1744621239.689:64549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.076724][ T29] audit: type=1326 audit(1744621239.689:64550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.100312][ T29] audit: type=1326 audit(1744621239.689:64551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.124189][ T29] audit: type=1326 audit(1744621239.689:64552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.147870][ T29] audit: type=1326 audit(1744621239.689:64553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.171602][ T29] audit: type=1326 audit(1744621239.689:64554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.195199][ T29] audit: type=1326 audit(1744621239.689:64555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31161 comm="syz.5.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 660.221753][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.248040][T31153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.257146][T31153] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.266068][T31153] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.274974][T31153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.296654][T31169] netlink: 'syz.5.9123': attribute type 13 has an invalid length. [ 660.312791][T31154] smc: net device bond0 applied user defined pnetid SYZ0 [ 660.320119][T31155] smc: net device bond0 erased user defined pnetid SYZ0 [ 660.346618][T31169] smc: net device bond0 applied user defined pnetid SYZ0 [ 660.358543][T31169] smc: net device bond0 erased user defined pnetid SYZ0 [ 660.377244][T31173] loop1: detected capacity change from 0 to 128 [ 660.383802][T31173] vfat: Unknown parameter 'e' [ 660.404640][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9125'. [ 660.413682][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9125'. [ 660.453879][T31179] loop5: detected capacity change from 0 to 2048 [ 660.487316][T31179] Alternate GPT is invalid, using primary GPT. [ 660.490930][T31183] FAULT_INJECTION: forcing a failure. [ 660.490930][T31183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.493629][T31179] loop5: p1 p2 p3 [ 660.506581][T31183] CPU: 0 UID: 0 PID: 31183 Comm: syz.4.9130 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 660.506614][T31183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 660.506700][T31183] Call Trace: [ 660.506708][T31183] [ 660.506719][T31183] dump_stack_lvl+0xf6/0x150 [ 660.506747][T31183] dump_stack+0x15/0x1a [ 660.506766][T31183] should_fail_ex+0x261/0x270 [ 660.506799][T31183] should_fail+0xb/0x10 [ 660.506824][T31183] should_fail_usercopy+0x1a/0x20 [ 660.506912][T31183] _copy_to_user+0x20/0xa0 [ 660.506952][T31183] __se_sys_shmctl+0x1e5/0x400 [ 660.506991][T31183] ? __fget_files+0x186/0x1c0 [ 660.507053][T31183] __x64_sys_shmctl+0x43/0x50 [ 660.507120][T31183] x64_sys_call+0x152f/0x2e10 [ 660.507147][T31183] do_syscall_64+0xc9/0x1c0 [ 660.507184][T31183] ? clear_bhb_loop+0x25/0x80 [ 660.507221][T31183] ? clear_bhb_loop+0x25/0x80 [ 660.507247][T31183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.507274][T31183] RIP: 0033:0x7fd67b97d169 [ 660.507295][T31183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.507346][T31183] RSP: 002b:00007fd679fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 660.507370][T31183] RAX: ffffffffffffffda RBX: 00007fd67bb95fa0 RCX: 00007fd67b97d169 [ 660.507386][T31183] RDX: 0000200000000a00 RSI: 0000000000000002 RDI: 0000000000000000 [ 660.507441][T31183] RBP: 00007fd679fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 660.507456][T31183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.507471][T31183] R13: 0000000000000001 R14: 00007fd67bb95fa0 R15: 00007ffe84c54e98 [ 660.507496][T31183] [ 660.738098][T31193] netlink: 'syz.4.9132': attribute type 6 has an invalid length. [ 660.797576][T31195] loop5: detected capacity change from 0 to 512 [ 660.805055][T31195] EXT4-fs: Mount option(s) incompatible with ext2 [ 660.814513][T31199] smc: net device bond0 applied user defined pnetid SYZ0 [ 660.823063][T31082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.832917][T31082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.843030][T31082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.854561][T31199] smc: net device bond0 erased user defined pnetid SYZ0 [ 660.882381][T31201] loop5: detected capacity change from 0 to 512 [ 660.893791][T31201] ext4: Unknown parameter 'uid<00000000000000000000' [ 660.894383][T31082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 660.950397][T31203] netlink: 'syz.4.9138': attribute type 13 has an invalid length. [ 660.979310][T31205] loop2: detected capacity change from 0 to 512 [ 660.986351][T31206] netem: change failed [ 660.996936][T31205] ext4: Unknown parameter 'uid<00000000000000000000' [ 661.008201][T31203] smc: net device bond0 applied user defined pnetid SYZ0 [ 661.012529][T31082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.055411][T31203] smc: net device bond0 erased user defined pnetid SYZ0 [ 661.059814][T31082] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.103093][T31207] netem: change failed [ 661.115194][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.122389][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.177647][T31082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.188145][T31082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.206709][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.213823][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.303039][T31209] loop5: detected capacity change from 0 to 8192 [ 661.304480][T31082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.316777][T31217] loop2: detected capacity change from 0 to 2048 [ 661.335873][T31209] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 661.344469][T31209] FAT-fs (loop5): Filesystem has been set read-only [ 661.381417][T31217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.408003][T31229] netlink: 'syz.4.9142': attribute type 4 has an invalid length. [ 661.493836][T31082] veth0_vlan: entered promiscuous mode [ 661.495072][T31217] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 661.505394][T31082] veth1_vlan: entered promiscuous mode [ 661.526734][T31217] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 661.539153][T31217] EXT4-fs (loop2): This should not happen!! Data will be lost [ 661.539153][T31217] [ 661.548988][T31217] EXT4-fs (loop2): Total free blocks count 0 [ 661.554985][T31217] EXT4-fs (loop2): Free/Dirty block details [ 661.560980][T31217] EXT4-fs (loop2): free_blocks=2415919104 [ 661.566901][T31217] EXT4-fs (loop2): dirty_blocks=32 [ 661.572025][T31217] EXT4-fs (loop2): Block reservation details [ 661.578052][T31217] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 661.608698][T31082] veth0_macvtap: entered promiscuous mode [ 661.608792][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.622312][T31082] veth1_macvtap: entered promiscuous mode [ 661.667025][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.677644][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.688302][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.698809][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.708762][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.719317][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.730147][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.740729][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.750673][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.761152][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.772066][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.782687][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.792589][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.803732][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.813595][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.822966][T31244] loop4: detected capacity change from 0 to 512 [ 661.824079][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.836518][T31244] ext4: Unknown parameter 'uid<00000000000000000000' [ 661.840757][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.858591][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.868518][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.879018][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.900022][T31233] loop1: detected capacity change from 0 to 512 [ 661.906343][T31082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.924359][T31240] smc: net device bond0 applied user defined pnetid SYZ0 [ 661.935338][T31243] smc: net device bond0 erased user defined pnetid SYZ0 [ 661.948193][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.958760][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.968668][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.979147][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.989040][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.999609][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.009579][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.020114][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.029952][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.040447][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.050278][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.060746][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.070618][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.081146][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.091060][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.101509][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.111368][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.121885][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.133353][T31082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.143896][T31244] netem: change failed [ 662.159024][T31082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.167903][T31082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.176834][T31082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.185673][T31082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.201807][T31233] EXT4-fs (loop1): 1 orphan inode deleted [ 662.214059][T31233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.233550][ T8530] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 662.235467][T31233] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.279556][T31253] netlink: 'syz.5.9151': attribute type 13 has an invalid length. [ 662.304509][T31253] smc: net device bond0 applied user defined pnetid SYZ0 [ 662.312983][T31253] smc: net device bond0 erased user defined pnetid SYZ0 [ 662.330834][T31263] siw: device registration error -23 [ 662.341866][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.401651][T31270] loop1: detected capacity change from 0 to 2048 [ 662.422166][T31270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.434638][T31273] loop4: detected capacity change from 0 to 2048 [ 662.453752][T31267] loop5: detected capacity change from 0 to 8192 [ 662.474277][T31267] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 662.482865][T31267] FAT-fs (loop5): Filesystem has been set read-only [ 662.490708][T31273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.523760][T31273] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 662.543099][T31281] loop5: detected capacity change from 0 to 512 [ 662.551221][T31273] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 662.563925][T31273] EXT4-fs (loop4): This should not happen!! Data will be lost [ 662.563925][T31273] [ 662.574316][T31273] EXT4-fs (loop4): Total free blocks count 0 [ 662.580380][T31273] EXT4-fs (loop4): Free/Dirty block details [ 662.586365][T31273] EXT4-fs (loop4): free_blocks=2415919104 [ 662.592104][T31273] EXT4-fs (loop4): dirty_blocks=32 [ 662.598363][T31273] EXT4-fs (loop4): Block reservation details [ 662.604375][T31273] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 662.611107][T31281] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 662.637186][T31281] EXT4-fs (loop5): 1 truncate cleaned up [ 662.858394][T31281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.867386][T31281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.158555][T31288] loop2: detected capacity change from 0 to 2048 [ 663.238119][T31294] FAULT_INJECTION: forcing a failure. [ 663.238119][T31294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.251282][T31294] CPU: 0 UID: 0 PID: 31294 Comm: syz.0.9163 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 663.251309][T31294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.251325][T31294] Call Trace: [ 663.251332][T31294] [ 663.251341][T31294] dump_stack_lvl+0xf6/0x150 [ 663.251370][T31294] dump_stack+0x15/0x1a [ 663.251390][T31294] should_fail_ex+0x261/0x270 [ 663.251466][T31294] should_fail+0xb/0x10 [ 663.251489][T31294] should_fail_usercopy+0x1a/0x20 [ 663.251520][T31294] _copy_from_user+0x1c/0xa0 [ 663.251626][T31294] __sys_bpf+0x16a/0x800 [ 663.251736][T31294] __x64_sys_bpf+0x43/0x50 [ 663.251823][T31294] x64_sys_call+0x23da/0x2e10 [ 663.251851][T31294] do_syscall_64+0xc9/0x1c0 [ 663.251908][T31294] ? clear_bhb_loop+0x25/0x80 [ 663.251932][T31294] ? clear_bhb_loop+0x25/0x80 [ 663.251966][T31294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.252024][T31294] RIP: 0033:0x7f4d182cd169 [ 663.252043][T31294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.252091][T31294] RSP: 002b:00007f4d1692f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.252112][T31294] RAX: ffffffffffffffda RBX: 00007f4d184e5fa0 RCX: 00007f4d182cd169 [ 663.252128][T31294] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 663.252143][T31294] RBP: 00007f4d1692f090 R08: 0000000000000000 R09: 0000000000000000 [ 663.252158][T31294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.252179][T31294] R13: 0000000000000000 R14: 00007f4d184e5fa0 R15: 00007fffcb297a18 [ 663.252263][T31294] [ 663.255332][T31288] loop2: unable to read partition table [ 663.339976][T31296] usb usb1: usbfs: process 31296 (syz.0.9164) did not claim interface 0 before use [ 663.346491][T31288] loop2: partition table beyond EOD, [ 663.410907][T31300] hub 9-0:1.0: USB hub found [ 663.411748][T31288] truncated [ 663.420296][T31300] hub 9-0:1.0: 8 ports detected [ 663.422773][T31288] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 663.452218][T31298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9160'. [ 663.495094][T31302] netlink: 'syz.1.9165': attribute type 13 has an invalid length. [ 663.508934][T31304] loop0: detected capacity change from 0 to 512 [ 663.517833][T31302] smc: net device bond0 applied user defined pnetid SYZ0 [ 663.534901][T31302] smc: net device bond0 erased user defined pnetid SYZ0 [ 663.547224][T31304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 663.559902][T31304] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 663.579175][T31309] hub 9-0:1.0: USB hub found [ 663.583902][T31309] hub 9-0:1.0: 8 ports detected [ 663.639942][T31308] loop5: detected capacity change from 0 to 8192 [ 663.649713][T31304] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 663.665372][T31313] loop4: detected capacity change from 0 to 128 [ 663.667253][T31308] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 663.675489][T31304] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.9167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 663.680254][T31308] FAT-fs (loop5): Filesystem has been set read-only [ 663.707150][T31313] vfat: Unknown parameter 'e' [ 663.712287][T31316] FAULT_INJECTION: forcing a failure. [ 663.712287][T31316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.725689][T31316] CPU: 0 UID: 0 PID: 31316 Comm: syz.1.9172 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 663.725785][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.725801][T31316] Call Trace: [ 663.725808][T31316] [ 663.725816][T31316] dump_stack_lvl+0xf6/0x150 [ 663.725845][T31316] dump_stack+0x15/0x1a [ 663.725865][T31316] should_fail_ex+0x261/0x270 [ 663.725989][T31316] should_fail+0xb/0x10 [ 663.726016][T31316] should_fail_usercopy+0x1a/0x20 [ 663.726051][T31316] _copy_from_user+0x1c/0xa0 [ 663.726133][T31316] copy_msghdr_from_user+0x54/0x2b0 [ 663.726171][T31316] ? __fget_files+0x186/0x1c0 [ 663.726222][T31316] __sys_sendmsg+0x141/0x240 [ 663.726271][T31316] __x64_sys_sendmsg+0x46/0x50 [ 663.726372][T31316] x64_sys_call+0x26f3/0x2e10 [ 663.726399][T31316] do_syscall_64+0xc9/0x1c0 [ 663.726431][T31316] ? clear_bhb_loop+0x25/0x80 [ 663.726523][T31316] ? clear_bhb_loop+0x25/0x80 [ 663.726548][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.726572][T31316] RIP: 0033:0x7fbdb478d169 [ 663.726586][T31316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.726608][T31316] RSP: 002b:00007fbdb2def038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.726627][T31316] RAX: ffffffffffffffda RBX: 00007fbdb49a5fa0 RCX: 00007fbdb478d169 [ 663.726639][T31316] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 663.726654][T31316] RBP: 00007fbdb2def090 R08: 0000000000000000 R09: 0000000000000000 [ 663.726665][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.726678][T31316] R13: 0000000000000000 R14: 00007fbdb49a5fa0 R15: 00007fff4bba93e8 [ 663.726700][T31316] [ 663.731136][T31304] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9167: couldn't read orphan inode 13 (err -117) [ 663.820236][T31313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9171'. [ 663.928626][T31313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9171'. [ 663.970834][T31319] bridge0: port 3(macsec1) entered blocking state [ 663.977543][T31319] bridge0: port 3(macsec1) entered disabled state [ 663.987008][T31319] macsec1: entered allmulticast mode [ 663.992348][T31319] bridge0: entered allmulticast mode [ 664.031044][T31319] macsec1: left allmulticast mode [ 664.036951][T31319] bridge0: left allmulticast mode [ 664.060079][T31327] loop0: detected capacity change from 0 to 2048 [ 664.116379][T31329] loop5: detected capacity change from 0 to 2048 [ 664.192712][T31333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9177'. [ 664.198139][T31341] hub 9-0:1.0: USB hub found [ 664.206680][T31341] hub 9-0:1.0: 8 ports detected [ 664.239998][T31344] hub 9-0:1.0: USB hub found [ 664.247345][T31344] hub 9-0:1.0: 8 ports detected [ 664.277719][T31344] bond4: entered promiscuous mode [ 664.282814][T31344] bond4: entered allmulticast mode [ 664.288296][T31344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.300025][T31344] bond4 (unregistering): Released all slaves [ 664.319695][T31345] loop4: detected capacity change from 0 to 2048 [ 664.354560][T31350] loop1: detected capacity change from 0 to 1024 [ 664.465912][T31353] loop1: detected capacity change from 0 to 8192 [ 664.471511][T31355] loop2: detected capacity change from 0 to 512 [ 664.487065][T31353] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 664.495689][T31353] FAT-fs (loop1): Filesystem has been set read-only [ 664.507770][T31345] loop4: unable to read partition table [ 664.513606][T31345] loop4: partition table beyond EOD, truncated [ 664.519871][T31345] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 664.532609][T31355] ext4: Unknown parameter 'uid<00000000000000000000' [ 664.581552][T31345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9180'. [ 664.663231][T31362] netem: change failed [ 664.750013][T31372] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 664.750013][T31372] program syz.4.9190 not setting count and/or reply_len properly [ 664.795235][T31370] loop5: detected capacity change from 0 to 2048 [ 664.850890][T31377] FAULT_INJECTION: forcing a failure. [ 664.850890][T31377] name failslab, interval 1, probability 0, space 0, times 0 [ 664.863860][T31377] CPU: 0 UID: 0 PID: 31377 Comm: syz.1.9192 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 664.863889][T31377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 664.863966][T31377] Call Trace: [ 664.863973][T31377] [ 664.863981][T31377] dump_stack_lvl+0xf6/0x150 [ 664.864010][T31377] dump_stack+0x15/0x1a [ 664.864043][T31377] should_fail_ex+0x261/0x270 [ 664.864076][T31377] should_failslab+0x8f/0xb0 [ 664.864180][T31377] __kmalloc_cache_noprof+0x55/0x320 [ 664.864209][T31377] ? rtnl_newlink+0x5f/0x12d0 [ 664.864255][T31377] rtnl_newlink+0x5f/0x12d0 [ 664.864294][T31377] ? xas_load+0x3ba/0x3d0 [ 664.864357][T31377] ? xas_load+0x3ba/0x3d0 [ 664.864386][T31377] ? __rcu_read_unlock+0x4e/0x70 [ 664.864456][T31377] ? xa_load+0xbd/0xe0 [ 664.864495][T31377] ? memcg_list_lru_alloc+0xde/0x4a0 [ 664.864543][T31377] ? mod_objcg_state+0x3f9/0x530 [ 664.864565][T31377] ? __rcu_read_unlock+0x4e/0x70 [ 664.864674][T31377] ? avc_has_perm_noaudit+0x1cc/0x210 [ 664.864782][T31377] ? selinux_capable+0x1f9/0x260 [ 664.864824][T31377] ? security_capable+0x81/0x90 [ 664.864854][T31377] ? ns_capable+0x7d/0xb0 [ 664.864918][T31377] ? __pfx_rtnl_newlink+0x10/0x10 [ 664.865072][T31377] rtnetlink_rcv_msg+0x65a/0x740 [ 664.865136][T31377] ? avc_has_perm_noaudit+0x1cc/0x210 [ 664.865172][T31377] netlink_rcv_skb+0x12f/0x230 [ 664.865202][T31377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 664.865360][T31377] rtnetlink_rcv+0x1c/0x30 [ 664.865395][T31377] netlink_unicast+0x605/0x6c0 [ 664.865422][T31377] netlink_sendmsg+0x609/0x720 [ 664.865454][T31377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.865558][T31377] __sock_sendmsg+0x140/0x180 [ 664.865628][T31377] ____sys_sendmsg+0x350/0x4e0 [ 664.865659][T31377] __sys_sendmsg+0x1a0/0x240 [ 664.865704][T31377] __x64_sys_sendmsg+0x46/0x50 [ 664.865736][T31377] x64_sys_call+0x26f3/0x2e10 [ 664.865765][T31377] do_syscall_64+0xc9/0x1c0 [ 664.865807][T31377] ? clear_bhb_loop+0x25/0x80 [ 664.865833][T31377] ? clear_bhb_loop+0x25/0x80 [ 664.865854][T31377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.865939][T31377] RIP: 0033:0x7fbdb478d169 [ 664.865958][T31377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.865980][T31377] RSP: 002b:00007fbdb2def038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.866003][T31377] RAX: ffffffffffffffda RBX: 00007fbdb49a5fa0 RCX: 00007fbdb478d169 [ 664.866027][T31377] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 664.866042][T31377] RBP: 00007fbdb2def090 R08: 0000000000000000 R09: 0000000000000000 [ 664.866057][T31377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.866138][T31377] R13: 0000000000000000 R14: 00007fbdb49a5fa0 R15: 00007fff4bba93e8 [ 664.866162][T31377] [ 665.148445][T31378] hub 9-0:1.0: USB hub found [ 665.154934][T31378] hub 9-0:1.0: 8 ports detected [ 665.224361][T31390] loop4: detected capacity change from 0 to 2048 [ 665.295410][T31390] loop4: unable to read partition table [ 665.303672][T31390] loop4: partition table beyond EOD, truncated [ 665.310044][T31390] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 665.321551][T31397] loop1: detected capacity change from 0 to 512 [ 665.352039][T31397] EXT4-fs (loop1): 1 orphan inode deleted [ 665.362954][T31390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9198'. [ 665.372432][ T8516] __quota_error: 312 callbacks suppressed [ 665.372456][ T8516] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 665.388076][ T8516] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:50: Failed to release dquot type 1 [ 665.407341][T31397] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.472876][ T29] audit: type=1326 audit(1744621245.189:64867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67b97d169 code=0x7ffc0000 [ 665.501462][T31394] loop0: detected capacity change from 0 to 512 [ 665.512109][ T29] audit: type=1326 audit(1744621245.219:64868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd67b97d169 code=0x7ffc0000 [ 665.535859][ T29] audit: type=1326 audit(1744621245.219:64869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd67b97d1a3 code=0x7ffc0000 [ 665.546060][T31403] loop4: detected capacity change from 0 to 512 [ 665.559462][ T29] audit: type=1326 audit(1744621245.229:64870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd67b97bc1f code=0x7ffc0000 [ 665.567729][ T29] audit: type=1326 audit(1744621245.229:64871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd67b97d1f7 code=0x7ffc0000 [ 665.613631][ T29] audit: type=1326 audit(1744621245.269:64872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd67b97bad0 code=0x7ffc0000 [ 665.637664][ T29] audit: type=1326 audit(1744621245.269:64873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd67b97cd6b code=0x7ffc0000 [ 665.664602][T31405] loop1: detected capacity change from 0 to 2048 [ 665.667606][ T29] audit: type=1326 audit(1744621245.379:64874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd67b97bdca code=0x7ffc0000 [ 665.694592][ T29] audit: type=1326 audit(1744621245.379:64875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd67b97bdca code=0x7ffc0000 [ 665.701062][T31407] loop5: detected capacity change from 0 to 512 [ 665.726118][T31407] ext4: Unknown parameter 'uid<00000000000000000000' [ 665.726869][T31403] EXT4-fs (loop4): orphan cleanup on readonly fs [ 665.740243][T31405] Alternate GPT is invalid, using primary GPT. [ 665.747242][T31405] loop1: p1 p2 p3 [ 665.769909][T31403] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 665.813167][T31394] EXT4-fs (loop0): 1 orphan inode deleted [ 665.820041][ T3478] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 665.834430][T31413] netlink: 'syz.2.9205': attribute type 13 has an invalid length. [ 665.836940][T31414] netem: change failed [ 665.866688][T31413] smc: net device bond0 applied user defined pnetid SYZ0 [ 665.874057][T31413] smc: net device bond0 erased user defined pnetid SYZ0 [ 665.884934][T31403] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 665.891977][T31403] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.9201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 665.905669][T31394] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.912576][T31403] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.9201: couldn't read orphan inode 13 (err -117) [ 665.970865][T31418] loop2: detected capacity change from 0 to 2048 [ 665.979462][T31416] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 665.979462][T31416] program syz.5.9207 not setting count and/or reply_len properly [ 666.001946][T31416] FAULT_INJECTION: forcing a failure. [ 666.001946][T31416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.015182][T31416] CPU: 1 UID: 0 PID: 31416 Comm: syz.5.9207 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 666.015240][T31416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 666.015254][T31416] Call Trace: [ 666.015260][T31416] [ 666.015267][T31416] dump_stack_lvl+0xf6/0x150 [ 666.015353][T31416] dump_stack+0x15/0x1a [ 666.015370][T31416] should_fail_ex+0x261/0x270 [ 666.015418][T31416] should_fail+0xb/0x10 [ 666.015520][T31416] should_fail_usercopy+0x1a/0x20 [ 666.015555][T31416] _copy_from_iter+0xd8/0xd10 [ 666.015585][T31416] ? sbitmap_find_bit+0x355/0x390 [ 666.015616][T31416] ? should_failslab+0x8f/0xb0 [ 666.015703][T31416] copy_page_from_iter+0x14f/0x280 [ 666.015811][T31416] blk_rq_map_user_iov+0x899/0x1330 [ 666.015875][T31416] blk_rq_map_user_io+0x195/0x270 [ 666.015915][T31416] ? finish_task_switch+0xb5/0x2b0 [ 666.015955][T31416] ? __cond_resched+0x53/0x90 [ 666.015981][T31416] ? console_unlock+0x310/0x350 [ 666.016079][T31416] ? sg_link_reserve+0x118/0x140 [ 666.016113][T31416] sg_common_write+0x831/0x900 [ 666.016197][T31416] sg_write+0x6de/0x770 [ 666.016236][T31416] ? __pfx_sg_write+0x10/0x10 [ 666.016264][T31416] vfs_write+0x295/0x950 [ 666.016341][T31416] ? putname+0xe1/0x100 [ 666.016397][T31416] ? __fget_files+0x186/0x1c0 [ 666.016423][T31416] ksys_write+0xeb/0x1b0 [ 666.016460][T31416] __x64_sys_write+0x42/0x50 [ 666.016494][T31416] x64_sys_call+0x2a45/0x2e10 [ 666.016521][T31416] do_syscall_64+0xc9/0x1c0 [ 666.016565][T31416] ? clear_bhb_loop+0x25/0x80 [ 666.016591][T31416] ? clear_bhb_loop+0x25/0x80 [ 666.016618][T31416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.016643][T31416] RIP: 0033:0x7fb8f09ad169 [ 666.016742][T31416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.016765][T31416] RSP: 002b:00007fb8ef017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.016788][T31416] RAX: ffffffffffffffda RBX: 00007fb8f0bc5fa0 RCX: 00007fb8f09ad169 [ 666.016803][T31416] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000005 [ 666.016838][T31416] RBP: 00007fb8ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 666.016850][T31416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.016939][T31416] R13: 0000000000000000 R14: 00007fb8f0bc5fa0 R15: 00007ffc068e4578 [ 666.016961][T31416] [ 666.031740][T31420] loop0: detected capacity change from 0 to 2048 [ 666.301245][T31428] loop4: detected capacity change from 0 to 2048 [ 666.314259][T31433] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9209'. [ 666.409545][T31428] loop4: unable to read partition table [ 666.425711][T31428] loop4: partition table beyond EOD, truncated [ 666.432019][T31428] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 666.451967][T31438] loop2: detected capacity change from 0 to 764 [ 666.464909][T31438] rock: directory entry would overflow storage [ 666.471195][T31438] rock: sig=0x4654, size=5, remaining=4 [ 666.491911][T31428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9211'. [ 666.553674][T31445] loop2: detected capacity change from 0 to 512 [ 666.578076][T31445] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.584582][T31445] EXT4-fs: Ignoring removed bh option [ 666.621014][T31445] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 666.634751][T31448] smc: net device bond0 applied user defined pnetid SYZ0 [ 666.645709][T31448] smc: net device bond0 erased user defined pnetid SYZ0 [ 666.689578][T31445] EXT4-fs (loop2): 1 truncate cleaned up [ 666.764144][T31452] netlink: 'syz.4.9219': attribute type 13 has an invalid length. [ 666.775446][T31452] smc: net device bond0 applied user defined pnetid SYZ0 [ 666.788908][T31452] smc: net device bond0 erased user defined pnetid SYZ0 [ 666.798193][T31445] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 666.845910][T31454] loop2: detected capacity change from 0 to 2048 [ 666.893722][T31458] loop4: detected capacity change from 0 to 512 [ 666.905962][T31458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 666.907934][T31460] netlink: 'syz.2.9222': attribute type 13 has an invalid length. [ 666.925839][T31458] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 666.947469][T31458] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 666.954279][T31458] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.9221: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 666.972486][T31458] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.9221: couldn't read orphan inode 13 (err -117) [ 666.984597][T31460] smc: net device bond0 applied user defined pnetid SYZ0 [ 666.992124][T31460] smc: net device bond0 erased user defined pnetid SYZ0 [ 667.032337][T31465] loop0: detected capacity change from 0 to 512 [ 667.046808][T31468] loop5: detected capacity change from 0 to 512 [ 667.053147][T31465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 667.063940][T31468] EXT4-fs: Ignoring removed mblk_io_submit option [ 667.070473][T31468] EXT4-fs: Ignoring removed bh option [ 667.079746][T31468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 667.095344][T31471] loop2: detected capacity change from 0 to 764 [ 667.102767][T31471] rock: directory entry would overflow storage [ 667.109625][T31471] rock: sig=0x4654, size=5, remaining=4 [ 667.111330][T31469] loop4: detected capacity change from 0 to 8192 [ 667.120194][T31465] EXT4-fs (loop0): 1 truncate cleaned up [ 667.128512][T31468] EXT4-fs (loop5): 1 truncate cleaned up [ 667.142765][T31469] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 667.151365][T31469] FAT-fs (loop4): Filesystem has been set read-only [ 667.232935][T31476] hub 9-0:1.0: USB hub found [ 667.243558][T31476] hub 9-0:1.0: 8 ports detected [ 667.266588][T31477] loop2: detected capacity change from 0 to 1024 [ 667.289065][T31482] loop4: detected capacity change from 0 to 512 [ 667.295863][T31482] EXT4-fs: Ignoring removed mblk_io_submit option [ 667.302335][T31482] EXT4-fs: Ignoring removed bh option [ 667.308384][T31482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 667.322285][T31484] loop1: detected capacity change from 0 to 2048 [ 667.349604][T31482] EXT4-fs (loop4): 1 truncate cleaned up [ 667.350422][T31465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.370875][T31484] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 667.377491][T31490] loop5: detected capacity change from 0 to 512 [ 667.393365][T31465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.404007][T31484] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 667.416431][T31484] EXT4-fs (loop1): This should not happen!! Data will be lost [ 667.416431][T31484] [ 667.416573][T31490] EXT4-fs (loop5): orphan cleanup on readonly fs [ 667.426328][T31484] EXT4-fs (loop1): Total free blocks count 0 [ 667.437613][T31490] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 667.438643][T31484] EXT4-fs (loop1): Free/Dirty block details [ 667.459351][T31484] EXT4-fs (loop1): free_blocks=2415919104 [ 667.465100][T31484] EXT4-fs (loop1): dirty_blocks=32 [ 667.467071][T31490] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 667.470286][T31484] EXT4-fs (loop1): Block reservation details [ 667.482869][T31484] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 667.484141][T31490] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.9234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 667.509553][T31490] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9234: couldn't read orphan inode 13 (err -117) [ 667.562388][T31493] loop2: detected capacity change from 0 to 2048 [ 667.699720][T31503] loop4: detected capacity change from 0 to 8192 [ 667.719365][T31503] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 667.727996][T31503] FAT-fs (loop4): Filesystem has been set read-only [ 668.019985][T31512] loop1: detected capacity change from 0 to 512 [ 668.038025][T31512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 668.045130][T31512] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 668.070859][T31512] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 668.084898][T31512] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.9242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 668.115396][T31512] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9242: couldn't read orphan inode 13 (err -117) [ 668.458882][T31515] siw: device registration error -23 [ 668.721252][T31519] netlink: 'syz.0.9244': attribute type 13 has an invalid length. [ 668.872495][T31519] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.879744][T31519] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.955647][T31523] loop2: detected capacity change from 0 to 512 [ 669.007019][T31519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.041356][T31519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.104288][T31523] EXT4-fs (loop2): 1 orphan inode deleted [ 669.132762][ T3478] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 669.163141][T31519] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.172199][T31519] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.181102][T31519] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.190139][T31519] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.214569][T31525] smc: net device bond0 applied user defined pnetid SYZ0 [ 669.235590][T31526] smc: net device bond0 erased user defined pnetid SYZ0 [ 669.259280][T31523] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.312928][T31532] loop5: detected capacity change from 0 to 512 [ 669.321757][T31532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 669.348779][T31532] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.349321][T31536] loop0: detected capacity change from 0 to 512 [ 669.365920][T31536] EXT4-fs: Ignoring removed mblk_io_submit option [ 669.371136][T31534] loop2: detected capacity change from 0 to 2048 [ 669.372412][T31536] EXT4-fs: Ignoring removed bh option [ 669.385636][T31536] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 669.415704][T31536] EXT4-fs (loop0): 1 truncate cleaned up [ 669.445632][T31534] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 669.473631][T31543] loop5: detected capacity change from 0 to 1024 [ 669.483636][T31536] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 669.484695][T31534] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 669.504073][T31534] EXT4-fs (loop2): This should not happen!! Data will be lost [ 669.504073][T31534] [ 669.513813][T31534] EXT4-fs (loop2): Total free blocks count 0 [ 669.519861][T31534] EXT4-fs (loop2): Free/Dirty block details [ 669.526524][T31534] EXT4-fs (loop2): free_blocks=2415919104 [ 669.532370][T31534] EXT4-fs (loop2): dirty_blocks=32 [ 669.537548][T31534] EXT4-fs (loop2): Block reservation details [ 669.543669][T31534] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 669.580195][T31546] loop0: detected capacity change from 0 to 2048 [ 669.602814][T31549] hub 9-0:1.0: USB hub found [ 669.611389][T31549] hub 9-0:1.0: 8 ports detected [ 669.637357][T31554] FAULT_INJECTION: forcing a failure. [ 669.637357][T31554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.651379][T31554] CPU: 1 UID: 0 PID: 31554 Comm: syz.1.9253 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 669.651459][T31554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 669.651475][T31554] Call Trace: [ 669.651483][T31554] [ 669.651493][T31554] dump_stack_lvl+0xf6/0x150 [ 669.651522][T31554] dump_stack+0x15/0x1a [ 669.651580][T31554] should_fail_ex+0x261/0x270 [ 669.651614][T31554] should_fail+0xb/0x10 [ 669.651643][T31554] should_fail_usercopy+0x1a/0x20 [ 669.651754][T31554] _copy_from_user+0x1c/0xa0 [ 669.651794][T31554] memdup_user_nul+0x71/0xf0 [ 669.651825][T31554] sel_write_enforce+0x9f/0x300 [ 669.651860][T31554] ? __pfx_sel_write_enforce+0x10/0x10 [ 669.651936][T31554] vfs_write+0x295/0x950 [ 669.652023][T31554] ? putname+0xe1/0x100 [ 669.652042][T31554] ? __fget_files+0x186/0x1c0 [ 669.652063][T31554] ksys_write+0xeb/0x1b0 [ 669.652092][T31554] __x64_sys_write+0x42/0x50 [ 669.652119][T31554] x64_sys_call+0x2a45/0x2e10 [ 669.652202][T31554] do_syscall_64+0xc9/0x1c0 [ 669.652232][T31554] ? clear_bhb_loop+0x25/0x80 [ 669.652253][T31554] ? clear_bhb_loop+0x25/0x80 [ 669.652274][T31554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.652298][T31554] RIP: 0033:0x7fbdb478d169 [ 669.652322][T31554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.652340][T31554] RSP: 002b:00007fbdb2def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.652359][T31554] RAX: ffffffffffffffda RBX: 00007fbdb49a5fa0 RCX: 00007fbdb478d169 [ 669.652371][T31554] RDX: 0000000000000138 RSI: 0000000000000000 RDI: 0000000000000003 [ 669.652382][T31554] RBP: 00007fbdb2def090 R08: 0000000000000000 R09: 0000000000000000 [ 669.652441][T31554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.652453][T31554] R13: 0000000000000000 R14: 00007fbdb49a5fa0 R15: 00007fff4bba93e8 [ 669.652471][T31554] [ 669.675617][T31550] loop2: detected capacity change from 0 to 8192 [ 669.851930][T31560] loop5: detected capacity change from 0 to 2048 [ 669.862564][T31550] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 669.871277][T31550] FAT-fs (loop2): Filesystem has been set read-only [ 669.891754][T31563] netlink: 'syz.0.9256': attribute type 13 has an invalid length. [ 669.905155][T31563] smc: net device bond0 applied user defined pnetid SYZ0 [ 669.916632][T31563] smc: net device bond0 erased user defined pnetid SYZ0 [ 669.942612][T31560] loop5: unable to read partition table [ 669.949331][T31560] loop5: partition table beyond EOD, truncated [ 669.955700][T31560] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 669.987118][T31560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9255'. [ 670.000587][T31568] loop1: detected capacity change from 0 to 512 [ 670.023158][T31568] EXT4-fs (loop1): orphan cleanup on readonly fs [ 670.030026][T31568] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 670.043676][T31573] loop5: detected capacity change from 0 to 2048 [ 670.046798][T31568] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 670.058161][T31568] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.9259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 670.077026][T31568] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9259: couldn't read orphan inode 13 (err -117) [ 670.113243][T31577] loop2: detected capacity change from 0 to 1024 [ 670.140136][T31573] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 670.155190][T31573] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 670.168329][T31573] EXT4-fs (loop5): This should not happen!! Data will be lost [ 670.168329][T31573] [ 670.178024][T31573] EXT4-fs (loop5): Total free blocks count 0 [ 670.184073][T31573] EXT4-fs (loop5): Free/Dirty block details [ 670.190021][T31573] EXT4-fs (loop5): free_blocks=2415919104 [ 670.196529][T31573] EXT4-fs (loop5): dirty_blocks=32 [ 670.199353][T31580] hub 9-0:1.0: USB hub found [ 670.201668][T31573] EXT4-fs (loop5): Block reservation details [ 670.201685][T31573] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 670.219374][T31580] hub 9-0:1.0: 8 ports detected [ 670.278318][T31587] loop2: detected capacity change from 0 to 512 [ 670.296656][T31590] loop1: detected capacity change from 0 to 512 [ 670.304586][T31587] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.321475][T31590] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 670.323011][T31594] loop0: detected capacity change from 0 to 2048 [ 670.358156][T31590] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.467757][T31607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9273'. [ 670.512664][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 670.512681][ T29] audit: type=1326 audit(1744621250.229:65393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 670.549048][T31610] FAULT_INJECTION: forcing a failure. [ 670.549048][T31610] name failslab, interval 1, probability 0, space 0, times 0 [ 670.561779][T31610] CPU: 0 UID: 0 PID: 31610 Comm: syz.5.9275 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 670.561810][T31610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 670.561825][T31610] Call Trace: [ 670.561833][T31610] [ 670.561841][T31610] dump_stack_lvl+0xf6/0x150 [ 670.561909][T31610] dump_stack+0x15/0x1a [ 670.561925][T31610] should_fail_ex+0x261/0x270 [ 670.561953][T31610] should_failslab+0x8f/0xb0 [ 670.562034][T31610] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 670.562063][T31610] ? __alloc_skb+0x10d/0x320 [ 670.562093][T31610] __alloc_skb+0x10d/0x320 [ 670.562187][T31610] ? audit_log_start+0x37f/0x6e0 [ 670.562218][T31610] audit_log_start+0x39a/0x6e0 [ 670.562247][T31610] ? kstrtouint+0x7b/0xc0 [ 670.562276][T31610] audit_seccomp+0x4b/0x130 [ 670.562300][T31610] __seccomp_filter+0x694/0x10e0 [ 670.562337][T31610] ? vfs_write+0x669/0x950 [ 670.562417][T31610] ? putname+0xe1/0x100 [ 670.562437][ T29] audit: type=1326 audit(1744621250.269:65394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f09abad0 code=0x7ffc0000 [ 670.562446][T31610] __secure_computing+0x7e/0x160 [ 670.562488][T31610] syscall_trace_enter+0xcf/0x1f0 [ 670.562522][T31610] ? fpregs_assert_state_consistent+0x83/0xa0 [ 670.562643][T31610] do_syscall_64+0xaa/0x1c0 [ 670.562732][T31610] ? clear_bhb_loop+0x25/0x80 [ 670.562760][T31610] ? clear_bhb_loop+0x25/0x80 [ 670.562881][T31610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.562908][T31610] RIP: 0033:0x7fb8f09ad169 [ 670.562927][T31610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.562950][T31610] RSP: 002b:00007fb8ef017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 670.562973][T31610] RAX: ffffffffffffffda RBX: 00007fb8f0bc5fa0 RCX: 00007fb8f09ad169 [ 670.562989][T31610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.563004][T31610] RBP: 00007fb8ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 670.563018][T31610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.563054][T31610] R13: 0000000000000000 R14: 00007fb8f0bc5fa0 R15: 00007ffc068e4578 [ 670.563078][T31610] [ 670.563092][T31610] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 670.574071][ T29] audit: type=1326 audit(1744621250.269:65395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8f09abc1f code=0x7ffc0000 [ 670.583540][T31610] audit: out of memory in audit_log_start [ 670.828287][ T29] audit: type=1326 audit(1744621250.549:65396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8f09abb7c code=0x7ffc0000 [ 670.879967][ T29] audit: type=1326 audit(1744621250.549:65397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8f09abc1f code=0x7ffc0000 [ 670.903528][ T29] audit: type=1326 audit(1744621250.579:65398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb8f09abdca code=0x7ffc0000 [ 670.927724][ T29] audit: type=1326 audit(1744621250.579:65399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 670.951321][ T29] audit: type=1326 audit(1744621250.579:65400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f09ad169 code=0x7ffc0000 [ 671.109848][T31626] 9pnet_fd: Insufficient options for proto=fd [ 671.191125][T31631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31631 comm=syz.5.9282 [ 671.251807][T31638] netlink: 'syz.5.9284': attribute type 13 has an invalid length. [ 671.263445][T31638] smc: net device bond0 applied user defined pnetid SYZ0 [ 671.271983][T31638] smc: net device bond0 erased user defined pnetid SYZ0 [ 671.312437][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.320313][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.328835][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.336736][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.344523][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.352326][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.360765][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.368578][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.376424][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.384206][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.392577][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.400429][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.408217][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.416804][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.424558][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.432334][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.440113][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.448434][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.456228][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.464081][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.471859][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.480422][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.488269][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.496097][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.503871][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.512337][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.520100][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.527853][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.536352][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.544097][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.551914][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.559951][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.568473][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.576251][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.583980][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.591778][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.600139][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.607897][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.615794][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.623542][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.631865][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.639703][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.647497][ T23] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 671.659920][ T23] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 671.743641][T31650] 9pnet_fd: Insufficient options for proto=fd [ 671.811425][T31645] loop4: detected capacity change from 0 to 8192 [ 671.828802][T31645] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 671.837477][T31645] FAT-fs (loop4): Filesystem has been set read-only [ 671.854744][T31660] loop0: detected capacity change from 0 to 2048 [ 671.871606][T31659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31659 comm=syz.5.9294 [ 671.938213][T31660] loop0: unable to read partition table [ 671.944327][T31660] loop0: partition table beyond EOD, truncated [ 671.950679][T31660] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 671.959219][T31667] loop4: detected capacity change from 0 to 2048 [ 671.998508][T31672] hub 9-0:1.0: USB hub found [ 672.003290][T31672] hub 9-0:1.0: 8 ports detected [ 672.015770][T31667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 672.036055][T31660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9291'. [ 672.052887][T31667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 672.057273][T31676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.065245][T31667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 672.065245][T31667] [ 672.081520][T31667] EXT4-fs (loop4): Total free blocks count 0 [ 672.087540][T31667] EXT4-fs (loop4): Free/Dirty block details [ 672.093455][T31667] EXT4-fs (loop4): free_blocks=2415919104 [ 672.099235][T31667] EXT4-fs (loop4): dirty_blocks=32 [ 672.104363][T31667] EXT4-fs (loop4): Block reservation details [ 672.110387][T31667] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 672.117193][T31674] loop1: detected capacity change from 0 to 8192 [ 672.133009][T31674] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 672.141609][T31674] FAT-fs (loop1): Filesystem has been set read-only [ 672.228797][T31683] loop4: detected capacity change from 0 to 512 [ 672.252583][T31683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 672.261891][T31688] FAULT_INJECTION: forcing a failure. [ 672.261891][T31688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.275877][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.5.9304 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 672.275968][T31688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 672.275980][T31688] Call Trace: [ 672.275988][T31688] [ 672.275997][T31688] dump_stack_lvl+0xf6/0x150 [ 672.276026][T31688] dump_stack+0x15/0x1a [ 672.276047][T31688] should_fail_ex+0x261/0x270 [ 672.276084][T31688] should_fail+0xb/0x10 [ 672.276112][T31688] should_fail_usercopy+0x1a/0x20 [ 672.276156][T31688] _copy_from_user+0x1c/0xa0 [ 672.276195][T31688] memdup_user_nul+0x71/0xf0 [ 672.276226][T31688] sel_write_enforce+0x9f/0x300 [ 672.276261][T31688] ? __pfx_sel_write_enforce+0x10/0x10 [ 672.276344][T31688] vfs_write+0x295/0x950 [ 672.276373][T31688] ? putname+0xe1/0x100 [ 672.276397][T31688] ? __fget_files+0x186/0x1c0 [ 672.276423][T31688] ksys_write+0xeb/0x1b0 [ 672.276456][T31688] __x64_sys_write+0x42/0x50 [ 672.276544][T31688] x64_sys_call+0x2a45/0x2e10 [ 672.276570][T31688] do_syscall_64+0xc9/0x1c0 [ 672.276608][T31688] ? clear_bhb_loop+0x25/0x80 [ 672.276679][T31688] ? clear_bhb_loop+0x25/0x80 [ 672.276706][T31688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.276731][T31688] RIP: 0033:0x7fb8f09ad169 [ 672.276768][T31688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.276787][T31688] RSP: 002b:00007fb8ef017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.276807][T31688] RAX: ffffffffffffffda RBX: 00007fb8f0bc5fa0 RCX: 00007fb8f09ad169 [ 672.276822][T31688] RDX: 0000000000000138 RSI: 0000000000000000 RDI: 0000000000000003 [ 672.276837][T31688] RBP: 00007fb8ef017090 R08: 0000000000000000 R09: 0000000000000000 [ 672.276851][T31688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.276865][T31688] R13: 0000000000000000 R14: 00007fb8f0bc5fa0 R15: 00007ffc068e4578 [ 672.276889][T31688] [ 672.305886][T31685] loop1: detected capacity change from 0 to 8192 [ 672.401125][T31683] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 672.485917][T31685] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 672.502315][T31683] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 672.508462][T31685] FAT-fs (loop1): Filesystem has been set read-only [ 672.522347][T31683] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.9302: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 672.541827][T31683] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.9302: couldn't read orphan inode 13 (err -117) [ 672.628484][T31685] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 672.727473][T31702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31702 comm=syz.0.9309 [ 672.743713][T31699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9308'. [ 672.750824][T31700] hub 9-0:1.0: USB hub found [ 672.770589][T31700] hub 9-0:1.0: 8 ports detected [ 672.878530][T31713] loop4: detected capacity change from 0 to 8192 [ 672.896675][T31713] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 672.905340][T31713] FAT-fs (loop4): Filesystem has been set read-only [ 673.042678][T31709] loop5: detected capacity change from 0 to 512 [ 673.050663][T31724] loop1: detected capacity change from 0 to 2048 [ 673.094529][T31709] EXT4-fs (loop5): 1 orphan inode deleted [ 673.102078][T31724] Alternate GPT is invalid, using primary GPT. [ 673.108525][T31724] loop1: p1 p2 p3 [ 673.116399][ T8530] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 673.132483][T31709] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.210417][T31740] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 673.210417][T31740] The task syz.4.9323 (31740) triggered the difference, watch for misbehavior. [ 673.242695][T31740] netlink: 'syz.4.9323': attribute type 21 has an invalid length. [ 673.260888][T31740] netlink: 'syz.4.9323': attribute type 1 has an invalid length. [ 673.287416][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9323'. [ 673.301525][T31740] loop4: detected capacity change from 0 to 1024 [ 673.325554][T31744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31744 comm=syz.1.9327 [ 673.463002][T31751] loop1: detected capacity change from 0 to 512 [ 673.481550][T31751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 673.488446][T31751] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 673.509721][T31751] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 673.518287][T31751] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.9329: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 673.541904][T31751] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9329: couldn't read orphan inode 13 (err -117) [ 673.620390][T31757] loop1: detected capacity change from 0 to 512 [ 673.627596][T31757] ext4: Unknown parameter 'uid<00000000000000000000' [ 673.696757][T31758] netem: change failed [ 673.704557][T31760] loop0: detected capacity change from 0 to 2048 [ 673.803545][T31764] loop1: detected capacity change from 0 to 8192 [ 673.818596][T31764] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 673.827200][T31764] FAT-fs (loop1): Filesystem has been set read-only [ 673.889282][T31768] loop1: detected capacity change from 0 to 512 [ 673.902600][T31768] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 673.927513][T31772] loop2: detected capacity change from 0 to 2048 [ 673.957021][T31774] 9pnet_fd: Insufficient options for proto=fd [ 674.054374][T31783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9334'. [ 674.063425][T31783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9334'. [ 674.101870][T31785] loop4: detected capacity change from 0 to 2048 [ 674.141256][T31785] Alternate GPT is invalid, using primary GPT. [ 674.148458][T31785] loop4: p1 p2 p3 [ 674.306716][T31788] netlink: 'syz.4.9342': attribute type 6 has an invalid length. [ 674.313942][T31789] loop5: detected capacity change from 0 to 2048 [ 674.362998][T31789] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 674.379884][T31789] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 674.392315][T31789] EXT4-fs (loop5): This should not happen!! Data will be lost [ 674.392315][T31789] [ 674.401997][T31789] EXT4-fs (loop5): Total free blocks count 0 [ 674.408025][T31789] EXT4-fs (loop5): Free/Dirty block details [ 674.413948][T31789] EXT4-fs (loop5): free_blocks=2415919104 [ 674.419805][T31789] EXT4-fs (loop5): dirty_blocks=32 [ 674.424967][T31789] EXT4-fs (loop5): Block reservation details [ 674.430988][T31789] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 674.543181][T31797] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9346'. [ 674.671873][T31803] 9pnet_fd: Insufficient options for proto=fd [ 674.720385][T31807] netlink: 'syz.4.9351': attribute type 13 has an invalid length. [ 674.742263][T31801] loop0: detected capacity change from 0 to 8192 [ 674.762016][T31807] smc: net device bond0 applied user defined pnetid SYZ0 [ 674.793747][T31801] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 674.802450][T31801] FAT-fs (loop0): Filesystem has been set read-only [ 674.823051][T31810] smc: net device bond0 erased user defined pnetid SYZ0 [ 674.917610][T31816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9354'. [ 674.946354][T31812] loop2: detected capacity change from 0 to 2048 [ 675.088241][T31827] loop1: detected capacity change from 0 to 2048 [ 675.261114][T31814] loop4: detected capacity change from 0 to 512 [ 675.358328][T31814] EXT4-fs (loop4): 1 orphan inode deleted [ 675.375708][ T3478] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 675.432049][T31814] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.505139][T31837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9359'. [ 675.726835][T31843] 9pnet_fd: Insufficient options for proto=fd [ 675.870751][T31847] loop0: detected capacity change from 0 to 2048 [ 675.912146][T31851] loop2: detected capacity change from 0 to 1024 [ 676.041829][T31854] loop1: detected capacity change from 0 to 764 [ 676.054703][T31847] loop0: unable to read partition table [ 676.061595][T31856] netlink: 'syz.2.9369': attribute type 13 has an invalid length. [ 676.073500][T31847] loop0: partition table beyond EOD, truncated [ 676.079795][T31847] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 676.080473][T31858] loop5: detected capacity change from 0 to 128 [ 676.094167][T31854] rock: directory entry would overflow storage [ 676.096033][T31856] smc: net device bond0 applied user defined pnetid SYZ0 [ 676.100396][T31854] rock: sig=0x4654, size=5, remaining=4 [ 676.126192][T31858] vfat: Unknown parameter 'e' [ 676.136088][T31849] loop4: detected capacity change from 0 to 512 [ 676.175126][T31856] smc: net device bond0 erased user defined pnetid SYZ0 [ 676.227800][T31864] loop0: detected capacity change from 0 to 2048 [ 676.302952][T31868] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 676.306528][T31849] EXT4-fs (loop4): 1 orphan inode deleted [ 676.326282][T31849] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.337969][ T8516] __quota_error: 202 callbacks suppressed [ 676.337986][ T8516] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 676.353746][ T8516] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:50: Failed to release dquot type 1 [ 676.407141][T31864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 676.424067][T31874] 9pnet_fd: Insufficient options for proto=fd [ 676.459220][T22903] EXT4-fs unmount: 94 callbacks suppressed [ 676.459247][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.474322][T31876] loop5: detected capacity change from 0 to 128 [ 676.487086][T31864] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 676.499630][T31864] EXT4-fs (loop0): This should not happen!! Data will be lost [ 676.499630][T31864] [ 676.505864][T31876] vfat: Unknown parameter 'e' [ 676.509405][T31864] EXT4-fs (loop0): Total free blocks count 0 [ 676.520856][T31864] EXT4-fs (loop0): Free/Dirty block details [ 676.526116][ T29] audit: type=1326 audit(1744621256.249:65601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.526804][T31864] EXT4-fs (loop0): free_blocks=2415919104 [ 676.550395][ T29] audit: type=1326 audit(1744621256.249:65602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.557232][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9374'. [ 676.581278][T31864] EXT4-fs (loop0): dirty_blocks=32 [ 676.589415][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9374'. [ 676.594613][ T29] audit: type=1326 audit(1744621256.279:65603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.603756][T31864] EXT4-fs (loop0): Block reservation details [ 676.627341][ T29] audit: type=1326 audit(1744621256.279:65604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.627376][ T29] audit: type=1326 audit(1744621256.279:65605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.627409][ T29] audit: type=1326 audit(1744621256.279:65606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.627440][ T29] audit: type=1326 audit(1744621256.279:65607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.627537][ T29] audit: type=1326 audit(1744621256.279:65608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.627567][ T29] audit: type=1326 audit(1744621256.279:65609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31869 comm="syz.2.9372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d7baed169 code=0x7ffc0000 [ 676.715693][T31878] loop1: detected capacity change from 0 to 2048 [ 676.729784][T31864] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 676.874187][T31082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.914138][T31885] loop0: detected capacity change from 0 to 128 [ 676.931429][T31878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.945950][T31885] vfat: Unknown parameter 'e' [ 676.974965][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9377'. [ 676.984005][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9377'. [ 677.024056][T31889] loop4: detected capacity change from 0 to 8192 [ 677.049295][T31889] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 677.057908][T31889] FAT-fs (loop4): Filesystem has been set read-only [ 677.344205][T31898] loop2: detected capacity change from 0 to 2048 [ 677.370185][T31898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.411368][T31904] netlink: 'syz.4.9382': attribute type 13 has an invalid length. [ 677.423400][T31904] smc: net device bond0 applied user defined pnetid SYZ0 [ 677.436654][T31904] smc: net device bond0 erased user defined pnetid SYZ0 [ 677.455461][T31902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31902 comm=syz.0.9381 [ 677.529039][T31908] loop4: detected capacity change from 0 to 512 [ 677.544934][T31908] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 677.586348][T31908] EXT4-fs (loop4): 1 truncate cleaned up [ 677.594778][T31911] loop0: detected capacity change from 0 to 512 [ 677.611754][T31908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.627221][T31911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 677.641810][T30849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.649504][T31913] loop5: detected capacity change from 0 to 2048 [ 677.677822][T31913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.697907][T31911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.716575][T31911] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.774360][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.790954][T31082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.895260][T31931] loop4: detected capacity change from 0 to 1024 [ 677.904245][T31933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9392'. [ 677.942063][T31935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31935 comm=syz.1.9394 [ 677.962148][T31931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.026743][T31940] loop0: detected capacity change from 0 to 2048 [ 678.111632][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.155383][T31940] loop0: unable to read partition table [ 678.165755][T31940] loop0: partition table beyond EOD, truncated [ 678.171967][T31940] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 678.172279][T31948] loop1: detected capacity change from 0 to 512 [ 678.188080][T31948] ext4: Unknown parameter 'uid<00000000000000000000' [ 678.213399][T31949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9396'. [ 678.229186][T31949] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 678.238889][T31940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9393'. [ 678.252407][T29853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.316479][T31952] loop0: detected capacity change from 0 to 512 [ 678.327979][T31953] netem: change failed [ 678.335565][T31952] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 678.359032][T31955] netlink: 'syz.2.9399': attribute type 13 has an invalid length. [ 678.415275][T31955] smc: net device bond0 applied user defined pnetid SYZ0 [ 678.427046][T31955] smc: net device bond0 erased user defined pnetid SYZ0 [ 678.486710][T31959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.542481][T31965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9400'. [ 678.551504][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9400'. [ 678.578808][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.638506][T31968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=31968 comm=syz.1.9405 [ 678.692255][T31972] loop2: detected capacity change from 0 to 2048 [ 678.719663][T31977] loop5: detected capacity change from 0 to 1024 [ 678.741544][T31972] Alternate GPT is invalid, using primary GPT. [ 678.747847][T31972] loop2: p1 p2 p3 [ 678.763968][T31977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.846467][T31982] netlink: 'syz.1.9409': attribute type 13 has an invalid length. [ 678.869780][T31982] smc: net device bond0 applied user defined pnetid SYZ0 [ 678.877181][T31982] smc: net device bond0 erased user defined pnetid SYZ0 [ 678.913798][T31986] loop2: detected capacity change from 0 to 512 [ 678.920638][T31986] ext4: Unknown parameter 'uid<00000000000000000000' [ 678.928110][T26321] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.950807][T31988] 9pnet_fd: Insufficient options for proto=fd [ 679.001575][T31991] netem: change failed [ 679.027629][T31990] bridge0: port 3(macsec1) entered blocking state [ 679.034172][T31990] bridge0: port 3(macsec1) entered disabled state [ 679.045497][T31990] macsec1: entered allmulticast mode [ 679.050907][T31990] bridge0: entered allmulticast mode [ 679.051006][T31994] loop4: detected capacity change from 0 to 2048 [ 679.064595][T31990] macsec1: left allmulticast mode [ 679.069776][T31990] bridge0: left allmulticast mode [ 679.079995][T31995] netlink: 'syz.1.9414': attribute type 13 has an invalid length. [ 679.105170][T31995] smc: net device bond0 applied user defined pnetid SYZ0 [ 679.130780][T31995] smc: net device bond0 erased user defined pnetid SYZ0 [ 679.135214][T31994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.209676][T31999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.266628][T32001] ================================================================== [ 679.274766][T32001] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 679.283024][T32001] [ 679.285347][T32001] write to 0xffff888123ddcf08 of 4 bytes by task 31994 on cpu 0: [ 679.293066][T32001] writeback_single_inode+0x14f/0x3f0 [ 679.298444][T32001] sync_inode_metadata+0x60/0x90 [ 679.303390][T32001] generic_buffers_fsync_noflush+0xd8/0x120 [ 679.309300][T32001] ext4_sync_file+0x1c3/0x6c0 [ 679.313988][T32001] vfs_fsync_range+0x116/0x130 [ 679.318772][T32001] ext4_buffered_write_iter+0x358/0x3c0 [ 679.324330][T32001] ext4_file_write_iter+0x3b2/0xf80 [ 679.329536][T32001] iter_file_splice_write+0x5f2/0x980 [ 679.334948][T32001] direct_splice_actor+0x160/0x2c0 [ 679.340075][T32001] splice_direct_to_actor+0x305/0x680 [ 679.345461][T32001] do_splice_direct+0xd9/0x150 [ 679.350239][T32001] do_sendfile+0x40a/0x690 [ 679.354663][T32001] __x64_sys_sendfile64+0x113/0x160 [ 679.359867][T32001] x64_sys_call+0xfc3/0x2e10 [ 679.364468][T32001] do_syscall_64+0xc9/0x1c0 [ 679.368986][T32001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.374885][T32001] [ 679.377208][T32001] read to 0xffff888123ddcf08 of 4 bytes by task 32001 on cpu 1: [ 679.384842][T32001] __mark_inode_dirty+0x198/0x7e0 [ 679.389875][T32001] ext4_write_inline_data_end+0x3c6/0x5d0 [ 679.395616][T32001] ext4_write_end+0x3eb/0x770 [ 679.400309][T32001] ext4_da_write_end+0x74/0x810 [ 679.405170][T32001] generic_perform_write+0x31e/0x4b0 [ 679.410460][T32001] ext4_buffered_write_iter+0x1ed/0x3c0 [ 679.416013][T32001] ext4_file_write_iter+0x3b2/0xf80 [ 679.421217][T32001] iter_file_splice_write+0x5f2/0x980 [ 679.426607][T32001] direct_splice_actor+0x160/0x2c0 [ 679.431743][T32001] splice_direct_to_actor+0x305/0x680 [ 679.437132][T32001] do_splice_direct+0xd9/0x150 [ 679.441911][T32001] do_sendfile+0x40a/0x690 [ 679.446333][T32001] __x64_sys_sendfile64+0x113/0x160 [ 679.451538][T32001] x64_sys_call+0xfc3/0x2e10 [ 679.456137][T32001] do_syscall_64+0xc9/0x1c0 [ 679.460653][T32001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.466559][T32001] [ 679.468888][T32001] value changed: 0x00000038 -> 0x00000002 [ 679.474613][T32001] [ 679.476941][T32001] Reported by Kernel Concurrency Sanitizer on: [ 679.483117][T32001] CPU: 1 UID: 0 PID: 32001 Comm: syz.4.9415 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 679.493888][T32001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 679.503950][T32001] ================================================================== [ 679.870924][T22903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.