last executing test programs: 55.102190988s ago: executing program 32 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0x0, 0x20000000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x400, 0x81) getdents(r2, 0x0, 0x66) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000030803000000000000000000050000060c0004800808014000000005050003002f"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r7, @ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8000, 0x3, 0x1d}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r9, 0x7b55, 0x2583, 0x4, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x1c2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 51.153907692s ago: executing program 33 (id=176): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) socket$caif_stream(0x25, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r5, 0x0, 0x48) 45.932036555s ago: executing program 34 (id=247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') (fail_nth: 12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 41.083891472s ago: executing program 35 (id=340): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100), 0x0, 0x400003, 0x4, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x40, 0x7, 0x9a2, {{0x6, 0x4, 0x0, 0x18, 0x18, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 34.890535932s ago: executing program 8 (id=434): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x14, 0x85dd8c4bb252b922, 0x2, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="00f430992e"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r5, r3, 0x3c, 0x28, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0xf, 0x0, 0x2, 0x0}) 34.544557527s ago: executing program 8 (id=437): openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x4e6402, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="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", 0x119}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b0722e5ede8641935e5c0dabdd253711d3cd9b12432447111ab1429b165c7248cded82bfb4a3f48e8d0", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4", 0x55}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x48580) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x100}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="0100000000000000000004000000050001000000000008000700e0000002080002000500000008000800ac1e0001"], 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000980)={0xa, 0x4e21, 0x1000, @local, 0x9}, 0x1c) ioperm(0x0, 0x7, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) clock_getres(0x2, 0x0) 33.620569472s ago: executing program 8 (id=451): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0x3, 0x9}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000076d4"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@empty, @multicast, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "7dd75f0a421d8c39"}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x24060400) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x68f}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 32.533977989s ago: executing program 8 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r1, 0x1) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.8415018s ago: executing program 5 (id=482): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xeb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='snd_soc_dapm_connected\x00', r1, 0x0, 0x9}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 31.819612731s ago: executing program 8 (id=483): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 31.711165463s ago: executing program 5 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x2000}, 0x1c) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007940), 0x55, 0x30, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r10) connect$inet(r9, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) 31.114276772s ago: executing program 8 (id=487): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000000b0601010000000000000000032000000900020073797a310000000005000100070000003c0008800c00078007001a00242e0000100007800c0018400000000008000009102107800c001b4000000000000000100c00078008000a400000ffff04"], 0x68}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 31.114188172s ago: executing program 36 (id=487): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000000b0601010000000000000000032000000900020073797a310000000005000100070000003c0008800c00078007001a00242e0000100007800c0018400000000008000009102107800c001b4000000000000000100c00078008000a400000ffff04"], 0x68}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 30.803195267s ago: executing program 5 (id=494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000000000000004000000060000004c010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001b"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x9, &(0x7f0000000340)=[{0xfff, 0x48, 0xd, 0xc000}, {0x400, 0x80, 0xb, 0x2}, {0x5, 0x4, 0xfc, 0x2}, {0x133, 0x81, 0x5, 0x9}, {0x7, 0xab, 0x5, 0x3}, {0x9d, 0x9, 0x1, 0x1ff}, {0x8, 0x5, 0xa8, 0x3}, {0x7ff, 0xe, 0x2}, {0xfff, 0x7, 0x9, 0x405}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 29.850345402s ago: executing program 5 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r1, 0x1) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.779701763s ago: executing program 6 (id=509): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x26}}, {@jqfmt_vfsv0}, {@orlov}, {@errors_remount}]}, 0x4, 0x477, &(0x7f0000000300)="$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") unshare(0x22020600) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x8002007ffb) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001080)={r1, &(0x7f0000001080), &(0x7f0000001280)=""/169}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000001100)="b9f304b0388b04fc8acca2e5e873d7c4fafd4347189b82a12891ad048466c3ac90f5f58bcd7802b36e099da8ffd5123539dfb2ff60a90ab176f546f5592a5afb2d0b49954897e31e88498e955baa0f5a61a26edef67df9fc8d818caf49ced062297a033c2bfd4a7ed47a878a0161b858fdc30e52ab2a37ab0c4bfb4c98d2d05840f632", 0xa}], 0x2, 0x0, 0x36, 0x1f00c00e}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 29.527569568s ago: executing program 5 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000a00)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x2000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 29.110754824s ago: executing program 5 (id=515): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="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", 0x175}], 0x1}, 0x4044080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="191f394d0ab51e4c664de60dc483dd1f66b638ee23de0773d0a0ea73f790daf02b14f4b1d568554fbe68d029b57cfce0e34757ba0655e827aed18f2d875eb630f27ba9dfab86c5aa6550c3624e13fff3dc20e5aec9bad476150a5147acbbe31b554dce12a6d97f812e0fc926ac80fee5fd105073e74253cac33f93ca66c1ee7eb271264648a9", 0x86}, {&(0x7f0000000380)="45c5a2d558864023b7a0d7e69eecb630e293aff3355b9df90562699a165357f508a39e910435357abc30e726c7e8f9e678f0d944a37faaba9408f30c2cf5e80653a93b2c13452830f8a48968b2cd4c69cb9670f04a45", 0x56}], 0x2}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340)={0x43}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 29.066345794s ago: executing program 37 (id=515): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)="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", 0x175}], 0x1}, 0x4044080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="191f394d0ab51e4c664de60dc483dd1f66b638ee23de0773d0a0ea73f790daf02b14f4b1d568554fbe68d029b57cfce0e34757ba0655e827aed18f2d875eb630f27ba9dfab86c5aa6550c3624e13fff3dc20e5aec9bad476150a5147acbbe31b554dce12a6d97f812e0fc926ac80fee5fd105073e74253cac33f93ca66c1ee7eb271264648a9", 0x86}, {&(0x7f0000000380)="45c5a2d558864023b7a0d7e69eecb630e293aff3355b9df90562699a165357f508a39e910435357abc30e726c7e8f9e678f0d944a37faaba9408f30c2cf5e80653a93b2c13452830f8a48968b2cd4c69cb9670f04a45", 0x56}], 0x2}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340)={0x43}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 28.972282616s ago: executing program 6 (id=518): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r0, 0x2def, 0xf510, 0x8, 0x0, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="00000000000057f9ea17a45d0676bdc0617ffe69", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='mr_alloc\x00', r4, 0x0, 0xfffffffffffffffe}, 0xffffffffffffff4d) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r6}}, 0x48) clock_nanosleep(0x9, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) 28.853820368s ago: executing program 6 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 28.802954489s ago: executing program 6 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r1, 0x1) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 28.664935721s ago: executing program 6 (id=525): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000007e08000000000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f15) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x8c, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x2, 0xa, 0x7, 0x9, 0xffffffff}, @alu={0x4, 0x0, 0x5, 0x5, 0x7, 0x30}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000400)=""/49, 0x41000, 0x5, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x0, 0x7}, 0x10, r6, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x5dd8, 0x0, 0x5, 0x9, 0x8, 0x7e, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001200)={@broadcast, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x14, 0xff, 0x4, 0x0, @remote, @broadcast}}}}}, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r11 = open(&(0x7f00000001c0)='.\x00', 0x20b00, 0x9) fcntl$notify(r11, 0x402, 0x8000003d) fcntl$notify(r11, 0x402, 0x36) 28.079781391s ago: executing program 6 (id=528): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r0, 0x2def, 0xf510, 0x8, 0x0, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="00000000000057f9ea17a45d0676bdc0617ffe69", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='mr_alloc\x00', r4, 0x0, 0xfffffffffffffffe}, 0xffffffffffffff4d) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) 28.041722071s ago: executing program 38 (id=528): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r0, 0x2def, 0xf510, 0x8, 0x0, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="00000000000057f9ea17a45d0676bdc0617ffe69", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='mr_alloc\x00', r4, 0x0, 0xfffffffffffffffe}, 0xffffffffffffff4d) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfa, 0x7fff0000}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) 22.52142157s ago: executing program 9 (id=585): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@resuid}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 21.985716968s ago: executing program 9 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 21.760213902s ago: executing program 9 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x200000000000000) 21.450897206s ago: executing program 9 (id=599): r0 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r1, 0x1) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.684241359s ago: executing program 9 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 20.471203972s ago: executing program 9 (id=617): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000007e08000000000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f15) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x8c, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x2, 0xa, 0x7, 0x9, 0xffffffff}, @alu={0x4, 0x0, 0x5, 0x5, 0x7, 0x30}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000400)=""/49, 0x41000, 0x5, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x0, 0x7}, 0x10, r6, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) 20.452714592s ago: executing program 39 (id=617): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000007e08000000000000", @ANYRES32=r0, @ANYBLOB="00020000000000000000000000000000000000008d3592fbec47cebb547a7924d1d5d7523a80c2b0993d0206dc55692dac41c72a426e5f9507d43820dfe314a5a96e4fdc76838740f1eabc244fd7bf297471e7b985a7d2611b062ca516d4826db8870d46e3369974df2de6377710409cc56197889376108560f8089a637eaab47c8421368071a86f592992abf316cb3fbfbcb51dbe103411e2da782cb499b6f865bb40cd30a160609eeb749da3e3b456861ad21fd5e097d91d89491752ec36d37e41c95bee0f0331cfd3653b9fb01067677044e57f8e38de9410eb7ea0d83275a6fd7d2ba46a1da54520f377038eef5e55bc8008acc4ffe9aa3b7a84e15cf569ba9ad446c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f15) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x8c, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x2, 0xa, 0x7, 0x9, 0xffffffff}, @alu={0x4, 0x0, 0x5, 0x5, 0x7, 0x30}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000400)=""/49, 0x41000, 0x5, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x0, 0x7}, 0x10, r6, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) 5.938953104s ago: executing program 2 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) 5.833446016s ago: executing program 2 (id=854): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000a00)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x2000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 5.782669757s ago: executing program 2 (id=855): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000001080101000000000000000000000000ab50992d1078870a8a1ad3e72b077a889d47de"], 0x14}}, 0x0) 5.666099809s ago: executing program 2 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x84000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r2, 0x1) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.515478561s ago: executing program 2 (id=860): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.279030425s ago: executing program 2 (id=865): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 5.268270625s ago: executing program 40 (id=865): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 3.773120439s ago: executing program 3 (id=882): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.867027974s ago: executing program 0 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@nouser_xattr}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90Wgs%\xe4\x85\xcb>\xb6cR\x87/f\xec\xe7\xb7\x02\xba\xd9\xf872`\x82\xfd\t\xc0O\xae\b\xc0nW\xcd\xe4o\xefH\xa9l\xd9\xb6\xa1\xc5\xe2\x97\xc1v\x1f#\xdf)\x15\x10\x1f\xe2\xbe\x14\x1cU\xf4\x18\x0f\xa0\xda\xb3|HN\xd1\xed\x11\x9b\xf3\'7t\xc3\x8b\x8bo\x97_\xa8(\xee\x82\xf0\xb3m\x9dR#\xa8\xb9%<\xf4y\v|\x04\x15\x15G|#\x978\xa2O]wuj*w\xe53\x92\xcb\xe3\x05\x1d\xab\x9d|]\xcf\a@\x8cR=\x10[\x0f\xa0\xf0\x9fw\xd7\x12y\xa7\xac\xd6\x87\xee\x86\x03\x01\xfc(\x19(\xbc\x94T\x00\x88\xa5Q5\xb0\x13\xa1h\xd1\xb6\x9b\x19|\xc5\"\xf78\x10N\x18<]@\x1e\xf4\x94\xf3\xfb\xee\x8eo\f~;3\"K\'\xfb\xd2\xc3\x9e\x98|\xd3\xdd\xba\x1f\xe0\x8ecR\xa3u\xbc\x99C\x8e'}}]}, 0x15, 0x560, &(0x7f0000000dc0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) io_setup(0x3, &(0x7f0000000340)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r9, &(0x7f0000003fc0)=[{{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/20, 0x14}, {0x0}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f0000000980)=""/33, 0x21}], 0x4, &(0x7f0000000b40)=""/77, 0x4d}, 0x1}, {{0x0, 0x0, 0x0}, 0xe48c}], 0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000000b0a010400000000000000000100000008000a40000000000900020073797a320000000009000100"], 0xe8}}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x2a0000, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r11, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r12, @ANYBLOB="010027bd7000fbdbdf2513000000080001007063690011000200303030303a30302a31302e3000000000080003000200000008000b0003000000060011007c0c0000080001007063690011000200303030304e30303a31302e3000000000080003000300000008000b00020000000600110000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00000000000600110017f80000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.49505567s ago: executing program 3 (id=892): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1.791274481s ago: executing program 3 (id=899): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000002d40)='kfree\x00', r0, 0x0, 0xb}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000400)=""/237) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004"], 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x0) epoll_wait(r4, &(0x7f0000000100)=[{}, {}], 0x2, 0x8) 1.772893141s ago: executing program 0 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.732947602s ago: executing program 0 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r8 = dup3(r5, r5, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000007100000229bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c0001800500030000100001800c00048008000200130000000c000180060002000d0000000c000180060002000b000000100001800c00048008000100e2e80000100001800c00048008000100ff0300000c0001800500030002000000000000"], 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x224, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) lsm_get_self_attr(0x68, &(0x7f0000000300)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000000400)=0x90, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x8c, 0x2000) 1.532303206s ago: executing program 7 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f0000000340)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028", @ANYRES32], 0x28}}, 0x8000) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="17fc692fa860a6d1742ba9d5b3d825", 0xf}], 0x1, 0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) fchown(r10, 0x0, 0x0) r11 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r11, 0x402c542c, &(0x7f0000000000)) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0xfeba, 0x40, 0x1, 0x0, 0x0, 0x0, 0x98a0, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xaa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") 1.522319675s ago: executing program 0 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) shutdown(r2, 0x1) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.417627497s ago: executing program 1 (id=907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.332439849s ago: executing program 1 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="600030800500020000000000140004"], 0x7c}}, 0x0) 1.297277689s ago: executing program 0 (id=909): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1.282655199s ago: executing program 4 (id=910): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000001080101000000000000000000000000ab50992d1078870a8a1ad3e72b077a889d47de1388b10e4f233eebb58c476731e5eb91bc37981519f78ebb115209c7b68f1376d548"], 0x14}}, 0x0) 1.264235379s ago: executing program 3 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.263622059s ago: executing program 1 (id=912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x26}}, {@jqfmt_vfsv0}, {@orlov}, {@errors_remount}]}, 0x4, 0x477, &(0x7f0000000300)="$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") unshare(0x22020600) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x8002007ffb) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 1.20877634s ago: executing program 0 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) 1.184475771s ago: executing program 41 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) 1.181671041s ago: executing program 4 (id=915): r0 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1) 1.111740982s ago: executing program 4 (id=916): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000480)=""/228, 0xe4}, {}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f00000007c0)=""/177, 0xb1}], 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000009c0)={0x53, 0x8000000000000002, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000780)="474ca2f9772c", 0x0, 0x400, 0x2, 0x1, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 781.648587ms ago: executing program 4 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$eJzs3U9sHFcZAPBvXCdxXBFVBYUoStNpWqRESt2107qyemi367Ez7XrX2l1XiRBqI+JUUZy2aqhEciDNBQQCIU4cSw9c4IS4gJBA4gCckODKrVIlDi0IJA6gSkY7s5vY8a6dP04c0O9nxfNm3pt53zxv5ttZe2YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIikNlupTCZRzxtLp9LharOt5sIm9f3t/WbdZJN+I5LuvxgbiwPlogNfuFG9v/vtSBwq5w7FWHcyFlce3v/IC58fHemvv0lA22100MJLl69cOLOysvzufQzkHvjOr9bN/ng8bnFk57NG3m7mC9X5LM3bzXRmerryzMm5djqX17P26XYnW0hrrazaabbSo7Vj6eTMzIk0mzjdXGrMz1brWTpaLnz+6alKZTp9ZWIxq7bazcYzr0y0ayfzej1vzBcrdqu7bZ7vvhBfzTtpJ6supOm58yvLJ9aHtHdDkN1Gk+uWfLa6du7QU498/N5H/zy/PLXV7k5VpqYmJ6emJqefm3nu+UpldMOCyk1iQ4v7+qLlAbTNR3C4c/38H/XIoxFLcSrSgV+1mI1WNGNhSH1PP/9/6Zm//XHTftfk/zLLjxw6cKP6YBT5/3A5d3hY/i/73r1nSEz36qsvjUtxOa7EhTgTK7ESy/HuPekv2b5tjWxvZPORRSPyaEcz8liIarEk7S1JYyamYzoq8XqcjLloRxpzkUc9smjH6WhHJ7LiFVWLVmRRjU40oxVpHI1aHIs0JmMmZuJEpJHFRJyOZixFI+ZjNqrFVs7F+WLcT9wU1/5vvPHLN//08QfFT6vfaHKzIX4/omj0j9gbMaSR/M/d294DONyF1X7+v1lxQAQAAAD+HyTFp+/d8/9d8VhRmsvr2Ze3WGu0+80HBAAAAPA/ovjN/6HuZFe39Fgk3fP/yvpGP921M8EBAAAA2yIprrFLImI8Hi9L/culKjsdGwAAALA9it//H+5OxiOuFgtu5/x/wI0DAAAAgAfNaz/vFW6+x/5H/Xvsthf3JL/+e7Rau5Jri6eeSi5Wu+2qFx8q1+tNVgt7IqIzdzDpfy5QbGt69MrD3fnRWnYo6d/98rM95fTT4vvB0esBrY/jpb3l0iRJtgjghm4A+3p7cT2AYi6+G0+UbZ44W07P9mvKvR2fy+vZRK1Zf2EyqtV9I53sVOe9t85/PYrd/3ZjYV8S586vLE989e2Vs0Us17pbuXaxt78bPg7ZJJbV3gjEY4PvbryruBCj1+942W9l7f6PXNrXLYzcRp/fjCNlmyPj5XR8/f6PdfucnBi29+Pl/k1u2PPRjS+sTaN4smzz5NEny8mAKKY2i6I7FlNro+gNwu2NxcAo4pGI+OCJq6f+9btmkp3YKooTdxkFwE45V9z15+Ys9J8yna9283+rtWt3rMs75Qq3epRLil62eJLPrWf3f69uckQ/WrY5Wr6fGD04IK9UBhzR3zn/zu97R/Rnf/LDH33l8B9+dsd5fazfZG+/8OhvHx6JIoq9vSiu9Gpau5LvXc8kZVb9sLv8w6H9tutTSXcIH/raxXdi/6XLV54+f/HMm8tvLr81NXViuvJspfJckvR+eKvFOwa5B4ABjsThMpEPfcbOkKfwFG8Aytz97GZn1Q9F8uj1Pyno5sS3YyXOxvHiaoOIeHxwv+PFOsV7kCLKMtjBZ63ja57wcnyLc8vdxY0Oum2ntmw7vubxMjd88Qf38McBAPfFkS3y8ND8v+bc/fgW593ja/6k8HgcK9se60cwPJcDAPdG1vo0Ge98K2m18sXXJ2dmJqudk1naatZeTVv57HyW5o1O1orRamM+SxdbzU6z1qx3C6/ls1k7bS8tLjZbnXSu2UoXm+38VPHk97T36Pd2tlBtdPJae7GeVdtZWms2OtVaJ53N27V0cenlet4+mbWKlduLWS2fy2vVTt5spO3mUquWTaRpO8vWNMxns0Ynn8u7xUa62MoXqq1rEVFfWsjS2axda+WLnWa5wX5feWOu2VooNvvXfTs92gDwYLh0+cqFMysry+/eWeEvt9J4eO9jbiwMADvgRpb+5HM31724MyEBAAAAAAAAAAAAAAA3ucvr/zYW9t7x6qMxoGpss7VWr0ZsrEpWV1dvo/e9sUWb3b2h2uaBui+Fa9uynZEYNM4PTiEZXvXGiy9eGLb6y1cPnLy1Lrb8nzIaEb1LXd//ZPcvvl9WvXRHuzNy+2v9OSLuoK/VZJM2O3tcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB/hsAAP//NAJwuw==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) shutdown(r2, 0x1) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045518, &(0x7f0000002a40)) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x37c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x350, 0x4, 0x0, 0x1, [{0x34c, 0x1, 0x0, 0x1, @dynset={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 661.566629ms ago: executing program 4 (id=920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 603.17011ms ago: executing program 7 (id=921): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) 581.33369ms ago: executing program 7 (id=922): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) socket$packet(0x11, 0x2, 0x300) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = accept4$x25(r3, &(0x7f0000000080), &(0x7f0000000140)=0x12, 0x80000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'batadv_slave_0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0xcb2, 0x0, "ed22f2d7e499"}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 452.677002ms ago: executing program 4 (id=923): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 426.884953ms ago: executing program 42 (id=923): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x109000, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 318.282394ms ago: executing program 1 (id=925): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2000098, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x44c, &(0x7f0000001380)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x10) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r5 = syz_io_uring_setup(0x69c6, &(0x7f0000000440)={0x0, 0xc3d, 0x8, 0x1, 0x2ce}, &(0x7f00000003c0), &(0x7f0000000500)) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ed07449e7b20d702e43a78374577ade6", @ANYRESOCT=r1, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000100)) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r9}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000000000ee3f00000000200057bf5e695fdefa8378a966bf2d120009000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 99.560448ms ago: executing program 7 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40102, 0xe5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000000801030000000000000000010000000c00048008000740000000000900010073797a310000000005000300840000000600024088f7000059f82c34f3813b3c5e9cdcb456454fb3ae106a241e58f04e3f53ef767f62d77e4112f32b89ca9e7d63df744d8087167664f53b5f898c1be83606dcf6136dde89c7a7f0bb25107a9e5479169277ebea4c91fba693"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x40) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 73.063969ms ago: executing program 3 (id=927): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb7"], 0x138) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000480)=""/228, 0xe4}, {}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f00000007c0)=""/177, 0xb1}], 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000009c0)={0x53, 0x8000000000000002, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000780)="474ca2f9772c", 0x0, 0x400, 0x2, 0x1, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 62.948079ms ago: executing program 7 (id=928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000200)={'rose0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x68040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1200820, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000780)="d27c", 0x2, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 0s ago: executing program 1 (id=929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r1, 0x101, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x30) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="ebe90f899977", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010105, @multicast1}, {0x17, 0x7c, 0x0, @remote}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): FLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.026397][ T5610] RAX: ffffffffffffffda RBX: 00007f1917f65fa0 RCX: 00007f1917d4bc1f [ 79.026412][ T5610] RDX: 0000000000000036 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 79.026429][ T5610] RBP: 00007f19163b7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.026447][ T5610] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 79.026462][ T5610] R13: 0000000000000000 R14: 00007f1917f65fa0 R15: 00007ffcdb5dcb88 [ 79.026484][ T5610] [ 79.355093][ T5626] loop2: detected capacity change from 0 to 2048 [ 79.394662][ T5626] EXT4-fs: Ignoring removed bh option [ 79.465453][ T5645] loop9: detected capacity change from 0 to 512 [ 79.479658][ T5645] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 79.487286][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.505761][ T5626] x_tables: unsorted underflow at hook 1 [ 79.533195][ T5645] EXT4-fs (loop9): 1 truncate cleaned up [ 79.539684][ T5645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.606315][ T5405] veth0_vlan: entered promiscuous mode [ 79.614179][ T5405] veth1_vlan: entered promiscuous mode [ 79.641042][ T5271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.664987][ T5405] veth0_macvtap: entered promiscuous mode [ 79.696276][ T5405] veth1_macvtap: entered promiscuous mode [ 79.735497][ T5647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.752826][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.763421][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.773324][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.783895][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.793802][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.804445][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.814320][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.824886][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.834760][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.845354][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.855260][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.865745][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.875621][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.886164][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.896090][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.906560][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.944660][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.952194][ T5672] netem: unknown loss type 0 [ 79.956899][ T5672] netem: change failed [ 79.961790][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.972400][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.982386][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.992948][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.003021][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.013610][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.020013][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 80.020030][ T29] audit: type=1400 audit(1743493956.554:3112): avc: denied { create } for pid=5675 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.023498][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.054576][ T29] audit: type=1400 audit(1743493956.574:3113): avc: denied { write } for pid=5675 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.060347][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.060367][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.100978][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.101505][ T5677] loop3: detected capacity change from 0 to 512 [ 80.110821][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.127603][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.137450][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.147926][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.157916][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.168409][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.180504][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.183802][ T5677] EXT4-fs: Ignoring removed oldalloc option [ 80.206274][ T5679] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 80.243952][ T5405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.252844][ T5405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.261826][ T5405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.262229][ T5677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.560: Parent and EA inode have the same ino 15 [ 80.270561][ T5405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.287654][ T5683] loop9: detected capacity change from 0 to 2048 [ 80.302585][ T5677] EXT4-fs (loop3): Remounting filesystem read-only [ 80.309313][ T5677] EXT4-fs warning (device loop3): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 80.328718][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.341190][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.341190][ T12] [ 80.350865][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 80.356978][ T12] EXT4-fs (loop2): Free/Dirty block details [ 80.362929][ T12] EXT4-fs (loop2): free_blocks=2415919104 [ 80.365968][ T5687] FAULT_INJECTION: forcing a failure. [ 80.365968][ T5687] name failslab, interval 1, probability 0, space 0, times 0 [ 80.368736][ T12] EXT4-fs (loop2): dirty_blocks=3472 [ 80.368765][ T12] EXT4-fs (loop2): Block reservation details [ 80.368777][ T12] EXT4-fs (loop2): i_reserved_data_blocks=217 [ 80.370394][ T5677] EXT4-fs (loop3): 1 orphan inode deleted [ 80.381496][ T5687] CPU: 0 UID: 0 PID: 5687 Comm: syz.1.563 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 80.381589][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.381605][ T5687] Call Trace: [ 80.381614][ T5687] [ 80.381624][ T5687] dump_stack_lvl+0xf6/0x150 [ 80.381661][ T5687] dump_stack+0x15/0x1a [ 80.381682][ T5687] should_fail_ex+0x261/0x270 [ 80.381710][ T5687] should_failslab+0x8f/0xb0 [ 80.381743][ T5687] __kmalloc_noprof+0xad/0x410 [ 80.381804][ T5687] ? ___neigh_create+0x4d0/0x12a0 [ 80.381868][ T5687] ___neigh_create+0x4d0/0x12a0 [ 80.381896][ T5687] ? mroute6_is_socket+0x151/0x190 [ 80.382024][ T5687] __neigh_create+0x54/0x70 [ 80.382079][ T5687] ip6_finish_output2+0x649/0xd70 [ 80.382111][ T5687] ? __rcu_read_unlock+0x34/0x70 [ 80.382147][ T5687] ip6_finish_output+0x43b/0x540 [ 80.382257][ T5687] ip6_output+0xf7/0x240 [ 80.382280][ T5687] ? __pfx_ip6_finish_output+0x10/0x10 [ 80.382304][ T5687] ? __pfx_ip6_output+0x10/0x10 [ 80.382328][ T5687] ip6_xmit+0x93f/0xcc0 [ 80.382355][ T5687] ? __pfx_dst_output+0x10/0x10 [ 80.382378][ T5687] ? inet6_csk_route_socket+0x282/0x3e0 [ 80.382445][ T5687] inet6_csk_xmit+0x1df/0x220 [ 80.382487][ T5687] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 80.382549][ T5687] __tcp_transmit_skb+0x12dd/0x1a20 [ 80.382602][ T5687] tcp_send_window_probe+0x1e0/0x200 [ 80.382682][ T5687] do_tcp_setsockopt+0x16bf/0x1710 [ 80.382754][ T5687] ? selinux_socket_setsockopt+0x1d9/0x210 [ 80.382792][ T5687] tcp_setsockopt+0x50/0xb0 [ 80.382829][ T5687] sock_common_setsockopt+0x64/0x80 [ 80.382913][ T5687] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.382952][ T5687] __sys_setsockopt+0x187/0x200 [ 80.382978][ T5687] __x64_sys_setsockopt+0x66/0x80 [ 80.383049][ T5687] x64_sys_call+0x2a09/0x2e10 [ 80.383077][ T5687] do_syscall_64+0xc9/0x1c0 [ 80.383103][ T5687] ? clear_bhb_loop+0x25/0x80 [ 80.383129][ T5687] ? clear_bhb_loop+0x25/0x80 [ 80.383317][ T5687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.383397][ T5687] RIP: 0033:0x7f1917d4d169 [ 80.383486][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.383508][ T5687] RSP: 002b:00007f19163b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.383531][ T5687] RAX: ffffffffffffffda RBX: 00007f1917f65fa0 RCX: 00007f1917d4d169 [ 80.383547][ T5687] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 80.383561][ T5687] RBP: 00007f19163b7090 R08: 0000000000000004 R09: 0000000000000000 [ 80.383577][ T5687] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 80.383592][ T5687] R13: 0000000000000000 R14: 00007f1917f65fa0 R15: 00007ffcdb5dcb88 [ 80.383613][ T5687] [ 80.388019][ T58] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 80.399859][ T5677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.600994][ T5683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.602997][ T29] audit: type=1400 audit(1743493957.124:3114): avc: denied { tracepoint } for pid=5701 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.705216][ T5682] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.791719][ T29] audit: type=1400 audit(1743493957.294:3115): avc: denied { create } for pid=5681 comm="syz.9.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.811492][ T29] audit: type=1400 audit(1743493957.294:3116): avc: denied { setopt } for pid=5681 comm="syz.9.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.831199][ T29] audit: type=1400 audit(1743493957.294:3117): avc: denied { read } for pid=5681 comm="syz.9.562" dev="nsfs" ino=4026534343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.852509][ T29] audit: type=1400 audit(1743493957.294:3118): avc: denied { open } for pid=5681 comm="syz.9.562" path="net:[4026534343]" dev="nsfs" ino=4026534343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.875948][ T29] audit: type=1400 audit(1743493957.304:3119): avc: denied { create } for pid=5681 comm="syz.9.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.895490][ T29] audit: type=1400 audit(1743493957.304:3120): avc: denied { create } for pid=5681 comm="syz.9.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.914965][ T29] audit: type=1400 audit(1743493957.324:3121): avc: denied { allowed } for pid=5675 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.962163][ T5718] __nla_validate_parse: 6 callbacks suppressed [ 80.962182][ T5718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.529'. [ 81.057551][ T5731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.569'. [ 81.067725][ T5676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 81.067837][ T5683] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28 [ 81.089310][ T5683] EXT4-fs (loop9): This should not happen!! Data will be lost [ 81.089310][ T5683] [ 81.099022][ T5683] EXT4-fs (loop9): Total free blocks count 0 [ 81.105162][ T5683] EXT4-fs (loop9): Free/Dirty block details [ 81.111075][ T5683] EXT4-fs (loop9): free_blocks=2415919104 [ 81.116911][ T5683] EXT4-fs (loop9): dirty_blocks=576 [ 81.122196][ T5683] EXT4-fs (loop9): Block reservation details [ 81.128247][ T5683] EXT4-fs (loop9): i_reserved_data_blocks=36 [ 81.150900][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.162635][ T5735] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 81.193529][ T5737] loop2: detected capacity change from 0 to 1024 [ 81.198381][ T5739] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 81.225382][ T5742] netlink: 152 bytes leftover after parsing attributes in process `syz.3.571'. [ 81.225661][ T5737] EXT4-fs: Ignoring removed orlov option [ 81.280489][ T5737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.371476][ T5760] netem: unknown loss type 0 [ 81.376176][ T5760] netem: change failed [ 81.384543][ T5763] loop4: detected capacity change from 0 to 512 [ 81.451346][ T5763] EXT4-fs: Ignoring removed orlov option [ 81.476993][ T5763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.548068][ T5763] EXT4-fs (loop4): 1 orphan inode deleted [ 81.553897][ T5763] EXT4-fs (loop4): 1 truncate cleaned up [ 81.568482][ T5763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.653998][ T5777] vhci_hcd: invalid port number 15 [ 81.659343][ T5777] vhci_hcd: invalid port number 15 [ 81.793493][ T5804] loop3: detected capacity change from 0 to 512 [ 81.831204][ T5804] EXT4-fs: Ignoring removed oldalloc option [ 81.863493][ T5810] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.574: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 81.926790][ T5810] EXT4-fs (loop4): Remounting filesystem read-only [ 81.947456][ T5804] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.582: Parent and EA inode have the same ino 15 [ 81.969939][ T5804] EXT4-fs (loop3): Remounting filesystem read-only [ 81.976594][ T5804] EXT4-fs warning (device loop3): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 81.991758][ T5804] EXT4-fs (loop3): 1 orphan inode deleted [ 82.003737][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.044930][ T5352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.067792][ T5825] loop9: detected capacity change from 0 to 512 [ 82.088055][ T5825] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 82.226674][ T5804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 82.236234][ T554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.251024][ T5825] EXT4-fs (loop9): 1 truncate cleaned up [ 82.259703][ T5825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.483511][ T5405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.533845][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.591739][ T5271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.752503][ T5842] netem: unknown loss type 0 [ 82.757440][ T5842] netem: change failed [ 82.765964][ T5843] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 82.852942][ T5857] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.859719][ T5854] loop9: detected capacity change from 0 to 1024 [ 82.908829][ T5854] EXT4-fs: Ignoring removed nobh option [ 82.914465][ T5854] EXT4-fs: Ignoring removed bh option [ 83.001854][ T5854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.042872][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 83.051731][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 83.060640][ T5870] netlink: 'syz.1.596': attribute type 20 has an invalid length. [ 83.090490][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 83.107660][ T5876] loop3: detected capacity change from 0 to 512 [ 83.110657][ T5271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.152870][ T5876] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.158834][ T5884] FAULT_INJECTION: forcing a failure. [ 83.158834][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 83.162162][ T5876] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 83.174672][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: syz.1.598 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 83.174703][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.174734][ T5884] Call Trace: [ 83.174742][ T5884] [ 83.174753][ T5884] dump_stack_lvl+0xf6/0x150 [ 83.174785][ T5884] dump_stack+0x15/0x1a [ 83.174805][ T5884] should_fail_ex+0x261/0x270 [ 83.174834][ T5884] should_failslab+0x8f/0xb0 [ 83.174945][ T5884] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 83.175066][ T5884] ? __alloc_skb+0x10d/0x320 [ 83.175108][ T5884] __alloc_skb+0x10d/0x320 [ 83.175189][ T5884] netlink_alloc_large_skb+0xad/0xe0 [ 83.175226][ T5884] netlink_sendmsg+0x3da/0x720 [ 83.175326][ T5884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.175367][ T5884] __sock_sendmsg+0x140/0x180 [ 83.175421][ T5884] ____sys_sendmsg+0x350/0x4e0 [ 83.175485][ T5884] __sys_sendmsg+0x1a0/0x240 [ 83.175528][ T5884] __x64_sys_sendmsg+0x46/0x50 [ 83.175553][ T5884] x64_sys_call+0x26f3/0x2e10 [ 83.175596][ T5884] do_syscall_64+0xc9/0x1c0 [ 83.175623][ T5884] ? clear_bhb_loop+0x25/0x80 [ 83.175649][ T5884] ? clear_bhb_loop+0x25/0x80 [ 83.175676][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.175703][ T5884] RIP: 0033:0x7f1917d4d169 [ 83.175768][ T5884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.175790][ T5884] RSP: 002b:00007f1916396038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.175843][ T5884] RAX: ffffffffffffffda RBX: 00007f1917f66080 RCX: 00007f1917d4d169 [ 83.175900][ T5884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 83.175915][ T5884] RBP: 00007f1916396090 R08: 0000000000000000 R09: 0000000000000000 [ 83.175930][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.175945][ T5884] R13: 0000000000000001 R14: 00007f1917f66080 R15: 00007ffcdb5dcb88 [ 83.175968][ T5884] [ 83.259783][ T5890] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 83.262514][ T5886] batman_adv: batadv0: Adding interface: dummy0 [ 83.389604][ T5876] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 83.390231][ T5886] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.399379][ T5876] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 83.431110][ T5886] batman_adv: batadv0: Interface activated: dummy0 [ 83.454369][ T5876] System zones: 0-2, 18-18, 34-35 [ 83.473524][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.482024][ T5892] batadv0: mtu less than device minimum [ 83.491921][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.502983][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.511906][ T5910] loop9: detected capacity change from 0 to 764 [ 83.513618][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.530430][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.541170][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.552100][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.562930][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.563218][ T5910] rock: directory entry would overflow storage [ 83.573854][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.579588][ T5910] rock: sig=0x4654, size=5, remaining=4 [ 83.590478][ T5892] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.685000][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.765737][ T5927] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.774164][ T5927] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.783052][ T5927] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.791502][ T5927] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.791603][ T5937] loop2: detected capacity change from 0 to 2048 [ 83.812378][ T5927] geneve0: entered allmulticast mode [ 83.844487][ T5927] serio: Serial port ptm0 [ 83.844585][ T5937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.945897][ T5959] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 84.021390][ T5352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.290634][ T5995] FAULT_INJECTION: forcing a failure. [ 84.290634][ T5995] name failslab, interval 1, probability 0, space 0, times 0 [ 84.303359][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.2.620 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 84.303392][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.303407][ T5995] Call Trace: [ 84.303415][ T5995] [ 84.303424][ T5995] dump_stack_lvl+0xf6/0x150 [ 84.303497][ T5995] dump_stack+0x15/0x1a [ 84.303518][ T5995] should_fail_ex+0x261/0x270 [ 84.303557][ T5995] should_failslab+0x8f/0xb0 [ 84.303590][ T5995] __kvmalloc_node_noprof+0x12c/0x520 [ 84.303640][ T5995] ? vmemdup_user+0x26/0xd0 [ 84.303671][ T5995] vmemdup_user+0x26/0xd0 [ 84.303704][ T5995] path_setxattrat+0x1cd/0x320 [ 84.303739][ T5995] __x64_sys_fsetxattr+0x6d/0x80 [ 84.303800][ T5995] x64_sys_call+0x2bad/0x2e10 [ 84.303897][ T5995] do_syscall_64+0xc9/0x1c0 [ 84.303924][ T5995] ? clear_bhb_loop+0x25/0x80 [ 84.303949][ T5995] ? clear_bhb_loop+0x25/0x80 [ 84.303969][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.303988][ T5995] RIP: 0033:0x7f0b57cfd169 [ 84.304023][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.304044][ T5995] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 84.304061][ T5995] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 84.304072][ T5995] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 84.304083][ T5995] RBP: 00007f0b5635f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.304097][ T5995] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 84.304111][ T5995] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 84.304167][ T5995] [ 84.637711][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 84.961317][ T6033] loop4: detected capacity change from 0 to 164 [ 84.986366][ T6037] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 85.000139][ T6033] Unable to read rock-ridge attributes [ 85.147177][ T6056] FAULT_INJECTION: forcing a failure. [ 85.147177][ T6056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.160497][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.4.630 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 85.160527][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.160539][ T6056] Call Trace: [ 85.160547][ T6056] [ 85.160555][ T6056] dump_stack_lvl+0xf6/0x150 [ 85.160581][ T6056] dump_stack+0x15/0x1a [ 85.160599][ T6056] should_fail_ex+0x261/0x270 [ 85.160780][ T6056] should_fail+0xb/0x10 [ 85.160796][ T6056] should_fail_usercopy+0x1a/0x20 [ 85.160825][ T6056] _copy_from_iter+0xd8/0xd10 [ 85.160848][ T6056] ? kmalloc_reserve+0x16e/0x190 [ 85.160957][ T6056] ? __build_skb_around+0x199/0x1f0 [ 85.160989][ T6056] ? __alloc_skb+0x227/0x320 [ 85.161044][ T6056] ? __virt_addr_valid+0x1ed/0x250 [ 85.161106][ T6056] ? __check_object_size+0x367/0x510 [ 85.161199][ T6056] netlink_sendmsg+0x492/0x720 [ 85.161237][ T6056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.161341][ T6056] __sock_sendmsg+0x140/0x180 [ 85.161449][ T6056] sock_write_iter+0x186/0x1c0 [ 85.161481][ T6056] do_iter_readv_writev+0x40d/0x4b0 [ 85.161510][ T6056] vfs_writev+0x2da/0x880 [ 85.161623][ T6056] ? get_pid_task+0x94/0xd0 [ 85.161719][ T6056] do_writev+0xf7/0x230 [ 85.161812][ T6056] __x64_sys_writev+0x45/0x50 [ 85.161927][ T6056] x64_sys_call+0x1d68/0x2e10 [ 85.161950][ T6056] do_syscall_64+0xc9/0x1c0 [ 85.161973][ T6056] ? clear_bhb_loop+0x25/0x80 [ 85.161995][ T6056] ? clear_bhb_loop+0x25/0x80 [ 85.162017][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.162074][ T6056] RIP: 0033:0x7f479e50d169 [ 85.162089][ T6056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.162110][ T6056] RSP: 002b:00007f479cb56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 85.162195][ T6056] RAX: ffffffffffffffda RBX: 00007f479e726080 RCX: 00007f479e50d169 [ 85.162288][ T6056] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000009 [ 85.162299][ T6056] RBP: 00007f479cb56090 R08: 0000000000000000 R09: 0000000000000000 [ 85.162310][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.162321][ T6056] R13: 0000000000000001 R14: 00007f479e726080 R15: 00007ffd9af68f98 [ 85.162339][ T6056] [ 85.424655][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 85.424670][ T29] audit: type=1400 audit(1743493961.954:3544): avc: denied { write } for pid=6058 comm="syz.1.631" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.462387][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 85.569906][ T29] audit: type=1400 audit(1743493962.024:3545): avc: denied { open } for pid=6058 comm="syz.1.631" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.569940][ T29] audit: type=1400 audit(1743493962.044:3546): avc: denied { create } for pid=6058 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.570021][ T29] audit: type=1400 audit(1743493962.044:3547): avc: denied { create } for pid=6058 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 85.625557][ T29] audit: type=1400 audit(1743493962.154:3548): avc: denied { bind } for pid=6061 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.673553][ T6067] loop4: detected capacity change from 0 to 2048 [ 85.687973][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 85.697622][ T29] audit: type=1400 audit(1743493962.224:3549): avc: denied { setopt } for pid=6061 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.729673][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.746104][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.753268][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.765701][ T29] audit: type=1400 audit(1743493962.264:3550): avc: denied { read write } for pid=6072 comm="syz.2.635" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.788978][ T29] audit: type=1400 audit(1743493962.264:3551): avc: denied { open } for pid=6072 comm="syz.2.635" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.813613][ T6082] FAULT_INJECTION: forcing a failure. [ 85.813613][ T6082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.813639][ T5984] bridge_slave_0: entered allmulticast mode [ 85.814292][ T5984] bridge_slave_0: entered promiscuous mode [ 85.826814][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.3.637 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 85.826886][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.827029][ T6082] Call Trace: [ 85.827038][ T6082] [ 85.827048][ T6082] dump_stack_lvl+0xf6/0x150 [ 85.827107][ T6082] dump_stack+0x15/0x1a [ 85.827128][ T6082] should_fail_ex+0x261/0x270 [ 85.827155][ T6082] should_fail+0xb/0x10 [ 85.827203][ T6082] should_fail_usercopy+0x1a/0x20 [ 85.827241][ T6082] _copy_from_user+0x1c/0xa0 [ 85.827274][ T6082] ucma_write+0xdc/0x250 [ 85.827300][ T6082] ? __pfx_ucma_write+0x10/0x10 [ 85.827417][ T6082] vfs_write+0x295/0x950 [ 85.827446][ T6082] ? putname+0xe1/0x100 [ 85.827483][ T6082] ? __fget_files+0x186/0x1c0 [ 85.827589][ T6082] ksys_write+0xeb/0x1b0 [ 85.827620][ T6082] __x64_sys_write+0x42/0x50 [ 85.827651][ T6082] x64_sys_call+0x2a45/0x2e10 [ 85.827678][ T6082] do_syscall_64+0xc9/0x1c0 [ 85.827757][ T6082] ? clear_bhb_loop+0x25/0x80 [ 85.827783][ T6082] ? clear_bhb_loop+0x25/0x80 [ 85.827810][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.827837][ T6082] RIP: 0033:0x7fad1498d169 [ 85.827933][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.827956][ T6082] RSP: 002b:00007fad12ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.827979][ T6082] RAX: ffffffffffffffda RBX: 00007fad14ba5fa0 RCX: 00007fad1498d169 [ 85.827994][ T6082] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 85.828010][ T6082] RBP: 00007fad12ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.828024][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.828038][ T6082] R13: 0000000000000000 R14: 00007fad14ba5fa0 R15: 00007ffd440f8048 [ 85.828136][ T6082] [ 85.858457][ T6067] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.861923][ T29] audit: type=1400 audit(1743493962.334:3552): avc: denied { ioctl } for pid=6079 comm="syz.2.636" path="socket:[14645]" dev="sockfs" ino=14645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.921297][ T6086] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 85.937041][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.067646][ T6075] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 86.072300][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.113390][ T29] audit: type=1400 audit(1743493962.644:3553): avc: denied { create } for pid=6065 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.133569][ T6091] loop3: detected capacity change from 0 to 1024 [ 86.147305][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 86.148321][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 780 with error 117 [ 86.169005][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.169005][ T51] [ 86.185306][ T5984] bridge_slave_1: entered allmulticast mode [ 86.204012][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.207621][ T5984] bridge_slave_1: entered promiscuous mode [ 86.295494][ T6109] loop3: detected capacity change from 0 to 164 [ 86.322790][ T6109] syz.3.641: attempt to access beyond end of device [ 86.322790][ T6109] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.350468][ T6109] syz.3.641: attempt to access beyond end of device [ 86.350468][ T6109] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.360597][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.381429][ T6114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6114 comm=syz.2.643 [ 86.382168][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.432147][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.642'. [ 86.479201][ T5984] team0: Port device team_slave_0 added [ 86.507212][ T5984] team0: Port device team_slave_1 added [ 86.555120][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.562147][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.588200][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.602575][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.608389][ T6114] loop2: detected capacity change from 0 to 512 [ 86.609787][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.609821][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.675548][ T6122] vhci_hcd: invalid port number 15 [ 86.680717][ T6122] vhci_hcd: invalid port number 15 [ 86.694392][ T5984] hsr_slave_0: entered promiscuous mode [ 86.700788][ T5984] hsr_slave_1: entered promiscuous mode [ 86.707141][ T5984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.714807][ T5984] Cannot create hsr debugfs directory [ 86.727235][ T6114] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.780962][ T6131] program syz.4.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.829606][ T6114] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 86.850446][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'. [ 86.880546][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.914204][ T6137] loop2: detected capacity change from 0 to 164 [ 86.936131][ T6137] syz.2.650: attempt to access beyond end of device [ 86.936131][ T6137] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.953445][ T6137] syz.2.650: attempt to access beyond end of device [ 86.953445][ T6137] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.954243][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.038384][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.098729][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.118899][ T6149] FAULT_INJECTION: forcing a failure. [ 87.118899][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.132041][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.4.655 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 87.132067][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.132102][ T6149] Call Trace: [ 87.132107][ T6149] [ 87.132113][ T6149] dump_stack_lvl+0xf6/0x150 [ 87.132140][ T6149] dump_stack+0x15/0x1a [ 87.132189][ T6149] should_fail_ex+0x261/0x270 [ 87.132245][ T6149] should_fail+0xb/0x10 [ 87.132267][ T6149] should_fail_usercopy+0x1a/0x20 [ 87.132292][ T6149] _copy_to_user+0x20/0xa0 [ 87.132325][ T6149] simple_read_from_buffer+0xb2/0x130 [ 87.132433][ T6149] proc_fail_nth_read+0x103/0x140 [ 87.132462][ T6149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.132547][ T6149] vfs_read+0x1b2/0x710 [ 87.132573][ T6149] ? __rcu_read_unlock+0x4e/0x70 [ 87.132603][ T6149] ? __fget_files+0x186/0x1c0 [ 87.132668][ T6149] ksys_read+0xeb/0x1b0 [ 87.132694][ T6149] __x64_sys_read+0x42/0x50 [ 87.132789][ T6149] x64_sys_call+0x2a3b/0x2e10 [ 87.132816][ T6149] do_syscall_64+0xc9/0x1c0 [ 87.132838][ T6149] ? clear_bhb_loop+0x25/0x80 [ 87.132858][ T6149] ? clear_bhb_loop+0x25/0x80 [ 87.132919][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.132943][ T6149] RIP: 0033:0x7f479e50bb7c [ 87.132957][ T6149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.133001][ T6149] RSP: 002b:00007f479cb77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.133023][ T6149] RAX: ffffffffffffffda RBX: 00007f479e725fa0 RCX: 00007f479e50bb7c [ 87.133037][ T6149] RDX: 000000000000000f RSI: 00007f479cb770a0 RDI: 0000000000000004 [ 87.133051][ T6149] RBP: 00007f479cb77090 R08: 0000000000000000 R09: 0000000000000000 [ 87.133065][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.133079][ T6149] R13: 0000000000000000 R14: 00007f479e725fa0 R15: 00007ffd9af68f98 [ 87.133101][ T6149] [ 87.355825][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.384728][ T6151] vhci_hcd: invalid port number 15 [ 87.390022][ T6151] vhci_hcd: invalid port number 15 [ 87.451262][ T6161] program syz.3.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.452227][ T6159] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 87.488280][ T6163] FAULT_INJECTION: forcing a failure. [ 87.488280][ T6163] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.503954][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.4.662 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 87.504044][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.504059][ T6163] Call Trace: [ 87.504066][ T6163] [ 87.504073][ T6163] dump_stack_lvl+0xf6/0x150 [ 87.504148][ T6163] dump_stack+0x15/0x1a [ 87.504167][ T6163] should_fail_ex+0x261/0x270 [ 87.504190][ T6163] should_fail_alloc_page+0xfd/0x110 [ 87.504237][ T6163] __alloc_frozen_pages_noprof+0x11e/0x340 [ 87.504267][ T6163] alloc_pages_mpol+0xb6/0x260 [ 87.504285][ T6163] alloc_pages_noprof+0xe8/0x130 [ 87.504304][ T6163] pgd_alloc+0x4e/0x290 [ 87.504320][ T6163] mm_init+0x33c/0x810 [ 87.504352][ T6163] ? copy_mm+0xe7/0x1310 [ 87.504383][ T6163] copy_mm+0x12b/0x1310 [ 87.504415][ T6163] ? posix_cputimers_group_init+0x62/0xa0 [ 87.504515][ T6163] ? posix_cputimers_group_init+0x96/0xa0 [ 87.504547][ T6163] ? __pfx_tty_audit_fork+0x10/0x10 [ 87.504583][ T6163] ? __init_rwsem+0x5d/0x70 [ 87.504607][ T6163] ? copy_signal+0x316/0x340 [ 87.504702][ T6163] copy_process+0xcfc/0x1f60 [ 87.504730][ T6163] kernel_clone+0x168/0x5d0 [ 87.504823][ T6163] ? ktime_get+0x1ef/0x210 [ 87.504854][ T6163] __x64_sys_clone+0xe9/0x120 [ 87.504892][ T6163] x64_sys_call+0x2dc9/0x2e10 [ 87.504993][ T6163] do_syscall_64+0xc9/0x1c0 [ 87.505062][ T6163] ? clear_bhb_loop+0x25/0x80 [ 87.505087][ T6163] ? clear_bhb_loop+0x25/0x80 [ 87.505113][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.505166][ T6163] RIP: 0033:0x7f479e50d169 [ 87.505182][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.505199][ T6163] RSP: 002b:00007f479cb76fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 87.505219][ T6163] RAX: ffffffffffffffda RBX: 00007f479e725fa0 RCX: 00007f479e50d169 [ 87.505232][ T6163] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 87.505302][ T6163] RBP: 00007f479cb77090 R08: 0000000000000000 R09: 0000000000000000 [ 87.505312][ T6163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 87.505324][ T6163] R13: 0000000000000000 R14: 00007f479e725fa0 R15: 00007ffd9af68f98 [ 87.505347][ T6163] [ 87.510427][ T5984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.598660][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 87.756325][ T5984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.774435][ T5984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.794532][ T5984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.803616][ T6179] FAULT_INJECTION: forcing a failure. [ 87.803616][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.816735][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: +}[@ Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 87.816766][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.816800][ T6179] Call Trace: [ 87.816806][ T6179] [ 87.816812][ T6179] dump_stack_lvl+0xf6/0x150 [ 87.816834][ T6179] dump_stack+0x15/0x1a [ 87.816851][ T6179] should_fail_ex+0x261/0x270 [ 87.816937][ T6179] should_fail+0xb/0x10 [ 87.816956][ T6179] should_fail_usercopy+0x1a/0x20 [ 87.816977][ T6179] copy_to_user_nofault+0x7d/0x120 [ 87.817015][ T6179] bpf_probe_write_user+0x80/0xc0 [ 87.817044][ T6179] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 87.817132][ T6179] bpf_trace_run3+0x10e/0x1d0 [ 87.817192][ T6179] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 87.817225][ T6179] ? audit_log_end+0x1d0/0x1e0 [ 87.817253][ T6179] ? __list_del_entry_valid_or_report+0x66/0x130 [ 87.817291][ T6179] kmem_cache_free+0x243/0x2e0 [ 87.817356][ T6179] ? audit_log_end+0x1d0/0x1e0 [ 87.817379][ T6179] audit_log_end+0x1d0/0x1e0 [ 87.817400][ T6179] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 87.817479][ T6179] common_lsm_audit+0x1d7/0x230 [ 87.817512][ T6179] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 87.817534][ T6179] slow_avc_audit+0xff/0x140 [ 87.817560][ T6179] avc_has_perm+0x124/0x150 [ 87.817647][ T6179] selinux_socket_sendmsg+0x18a/0x1c0 [ 87.817682][ T6179] security_socket_sendmsg+0x47/0x80 [ 87.817732][ T6179] __sock_sendmsg+0x2d/0x180 [ 87.817765][ T6179] ____sys_sendmsg+0x350/0x4e0 [ 87.817787][ T6179] __sys_sendmmsg+0x22a/0x4b0 [ 87.817828][ T6179] __x64_sys_sendmmsg+0x57/0x70 [ 87.817923][ T6179] x64_sys_call+0x2b53/0x2e10 [ 87.817949][ T6179] do_syscall_64+0xc9/0x1c0 [ 87.817978][ T6179] ? clear_bhb_loop+0x25/0x80 [ 87.817998][ T6179] ? clear_bhb_loop+0x25/0x80 [ 87.818062][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.818155][ T6179] RIP: 0033:0x7f0b57cfd169 [ 87.818245][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.818264][ T6179] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.818282][ T6179] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 87.818296][ T6179] RDX: 0000000000000001 RSI: 00002000000030c0 RDI: 0000000000000005 [ 87.818310][ T6179] RBP: 00007f0b5635f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.818337][ T6179] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.818347][ T6179] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 87.818364][ T6179] [ 88.098674][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.667'. [ 88.157119][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.172055][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.191302][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.198434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.214005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.221228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.232227][ T6191] vhci_hcd: invalid port number 15 [ 88.237607][ T6191] vhci_hcd: invalid port number 15 [ 88.296425][ T5984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.324186][ T6197] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 88.373086][ T6201] FAULT_INJECTION: forcing a failure. [ 88.373086][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.386556][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.3.675 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 88.386584][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.386644][ T6201] Call Trace: [ 88.386650][ T6201] [ 88.386657][ T6201] dump_stack_lvl+0xf6/0x150 [ 88.386680][ T6201] dump_stack+0x15/0x1a [ 88.386697][ T6201] should_fail_ex+0x261/0x270 [ 88.386718][ T6201] should_fail+0xb/0x10 [ 88.386805][ T6201] should_fail_usercopy+0x1a/0x20 [ 88.386827][ T6201] _copy_from_user+0x1c/0xa0 [ 88.386854][ T6201] copy_msghdr_from_user+0x54/0x2b0 [ 88.386882][ T6201] ? __fget_files+0x186/0x1c0 [ 88.386926][ T6201] __sys_sendmsg+0x141/0x240 [ 88.386960][ T6201] __x64_sys_sendmsg+0x46/0x50 [ 88.386980][ T6201] x64_sys_call+0x26f3/0x2e10 [ 88.387001][ T6201] do_syscall_64+0xc9/0x1c0 [ 88.387023][ T6201] ? clear_bhb_loop+0x25/0x80 [ 88.387116][ T6201] ? clear_bhb_loop+0x25/0x80 [ 88.387136][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.387156][ T6201] RIP: 0033:0x7fad1498d169 [ 88.387171][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.387202][ T6201] RSP: 002b:00007fad12ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.387220][ T6201] RAX: ffffffffffffffda RBX: 00007fad14ba5fa0 RCX: 00007fad1498d169 [ 88.387231][ T6201] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 88.387242][ T6201] RBP: 00007fad12ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.387254][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.387265][ T6201] R13: 0000000000000000 R14: 00007fad14ba5fa0 R15: 00007ffd440f8048 [ 88.387283][ T6201] [ 88.690139][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.744515][ T6217] loop4: detected capacity change from 0 to 164 [ 88.764083][ T6217] syz.4.679: attempt to access beyond end of device [ 88.764083][ T6217] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.810449][ T6217] syz.4.679: attempt to access beyond end of device [ 88.810449][ T6217] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.837095][ T6224] program syz.3.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.906128][ T6230] loop4: detected capacity change from 0 to 2048 [ 88.928952][ T5984] veth0_vlan: entered promiscuous mode [ 88.935775][ T6230] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.940912][ T5984] veth1_vlan: entered promiscuous mode [ 88.969398][ T5984] veth0_macvtap: entered promiscuous mode [ 88.984084][ T5984] veth1_macvtap: entered promiscuous mode [ 89.015105][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.025722][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.035581][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.046184][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.056119][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.066666][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.076527][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.087016][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.096854][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.107435][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.117300][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.127780][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.137614][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.148145][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.158000][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.168542][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.178397][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.188877][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.200222][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.211458][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.221952][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.231866][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.242322][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.252207][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.262677][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.272575][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.283460][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.293491][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.303974][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.313853][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.324317][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.334211][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.344697][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.354555][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.365050][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.374939][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.385398][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.396602][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.426031][ T5984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.434907][ T5984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.443776][ T5984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452630][ T5984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524555][ T6241] FAULT_INJECTION: forcing a failure. [ 89.524555][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 89.537486][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.2.686 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 89.537520][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.537532][ T6241] Call Trace: [ 89.537537][ T6241] [ 89.537544][ T6241] dump_stack_lvl+0xf6/0x150 [ 89.537573][ T6241] dump_stack+0x15/0x1a [ 89.537624][ T6241] should_fail_ex+0x261/0x270 [ 89.537645][ T6241] should_failslab+0x8f/0xb0 [ 89.537694][ T6241] __kmalloc_noprof+0xad/0x410 [ 89.537733][ T6241] ? security_prepare_creds+0x53/0x120 [ 89.537855][ T6241] security_prepare_creds+0x53/0x120 [ 89.537892][ T6241] prepare_creds+0x346/0x480 [ 89.537927][ T6241] lookup_user_key+0x21b/0xe50 [ 89.537957][ T6241] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 89.538062][ T6241] __se_sys_add_key+0x26c/0x330 [ 89.538085][ T6241] ? fput+0x99/0xd0 [ 89.538104][ T6241] __x64_sys_add_key+0x67/0x80 [ 89.538127][ T6241] x64_sys_call+0x1f10/0x2e10 [ 89.538153][ T6241] do_syscall_64+0xc9/0x1c0 [ 89.538176][ T6241] ? clear_bhb_loop+0x25/0x80 [ 89.538251][ T6241] ? clear_bhb_loop+0x25/0x80 [ 89.538277][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.538298][ T6241] RIP: 0033:0x7f0b57cfd169 [ 89.538312][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.538378][ T6241] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 89.538485][ T6241] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 89.538506][ T6241] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000000080 [ 89.538520][ T6241] RBP: 00007f0b5635f090 R08: fffffffffffffffe R09: 0000000000000000 [ 89.538534][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.538574][ T6241] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 89.538592][ T6241] [ 89.796689][ T6235] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 345: padding at end of block bitmap is not set [ 89.840932][ T6251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 89.891361][ T6235] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 89.904023][ T6235] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.904023][ T6235] [ 89.961093][ T6260] loop0: detected capacity change from 0 to 512 [ 89.988408][ T554] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 89.992480][ T6260] EXT4-fs: Ignoring removed orlov option [ 90.001168][ T554] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.001168][ T554] [ 90.028049][ T6262] loop2: detected capacity change from 0 to 2048 [ 90.051872][ T6260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.114073][ T3411] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 90.126933][ T3411] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.126933][ T3411] [ 90.136625][ T3411] EXT4-fs (loop4): Total free blocks count 0 [ 90.142623][ T3411] EXT4-fs (loop4): Free/Dirty block details [ 90.148581][ T3411] EXT4-fs (loop4): free_blocks=0 [ 90.153521][ T3411] EXT4-fs (loop4): dirty_blocks=1808 [ 90.172721][ T6260] EXT4-fs (loop0): 1 orphan inode deleted [ 90.178620][ T6260] EXT4-fs (loop0): 1 truncate cleaned up [ 90.361773][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.694'. [ 90.384683][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 90.446086][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 90.446116][ T29] audit: type=1326 audit(1743493966.984:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479e50d169 code=0x7ffc0000 [ 90.512348][ T29] audit: type=1326 audit(1743493966.984:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479e50d169 code=0x7ffc0000 [ 90.535874][ T29] audit: type=1400 audit(1743493967.044:3625): avc: denied { setattr } for pid=6259 comm="syz.0.693" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.542169][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.699'. [ 90.560334][ T6288] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.693: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 90.590271][ T6288] EXT4-fs (loop0): Remounting filesystem read-only [ 90.615243][ T29] audit: type=1400 audit(1743493967.134:3626): avc: denied { connect } for pid=6280 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.758570][ T6302] loop4: detected capacity change from 0 to 1024 [ 90.776221][ T6302] EXT4-fs: Ignoring removed orlov option [ 90.851434][ T29] audit: type=1400 audit(1743493967.384:3627): avc: denied { read write } for pid=6305 comm="syz.3.710" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.882359][ T6306] loop3: detected capacity change from 0 to 2048 [ 90.899337][ T29] audit: type=1400 audit(1743493967.414:3628): avc: denied { map_create } for pid=6303 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.918502][ T29] audit: type=1400 audit(1743493967.414:3629): avc: denied { bpf } for pid=6303 comm="syz.1.709" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.939080][ T29] audit: type=1400 audit(1743493967.414:3630): avc: denied { map_read map_write } for pid=6303 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.958867][ T29] audit: type=1400 audit(1743493967.414:3631): avc: denied { open } for pid=6305 comm="syz.3.710" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.982977][ T29] audit: type=1400 audit(1743493967.414:3632): avc: denied { ioctl } for pid=6305 comm="syz.3.710" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.028995][ T6317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.061146][ T6306] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.593767][ T6328] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 345: padding at end of block bitmap is not set [ 91.652557][ T6328] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 91.665228][ T6328] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.665228][ T6328] [ 91.706708][ T554] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 91.719679][ T554] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.719679][ T554] [ 91.735889][ T6336] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.981120][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 91.994000][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.994000][ T51] [ 92.003729][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 92.009761][ T51] EXT4-fs (loop3): Free/Dirty block details [ 92.015693][ T51] EXT4-fs (loop3): free_blocks=0 [ 92.020653][ T51] EXT4-fs (loop3): dirty_blocks=1808 [ 92.047104][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.1.723'. [ 92.258665][ T6361] FAULT_INJECTION: forcing a failure. [ 92.258665][ T6361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.271890][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.3.720 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 92.272055][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.272075][ T6361] Call Trace: [ 92.272081][ T6361] [ 92.272088][ T6361] dump_stack_lvl+0xf6/0x150 [ 92.272110][ T6361] dump_stack+0x15/0x1a [ 92.272128][ T6361] should_fail_ex+0x261/0x270 [ 92.272225][ T6361] should_fail+0xb/0x10 [ 92.272241][ T6361] should_fail_usercopy+0x1a/0x20 [ 92.272269][ T6361] _copy_from_user+0x1c/0xa0 [ 92.272301][ T6361] copy_msghdr_from_user+0x54/0x2b0 [ 92.272334][ T6361] ? __fget_files+0x186/0x1c0 [ 92.272409][ T6361] __sys_sendmsg+0x141/0x240 [ 92.272442][ T6361] __x64_sys_sendmsg+0x46/0x50 [ 92.272510][ T6361] x64_sys_call+0x26f3/0x2e10 [ 92.272595][ T6361] do_syscall_64+0xc9/0x1c0 [ 92.272618][ T6361] ? clear_bhb_loop+0x25/0x80 [ 92.272643][ T6361] ? clear_bhb_loop+0x25/0x80 [ 92.272669][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.272694][ T6361] RIP: 0033:0x7fad1498d169 [ 92.272711][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.272806][ T6361] RSP: 002b:00007fad12ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.272914][ T6361] RAX: ffffffffffffffda RBX: 00007fad14ba5fa0 RCX: 00007fad1498d169 [ 92.272929][ T6361] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 92.272943][ T6361] RBP: 00007fad12ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.272957][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.272971][ T6361] R13: 0000000000000000 R14: 00007fad14ba5fa0 R15: 00007ffd440f8048 [ 92.272993][ T6361] [ 92.342193][ T6364] loop4: detected capacity change from 0 to 1024 [ 92.458894][ T6364] EXT4-fs: Ignoring removed orlov option [ 92.498480][ T6370] loop3: detected capacity change from 0 to 512 [ 92.505893][ T6370] EXT4-fs: Ignoring removed oldalloc option [ 92.518404][ T6370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.731: Parent and EA inode have the same ino 15 [ 92.531309][ T6370] EXT4-fs (loop3): Remounting filesystem read-only [ 92.537930][ T6370] EXT4-fs warning (device loop3): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 92.548381][ T6370] EXT4-fs (loop3): 1 orphan inode deleted [ 92.675226][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'. [ 92.692768][ T6375] loop2: detected capacity change from 0 to 512 [ 92.700624][ T6375] EXT4-fs: Ignoring removed orlov option [ 92.707720][ T6375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.728267][ T6375] EXT4-fs (loop2): 1 orphan inode deleted [ 92.734109][ T6375] EXT4-fs (loop2): 1 truncate cleaned up [ 92.757816][ T6378] vhci_hcd: invalid port number 15 [ 92.762992][ T6378] vhci_hcd: invalid port number 15 [ 92.914706][ T6381] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.732: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 92.938455][ T6381] EXT4-fs (loop2): Remounting filesystem read-only [ 93.011909][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.735'. [ 93.104603][ T6389] syzkaller1: entered promiscuous mode [ 93.110221][ T6389] syzkaller1: entered allmulticast mode [ 93.118069][ T38] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.134189][ T6317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.170370][ T6391] netlink: 96 bytes leftover after parsing attributes in process `syz.4.739'. [ 93.199670][ T6394] loop4: detected capacity change from 0 to 764 [ 93.208729][ T6394] rock: directory entry would overflow storage [ 93.214952][ T6394] rock: sig=0x4654, size=5, remaining=4 [ 93.238692][ T6397] program syz.1.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.256167][ T6394] netlink: 840 bytes leftover after parsing attributes in process `syz.4.740'. [ 93.265206][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 93.276969][ T6317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.303366][ T6399] loop3: detected capacity change from 0 to 2048 [ 93.311660][ T6399] EXT4-fs: Ignoring removed bh option [ 93.325743][ T6317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.361712][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 93.370719][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 93.391615][ T6317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.413554][ T6317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426087][ T6317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.442292][ T6317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.457287][ T6408] netem: unknown loss type 0 [ 93.457304][ T6408] netem: change failed [ 93.518303][ T6416] loop4: detected capacity change from 0 to 164 [ 93.577667][ T6425] FAULT_INJECTION: forcing a failure. [ 93.577667][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 93.590384][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.4.753 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 93.590446][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.590460][ T6425] Call Trace: [ 93.590467][ T6425] [ 93.590511][ T6425] dump_stack_lvl+0xf6/0x150 [ 93.590539][ T6425] dump_stack+0x15/0x1a [ 93.590559][ T6425] should_fail_ex+0x261/0x270 [ 93.590642][ T6425] should_failslab+0x8f/0xb0 [ 93.590675][ T6425] __kvmalloc_node_noprof+0x12c/0x520 [ 93.590697][ T6425] ? vmemdup_user+0x26/0xd0 [ 93.590727][ T6425] vmemdup_user+0x26/0xd0 [ 93.590754][ T6425] path_setxattrat+0x1cd/0x320 [ 93.590879][ T6425] __x64_sys_fsetxattr+0x6d/0x80 [ 93.590916][ T6425] x64_sys_call+0x2bad/0x2e10 [ 93.590937][ T6425] do_syscall_64+0xc9/0x1c0 [ 93.590957][ T6425] ? clear_bhb_loop+0x25/0x80 [ 93.590977][ T6425] ? clear_bhb_loop+0x25/0x80 [ 93.591066][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.591091][ T6425] RIP: 0033:0x7f479e50d169 [ 93.591109][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.591147][ T6425] RSP: 002b:00007f479cb77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 93.591169][ T6425] RAX: ffffffffffffffda RBX: 00007f479e725fa0 RCX: 00007f479e50d169 [ 93.591181][ T6425] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 93.591191][ T6425] RBP: 00007f479cb77090 R08: 0000000000000000 R09: 0000000000000000 [ 93.591202][ T6425] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 93.591239][ T6425] R13: 0000000000000000 R14: 00007f479e725fa0 R15: 00007ffd9af68f98 [ 93.591262][ T6425] [ 93.770163][ T6427] loop0: detected capacity change from 0 to 512 [ 93.777177][ T6427] EXT4-fs: Ignoring removed orlov option [ 93.783275][ T6427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.800558][ T6427] EXT4-fs (loop0): 1 orphan inode deleted [ 93.806391][ T6427] EXT4-fs (loop0): 1 truncate cleaned up [ 93.858597][ T6434] loop4: detected capacity change from 0 to 512 [ 93.866160][ T6434] EXT4-fs: Ignoring removed oldalloc option [ 93.875311][ T6435] loop2: detected capacity change from 0 to 2048 [ 93.882087][ T6435] EXT4-fs: Ignoring removed bh option [ 93.892278][ T6437] loop0: detected capacity change from 0 to 512 [ 93.906931][ T6437] EXT4-fs: Ignoring removed orlov option [ 93.909388][ T6434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.756: Parent and EA inode have the same ino 15 [ 93.928646][ T6437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.931381][ T6434] EXT4-fs (loop4): Remounting filesystem read-only [ 93.945173][ T6434] EXT4-fs warning (device loop4): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 93.955432][ T6434] EXT4-fs (loop4): 1 orphan inode deleted [ 93.969214][ T6437] EXT4-fs (loop0): 1 orphan inode deleted [ 93.975006][ T6437] EXT4-fs (loop0): 1 truncate cleaned up [ 93.982863][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 93.992130][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 94.034293][ T6444] loop0: detected capacity change from 0 to 512 [ 94.041172][ T6444] EXT4-fs: Ignoring removed oldalloc option [ 94.058383][ T6444] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.759: Parent and EA inode have the same ino 15 [ 94.077168][ T6447] vhci_hcd: invalid port number 15 [ 94.081635][ T6444] EXT4-fs (loop0): Remounting filesystem read-only [ 94.082322][ T6447] vhci_hcd: invalid port number 15 [ 94.094127][ T6444] EXT4-fs warning (device loop0): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 94.104944][ T6434] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.105916][ T6444] EXT4-fs (loop0): 1 orphan inode deleted [ 94.130091][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.137878][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.145716][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.153506][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.161613][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.169325][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.177040][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.184742][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.192490][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.200250][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.207981][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.215676][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.223342][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.231212][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.239050][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.246748][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.254419][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.262126][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.269879][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.271940][ T6444] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.277569][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.277599][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.300658][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.308381][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.316125][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.323792][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.331474][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.339211][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.346934][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.354689][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.362474][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.370145][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.377885][ T996] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 94.388089][ T996] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 94.405359][ T996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.540238][ T6470] FAULT_INJECTION: forcing a failure. [ 94.540238][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.553429][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.1.769 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 94.553492][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.553508][ T6470] Call Trace: [ 94.553516][ T6470] [ 94.553525][ T6470] dump_stack_lvl+0xf6/0x150 [ 94.553551][ T6470] dump_stack+0x15/0x1a [ 94.553640][ T6470] should_fail_ex+0x261/0x270 [ 94.553661][ T6470] should_fail+0xb/0x10 [ 94.553677][ T6470] should_fail_usercopy+0x1a/0x20 [ 94.553733][ T6470] _copy_from_user+0x1c/0xa0 [ 94.553802][ T6470] memdup_sockptr_noprof+0x8b/0x120 [ 94.553830][ T6470] ipv6_set_opt_hdr+0x125/0x540 [ 94.553855][ T6470] do_ipv6_setsockopt+0x128d/0x2240 [ 94.553914][ T6470] ? kstrtouint+0x7b/0xc0 [ 94.553933][ T6470] ? avc_has_perm_noaudit+0x1cc/0x210 [ 94.554040][ T6470] ? selinux_netlbl_socket_setsockopt+0xea/0x2d0 [ 94.554074][ T6470] ? avc_has_perm+0xd6/0x150 [ 94.554097][ T6470] ipv6_setsockopt+0x57/0x130 [ 94.554122][ T6470] tcp_setsockopt+0x93/0xb0 [ 94.554160][ T6470] sock_common_setsockopt+0x64/0x80 [ 94.554194][ T6470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.554302][ T6470] __sys_setsockopt+0x187/0x200 [ 94.554326][ T6470] __x64_sys_setsockopt+0x66/0x80 [ 94.554400][ T6470] x64_sys_call+0x2a09/0x2e10 [ 94.554464][ T6470] do_syscall_64+0xc9/0x1c0 [ 94.554483][ T6470] ? clear_bhb_loop+0x25/0x80 [ 94.554503][ T6470] ? clear_bhb_loop+0x25/0x80 [ 94.554538][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.554559][ T6470] RIP: 0033:0x7f1917d4d169 [ 94.554573][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.554589][ T6470] RSP: 002b:00007f19163b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.554609][ T6470] RAX: ffffffffffffffda RBX: 00007f1917f65fa0 RCX: 00007f1917d4d169 [ 94.554691][ T6470] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 94.554706][ T6470] RBP: 00007f19163b7090 R08: 0000000000000118 R09: 0000000000000000 [ 94.554721][ T6470] R10: 0000200000e86000 R11: 0000000000000246 R12: 0000000000000001 [ 94.554735][ T6470] R13: 0000000000000000 R14: 00007f1917f65fa0 R15: 00007ffcdb5dcb88 [ 94.554757][ T6470] [ 94.784661][ T6472] loop3: detected capacity change from 0 to 164 [ 94.793351][ T6472] syz.3.771: attempt to access beyond end of device [ 94.793351][ T6472] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 94.843670][ T6472] syz.3.771: attempt to access beyond end of device [ 94.843670][ T6472] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 94.863008][ T6476] vhci_hcd: invalid port number 15 [ 94.868319][ T6476] vhci_hcd: invalid port number 15 [ 94.944290][ T6481] bond1: entered promiscuous mode [ 94.949446][ T6481] bond1: entered allmulticast mode [ 94.957687][ T6481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.972462][ T6481] bond1 (unregistering): Released all slaves [ 94.990600][ T6486] loop0: detected capacity change from 0 to 512 [ 95.011624][ T6486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.035511][ T6486] EXT4-fs (loop0): 1 truncate cleaned up [ 95.174249][ T6504] vhci_hcd: invalid port number 15 [ 95.179555][ T6504] vhci_hcd: invalid port number 15 [ 95.222236][ T6509] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 95.299987][ T6515] FAULT_INJECTION: forcing a failure. [ 95.299987][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 95.312796][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.2.790 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 95.312828][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.312842][ T6515] Call Trace: [ 95.312848][ T6515] [ 95.312915][ T6515] dump_stack_lvl+0xf6/0x150 [ 95.312938][ T6515] dump_stack+0x15/0x1a [ 95.312954][ T6515] should_fail_ex+0x261/0x270 [ 95.312975][ T6515] should_failslab+0x8f/0xb0 [ 95.313013][ T6515] __kmalloc_noprof+0xad/0x410 [ 95.313045][ T6515] ? security_prepare_creds+0x53/0x120 [ 95.313079][ T6515] security_prepare_creds+0x53/0x120 [ 95.313112][ T6515] prepare_creds+0x346/0x480 [ 95.313196][ T6515] lookup_user_key+0x21b/0xe50 [ 95.313223][ T6515] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 95.313254][ T6515] __se_sys_add_key+0x26c/0x330 [ 95.313270][ T6515] ? fput+0x99/0xd0 [ 95.313290][ T6515] __x64_sys_add_key+0x67/0x80 [ 95.313331][ T6515] x64_sys_call+0x1f10/0x2e10 [ 95.313353][ T6515] do_syscall_64+0xc9/0x1c0 [ 95.313373][ T6515] ? clear_bhb_loop+0x25/0x80 [ 95.313430][ T6515] ? clear_bhb_loop+0x25/0x80 [ 95.313451][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.313471][ T6515] RIP: 0033:0x7f0b57cfd169 [ 95.313551][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.313569][ T6515] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.313587][ T6515] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 95.313599][ T6515] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000000080 [ 95.313610][ T6515] RBP: 00007f0b5635f090 R08: fffffffffffffffe R09: 0000000000000000 [ 95.313638][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.313649][ T6515] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 95.313667][ T6515] [ 95.518354][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 95.518371][ T29] audit: type=1400 audit(1743493972.044:3875): avc: denied { create } for pid=6510 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.544291][ T29] audit: type=1400 audit(1743493972.054:3876): avc: denied { name_bind } for pid=6510 comm="syz.3.788" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 95.568066][ T6519] FAULT_INJECTION: forcing a failure. [ 95.568066][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.568118][ T6516] xt_hashlimit: max too large, truncated to 1048576 [ 95.581172][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.2.792 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 95.581210][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.581293][ T6519] Call Trace: [ 95.581302][ T6519] [ 95.581312][ T6519] dump_stack_lvl+0xf6/0x150 [ 95.581358][ T6519] dump_stack+0x15/0x1a [ 95.581394][ T6519] should_fail_ex+0x261/0x270 [ 95.581422][ T6519] should_fail+0xb/0x10 [ 95.581445][ T6519] should_fail_usercopy+0x1a/0x20 [ 95.581473][ T6519] _copy_from_user+0x1c/0xa0 [ 95.581568][ T6519] eventfd_write+0x76/0x3c0 [ 95.581597][ T6519] ? __pfx_eventfd_write+0x10/0x10 [ 95.581621][ T6519] vfs_write+0x295/0x950 [ 95.581704][ T6519] ? putname+0xe1/0x100 [ 95.581743][ T6519] ? __fget_files+0x186/0x1c0 [ 95.581856][ T6519] ksys_write+0xeb/0x1b0 [ 95.581887][ T6519] __x64_sys_write+0x42/0x50 [ 95.581916][ T6519] x64_sys_call+0x2a45/0x2e10 [ 95.581944][ T6519] do_syscall_64+0xc9/0x1c0 [ 95.581969][ T6519] ? clear_bhb_loop+0x25/0x80 [ 95.581997][ T6519] ? clear_bhb_loop+0x25/0x80 [ 95.582029][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.582056][ T6519] RIP: 0033:0x7f0b57cfd169 [ 95.582075][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.582166][ T6519] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.582189][ T6519] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 95.582204][ T6519] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 95.582237][ T6519] RBP: 00007f0b5635f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.582251][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.582266][ T6519] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 95.582289][ T6519] [ 95.791515][ T6524] loop2: detected capacity change from 0 to 512 [ 95.809391][ T6524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.823120][ T6526] loop0: detected capacity change from 0 to 2048 [ 95.844365][ T6526] EXT4-fs: Ignoring removed bh option [ 95.887996][ T6524] EXT4-fs (loop2): 1 truncate cleaned up [ 95.896287][ T6526] x_tables: unsorted underflow at hook 1 [ 96.044896][ T29] audit: type=1400 audit(1743493972.574:3877): avc: denied { connect } for pid=6542 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.091517][ T29] audit: type=1400 audit(1743493972.604:3878): avc: denied { relabelfrom } for pid=6542 comm="syz.1.800" name="NETLINK" dev="sockfs" ino=16022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.116058][ T29] audit: type=1400 audit(1743493972.604:3879): avc: denied { relabelto } for pid=6542 comm="syz.1.800" name="NETLINK" dev="sockfs" ino=16022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 96.183248][ T29] audit: type=1400 audit(1743493972.714:3880): avc: denied { write } for pid=6547 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.227850][ T6550] loop4: detected capacity change from 0 to 2048 [ 96.261861][ T6550] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.293970][ T29] audit: type=1400 audit(1743493972.814:3881): avc: denied { accept } for pid=6554 comm="syz.3.805" lport=37501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.317363][ T29] audit: type=1400 audit(1743493972.814:3882): avc: denied { create } for pid=6554 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.520859][ T6534] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.544240][ T6534] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 96.556711][ T6534] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.556711][ T6534] [ 96.566480][ T6534] EXT4-fs (loop0): Total free blocks count 0 [ 96.572480][ T6534] EXT4-fs (loop0): Free/Dirty block details [ 96.578458][ T6534] EXT4-fs (loop0): free_blocks=2415919104 [ 96.584197][ T6534] EXT4-fs (loop0): dirty_blocks=8224 [ 96.589584][ T6534] EXT4-fs (loop0): Block reservation details [ 96.595643][ T6534] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 96.627105][ T6571] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 96.652182][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 96.664991][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.664991][ T31] [ 96.765445][ T6577] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 96.786526][ T6563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 345: padding at end of block bitmap is not set [ 96.804339][ T6563] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 96.817134][ T6563] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.817134][ T6563] [ 96.843793][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 96.856739][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.856739][ T31] [ 96.867217][ T29] audit: type=1326 audit(1743493973.374:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917d4d169 code=0x7ffc0000 [ 96.890697][ T29] audit: type=1326 audit(1743493973.374:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917d4d169 code=0x7ffc0000 [ 96.929812][ T6581] netem: unknown loss type 0 [ 96.934482][ T6581] netem: change failed [ 96.936160][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 96.951302][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.951302][ T31] [ 96.961176][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 96.967324][ T31] EXT4-fs (loop4): Free/Dirty block details [ 96.973285][ T31] EXT4-fs (loop4): free_blocks=0 [ 96.978299][ T31] EXT4-fs (loop4): dirty_blocks=1808 [ 97.012988][ T6585] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 97.052614][ T6585] 9pnet_fd: Insufficient options for proto=fd [ 97.066752][ T6587] loop0: detected capacity change from 0 to 764 [ 97.088274][ T6587] rock: directory entry would overflow storage [ 97.094494][ T6587] rock: sig=0x4654, size=5, remaining=4 [ 97.118604][ T6588] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 97.136666][ T6587] __nla_validate_parse: 5 callbacks suppressed [ 97.136702][ T6587] netlink: 840 bytes leftover after parsing attributes in process `syz.0.817'. [ 97.151978][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 97.169838][ T6592] loop4: detected capacity change from 0 to 164 [ 97.248749][ T6592] syz.4.818: attempt to access beyond end of device [ 97.248749][ T6592] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.254896][ T6595] loop2: detected capacity change from 0 to 764 [ 97.268709][ T6592] syz.4.818: attempt to access beyond end of device [ 97.268709][ T6592] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.299313][ T6600] vhci_hcd: invalid port number 15 [ 97.304514][ T6600] vhci_hcd: invalid port number 15 [ 97.325571][ T6595] rock: directory entry would overflow storage [ 97.332011][ T6595] rock: sig=0x4654, size=5, remaining=4 [ 97.392939][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 97.409264][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'. [ 97.419056][ T6595] netlink: 840 bytes leftover after parsing attributes in process `syz.2.819'. [ 97.428130][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'. [ 97.449818][ T6610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.534459][ T6610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.547197][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 97.581772][ T6620] FAULT_INJECTION: forcing a failure. [ 97.581772][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 97.594597][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.2.831 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 97.594624][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.594638][ T6620] Call Trace: [ 97.594646][ T6620] [ 97.594655][ T6620] dump_stack_lvl+0xf6/0x150 [ 97.594682][ T6620] dump_stack+0x15/0x1a [ 97.594700][ T6620] should_fail_ex+0x261/0x270 [ 97.594727][ T6620] should_failslab+0x8f/0xb0 [ 97.594829][ T6620] kmem_cache_alloc_noprof+0x59/0x340 [ 97.594863][ T6620] ? audit_log_start+0x37f/0x6e0 [ 97.594891][ T6620] audit_log_start+0x37f/0x6e0 [ 97.594918][ T6620] ? kstrtouint+0x7b/0xc0 [ 97.594942][ T6620] audit_seccomp+0x4b/0x130 [ 97.595111][ T6620] __seccomp_filter+0x694/0x10e0 [ 97.595221][ T6620] ? vfs_write+0x669/0x950 [ 97.595249][ T6620] ? putname+0xe1/0x100 [ 97.595281][ T6620] __secure_computing+0x7e/0x160 [ 97.595346][ T6620] syscall_trace_enter+0xcf/0x1f0 [ 97.595380][ T6620] ? fpregs_assert_state_consistent+0x83/0xa0 [ 97.595442][ T6620] do_syscall_64+0xaa/0x1c0 [ 97.595519][ T6620] ? clear_bhb_loop+0x25/0x80 [ 97.595544][ T6620] ? clear_bhb_loop+0x25/0x80 [ 97.595570][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.595595][ T6620] RIP: 0033:0x7f0b57cfd169 [ 97.595612][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.595634][ T6620] RSP: 002b:00007f0b5635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 97.595689][ T6620] RAX: ffffffffffffffda RBX: 00007f0b57f15fa0 RCX: 00007f0b57cfd169 [ 97.595775][ T6620] RDX: 0000000000000000 RSI: 000000000000023f RDI: 0000200000000180 [ 97.595790][ T6620] RBP: 00007f0b5635f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.595881][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.595892][ T6620] R13: 0000000000000000 R14: 00007f0b57f15fa0 R15: 00007ffc805a1088 [ 97.595909][ T6620] [ 97.799076][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 97.828983][ T6610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.934462][ T6610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.021139][ T6642] loop0: detected capacity change from 0 to 764 [ 98.040070][ T6642] rock: directory entry would overflow storage [ 98.044088][ T6610] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.046449][ T6642] rock: sig=0x4654, size=5, remaining=4 [ 98.097828][ T6610] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.137827][ T6610] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198682][ T6610] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.209150][ T6653] loop0: detected capacity change from 0 to 2048 [ 98.224000][ T6653] EXT4-fs: Ignoring removed bh option [ 98.237323][ T996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.270726][ T6653] x_tables: unsorted underflow at hook 1 [ 98.488031][ T6665] tmpfs: Bad value for 'mpol' [ 98.495376][ T6665] net_ratelimit: 10 callbacks suppressed [ 98.495388][ T6665] IPv4: Oversized IP packet from 127.202.26.0 [ 98.535867][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'. [ 98.645865][ T6677] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 98.804428][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.855'. [ 98.830844][ T6661] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.876093][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.918557][ T6688] loop2: detected capacity change from 0 to 764 [ 98.927467][ T6661] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 98.939890][ T6661] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.939890][ T6661] [ 98.949731][ T6661] EXT4-fs (loop0): Total free blocks count 0 [ 98.955866][ T6661] EXT4-fs (loop0): Free/Dirty block details [ 98.961835][ T6661] EXT4-fs (loop0): free_blocks=2415919104 [ 98.967606][ T6661] EXT4-fs (loop0): dirty_blocks=8224 [ 98.972903][ T6661] EXT4-fs (loop0): Block reservation details [ 98.979027][ T6661] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 98.990309][ T6688] rock: directory entry would overflow storage [ 98.996589][ T6688] rock: sig=0x4654, size=5, remaining=4 [ 99.006028][ T6691] loop3: detected capacity change from 0 to 128 [ 99.049514][ T6691] EXT4-fs mount: 41 callbacks suppressed [ 99.049535][ T6691] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.085377][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 99.098005][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.098005][ T12] [ 99.108479][ T6691] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.194062][ T6700] loop4: detected capacity change from 0 to 2048 [ 99.228370][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.244539][ T6700] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.610443][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 99.737788][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.744979][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.765300][ T6709] bridge_slave_0: entered allmulticast mode [ 99.772182][ T6709] bridge_slave_0: entered promiscuous mode [ 99.779632][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.786740][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.794192][ T6709] bridge_slave_1: entered allmulticast mode [ 99.801310][ T6709] bridge_slave_1: entered promiscuous mode [ 99.833057][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.848507][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.854245][ T6701] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.887364][ T6709] team0: Port device team_slave_0 added [ 99.891002][ T6707] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 345: padding at end of block bitmap is not set [ 99.900298][ T6709] team0: Port device team_slave_1 added [ 99.929429][ T6707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 99.942113][ T6707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.942113][ T6707] [ 99.962451][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.969550][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.980654][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 117 [ 99.995646][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.008363][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.008363][ T12] [ 100.066883][ T6728] 8021q: VLANs not supported on wg1 [ 100.073632][ T6728] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.085455][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.092640][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.118618][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.163699][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2305 with max blocks 1800 with error 28 [ 100.176646][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.176646][ T12] [ 100.186481][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 100.192688][ T12] EXT4-fs (loop4): Free/Dirty block details [ 100.198815][ T12] EXT4-fs (loop4): free_blocks=0 [ 100.244062][ T6709] hsr_slave_0: entered promiscuous mode [ 100.260235][ T6709] hsr_slave_1: entered promiscuous mode [ 100.266873][ T6709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.273896][ T6734] FAULT_INJECTION: forcing a failure. [ 100.273896][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 100.275387][ T6709] Cannot create hsr debugfs directory [ 100.287078][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.0.872 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 100.287106][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.287120][ T6734] Call Trace: [ 100.287127][ T6734] [ 100.287137][ T6734] dump_stack_lvl+0xf6/0x150 [ 100.287169][ T6734] dump_stack+0x15/0x1a [ 100.287192][ T6734] should_fail_ex+0x261/0x270 [ 100.287267][ T6734] should_failslab+0x8f/0xb0 [ 100.287301][ T6734] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 100.287343][ T6734] ? __d_alloc+0x3d/0x350 [ 100.287368][ T6734] __d_alloc+0x3d/0x350 [ 100.287390][ T6734] ? from_vfsgid+0x77/0xa0 [ 100.287476][ T6734] d_alloc_pseudo+0x1e/0x80 [ 100.287499][ T6734] alloc_file_pseudo+0x75/0x160 [ 100.287523][ T6734] ? hugetlbfs_get_inode+0x265/0x380 [ 100.287615][ T6734] hugetlb_file_setup+0x290/0x3c0 [ 100.287646][ T6734] ksys_mmap_pgoff+0x174/0x340 [ 100.287680][ T6734] x64_sys_call+0x1945/0x2e10 [ 100.287708][ T6734] do_syscall_64+0xc9/0x1c0 [ 100.287807][ T6734] ? clear_bhb_loop+0x25/0x80 [ 100.287833][ T6734] ? clear_bhb_loop+0x25/0x80 [ 100.287883][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.287910][ T6734] RIP: 0033:0x7f847c29d169 [ 100.287928][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.287950][ T6734] RSP: 002b:00007f847a8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.287973][ T6734] RAX: ffffffffffffffda RBX: 00007f847c4b5fa0 RCX: 00007f847c29d169 [ 100.287988][ T6734] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 100.288003][ T6734] RBP: 00007f847a8ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 100.288038][ T6734] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 100.288053][ T6734] R13: 0000000000000000 R14: 00007f847c4b5fa0 R15: 00007ffef0a73598 [ 100.288076][ T6734] [ 100.372486][ T6740] loop0: detected capacity change from 0 to 164 [ 100.508950][ T6740] syz.0.875: attempt to access beyond end of device [ 100.508950][ T6740] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 100.555021][ T6740] syz.0.875: attempt to access beyond end of device [ 100.555021][ T6740] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 100.603036][ T6749] team0 (unregistering): Port device team_slave_0 removed [ 100.628764][ T6749] team0 (unregistering): Port device team_slave_1 removed [ 100.730805][ T6709] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.751303][ T6758] loop0: detected capacity change from 0 to 512 [ 100.770867][ T6758] EXT4-fs: Ignoring removed orlov option [ 100.794727][ T6758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.814060][ T6709] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.830129][ T6758] EXT4-fs (loop0): 1 orphan inode deleted [ 100.835939][ T6758] EXT4-fs (loop0): 1 truncate cleaned up [ 100.842488][ T6758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.868327][ T6709] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.962273][ T6709] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.998786][ T6763] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.881: path /38/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 101.034195][ T6763] EXT4-fs (loop0): Remounting filesystem read-only [ 101.063219][ T6709] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 101.074846][ T6709] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 101.085238][ T6709] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 101.094647][ T6709] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 101.211413][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.232261][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.243967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.251148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.267204][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 101.267266][ T29] audit: type=1326 audit(1743493977.804:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1917d44127 code=0x7ffc0000 [ 101.285177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.296719][ T29] audit: type=1326 audit(1743493977.804:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1917ce9359 code=0x7ffc0000 [ 101.303767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.401177][ T29] audit: type=1326 audit(1743493977.874:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917d4d169 code=0x7ffc0000 [ 101.424675][ T29] audit: type=1326 audit(1743493977.874:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1917d44127 code=0x7ffc0000 [ 101.431699][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.448797][ T29] audit: type=1326 audit(1743493977.874:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1917ce9359 code=0x7ffc0000 [ 101.478807][ T29] audit: type=1326 audit(1743493977.874:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917d4d169 code=0x7ffc0000 [ 101.502240][ T29] audit: type=1326 audit(1743493977.874:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1917d44127 code=0x7ffc0000 [ 101.525552][ T29] audit: type=1326 audit(1743493977.874:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1917ce9359 code=0x7ffc0000 [ 101.548790][ T29] audit: type=1326 audit(1743493977.874:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917d4d169 code=0x7ffc0000 [ 101.572199][ T29] audit: type=1326 audit(1743493977.874:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1917d44127 code=0x7ffc0000 [ 101.621421][ T5984] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.777815][ T6794] loop0: detected capacity change from 0 to 1024 [ 101.784538][ T6794] ext4: Unknown parameter 'nouser_xattr' [ 101.821388][ T6709] veth0_vlan: entered promiscuous mode [ 101.851707][ T6709] veth1_vlan: entered promiscuous mode [ 101.876604][ T6709] veth0_macvtap: entered promiscuous mode [ 101.891996][ T6709] veth1_macvtap: entered promiscuous mode [ 101.909773][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.920484][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.930443][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.940912][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.950757][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.961231][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.971085][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.981597][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.991439][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.001903][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.011824][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.022281][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.032155][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.042652][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.052527][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.063216][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.073115][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.084445][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.094807][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.105351][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.116926][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.233253][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.243766][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.253720][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.264179][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.274078][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.284534][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.294437][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.304924][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.314768][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.316047][ T6788] __nla_validate_parse: 8 callbacks suppressed [ 102.316064][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 102.325234][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.325254][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.360711][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.370572][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.381020][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.390942][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.401464][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.411317][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.421888][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.431729][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.442180][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.453517][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.476497][ T6709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.485307][ T6709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.494044][ T6709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.502813][ T6709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.523311][ T6811] FAULT_INJECTION: forcing a failure. [ 102.523311][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.536553][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.1.895 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 102.536624][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.536644][ T6811] Call Trace: [ 102.536652][ T6811] [ 102.536660][ T6811] dump_stack_lvl+0xf6/0x150 [ 102.536687][ T6811] dump_stack+0x15/0x1a [ 102.536705][ T6811] should_fail_ex+0x261/0x270 [ 102.536729][ T6811] should_fail+0xb/0x10 [ 102.536748][ T6811] should_fail_usercopy+0x1a/0x20 [ 102.536840][ T6811] _copy_from_user+0x1c/0xa0 [ 102.536868][ T6811] copy_msghdr_from_user+0x54/0x2b0 [ 102.536896][ T6811] ? __fget_files+0x186/0x1c0 [ 102.536931][ T6811] __sys_sendmsg+0x141/0x240 [ 102.537032][ T6811] __x64_sys_sendmsg+0x46/0x50 [ 102.537053][ T6811] x64_sys_call+0x26f3/0x2e10 [ 102.537076][ T6811] do_syscall_64+0xc9/0x1c0 [ 102.537098][ T6811] ? clear_bhb_loop+0x25/0x80 [ 102.537169][ T6811] ? clear_bhb_loop+0x25/0x80 [ 102.537206][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.537229][ T6811] RIP: 0033:0x7f1917d4d169 [ 102.537245][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.537265][ T6811] RSP: 002b:00007f19163b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.537285][ T6811] RAX: ffffffffffffffda RBX: 00007f1917f65fa0 RCX: 00007f1917d4d169 [ 102.537304][ T6811] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.537317][ T6811] RBP: 00007f19163b7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.537373][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.537428][ T6811] R13: 0000000000000000 R14: 00007f1917f65fa0 R15: 00007ffcdb5dcb88 [ 102.537446][ T6811] [ 102.794021][ T6823] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.853328][ T6819] loop4: detected capacity change from 0 to 2048 [ 102.867462][ T6828] loop0: detected capacity change from 0 to 164 [ 102.875911][ T6819] EXT4-fs: Ignoring removed bh option [ 102.897146][ T6828] syz.0.901: attempt to access beyond end of device [ 102.897146][ T6828] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.923462][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.7.902'. [ 102.929836][ T6830] netlink: 'syz.1.903': attribute type 3 has an invalid length. [ 102.945018][ T6828] syz.0.901: attempt to access beyond end of device [ 102.945018][ T6828] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.965159][ T6819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.967127][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 102.990119][ T6830] bond0: (slave bond_slave_1): Releasing backup interface [ 103.017604][ T6837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6837 comm=syz.1.903 [ 103.041756][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 103.051018][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 103.071400][ T6830] mmap: syz.1.903 (6830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.098662][ T5405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.112716][ T6840] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.131490][ T6841] loop0: detected capacity change from 0 to 764 [ 103.147040][ T6841] rock: directory entry would overflow storage [ 103.153275][ T6841] rock: sig=0x4654, size=5, remaining=4 [ 103.163079][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 103.190460][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'. [ 103.193678][ T6841] netlink: 840 bytes leftover after parsing attributes in process `syz.0.905'. [ 103.208491][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 103.237232][ T6848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.908'. [ 103.348502][ T6840] loop7: detected capacity change from 0 to 512 [ 103.358886][ T6840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.399405][ T6840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.415610][ T6840] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.484431][ T6864] loop4: detected capacity change from 0 to 164 [ 103.501097][ T6709] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.524897][ T6864] syz.4.916: attempt to access beyond end of device [ 103.524897][ T6864] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 103.548051][ T6864] syz.4.916: attempt to access beyond end of device [ 103.548051][ T6864] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 103.569320][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 103.577147][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 103.584845][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.592568][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.600288][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.608017][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.615742][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.623437][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.631242][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.638965][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.646732][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.654386][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.658615][ T6877] loop7: detected capacity change from 0 to 2048 [ 103.662115][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.670354][ T6877] EXT4-fs: Ignoring removed bh option [ 103.676080][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.676108][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.696829][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.704545][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.712377][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.720086][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.727769][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.735469][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.743120][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.750818][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.758609][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.766406][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.774205][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.782038][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.789749][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.797605][ T3441] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 103.806378][ T3441] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 103.825941][ T6884] loop4: detected capacity change from 0 to 764 [ 103.828190][ T6877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.844603][ T6884] rock: directory entry would overflow storage [ 103.850864][ T6884] rock: sig=0x4654, size=5, remaining=4 [ 103.866175][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 103.918413][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.929933][ T6709] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.980637][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.987850][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.996427][ T6861] bridge_slave_0: entered allmulticast mode [ 104.004639][ T6861] bridge_slave_0: entered promiscuous mode [ 104.014072][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.021359][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.032008][ T6861] bridge_slave_1: entered allmulticast mode [ 104.039081][ T6861] bridge_slave_1: entered promiscuous mode [ 104.064426][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.076266][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.098799][ T6861] team0: Port device team_slave_0 added [ 104.106114][ T6861] team0: Port device team_slave_1 added [ 104.165615][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.172657][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.198614][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.212898][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.219997][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.246175][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.301737][ T6861] hsr_slave_0: entered promiscuous mode [ 104.308293][ T6861] hsr_slave_1: entered promiscuous mode [ 104.314334][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.322253][ T6861] Cannot create hsr debugfs directory [ 104.450916][ T6861] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.511356][ T6861] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.517688][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 104.529471][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 104.537193][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.544904][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.553032][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.560785][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.568512][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.576280][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.583967][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.591681][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.599552][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.607389][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.615272][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.622919][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.630626][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.638938][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.647202][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.654870][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.662674][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.670358][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.678072][ T3382] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 104.688294][ T3382] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.692646][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 104.706920][ T6921] ================================================================== [ 104.715047][ T6921] BUG: KCSAN: data-race in uhid_char_poll / uhid_char_read [ 104.722301][ T6921] [ 104.724632][ T6921] read-write to 0xffff88811229d17d of 1 bytes by task 6915 on cpu 1: [ 104.732705][ T6921] uhid_char_read+0x373/0x3f0 [ 104.737411][ T6921] vfs_readv+0x3e5/0x660 [ 104.741689][ T6921] do_readv+0xf7/0x230 [ 104.745781][ T6921] __x64_sys_readv+0x45/0x50 [ 104.750378][ T6921] x64_sys_call+0x2833/0x2e10 [ 104.755063][ T6921] do_syscall_64+0xc9/0x1c0 [ 104.759677][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.765581][ T6921] [ 104.767922][ T6921] read to 0xffff88811229d17d of 1 bytes by task 6921 on cpu 0: [ 104.775468][ T6921] uhid_char_poll+0x89/0xc0 [ 104.779985][ T6921] __io_arm_poll_handler+0x1e5/0xd40 [ 104.785289][ T6921] io_poll_add+0x70/0xf0 [ 104.789544][ T6921] io_issue_sqe+0x15f/0xaf0 [ 104.794049][ T6921] io_req_task_submit+0x6a/0xc0 [ 104.798923][ T6921] io_poll_task_func+0x74e/0xa70 [ 104.803977][ T6921] io_handle_tw_list+0xce/0x1d0 [ 104.808853][ T6921] tctx_task_work_run+0x6e/0x1c0 [ 104.813806][ T6921] tctx_task_work+0x44/0x80 [ 104.818320][ T6921] task_work_run+0x13c/0x1b0 [ 104.822915][ T6921] get_signal+0xe81/0x1000 [ 104.827345][ T6921] arch_do_signal_or_restart+0x9a/0x4b0 [ 104.833012][ T6921] syscall_exit_to_user_mode+0x62/0x120 [ 104.838570][ T6921] do_syscall_64+0xd6/0x1c0 [ 104.843160][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.849053][ T6921] [ 104.851393][ T6921] value changed: 0x00 -> 0x01 [ 104.856089][ T6921] [ 104.858582][ T6921] Reported by Kernel Concurrency Sanitizer on: [ 104.864733][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.3.927 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 104.876726][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.886786][ T6921] ================================================================== [ 104.921525][ T6861] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.964940][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.972174][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.979504][ T6896] bridge_slave_0: entered allmulticast mode [ 104.986081][ T6896] bridge_slave_0: entered promiscuous mode [ 104.993034][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.000274][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.007744][ T6896] bridge_slave_1: entered allmulticast mode [ 105.014213][ T6896] bridge_slave_1: entered promiscuous mode [ 105.028220][ T6861] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.046409][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.057246][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.078147][ T6896] team0: Port device team_slave_0 added [ 105.085329][ T6896] team0: Port device team_slave_1 added [ 105.101984][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.109005][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.135149][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.147014][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.154015][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.180061][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.210124][ T6896] hsr_slave_0: entered promiscuous mode [ 105.216591][ T6896] hsr_slave_1: entered promiscuous mode [ 105.222568][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.230221][ T6896] Cannot create hsr debugfs directory [ 105.253394][ T6861] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.268867][ T6861] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.282455][ T6861] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.294504][ T6861] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.335804][ T6896] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.386447][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.399826][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.410564][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.417730][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.429454][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.436630][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.449160][ T6896] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.518375][ T6896] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.536016][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.556680][ T6896] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.625558][ T6896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.634838][ T6896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.644447][ T6896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.654470][ T6896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.675319][ T6861] veth0_vlan: entered promiscuous mode [ 105.683437][ T6861] veth1_vlan: entered promiscuous mode [ 105.712128][ T6861] veth0_macvtap: entered promiscuous mode [ 105.721044][ T6861] veth1_macvtap: entered promiscuous mode [ 105.737147][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.747685][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.757575][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.768205][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.778078][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.788571][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.798487][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.808979][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.818861][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.829322][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.839138][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.849601][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.859448][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.869917][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.879790][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.890390][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.900232][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.910699][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.925252][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.936151][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.946001][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.956442][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.968625][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.979479][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.990068][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.999951][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.010510][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.020472][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.031038][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.040950][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.051417][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.061341][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.071820][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.081825][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.092274][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.102109][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.112628][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.122474][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.132908][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.142812][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.153319][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.163175][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.173641][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.183508][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.193941][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.204653][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.215189][ T6861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.223946][ T6861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.232664][ T6861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.241421][ T6861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.261850][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.281638][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.292107][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.299256][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.328675][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.335809][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.393320][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.492716][ T6896] veth0_vlan: entered promiscuous mode [ 106.501399][ T6896] veth1_vlan: entered promiscuous mode [ 106.518304][ T6896] veth0_macvtap: entered promiscuous mode [ 106.525863][ T6896] veth1_macvtap: entered promiscuous mode [ 106.537060][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.547667][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.558122][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.568984][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.578904][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.589388][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.599346][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.609783][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.619611][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.630050][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.639895][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.650374][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.660327][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.670816][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.680721][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.691149][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.701081][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.711583][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.721594][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.732111][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.742037][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.752512][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.762332][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.772819][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.783851][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.798843][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.809429][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.819401][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.830037][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.839923][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.850341][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.860189][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.870678][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.880721][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.891332][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.901180][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.911619][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.921484][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.931906][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.941786][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.952209][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.962110][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.972602][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.982418][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.992947][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.002840][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.013325][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.023257][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.033681][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.044943][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.057495][ T6896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.066323][ T6896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.075208][ T6896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.084069][ T6896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.756313][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.756534][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration